last executing test programs: 31.536293648s ago: executing program 2 (id=790): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0xc0901, 0x3e1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 28.269779009s ago: executing program 0 (id=793): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x65, 0x38, 0x36, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778803000000dfeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "0011223344576677889981bbccddeeff00112233445566778899aabbccddeeff00112213445566778899aabbccddeeff002233445566778899aabbccddeeef00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x32, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x36, 0x31, 0x30, 0x0, 0x30, 0x33, 0x30, 0x30, 0x30, 0x62, 0x38, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x38, 0x62, 0x30, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x32, 0x30, 0x30, 0x0, 0x64, 0x30, 0x30, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x39, 0x35, 0x30, 0x32, 0x30, 0x30, 0x2e, 0x65, 0x62, 0x30, 0x39, 0x65, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbcc5deeff00112233445566778899aabbccddeeff001157a1000066778899aa00000000ff00112233445566578899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x36, 0x64, 0x31, 0x3, 0x34, 0x34, 0x62, 0x36, 0x30, 0x63, 0x9c0ab4d12417f6d4, 0x30, 0x63, 0x61, 0x39]}, &(0x7f00000001c0)={0x0, "e9fc07c1d50135a0b736d87533c5799e064527252c7b54810a1501a7600733ea10dba9e42740c4f4d1d7ca77336ab2098626b979a876efcd4b87419c301bf79f", 0x3b}, 0x48, r0) 28.107638587s ago: executing program 1 (id=794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) 26.662862444s ago: executing program 1 (id=795): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) ptrace$peek(0x2, r0, &(0x7f0000000000)) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) 24.008426847s ago: executing program 2 (id=797): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setns(0xc9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cff"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="11"], 0xa) 23.303222929s ago: executing program 2 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') getpgid(r0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) 23.301514919s ago: executing program 0 (id=799): acct(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setns(0xc9, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) 19.570139952s ago: executing program 2 (id=800): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x5c, 0x5}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 19.556342303s ago: executing program 0 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1c4, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x21, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x5]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1f6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 17.800306734s ago: executing program 1 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_procfs$userns(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 14.300445107s ago: executing program 1 (id=803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) 14.284856048s ago: executing program 0 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 12.101708189s ago: executing program 3 (id=806): syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$eJzs3AuYzlW7MPD7Xmv9GdOkp0kOw1rr/vOkwTJJkkOKHJIkSZKcEpImSRISQ0gSkpwPk+QwhOQwjUnjfD7knDR5pUmSkJzC+q7pbW/vu3v3297f2/581577d13rmnXPeu71rDX3zDz/9b+u5/m+x8i6zevVakpE8C/Bv35JAYAYABgCANcBQAAAleIrxeeOF5CY8q89CftzPZJ2tVfAriauf97G9c/buP55G9c/b+P6521c/7yN65+3cf0Zy8u2zyl2Pbe82/j+f17Gr///i+SUn/z1xvI39vxvpHD98zauf97G9c/buP55G9c/b+P6/+9X85+Mcf3zNq4/Y3nZ1b7/zO3qtqv9+8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLG84569QAPBv/au9LsYYY4wxxhhjjP15fP6rvQLGGGOMMcYYY4z9z0MQIEFBAPkgP8RAAYiFayAOroWCcB1E4HqIhxugENwIhaEIFIVikADFoQRoMGCBIISSUAqicBOUhpshEcpAWSgHDspDEtwCFeBWqAi3QSW4HSrDHVAFqkI1qA53Qg24C+6GmlAL7oHaUAfqQj24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDN4FJrDