last executing test programs: 2m5.544445812s ago: executing program 3 (id=320): syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x149}, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setxattr(0x0, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 2m5.125637873s ago: executing program 3 (id=321): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000004580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f00000045c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000004600), 0x0, 0x0) read$msr(r2, &(0x7f0000004640)=""/102392, 0x18ff8) pipe(&(0x7f000001d680)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f000001d700)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001d740)={0x0, 0x0, &(0x7f000001d780)={0x0, 0x3c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000300)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r7}) 2m3.292678887s ago: executing program 3 (id=323): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x494, &(0x7f0000000300)=ANY=[]) 1m58.040134375s ago: executing program 3 (id=331): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x32048c1, &(0x7f0000003040)={[{@numtail}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@utf8}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}]}, 0x0, 0x2bf, &(0x7f00000003c0)="$eJzs3U1rE2sUwPHTpGnSlDZZlAv3wuUerhvdDG38BEFaEANKbURdCFM70ZAxE2ZiJCK2O7d+juLSlYL6Bbpx517cFEFw04U4kmQmpuloX7Sd1vx/UOZ0zpw8Tzoz5UyhT7auP71Xq3hGxWxKIqOSEFmXbZF8JwqMBdtEN56QQetyburzu3+v3rh5qVgqLSypLhaXzxdUdea/Vw8ePfv/TXPq2vOZl2nZzN/a+lR4v/nX5t9bX5fDV3dETF1xnKa5Ylu6WvVqhuoV2zI9S6t1z3Kbaqob5iu202i01ayvTmcbruV5atbbWrPa2nS06bbVvGNW62oYhk5nZdQkD1xR3lhaMotHMhnEYTJqp+sWzWRksrxxHJMCAAAnS1z9/92qp1VP606nv/9J/5+Qwfwe/b/ISPf/h9X4cSqyn8Tp0un/s8H9uxP9PwAAAAAAAAAAAAAAAAAAAAAAp8G27+d838+F2/ArLSIZEQm/j3ueOBqc/9E28I97GRH7SavcKve2vXyxIjNiiyVzKZEv3esh0IsXL5YW5rQrL6/ttaB+rVVOSrpXX+0Plo+un+/V62D9mqQkG9Z3xi9ITmaj6wsR9a3yhJw946eDkS0xJCdvb4sjtqx2r+vv9Y/nVS9cLg3VT3aPAwAAAADgT2Bo367n927e0HDZkKF8b2f/+XxOcnv8fWDo+Xpc/hmP730DAAAAADBKvAmpmbZtuV77YWxB6njGChez/S0vKBLnT6wTZPZ78LiIBHtexDznAwUJERlOpXbtiQ6Sv3aWP4rsvC9mYz/dhw78ZP9a/XB/4GNi9iiP8ZcSAAAAgCMRNv1jcU8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIARtt9VxMLjD7MI2cBwyXjeJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAyfAsAAP//+xwQhQ==") r0 = syz_open_procfs(0x0, &(0x7f0000000680)='mounts\x00') mount$tmpfs(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000f80)='.\x00', &(0x7f0000000fc0)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000001000)={0x2020}, 0x2020) 1m57.85576474s ago: executing program 3 (id=332): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000002c0)={0x579a, {0x1a, 0x1, 0x7d, 0x6, 0x4}}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x2000007ff) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x7000) 1m57.480676109s ago: executing program 3 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='mtd0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000014c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000001500)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x200000) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', 'mtd0'}, 0x8) 1m55.493711218s ago: executing program 32 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='mtd0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000014c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000001500)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x200000) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', 'mtd0'}, 0x8) 27.956172317s ago: executing program 1 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300)='2\x00', 0x1) close(r0) write(0xffffffffffffffff, &(0x7f0000000380)='10000000', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='1', 0x1) 22.151852768s ago: executing program 1 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000196c0)={r5, 0x0, 0x0, 0x0, &(0x7f0000019d80), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.192403531s ago: executing program 1 (id=479): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 13.369832313s ago: executing program 4 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x250000, 0x0, 0x1, 0x0, 0x0) epoll_create1(0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB='trans']) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x2, 0x25000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x2, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.292172263s ago: executing program 4 (id=491): socket(0x40000000015, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c9300c00080005000df9040002000900f6fe7dbb93cb1f6c6a16312d4ef58002291463b87d712f50ff5b8c52d964e7e277e6d1f9f6302ccce662530c2a8541fa6fcc7feec9596411c7b062f4e39583f7a63ed47677b92b709c90917207a5c687cfd0a0c42afeca4b21c747398ecebfef6fa0f2dee20b24c13b0ba3620bbb4edb7ae2"], 0x11) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') pread64(r2, &(0x7f00000005c0)=""/15, 0xf, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000400)='./file0/file0\x00', 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x418103, 0xa, 0xf}, 0x18) rmdir(&(0x7f00000004c0)='./file0\x00') 9.975024236s ago: executing program 1 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "245f48edcb63b703", "32d8ea43b6bfb410c5913d8c904f3a01", "a2913283", "866c88900778f2a3"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000280)=0xa, 0x1959cc36) 8.933004301s ago: executing program 0 (id=494): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") 8.417291274s ago: executing program 4 (id=495): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x118}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000b00)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c40)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0xfffffffffffffe85, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000740)='./dm0\x00', 0x6180, r7) pwrite64(0xffffffffffffffff, &(0x7f00000007c0)="0102030405060708", 0x8, 0x1000) 7.400749039s ago: executing program 2 (id=496): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x590, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) execveat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x0, 0x0, 0x0) 7.103382966s ago: executing program 0 (id=497): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x358, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402ef"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26ec65e47117d862e75f5149a63bc348a8824ef0aca"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a52611e889b6a360392b68eee841e876bea02a57f274118ec0519df591742588b8cfba05bec230ef7ed6de5c2779694593f86ddd47462663309743adfd47dbe78b2c941cbf162933a7c1710e8ccbf9b5d7a1"}]}, 0x358}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.083931017s ago: executing program 2 (id=498): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000001640)='GPL\x00'}, 0x80) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/84, 0x54}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7.045746647s ago: executing program 4 (id=499): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000002c0)={0x579a, {0x1a, 0x1, 0x7d, 0x6, 0x4}}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xdc001, 0x88) r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x2000007ff) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x7000) 6.236664017s ago: executing program 0 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="44003300801de100ffffffffffff08021100000050da50505050"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6.008126213s ago: executing program 0 (id=501): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 5.952333644s ago: executing program 2 (id=502): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r4 = syz_io_uring_setup(0x31c5, &(0x7f0000000280)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f0000000340), &(0x7f0000000380), 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000580)={0x0, 0x20, 0x27, 0x2, 0x2d8, 0x0, r4}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') pread64(r5, &(0x7f0000000500)=""/92, 0x5c, 0x4000000000000f3) 4.845001521s ago: executing program 2 (id=503): socket(0x40000000015, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c9300c00080005000df9040002000900f6fe7dbb93cb1f6c6a16312d4ef58002291463b87d712f50ff5b8c52d964e7e277e6d1f9f6302ccce662530c2a8541fa6fcc7feec9596411c7b062f4e39583f7a63ed47677b92b709c90917207a5c687cfd0a0c42afeca4b21c747398ecebfef6fa0f2dee20b24c13b0ba3620bbb4edb7ae2"], 0x11) syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000400)='./file0/file0\x00', 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x418103, 0xa, 0xf}, 0x18) rmdir(&(0x7f00000004c0)='./file0\x00') 3.493182104s ago: executing program 0 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x2, 0x6, 0xa, 0x6, {0x2, 0x4, 0x8000000000000000, 0x9, 0x8, 0x7, 0x8, 0x4, 0x80000001, 0x2000, 0xfffffffa, 0xffffffffffffffff, 0x0, 0xb7, 0x7fd}}, {0x0, 0x11}}}, 0xa0) 3.144934123s ago: executing program 2 (id=505): socket(0x40000000015, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c9300c00080005000df9040002000900f6fe7dbb93cb1f6c6a16312d4ef58002291463b87d712f50ff5b8c52d964e7e277e6d1f9f6302ccce662530c2a8541fa6fcc7feec9596411c7b062f4e39583f7a63ed47677b92b709c90917207a5c687cfd0a0c42afeca4b21c747398ecebfef6fa0f2dee20b24c13b0ba3620bbb4edb7ae2"], 0x11) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') pread64(r2, &(0x7f00000005c0)=""/15, 0xf, 0x4) syz_open_dev$video4linux(&(0x7f0000000640), 0x1, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x418103, 0xa, 0xf}, 0x18) pselect6(0x40, &(0x7f0000000380)={0x0, 0xfffffffffffffff5, 0x800000000000, 0x800, 0x800, 0x6, 0x8000001000000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000800)={0x1f, 0x0, 0x381, 0x5, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000840)={0x0, 0x989680}, 0x0) 3.093684304s ago: executing program 4 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 3.008487156s ago: executing program 1 (id=507): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x118}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000b00)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c40)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0xfffffffffffffe85, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000740)='./dm0\x00', 0x6180, r7) pwrite64(0xffffffffffffffff, &(0x7f00000007c0)="0102030405060708", 0x8, 0x1000) 2.01800741s ago: executing program 4 (id=508): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x118}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000b00)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c40)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0xfffffffffffffe85, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) r7 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000780)='./dm0\x00', 0x2, 0x0) pwrite64(r7, &(0x7f00000007c0)="0102030405060708", 0x8, 0x1000) 1.406528755s ago: executing program 2 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xefd, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200), 0x400) write(r2, &(0x7f00000007c0)='mydomain / 64\n', 0xe) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x8c2) 1.239703729s ago: executing program 0 (id=510): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) inotify_init() pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3d) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, r1, 0x2) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) tee(r2, r3, 0x404, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x5e) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1c, 0x3, 0x56a, 0x42, 0xffffffff, 0x0, "05010905a10105091901290a150025017501950a8102950175068103"}}, 0x134) write$UHID_DESTROY(r5, &(0x7f00000003c0), 0x4) sendmsg$key(r4, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) lseek(0xffffffffffffffff, 0x100, 0x1) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r6) close(r6) symlink(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file0\x00') mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x100000, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x34) 0s ago: executing program 1 (id=511): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000001640)='GPL\x00'}, 0x80) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/84, 0x54}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 111.121224][ T5766] cgroup: Unknown subsys name 'net' [ 111.264329][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 113.563166][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.987194][ T972] cfg80211: failed to load regulatory.db [ 116.357103][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.366256][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.381250][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.391088][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.401465][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.411379][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.423121][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.433486][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.444596][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.456659][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.469073][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.478200][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.484640][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.496769][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.505379][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.514197][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.519162][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.532613][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.542554][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.556944][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.565414][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.577359][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.600306][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 116.613486][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.711303][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 116.728314][ T5779] (null): rxe_set_mtu: Set mtu to 1024 [ 116.744602][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 116.744788][ T5777] (null): rxe_set_mtu: Set mtu to 1024 [ 116.756511][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 116.763545][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.765828][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 116.783667][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.792719][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 116.807851][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.146736][ T5780] infiniband rxe0: set active [ 117.154874][ T5780] infiniband rxe0: added rxe_eth0 [ 117.179927][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.280413][ T5780] RDS/IB: rxe0: added [ 117.286379][ T5780] smc: adding ib device rxe0 with port count 1 [ 117.293359][ T5780] smc: ib device rxe0 port 1 has pnetid [ 117.374729][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.389879][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.828383][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 117.938703][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.963636][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 118.008393][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 118.269434][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.398771][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.421228][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.438486][ T5779] bridge_slave_0: entered allmulticast mode [ 118.447574][ T5779] bridge_slave_0: entered promiscuous mode [ 118.514790][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.532223][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.542519][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.557824][ T5089] Bluetooth: hci3: command tx timeout [ 118.569475][ T5779] bridge_slave_1: entered allmulticast mode [ 118.583579][ T5779] bridge_slave_1: entered promiscuous mode [ 118.625095][ T5089] Bluetooth: hci0: command tx timeout [ 118.655795][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.663437][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.677292][ T5778] bridge_slave_0: entered allmulticast mode [ 118.687475][ T5778] bridge_slave_0: entered promiscuous mode [ 118.705052][ T5789] Bluetooth: hci2: command tx timeout [ 118.716315][ T5089] Bluetooth: hci1: command tx timeout [ 118.735874][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.748192][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.759224][ T5777] bridge_slave_0: entered allmulticast mode [ 118.773012][ T5777] bridge_slave_0: entered promiscuous mode [ 118.783320][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.792665][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.803370][ T5777] bridge_slave_1: entered allmulticast mode [ 118.816261][ T5777] bridge_slave_1: entered promiscuous mode [ 118.841154][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.852825][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.863305][ T5778] bridge_slave_1: entered allmulticast mode [ 118.880924][ T5778] bridge_slave_1: entered promiscuous mode [ 118.893113][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.911514][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.925416][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.970064][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.003249][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.083518][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.133237][ T5779] team0: Port device team_slave_0 added [ 119.149635][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.189340][ T5779] team0: Port device team_slave_1 added [ 119.233075][ T5777] team0: Port device team_slave_0 added [ 119.248738][ T5777] team0: Port device team_slave_1 added [ 119.365700][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.379437][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.418628][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.442586][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.456905][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.493218][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.518578][ T5778] team0: Port device team_slave_0 added [ 119.572991][ T5778] team0: Port device team_slave_1 added [ 119.588930][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.598541][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.637947][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.725753][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.733329][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.762760][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.800446][ T5779] hsr_slave_0: entered promiscuous mode [ 119.809778][ T5779] hsr_slave_1: entered promiscuous mode [ 119.839804][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.848408][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.881800][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.948950][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.961702][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.992718][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.187229][ T5777] hsr_slave_0: entered promiscuous mode [ 120.199826][ T5777] hsr_slave_1: entered promiscuous mode [ 120.211919][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.222864][ T5777] Cannot create hsr debugfs directory [ 120.258049][ T5778] hsr_slave_0: entered promiscuous mode [ 120.268110][ T5778] hsr_slave_1: entered promiscuous mode [ 120.280636][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.298010][ T5778] Cannot create hsr debugfs directory [ 120.537887][ T5438] infiniband rxe0: set active [ 120.596291][ T972] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.634867][ T5789] Bluetooth: hci3: command tx timeout [ 120.714755][ T5789] Bluetooth: hci0: command tx timeout [ 120.724993][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 120.795489][ T5789] Bluetooth: hci2: command tx timeout [ 120.802831][ T5789] Bluetooth: hci1: command tx timeout [ 121.006611][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.020175][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.029236][ T5780] bridge_slave_0: entered allmulticast mode [ 121.039563][ T5780] bridge_slave_0: entered promiscuous mode [ 121.051026][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.061717][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.072453][ T5780] bridge_slave_1: entered allmulticast mode [ 121.084187][ T5780] bridge_slave_1: entered promiscuous mode [ 121.178272][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.205046][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.236724][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.290840][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.304067][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.329524][ T5780] team0: Port device team_slave_0 added [ 121.341395][ T5780] team0: Port device team_slave_1 added [ 121.352219][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.402411][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.410430][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.448092][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.520993][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.532592][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.566194][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.657640][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.672890][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.688885][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.709726][ T5780] hsr_slave_0: entered promiscuous mode [ 121.721834][ T5780] hsr_slave_1: entered promiscuous mode [ 121.730132][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.743933][ T5780] Cannot create hsr debugfs directory [ 121.780964][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.991936][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.028482][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.075791][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.108344][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.247787][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.282340][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.310142][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.323539][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.340127][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.369481][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.401514][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.411575][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.490647][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.499625][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.569515][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.673574][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.705610][ T5789] Bluetooth: hci3: command tx timeout [ 122.719205][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.729506][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.785258][ T5789] Bluetooth: hci0: command tx timeout [ 122.806987][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.815209][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.837865][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.865357][ T5789] Bluetooth: hci1: command tx timeout [ 122.868886][ T5089] Bluetooth: hci2: command tx timeout [ 122.977523][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.012464][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.046923][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.057068][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.134114][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.143348][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.272841][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.359919][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.368690][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.411662][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.423092][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.488767][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.721964][ T5779] veth0_vlan: entered promiscuous mode [ 123.796431][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.841764][ T5779] veth1_vlan: entered promiscuous mode [ 124.021794][ T5778] veth0_vlan: entered promiscuous mode [ 124.084138][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.108324][ T5778] veth1_vlan: entered promiscuous mode [ 124.143114][ T5779] veth0_macvtap: entered promiscuous mode [ 124.172381][ T5779] veth1_macvtap: entered promiscuous mode [ 124.249543][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.287276][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.323203][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.333511][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.354389][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.368380][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.390528][ T5777] veth0_vlan: entered promiscuous mode [ 124.443081][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.469371][ T5778] veth0_macvtap: entered promiscuous mode [ 124.488002][ T5778] veth1_macvtap: entered promiscuous mode [ 124.509930][ T5777] veth1_vlan: entered promiscuous mode [ 124.644897][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.663913][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.689068][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.717143][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.741908][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.758017][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.770437][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.784806][ T5089] Bluetooth: hci3: command tx timeout [ 124.800173][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.866336][ T5089] Bluetooth: hci0: command tx timeout [ 124.878223][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.898360][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.910774][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.923957][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.944971][ T5089] Bluetooth: hci1: command tx timeout [ 124.944981][ T5789] Bluetooth: hci2: command tx timeout [ 124.964711][ T5777] veth0_macvtap: entered promiscuous mode [ 124.991574][ T5780] veth0_vlan: entered promiscuous mode [ 125.019534][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.038725][ T5777] veth1_macvtap: entered promiscuous mode [ 125.047454][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.079448][ T5780] veth1_vlan: entered promiscuous mode [ 125.164417][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.184137][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.198984][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.213414][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.230783][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.256777][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.298885][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.305274][ T5779] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 125.338032][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.338137][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.346741][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.403365][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.431115][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.447009][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.459400][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.565170][ T5780] veth0_macvtap: entered promiscuous mode [ 125.603570][ T4129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.635246][ T4129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.671686][ T5780] veth1_macvtap: entered promiscuous mode [ 126.951002][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.017309][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.283421][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.306668][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.329669][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.699019][ T5888] autofs4:pid:5888:autofs_fill_super: called with bogus options [ 128.394515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.005042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.414753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.604490][ C1] sched: RT throttling activated [ 129.634525][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.846407][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.868512][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.886810][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.950504][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.982046][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.998718][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.009962][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.024170][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.036773][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.049062][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.064142][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.080493][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.118195][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.134297][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.148738][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.159597][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.310591][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.347646][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.429264][ T5891] syz.0.1[5891]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 130.492175][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.554734][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.703738][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.755509][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.076214][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.285670][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 131.318725][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.346309][ T5876] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.366995][ T5891] loop0: detected capacity change from 0 to 32768 [ 131.388057][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.466546][ T5876] usb 4-1: config 0 descriptor?? [ 131.565630][ T5891] (syz.0.1,5891,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.691004][ T972] rxe_eth0 speed is unknown, defaulting to 1000 [ 131.704624][ T5891] (syz.0.1,5891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.577023][ T5876] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 132.782899][ T5891] JBD2: Ignoring recovery information on journal [ 133.683113][ T5910] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5910] [ 133.928604][ T5891] JBD2: journal reset failed [ 133.958946][ T5891] (syz.0.1,5891,1):ocfs2_journal_load:1168 ERROR: Failed to load journal! [ 134.003580][ T5891] (syz.0.1,5891,1):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4 [ 134.150028][ T5892] usb 4-1: USB disconnect, device number 2 [ 136.513596][ T5923] autofs4:pid:5923:autofs_fill_super: called with bogus options [ 137.504752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.714662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 137.914727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 138.414709][ T5920] tipc: Started in network mode [ 138.423389][ T5920] tipc: Node identity 1000001, cluster identity 4711 [ 138.437100][ T5920] tipc: Node number set to 16777217 [ 138.445246][ T5920] tipc: Cannot configure node identity twice [ 139.144997][ T5936] mmap: syz.2.15 (5936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.591127][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.612059][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.627816][ T5949] FAULT_INJECTION: forcing a failure. [ 140.627816][ T5949] name fail_futex, interval 1, probability 0, space 0, times 1 [ 140.682103][ T5949] CPU: 1 PID: 5949 Comm: syz.0.17 Not tainted syzkaller #0 [ 140.690567][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.711017][ T5949] Call Trace: [ 140.714749][ T5949] [ 140.717818][ T5949] dump_stack_lvl+0x18c/0x250 [ 140.727231][ T5949] ? show_regs_print_info+0x20/0x20 [ 140.732684][ T5949] ? load_image+0x420/0x420 [ 140.740469][ T5949] ? get_user_pages_fast_only+0xa0/0xa0 [ 140.746223][ T5949] should_fail_ex+0x394/0x4c0 [ 140.751403][ T5949] get_futex_key+0x857/0x1030 [ 140.760216][ T5949] ? futex_setup_timer+0xc0/0xc0 [ 140.766642][ T5949] futex_wake+0x127/0x4f0 [ 140.773006][ T5949] ? futex_wake_mark+0x150/0x150 [ 140.778929][ T5949] do_futex+0x35d/0x3e0 [ 140.784812][ T5949] ? __might_fault+0xaa/0x120 [ 140.791037][ T5949] ? __ia32_sys_get_robust_list+0x110/0x110 [ 140.800814][ T5949] ? __might_fault+0xc6/0x120 [ 140.805566][ T5949] mm_release+0x184/0x3a0 [ 140.813688][ T5949] ? exit_mm_release+0x30/0x30 [ 140.819535][ T5949] ? lockdep_hardirqs_on+0x98/0x150 [ 140.825224][ T5949] exit_mm+0xa4/0x340 [ 140.829949][ T5949] ? sysctl_delayacct+0x220/0x220 [ 140.837761][ T5949] ? do_exit+0x2530/0x2530 [ 140.844306][ T5949] do_exit+0x909/0x2530 [ 140.848663][ T5949] ? put_task_struct+0xc0/0xc0 [ 140.858192][ T5949] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 140.867520][ T5949] ? get_signal+0x100e/0x1390 [ 140.875113][ T5949] ? lock_chain_count+0x20/0x20 [ 140.881689][ T5949] ? _raw_spin_lock_irq+0xbb/0xf0 [ 140.887024][ T5949] do_group_exit+0x22d/0x2f0 [ 140.893058][ T5949] ? lockdep_hardirqs_on+0x98/0x150 [ 140.900614][ T5949] get_signal+0x12a6/0x1390 [ 140.905502][ T5949] arch_do_signal_or_restart+0xc2/0x7b0 [ 140.912307][ T5949] ? __ia32_sys_get_robust_list+0x110/0x110 [ 140.920627][ T5949] ? get_sigframe_size+0x20/0x20 [ 140.927581][ T5949] ? __se_sys_futex+0x282/0x440 [ 140.934843][ T5949] ? exit_to_user_mode_loop+0x3b/0x110 [ 140.942408][ T5949] exit_to_user_mode_loop+0x70/0x110 [ 140.953305][ T5949] exit_to_user_mode_prepare+0xee/0x180 [ 140.960303][ T5949] syscall_exit_to_user_mode+0x1a/0x50 [ 140.966056][ T5949] do_syscall_64+0x61/0xb0 [ 140.971058][ T5949] ? clear_bhb_loop+0x40/0x90 [ 140.976026][ T5949] ? clear_bhb_loop+0x40/0x90 [ 140.981018][ T5949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.988826][ T5949] RIP: 0033:0x7f6b34d9f559 [ 140.994201][ T5949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.018485][ T5949] RSP: 002b:00007f6b35cb10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 141.029104][ T5949] RAX: fffffffffffffe00 RBX: 00007f6b35026098 RCX: 00007f6b34d9f559 [ 141.037721][ T5949] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6b35026098 [ 141.051521][ T5949] RBP: 00007f6b35026090 R08: 0000000000000000 R09: 0000000000000000 [ 141.061614][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.073529][ T5949] R13: 00007f6b35026128 R14: 00007ffd367b9e80 R15: 00007ffd367b9f68 [ 141.083276][ T5949] [ 141.429914][ T5951] loop1: detected capacity change from 0 to 4096 [ 141.493772][ T5956] loop0: detected capacity change from 0 to 512 [ 143.732796][ T5956] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 143.782022][ T5956] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.19: invalid indirect mapped block 256 (level 1) [ 143.850908][ T5951] ntfs3: loop1: ino=19, mi_enum_attr [ 143.884245][ T5951] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 143.897530][ T5956] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.19: invalid indirect mapped block 2683928664 (level 1) [ 143.989115][ T5968] Zero length message leads to an empty skb [ 144.037148][ T5956] EXT4-fs (loop0): 1 truncate cleaned up [ 144.091245][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.245651][ T5975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 145.268580][ T5975] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 13: comm syz.0.19: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 145.998886][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.303856][ T5978] autofs4:pid:5978:autofs_fill_super: called with bogus options [ 146.871448][ T5983] loop0: detected capacity change from 0 to 512 [ 146.970123][ T5983] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.22: corrupted in-inode xattr: invalid ea_ino [ 147.067892][ T5983] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.22: couldn't read orphan inode 15 (err -117) [ 147.149531][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.558112][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.121109][ T5999] loop0: detected capacity change from 0 to 512 [ 149.130231][ T5999] EXT4-fs: Ignoring removed orlov option [ 149.137120][ T5999] EXT4-fs: Ignoring removed oldalloc option [ 149.155483][ T5999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.188939][ T5999] EXT4-fs (loop0): failed to initialize system zone (-117) [ 149.199825][ T5999] EXT4-fs (loop0): mount failed [ 152.044582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 153.504555][ T5859] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.920288][ T5859] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 153.994558][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.003429][ T5859] usb 2-1: Product: syz [ 154.054341][ T5859] usb 2-1: Manufacturer: syz [ 154.079423][ T5859] usb 2-1: SerialNumber: syz [ 154.401038][ T5859] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 154.441578][ T6019] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 154.499803][ T5859] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 155.165852][ T6023] loop3: detected capacity change from 0 to 8 [ 155.324465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 155.410024][ T6023] SQUASHFS error: lzo decompression failed, data probably corrupt [ 155.514692][ T6023] SQUASHFS error: Failed to read block 0x91: -5 [ 155.574636][ T6023] SQUASHFS error: Unable to read metadata cache entry [8f] [ 155.583210][ T6023] SQUASHFS error: Unable to read inode 0x7 [ 155.698905][ T5859] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 155.844357][ T5859] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 157.139911][ T5859] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 157.325809][ T6025] autofs4:pid:6025:autofs_fill_super: called with bogus options [ 157.381544][ T5859] lan78xx: probe of 2-1:1.0 failed with error -32 [ 157.435304][ T5859] usb 2-1: USB disconnect, device number 2 [ 158.124682][ T5892] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 158.346900][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.377684][ T5892] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.424721][ T5892] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 158.451049][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.538949][ T5892] usb 1-1: Product: syz [ 158.556651][ T5892] usb 1-1: Manufacturer: syz [ 158.563429][ T5892] usb 1-1: SerialNumber: syz [ 158.637348][ T5892] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 158.701383][ T5892] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 158.701383][ T5892] Please send a copy of this message to and [ 161.675574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.778681][ T5892] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 161.814986][ T5892] usb 1-1: USB disconnect, device number 2 [ 165.208633][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 165.768507][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.182680][ T6064] autofs4:pid:6064:autofs_fill_super: called with bogus options [ 166.305111][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 166.311771][ T23] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 166.383287][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.446254][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.476560][ T23] usb 4-1: Product: syz [ 166.510176][ T5876] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.523224][ T23] usb 4-1: Manufacturer: syz [ 166.557792][ T23] usb 4-1: SerialNumber: syz [ 166.569617][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.645453][ T5876] usb 2-1: config 0 descriptor?? [ 166.690195][ T23] usb 4-1: USB2VGA dongle found at address 3 [ 166.793173][ T23] usb 4-1: Allocated 8 output buffers [ 167.046948][ T5876] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 167.590130][ T6073] ptp ptp0: new virtual clock ptp1 [ 167.718104][ T6073] ptp ptp0: new virtual clock ptp2 [ 167.828674][ T23] usb 4-1: Failed to early initialize device [ 167.857479][ T6073] ptp ptp0: new virtual clock ptp3 [ 167.907343][ T23] usb 4-1: USB disconnect, device number 3 [ 167.931698][ T6073] ptp ptp0: new virtual clock ptp4 [ 168.093032][ T6073] ptp ptp0: new virtual clock ptp5 [ 168.182652][ T6073] ptp ptp0: guarantee physical clock free running [ 168.238110][ T6078] ptp ptp0: delete virtual clock ptp5 [ 168.400875][ T6078] ptp ptp0: delete virtual clock ptp4 [ 168.532732][ T6078] ptp ptp0: delete virtual clock ptp3 [ 168.817772][ T6078] ptp ptp0: delete virtual clock ptp2 [ 168.894351][ T6078] ptp ptp0: delete virtual clock ptp1 [ 168.982987][ T6078] ptp ptp0: only physical clock in use now [ 169.147534][ T27] usb 2-1: USB disconnect, device number 3 [ 170.736510][ T6096] ======================================================= [ 170.736510][ T6096] WARNING: The mand mount option has been deprecated and [ 170.736510][ T6096] and is ignored by this kernel. Remove the mand [ 170.736510][ T6096] option from the mount to silence this warning. [ 170.736510][ T6096] ======================================================= [ 171.234259][ T6099] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 172.385454][ T6104] autofs4:pid:6104:autofs_fill_super: called with bogus options [ 172.524546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 173.255050][ T6100] loop0: detected capacity change from 0 to 4096 [ 175.995559][ T6100] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 176.077050][ T6100] ntfs3: loop0: Failed to read $AttrDef (-4). [ 176.144139][ T6119] loop2: detected capacity change from 0 to 2048 [ 176.355447][ T6119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.701514][ T6121] gadgetfs: bound to dummy_udc driver [ 177.466285][ T6126] syzkaller0: entered promiscuous mode [ 177.529749][ T6126] syzkaller0: entered allmulticast mode [ 178.535540][ T6130] autofs4:pid:6130:autofs_fill_super: called with bogus options [ 179.415232][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 180.435514][ T5859] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.474538][ T5859] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.499315][ T5859] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 180.520293][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.578675][ T5859] usb 3-1: Product: syz [ 180.583171][ T5859] usb 3-1: Manufacturer: syz [ 180.609299][ T5859] usb 3-1: SerialNumber: syz [ 180.644023][ T5859] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 180.688138][ T5859] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 180.688138][ T5859] Please send a copy of this message to and [ 180.844803][ T5876] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.880743][ T5859] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 180.975234][ T5859] usb 3-1: USB disconnect, device number 2 [ 181.837520][ T6146] loop2: detected capacity change from 0 to 131072 [ 181.884579][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 181.927059][ T5876] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 181.927083][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.932968][ T5876] usb 1-1: config 0 descriptor?? [ 181.971497][ T6146] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.091562][ T6146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.143825][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 182.173170][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.174318][ T5876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 182.175766][ T5876] usb 1-1: media controller created [ 182.232393][ T6146] F2FS-fs (loop2): access invalid blkaddr:0 [ 182.232504][ T6146] CPU: 1 PID: 6146 Comm: syz.2.66 Not tainted syzkaller #0 [ 182.232528][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.232542][ T6146] Call Trace: [ 182.232551][ T6146] [ 182.232561][ T6146] dump_stack_lvl+0x18c/0x250 [ 182.232604][ T6146] ? show_regs_print_info+0x20/0x20 [ 182.232647][ T6146] ? __up_read+0x2b8/0x6b0 [ 182.232671][ T6146] ? __lock_acquire+0x7eb0/0x7eb0 [ 182.232701][ T6146] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 182.232744][ T6146] sanity_check_extent_cache+0xfc/0x1f0 [ 182.232775][ T6146] f2fs_iget+0x336f/0x47d0 [ 182.232832][ T6146] f2fs_lookup+0x37f/0x780 [ 182.232867][ T6146] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 182.232902][ T6146] ? tomoyo_path_symlink+0xf0/0xf0 [ 182.232930][ T6146] ? make_vfsuid+0x67/0xb0 [ 182.232972][ T6146] ? inode_permission+0xf3/0x480 [ 182.232992][ T6146] ? bpf_lsm_inode_create+0x9/0x10 [ 182.233015][ T6146] ? security_inode_create+0xb7/0x100 [ 182.233040][ T6146] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 182.233075][ T6146] path_openat+0x1110/0x3270 [ 182.233143][ T6146] ? do_filp_open+0x430/0x430 [ 182.233189][ T6146] do_filp_open+0x1f2/0x430 [ 182.233220][ T6146] ? vfs_tmpfile+0x620/0x620 [ 182.233273][ T6146] ? _raw_spin_unlock+0x28/0x40 [ 182.233298][ T6146] ? alloc_fd+0x590/0x640 [ 182.233340][ T6146] do_sys_openat2+0x134/0x1d0 [ 182.233374][ T6146] ? do_sys_open+0xe0/0xe0 [ 182.233405][ T6146] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 182.233436][ T6146] ? lock_chain_count+0x20/0x20 [ 182.233468][ T6146] __x64_sys_openat+0x139/0x160 [ 182.233505][ T6146] do_syscall_64+0x55/0xb0 [ 182.233534][ T6146] ? clear_bhb_loop+0x40/0x90 [ 182.233563][ T6146] ? clear_bhb_loop+0x40/0x90 [ 182.233595][ T6146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.233624][ T6146] RIP: 0033:0x7f668919f559 [ 182.233645][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.233664][ T6146] RSP: 002b:00007f668a04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.233690][ T6146] RAX: ffffffffffffffda RBX: 00007f6689425fa0 RCX: 00007f668919f559 [ 182.233707][ T6146] RDX: 0000000000020842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 182.233722][ T6146] RBP: 00007f6689236b20 R08: 0000000000000000 R09: 0000000000000000 [ 182.233736][ T6146] R10: 0000000000000063 R11: 0000000000000246 R12: 0000000000000000 [ 182.233750][ T6146] R13: 00007f6689426038 R14: 00007f6689425fa0 R15: 00007ffee5b5d278 [ 182.233784][ T6146] [ 182.233793][ T6146] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 182.286929][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.346273][ T6140] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 182.370907][ T5876] az6027: usb out operation failed. (-71) [ 182.371427][ T5876] az6027: usb out operation failed. (-71) [ 182.371442][ T5876] stb0899_attach: Driver disabled by Kconfig [ 182.371453][ T5876] az6027: no front-end attached [ 182.371453][ T5876] [ 182.371813][ T5876] az6027: usb out operation failed. (-71) [ 182.371827][ T5876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 182.384758][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 182.389668][ T5876] dvb-usb: schedule remote query interval to 400 msecs. [ 182.389695][ T5876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 182.444998][ T5876] usb 1-1: USB disconnect, device number 4 [ 182.686781][ T5876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 187.505817][ T6164] autofs4:pid:6164:autofs_fill_super: called with bogus options [ 188.474798][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.710071][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.744767][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.770687][ T23] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 188.794866][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.816819][ T23] usb 2-1: Product: syz [ 188.821617][ T23] usb 2-1: Manufacturer: syz [ 188.854820][ T23] usb 2-1: SerialNumber: syz [ 188.906913][ T23] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 191.005703][ T23] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 191.005703][ T23] Please send a copy of this message to and [ 193.185115][ T23] ums-sddr09: probe of 2-1:1.0 failed with error -5 [ 193.215483][ T23] usb 2-1: USB disconnect, device number 4 [ 194.495157][ T6200] autofs4:pid:6200:autofs_fill_super: called with bogus options [ 196.168611][ T6213] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6213] [ 197.172251][ T6219] null_blk: disk nullb1 created [ 197.417561][ T6221] Bluetooth: MGMT ver 1.22 [ 198.054860][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 198.277281][ T5859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.304972][ T5859] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.323018][ T5859] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 198.341680][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.369307][ T5859] usb 1-1: Product: syz [ 198.381108][ T5859] usb 1-1: Manufacturer: syz [ 198.395507][ T5859] usb 1-1: SerialNumber: syz [ 198.420990][ T5859] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 198.453733][ T5859] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 198.453733][ T5859] Please send a copy of this message to and [ 198.802866][ T6230] loop1: detected capacity change from 0 to 32768 [ 198.856949][ T6230] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 198.856949][ T6230] [ 198.887568][ T6230] ERROR: (device loop1): remounting filesystem as read-only [ 198.911690][ T6230] xtLookup: xtSearch returned -5 [ 198.925840][ T6230] read_mapping_page failed! [ 198.943374][ T6230] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 198.988616][ T6230] Mount JFS Failure: -5 [ 198.992951][ T6230] jfs_mount failed w/return code = -5 [ 199.201342][ T6238] jffs2: notice: (6238) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.289951][ T5859] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 199.317425][ T5859] usb 1-1: USB disconnect, device number 5 [ 200.154568][ T6251] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6251] [ 201.081105][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.095165][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.235280][ T6255] No such timeout policy "syz1" [ 201.474769][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 201.676216][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 201.697162][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.733492][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.861803][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.872162][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.887794][ T23] usb 3-1: config 0 descriptor?? [ 201.900493][ T23] hub 3-1:0.0: USB hub found [ 202.114188][ T23] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 202.393043][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 203.314946][ T6263] autofs4:pid:6263:autofs_fill_super: called with bogus options [ 203.808354][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 203.930653][ T23] usb 3-1: USB disconnect, device number 3 [ 204.002860][ T6267] jffs2: notice: (6267) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 205.078782][ T6280] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6280] [ 205.148712][ T6279] loop2: detected capacity change from 0 to 2048 [ 205.274904][ T6279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.628018][ T6284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.637980][ T6284] IPv6: NLM_F_CREATE should be set when creating new route [ 205.864577][ T5859] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.077811][ T5859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.106195][ T5859] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.138446][ T5859] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 206.152434][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.171837][ T5859] usb 1-1: Product: syz [ 206.181977][ T5859] usb 1-1: Manufacturer: syz [ 206.190901][ T5859] usb 1-1: SerialNumber: syz [ 206.204331][ T5859] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 206.232023][ T5859] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 206.232023][ T5859] Please send a copy of this message to and [ 206.285008][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.295064][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.151296][ T5859] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 207.202521][ T5859] usb 1-1: USB disconnect, device number 6 [ 207.806848][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.304623][ T6313] autofs4:pid:6313:autofs_fill_super: called with bogus options [ 209.553671][ T6318] jffs2: notice: (6318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.588622][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.934696][ T5859] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 210.914599][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 210.928272][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.964778][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.004759][ T5859] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.033802][ T6329] loop1: detected capacity change from 0 to 512 [ 211.034712][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.107756][ T5859] usb 1-1: config 0 descriptor?? [ 211.125906][ T6329] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 211.141659][ T5859] hub 1-1:0.0: USB hub found [ 211.149416][ T6329] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 211.225219][ T6329] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.116: iget: bad i_size value: 12154757448730 [ 211.258175][ T6329] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.116: couldn't read orphan inode 13 (err -117) [ 211.350308][ T5859] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 211.378234][ T6329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.594827][ T6284] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.784382][ T5859] usbhid 1-1:0.0: can't add hid device: -71 [ 211.791210][ T5859] usbhid: probe of 1-1:0.0 failed with error -71 [ 211.797959][ T6284] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.917122][ T6284] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.933030][ T6284] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.407005][ T6335] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6335] [ 212.855640][ T6331] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 212.894380][ T5859] usb 1-1: USB disconnect, device number 7 [ 213.676860][ T9] Process accounting resumed [ 214.273092][ T6351] loop0: detected capacity change from 0 to 512 [ 214.290687][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.748218][ T6351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.786616][ T6355] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 215.382394][ T6351] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.069163][ T6367] autofs4:pid:6367:autofs_fill_super: called with bogus options [ 217.632654][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.692309][ T6372] jffs2: notice: (6372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.134569][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 218.354499][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 218.368551][ T6378] loop0: detected capacity change from 0 to 32768 [ 218.381405][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.406024][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.422261][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 218.435304][ T6378] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.125 (6378) [ 218.451755][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.525412][ T9] usb 3-1: config 0 descriptor?? [ 218.533984][ T6378] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 218.572458][ T6378] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 218.588133][ T9] hub 3-1:0.0: USB hub found [ 218.616155][ T6378] BTRFS info (device loop0): using free space tree [ 218.822231][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 218.915619][ T6378] BTRFS info (device loop0): enabling ssd optimizations [ 218.953021][ T6378] BTRFS info (device loop0): auto enabling async discard [ 219.114898][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 219.128919][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 219.198127][ T9] usb 3-1: USB disconnect, device number 4 [ 219.619078][ T5778] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 220.974972][ T6409] syz.2.130 (6409) used greatest stack depth: 19944 bytes left [ 221.178627][ T6400] loop1: detected capacity change from 0 to 40427 [ 221.224581][ T6400] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 221.233405][ T6400] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 221.282726][ T6400] F2FS-fs (loop1): invalid crc value [ 221.852096][ T6417] autofs4:pid:6417:autofs_fill_super: called with bogus options [ 223.227426][ T6400] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 223.572148][ T6425] jffs2: notice: (6425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 224.102267][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 224.175098][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 224.302355][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 224.324323][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.349406][ T27] usb 2-1: Product: syz [ 224.364039][ T27] usb 2-1: Manufacturer: syz [ 224.378181][ T27] usb 2-1: SerialNumber: syz [ 224.384744][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 224.399029][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.428139][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.473215][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.503168][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.543794][ T5893] usb 1-1: config 0 descriptor?? [ 224.569747][ T5893] hub 1-1:0.0: USB hub found [ 224.803261][ T5893] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 224.818231][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 224.926264][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 225.125068][ T5893] usbhid 1-1:0.0: can't add hid device: -71 [ 225.133284][ T5893] usbhid: probe of 1-1:0.0 failed with error -71 [ 225.173005][ T5893] usb 1-1: USB disconnect, device number 8 [ 226.883290][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 226.891498][ T5089] Bluetooth: Wrong link type (-22) [ 227.238091][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 227.777303][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 228.365984][ T6468] autofs4:pid:6468:autofs_fill_super: called with bogus options [ 229.803794][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 229.895183][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 229.974327][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 229.977692][ T6473] jffs2: notice: (6473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.009794][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 230.084835][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 230.125809][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 230.176348][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 230.219447][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 230.254828][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 230.305317][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 230.361628][ T27] lan78xx: probe of 2-1:1.0 failed with error -71 [ 230.434085][ T27] usb 2-1: USB disconnect, device number 5 [ 230.542524][ T6485] FAULT_INJECTION: forcing a failure. [ 230.542524][ T6485] name failslab, interval 1, probability 0, space 0, times 1 [ 230.570736][ T6485] CPU: 0 PID: 6485 Comm: syz.1.149 Not tainted syzkaller #0 [ 230.579640][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.594487][ T6485] Call Trace: [ 230.600598][ T6485] [ 230.604447][ T6485] dump_stack_lvl+0x18c/0x250 [ 230.609546][ T6485] ? show_regs_print_info+0x20/0x20 [ 230.615633][ T6485] ? load_image+0x420/0x420 [ 230.620999][ T6485] ? __might_sleep+0xe0/0xe0 [ 230.625803][ T6485] ? __lock_acquire+0x7eb0/0x7eb0 [ 230.631074][ T6485] should_fail_ex+0x394/0x4c0 [ 230.636622][ T6485] should_failslab+0x9/0x20 [ 230.643944][ T6485] slab_pre_alloc_hook+0x59/0x300 [ 230.650462][ T6485] ? memcg_list_lru_alloc+0x231/0xb00 [ 230.658287][ T6485] ? memcg_list_lru_alloc+0x231/0xb00 [ 230.666790][ T6485] __kmem_cache_alloc_node+0x53/0x260 [ 230.673825][ T6485] ? memcg_list_lru_alloc+0x231/0xb00 [ 230.681073][ T6485] __kmalloc+0xa7/0x240 [ 230.687164][ T6485] memcg_list_lru_alloc+0x231/0xb00 [ 230.693506][ T6485] ? memcg_reparent_list_lrus+0x860/0x860 [ 230.701346][ T6485] ? get_obj_cgroup_from_current+0xd4/0x280 [ 230.710387][ T6485] ? get_obj_cgroup_from_current+0xd4/0x280 [ 230.717493][ T6485] slab_pre_alloc_hook+0x2ad/0x300 [ 230.723387][ T6485] ? slab_pre_alloc_hook+0xb1/0x300 [ 230.728920][ T6485] kmem_cache_alloc_lru+0x4d/0x2c0 [ 230.734365][ T6485] ? bdev_alloc_inode+0x28/0x60 [ 230.740727][ T6485] bdev_alloc_inode+0x28/0x60 [ 230.746729][ T6485] ? bd_init_fs_context+0xa0/0xa0 [ 230.752675][ T6485] new_inode_pseudo+0x63/0x1d0 [ 230.759892][ T6485] new_inode+0x22/0x1d0 [ 230.765279][ T6485] ? init_timer_key+0x161/0x2a0 [ 230.770606][ T6485] bdev_alloc+0x24/0x340 [ 230.775127][ T6485] __alloc_disk_node+0x12b/0x570 [ 230.781907][ T6485] __blk_alloc_disk+0x2e/0x80 [ 230.787882][ T6485] dm_create+0x46f/0xf90 [ 230.793578][ T6485] dev_create+0x1f8/0x400 [ 230.800036][ T6485] ? list_devices+0x8a0/0x8a0 [ 230.806447][ T6485] ? __might_fault+0xaa/0x120 [ 230.812108][ T6485] ? __might_fault+0xc6/0x120 [ 230.819983][ T6485] ? __might_fault+0xaa/0x120 [ 230.827119][ T6485] ? list_devices+0x8a0/0x8a0 [ 230.834262][ T6485] dm_ctl_ioctl+0x975/0xd00 [ 230.839673][ T6485] ? list_devices+0x8a0/0x8a0 [ 230.845057][ T6485] ? dm_poll+0x120/0x120 [ 230.850130][ T6485] ? bpf_lsm_file_ioctl+0x9/0x10 [ 230.856643][ T6485] ? security_file_ioctl+0x80/0xa0 [ 230.862366][ T6485] ? dm_poll+0x120/0x120 [ 230.868439][ T6485] __se_sys_ioctl+0xfd/0x170 [ 230.874047][ T6485] do_syscall_64+0x55/0xb0 [ 230.879431][ T6485] ? clear_bhb_loop+0x40/0x90 [ 230.884980][ T6485] ? clear_bhb_loop+0x40/0x90 [ 230.890624][ T6485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.897456][ T6485] RIP: 0033:0x7f33b779f559 [ 230.902847][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.936454][ T6485] RSP: 002b:00007f33b85e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.945562][ T6485] RAX: ffffffffffffffda RBX: 00007f33b7a25fa0 RCX: 00007f33b779f559 [ 230.955278][ T6485] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000005 [ 230.966222][ T6485] RBP: 00007f33b7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 230.974456][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.983118][ T6485] R13: 00007f33b7a26038 R14: 00007f33b7a25fa0 R15: 00007ffe5d790a38 [ 230.992106][ T6485] [ 231.284730][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 232.404269][ T9] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 232.457180][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.516038][ T9] usb 1-1: Product: syz [ 232.535837][ T9] usb 1-1: Manufacturer: syz [ 232.574879][ T9] usb 1-1: SerialNumber: syz [ 232.671476][ T9] usb 1-1: USB2VGA dongle found at address 9 [ 233.308256][ T6495] autofs4:pid:6495:autofs_fill_super: called with bogus options [ 234.755359][ T9] usb 1-1: Allocated 8 output buffers [ 234.806938][ T9] usb 1-1: Failed to early initialize device [ 234.849283][ T9] usb 1-1: USB disconnect, device number 9 [ 234.888445][ T6499] jffs2: notice: (6499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.219315][ T6501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.616851][ T6518] loop0: detected capacity change from 0 to 128 [ 239.584037][ T6533] autofs4:pid:6533:autofs_fill_super: called with bogus options [ 240.650855][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 240.834645][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 240.841375][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 240.848933][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 241.065472][ T175] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 243.071449][ T175] usb 4-1: device descriptor read/all, error -71 [ 243.937743][ T6558] netlink: 64 bytes leftover after parsing attributes in process `syz.2.172'. [ 244.281266][ T6562] loop0: detected capacity change from 0 to 512 [ 244.356280][ T6562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.189814][ T6562] EXT4-fs (loop0): 1 truncate cleaned up [ 246.265993][ T6562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.437246][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.550839][ T5762] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.760874][ T5762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.810200][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.856638][ T5762] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 246.921612][ T5762] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.125811][ T5762] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 247.204329][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.283649][ T5762] usb 4-1: Product: syz [ 247.326091][ T5762] usb 4-1: Manufacturer: syz [ 247.392883][ T5762] usb 4-1: SerialNumber: syz [ 247.804823][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 248.085982][ T5878] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 248.190905][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.289656][ T5878] usb 3-1: Product: syz [ 248.328450][ T5878] usb 3-1: Manufacturer: syz [ 248.372210][ T5878] usb 3-1: SerialNumber: syz [ 248.604334][ T5878] usb 3-1: USB2VGA dongle found at address 5 [ 248.696775][ T5878] usb 3-1: Allocated 8 output buffers [ 249.524586][ T5878] usb 3-1: Failed to early initialize device [ 249.762617][ T5878] usb 3-1: USB disconnect, device number 5 [ 249.844173][ T175] usb 4-1: USB disconnect, device number 6 [ 251.914769][ T6298] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 252.190305][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 252.221155][ T6298] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.254652][ T6298] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 252.288934][ T6298] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 252.313863][ T6298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.350199][ T6298] usb 1-1: Product: syz [ 252.364703][ T6298] usb 1-1: Manufacturer: syz [ 252.380928][ T6298] usb 1-1: SerialNumber: syz [ 252.415486][ T6298] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 252.434639][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 252.442235][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.467136][ T6298] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 252.467136][ T6298] Please send a copy of this message to and [ 252.498821][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.512462][ T5878] usb 2-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 252.522066][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.545031][ T5878] usb 2-1: config 0 descriptor?? [ 253.647508][ T5878] usbhid 2-1:0.0: can't add hid device: -71 [ 253.655251][ T5878] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.726815][ T5878] usb 2-1: USB disconnect, device number 6 [ 254.005266][ T6298] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 254.983776][ T6298] usb 1-1: USB disconnect, device number 10 [ 257.514725][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 257.766241][ T9] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 257.788455][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.796939][ T9] usb 2-1: Product: syz [ 257.801195][ T9] usb 2-1: Manufacturer: syz [ 257.811550][ T9] usb 2-1: SerialNumber: syz [ 257.831617][ T9] usb 2-1: USB2VGA dongle found at address 7 [ 257.855143][ T9] usb 2-1: Allocated 8 output buffers [ 258.909091][ T9] usb 2-1: Failed to early initialize device [ 258.960579][ T9] usb 2-1: USB disconnect, device number 7 [ 259.494704][ T6305] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 259.571300][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 259.788475][ T6305] usb 4-1: device descriptor read/64, error -32 [ 260.094753][ T6305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 260.126843][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 260.286374][ T6305] usb 4-1: device descriptor read/64, error -32 [ 260.454911][ T6305] usb usb4-port1: attempt power cycle [ 261.414476][ T6666] autofs4:pid:6666:autofs_fill_super: called with bogus options [ 262.547702][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.561122][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.596129][ T6305] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 262.662815][ T6305] usb 4-1: device descriptor read/8, error -71 [ 266.474755][ T6305] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 266.737096][ T6305] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 267.606158][ T6305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.614247][ T6305] usb 3-1: Product: syz [ 267.620318][ T6305] usb 3-1: Manufacturer: syz [ 267.625359][ T6305] usb 3-1: SerialNumber: syz [ 267.722118][ T6305] usb 3-1: can't set config #1, error -71 [ 267.754686][ T6305] usb 3-1: USB disconnect, device number 6 [ 268.428127][ T6695] autofs4:pid:6695:autofs_fill_super: called with bogus options [ 270.832277][ T6704] Process accounting resumed [ 275.764930][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 276.109158][ T9] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 276.808433][ T6738] Process accounting resumed [ 276.813519][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.830951][ T9] usb 2-1: Product: syz [ 276.835844][ T9] usb 2-1: Manufacturer: syz [ 276.840500][ T9] usb 2-1: SerialNumber: syz [ 276.863199][ T9] usb 2-1: USB2VGA dongle found at address 8 [ 276.875898][ T9] usb 2-1: Allocated 8 output buffers [ 276.977193][ T6742] loop0: detected capacity change from 0 to 64 [ 277.063587][ T6745] jffs2: notice: (6745) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 277.158085][ T6742] Trying to free block not in datazone [ 277.324080][ T6742] Trying to free block not in datazone [ 277.522201][ T6742] Trying to free block not in datazone [ 277.644325][ T6742] Trying to free block not in datazone [ 277.756197][ T6742] Trying to free block not in datazone [ 277.864929][ T6742] minix_free_block (loop0:6): bit already cleared [ 277.966641][ T6742] Trying to free block not in datazone [ 278.034599][ T6742] Trying to free block not in datazone [ 278.040198][ T9] usb 2-1: Failed to early initialize device [ 278.052911][ T9] usb 2-1: USB disconnect, device number 8 [ 278.750869][ T6757] autofs4:pid:6757:autofs_fill_super: called with bogus options [ 281.850916][ T27] Process accounting resumed [ 283.594243][ T6778] Process accounting resumed [ 284.303029][ T6787] autofs4:pid:6787:autofs_fill_super: called with bogus options [ 285.584505][ T5830] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.789821][ T5830] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 285.815620][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.835446][ T5830] usb 1-1: Product: syz [ 285.839689][ T5830] usb 1-1: Manufacturer: syz [ 285.854514][ T5830] usb 1-1: SerialNumber: syz [ 285.885161][ T5830] usb 1-1: USB2VGA dongle found at address 11 [ 285.917242][ T5830] usb 1-1: Allocated 8 output buffers [ 287.153190][ T9] Process accounting resumed [ 287.485456][ T5830] usb 1-1: Failed to early initialize device [ 287.943910][ T5830] usb 1-1: USB disconnect, device number 11 [ 288.021401][ T6806] loop1: detected capacity change from 0 to 2048 [ 288.093750][ T6806] UDF-fs: bad mount option "" or missing value [ 289.144424][ T6819] autofs4:pid:6819:autofs_fill_super: called with bogus options [ 290.415808][ T5830] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 291.123455][ T6826] autofs4:pid:6826:autofs_fill_super: called with bogus options [ 292.298614][ T5830] usb 1-1: device descriptor read/all, error -71 [ 295.753512][ T6847] autofs4:pid:6847:autofs_fill_super: called with bogus options [ 297.235932][ T6855] loop1: detected capacity change from 0 to 512 [ 297.266599][ T6855] ext4: Unknown parameter 'prjquota.nouid32' [ 297.691741][ T6855] loop1: detected capacity change from 0 to 2048 [ 297.905958][ T6855] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 297.959865][ T6855] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 298.027548][ T6855] UDF-fs: Scanning with blocksize 512 failed [ 298.070549][ T6855] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 298.101045][ T6855] UDF-fs: Scanning with blocksize 1024 failed [ 298.140644][ T6855] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 298.179497][ T6855] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 298.204731][ T6855] UDF-fs: Scanning with blocksize 2048 failed [ 298.228138][ T6855] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 298.276053][ T6855] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 298.307998][ T6855] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 298.336916][ T6855] UDF-fs: Scanning with blocksize 4096 failed [ 298.344249][ T6855] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 298.488453][ T6873] Bluetooth: MGMT ver 1.22 [ 299.619311][ T6878] loop3: detected capacity change from 0 to 256 [ 300.603691][ T6883] autofs4:pid:6883:autofs_fill_super: called with bogus options [ 302.217416][ T6894] binder: 6893:6894 ioctl 4018620d 0 returned -22 [ 302.674475][ T6305] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 303.006980][ T6305] usb 4-1: config 3 has an invalid interface number: 206 but max is 0 [ 303.342020][ T6305] usb 4-1: config 3 has no interface number 0 [ 303.352046][ T6305] usb 4-1: config 3 interface 206 has no altsetting 0 [ 303.376528][ T6305] usb 4-1: New USB device found, idVendor=12d1, idProduct=a852, bcdDevice=7e.ff [ 303.395117][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.415396][ T6305] usb 4-1: Product: syz [ 303.420812][ T6305] usb 4-1: Manufacturer: syz [ 303.432777][ T6305] usb 4-1: SerialNumber: syz [ 303.876494][ T6305] option 4-1:3.206: GSM modem (1-port) converter detected [ 303.963391][ T6305] usb 4-1: USB disconnect, device number 11 [ 304.039405][ T6305] option 4-1:3.206: device disconnected [ 304.494106][ T6912] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.613212][ T6906] autofs4:pid:6906:autofs_fill_super: called with bogus options [ 305.412501][ T6923] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6923] [ 306.197365][ T6928] binder: 6926:6928 ioctl c0306201 0 returned -14 [ 308.801030][ T6946] autofs4:pid:6946:autofs_fill_super: called with bogus options [ 310.071087][ T6949] jffs2: notice: (6949) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 314.736769][ T6977] jffs2: notice: (6977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 316.021435][ T6984] jffs2: notice: (6984) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 316.217943][ T6989] loop3: detected capacity change from 0 to 8 [ 317.866343][ T6989] SQUASHFS error: lzo decompression failed, data probably corrupt [ 317.904953][ T6989] SQUASHFS error: Failed to read block 0x91: -5 [ 317.911312][ T6989] SQUASHFS error: Unable to read metadata cache entry [8f] [ 317.945243][ T6989] SQUASHFS error: Unable to read inode 0x11f [ 319.714587][ T5858] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 321.654474][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 322.869563][ T5858] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 322.897049][ T5858] usb 4-1: can't read configurations, error -71 [ 323.045985][ T7019] jffs2: notice: (7019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 323.677130][ T7027] loop3: detected capacity change from 0 to 16 [ 323.922607][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.929551][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.091778][ T7038] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 329.005261][ T7050] jffs2: notice: (7050) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 329.816495][ T7055] o2cb: This node has not been configured. [ 329.822819][ T7055] o2cb: Cluster check failed. Fix errors before retrying. [ 329.830644][ T7055] (syz.1.313,7055,0):user_dlm_register:674 ERROR: status = -22 [ 329.838602][ T7055] (syz.1.313,7055,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 332.175457][ T5858] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 332.193944][ T7076] loop3: detected capacity change from 0 to 128 [ 332.338853][ T5777] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 332.350883][ T5777] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 332.365225][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 332.385773][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.407255][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.435017][ T5858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.442192][ T7078] loop1: detected capacity change from 0 to 16 [ 332.466658][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.514668][ T5858] usb 3-1: config 0 descriptor?? [ 332.524029][ T5858] hub 3-1:0.0: USB hub found [ 332.735039][ T5858] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 334.598392][ T5858] usbhid 3-1:0.0: can't add hid device: -71 [ 334.611416][ T5858] usbhid: probe of 3-1:0.0 failed with error -71 [ 334.669965][ T5858] usb 3-1: USB disconnect, device number 7 [ 336.499493][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.512832][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.522223][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.536871][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.545931][ T5089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.554668][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.584192][ T7101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.843621][ T7098] rxe_eth0 speed is unknown, defaulting to 1000 [ 337.319862][ T7112] jffs2: notice: (7112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 338.674730][ T5089] Bluetooth: hci0: command tx timeout [ 341.278519][ T5089] Bluetooth: hci0: command tx timeout [ 341.614612][ T5762] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 341.825742][ T5762] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 341.887251][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 342.032461][ T5089] Bluetooth: Wrong link type (-22) [ 342.633074][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.281313][ T5762] usb 3-1: Product: syz [ 343.294446][ T5762] usb 3-1: Manufacturer: syz [ 343.362952][ T5089] Bluetooth: hci0: command tx timeout [ 343.368657][ T5762] usb 3-1: SerialNumber: syz [ 344.157361][ T5762] usb 3-1: USB2VGA dongle found at address 8 [ 344.171399][ T7098] chnl_net:caif_netlink_parms(): no params data found [ 344.246794][ T5762] usb 3-1: Allocated 8 output buffers [ 344.537935][ T3461] hsr_slave_0: left promiscuous mode [ 344.602014][ T7153] jffs2: notice: (7153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.627501][ T3461] hsr_slave_1: left promiscuous mode [ 344.683691][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.708244][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.846723][ T3461] bridge_slave_1: left allmulticast mode [ 344.852996][ T3461] bridge_slave_1: left promiscuous mode [ 344.898062][ T5762] usb 3-1: Failed to early initialize device [ 344.916741][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.965493][ T5762] usb 3-1: USB disconnect, device number 8 [ 345.067024][ T3461] bridge_slave_0: left allmulticast mode [ 345.104658][ T3461] bridge_slave_0: left promiscuous mode [ 345.111808][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.210201][ T7164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.654624][ T5089] Bluetooth: hci0: command tx timeout [ 349.758903][ T7189] vivid-004: ================= START STATUS ================= [ 349.771130][ T7189] vivid-004: FM Deviation: 75000 [ 349.777457][ T7189] vivid-004: ================== END STATUS ================== [ 349.886175][ T7189] loop2: detected capacity change from 0 to 512 [ 351.930621][ T7189] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.353: iget: bad i_size value: 38620345925642 [ 352.035810][ T7189] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.353: couldn't read orphan inode 15 (err -117) [ 352.129030][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.601213][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.188711][ T7198] jffs2: notice: (7198) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 354.961176][ T3461] team0 (unregistering): Port device team_slave_1 removed [ 355.029037][ T7215] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 355.089572][ T3461] team0 (unregistering): Port device team_slave_0 removed [ 355.540933][ T3461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.759156][ T3461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.943371][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 358.225693][ T5878] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 358.266992][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.304636][ T5878] usb 2-1: Product: syz [ 358.309245][ T5878] usb 2-1: Manufacturer: syz [ 358.313953][ T5878] usb 2-1: SerialNumber: syz [ 358.340646][ T5878] usb 2-1: USB2VGA dongle found at address 9 [ 358.350668][ T5878] usb 2-1: Allocated 8 output buffers [ 358.471994][ T3461] bond0 (unregistering): Released all slaves [ 358.851034][ T5878] usb 2-1: Failed to early initialize device [ 358.870806][ T5878] usb 2-1: USB disconnect, device number 9 [ 359.096183][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.119692][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.128722][ T7098] bridge_slave_0: entered allmulticast mode [ 359.150560][ T7098] bridge_slave_0: entered promiscuous mode [ 359.170384][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.185129][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.192545][ T7098] bridge_slave_1: entered allmulticast mode [ 359.206302][ T7098] bridge_slave_1: entered promiscuous mode [ 359.252961][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.276679][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.336595][ T7098] team0: Port device team_slave_0 added [ 359.346824][ T7098] team0: Port device team_slave_1 added [ 359.421433][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.428597][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.456592][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.479230][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.492970][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.532285][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.267084][ T7255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.534653][ T6298] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 361.544308][ T7098] hsr_slave_0: entered promiscuous mode [ 361.595114][ T7098] hsr_slave_1: entered promiscuous mode [ 361.629025][ T7098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.644576][ T7098] Cannot create hsr debugfs directory [ 361.767001][ T6298] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 363.350498][ T6298] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 363.377475][ T6298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.399582][ T6298] usb 1-1: Product: syz [ 363.434564][ T6298] usb 1-1: Manufacturer: syz [ 363.439416][ T6298] usb 1-1: SerialNumber: syz [ 363.495571][ T7257] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 363.959825][ T6298] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 364.193709][ T7098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.229967][ T7098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.262367][ T7098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.284904][ T7098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.395837][ T6305] usb 1-1: USB disconnect, device number 14 [ 364.560388][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.604556][ T7098] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.630316][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.639192][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.658178][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.665462][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.397063][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.199180][ T6305] Process accounting resumed [ 366.860197][ T7312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.588644][ T7332] netlink: 64 bytes leftover after parsing attributes in process `syz.0.381'. [ 368.969180][ T7098] veth0_vlan: entered promiscuous mode [ 369.010978][ T7098] veth1_vlan: entered promiscuous mode [ 369.142495][ T7098] veth0_macvtap: entered promiscuous mode [ 369.184066][ T7098] veth1_macvtap: entered promiscuous mode [ 369.257616][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.304468][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.324865][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.354406][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.381319][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.414751][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.450247][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.514588][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.550478][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.589757][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.604672][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.638495][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.670074][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.696180][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.768823][ T7098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.779439][ T7098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.803937][ T7098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.825266][ T7098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.057438][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.083068][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.165484][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.173456][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.234758][ T175] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 375.461090][ T175] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 375.511545][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.552537][ T175] usb 2-1: Product: syz [ 375.580698][ T175] usb 2-1: Manufacturer: syz [ 375.615041][ T175] usb 2-1: SerialNumber: syz [ 375.672036][ T175] usb 2-1: USB2VGA dongle found at address 10 [ 375.703444][ T175] usb 2-1: Allocated 8 output buffers [ 376.043636][ T175] usb 2-1: Failed to early initialize device [ 376.056336][ T175] usb 2-1: USB disconnect, device number 10 [ 378.090528][ T175] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 378.297445][ T175] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.510512][ T175] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 378.529086][ T175] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 378.540735][ T175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.554093][ T175] usb 3-1: Product: syz [ 378.559031][ T175] usb 3-1: Manufacturer: syz [ 378.563871][ T175] usb 3-1: SerialNumber: syz [ 378.586904][ T175] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 378.950963][ T175] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 378.950963][ T175] Please send a copy of this message to and [ 382.365008][ T175] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 382.431778][ T175] usb 3-1: USB disconnect, device number 9 [ 385.364642][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.371047][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.856403][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 386.863723][ T5089] Bluetooth: Wrong link type (-22) [ 388.129144][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 388.135785][ T5089] Bluetooth: Wrong link type (-22) [ 388.234588][ T5762] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 390.266705][ T5762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.294489][ T5762] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 390.352123][ T5762] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 390.381794][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.410400][ T5762] usb 2-1: Product: syz [ 390.843353][ T5762] usb 2-1: Manufacturer: syz [ 392.497262][ T5762] usb 2-1: SerialNumber: syz [ 392.534569][ T5762] usb 2-1: can't set config #1, error -71 [ 392.560748][ T5762] usb 2-1: USB disconnect, device number 11 [ 393.890513][ T7548] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 394.717678][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 394.724053][ T5089] Bluetooth: Wrong link type (-22) [ 400.719787][ T7597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.215004][ T7604] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 401.860761][ T7603] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:3": -EINTR [ 402.473545][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 402.500680][ T5089] Bluetooth: Wrong link type (-22) [ 406.415342][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 406.808771][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 406.836494][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 407.665244][ T7646] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 407.802147][ T27] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 407.869379][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.914477][ T27] usb 3-1: Product: syz [ 407.920038][ T27] usb 3-1: Manufacturer: syz [ 407.977746][ T27] usb 3-1: can't set config #1, error -71 [ 407.996667][ T27] usb 3-1: USB disconnect, device number 10 [ 408.022382][ T7648] udevd[7648]: setting mode of /dev/bus/usb/003/010 to 020664 failed: No such file or directory [ 408.078374][ T7648] udevd[7648]: setting owner of /dev/bus/usb/003/010 to uid=0, gid=0 failed: No such file or directory [ 408.766837][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.449'. [ 409.619806][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 409.626730][ T5089] Bluetooth: Wrong link type (-22) [ 414.338121][ T7686] gadgetfs: bound to dummy_udc driver [ 415.510632][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.573976][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.029198][ T7710] loop2: detected capacity change from 0 to 512 [ 417.040617][ T7712] loop0: detected capacity change from 0 to 512 [ 417.097607][ T7712] EXT4-fs: Ignoring removed orlov option [ 417.116130][ T7712] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 417.204850][ T7710] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 417.226880][ T7710] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.460: invalid indirect mapped block 256 (level 1) [ 417.244619][ T7715] jffs2: notice: (7715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 417.291971][ T7710] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.460: invalid indirect mapped block 2683928664 (level 1) [ 417.322938][ T7712] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.461: Allocating blocks 41-42 which overlap fs metadata [ 417.357106][ T7710] EXT4-fs (loop2): 1 truncate cleaned up [ 417.502689][ T7710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.548240][ T7712] Quota error (device loop0): write_blk: dquota write failed [ 417.676762][ T7712] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 417.884916][ T7712] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.461: Allocating blocks 41-42 which overlap fs metadata [ 418.084607][ T7712] Quota error (device loop0): write_blk: dquota write failed [ 418.141897][ T7712] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 418.172501][ T7712] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.461: Failed to acquire dquot type 1 [ 418.208643][ T7712] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 418.272277][ T7712] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.461: corrupted inode contents [ 418.393601][ T7712] EXT4-fs error (device loop0): ext4_dirty_inode:6188: inode #12: comm syz.0.461: mark_inode_dirty error [ 418.449628][ T7712] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.461: corrupted inode contents [ 419.034465][ T7714] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 419.073556][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 419.081352][ T5089] Bluetooth: Wrong link type (-22) [ 419.295138][ T7712] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #12: comm syz.0.461: mark_inode_dirty error [ 419.316448][ T7714] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 419.851633][ T7712] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.461: corrupted inode contents [ 419.871010][ T7730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.948807][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.967307][ T7712] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 420.011527][ T7712] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.461: corrupted inode contents [ 420.072706][ T7712] EXT4-fs error (device loop0): ext4_truncate:4314: inode #12: comm syz.0.461: mark_inode_dirty error [ 420.129085][ T7712] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 420.190685][ T7712] EXT4-fs (loop0): 1 truncate cleaned up [ 420.204136][ T7712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.197161][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.577820][ T7757] loop2: detected capacity change from 0 to 1024 [ 422.913795][ T7757] ext4: Unknown parameter 'noacl' [ 424.284477][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 424.718489][ T5893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 424.748405][ T5893] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 424.780494][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.828071][ T5893] usb 3-1: Product: syz [ 424.914855][ T5893] usb 3-1: Manufacturer: syz [ 424.919555][ T5893] usb 3-1: SerialNumber: syz [ 425.848407][ T7771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 426.270231][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 426.278020][ T5089] Bluetooth: Wrong link type (-22) [ 426.333948][ T5893] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 427.053824][ T5762] usb 3-1: USB disconnect, device number 11 [ 427.878603][ T7792] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.213109][ T7815] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns Stopping sshd: [ 432.025746][ T7820] kvm: pic: non byte write stopped /usr/sbin/sshd (pid 5532) OK Stopping crond: [ 432.924207][ T5089] Bluetooth: Unknown LE signaling command 0x0d [ 432.935055][ T5089] Bluetooth: Wrong link type (-22) [ 432.940873][ T5089] Bluetooth: hci0: link tx timeout [ 432.952905][ T5089] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 433.975703][ T7833] loop0: detected capacity change from 0 to 512 stopped /usr/sbin/crond (pid 5516) OK [ 435.032916][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 435.211843][ T7849] loop0: detected capacity change from 0 to 256 [ 435.364389][ T7849] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) Stopping dhcpcd... [ 435.916867][ T7857] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 436.537263][ T7867] syz.4.484: attempt to access beyond end of device [ 436.537263][ T7867] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 436.550606][ T7867] exFAT-fs (nbd4): unable to read boot sector [ 436.557180][ T7867] exFAT-fs (nbd4): failed to read boot sector [ 436.563313][ T7867] exFAT-fs (nbd4): failed to recognize exfat type stopped /sbin/dhcpcd (pid 5437) Stopping network: [ 439.762606][ T5785] Bluetooth: Unknown LE signaling command 0x0d [ 439.769018][ T5785] Bluetooth: Wrong link type (-22) [ 442.148986][ T7918] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 442.747223][ T7922] loop0: detected capacity change from 0 to 1024 [ 442.808751][ T7925] loop2: detected capacity change from 0 to 164 [ 442.842341][ T7925] process 'syz.2.496' launched './file1' with NULL argv: empty string added [ 442.887137][ T7922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.127716][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. OK [ 443.709031][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd Stopping iptables: OK [ 443.946835][ T5830] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 443.961772][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.991748][ T5830] usb 5-1: Product: syz [ 444.004774][ T5830] usb 5-1: Manufacturer: syz [ 444.009475][ T5830] usb 5-1: SerialNumber: syz [ 444.064674][ T5830] usb 5-1: USB2VGA dongle found at address 2 [ 444.085520][ T5830] usb 5-1: Allocated 8 output buffers Stopping system message bus: [ 445.572161][ T5830] usb 5-1: Failed to early initialize device [ 445.646760][ T5830] usb 5-1: USB disconnect, device number 2 [ 445.755454][ T5785] Bluetooth: Unknown LE signaling command 0x0d [ 445.761794][ T5785] Bluetooth: Wrong link type (-22) [ 446.789850][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.838082][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.176353][ T7976] jffs2: notice: (7976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. done [ 447.338654][ T5785] Bluetooth: Unknown LE signaling command 0x0d [ 447.355630][ T5785] Bluetooth: Wrong link type (-22) [ 448.921778][ T7988] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 449.573161][ T8001] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966917 [ 450.231573][ T5878] wacom 0003:056A:0042.0001: unbalanced collection at end of report description serialport: VM disconnected.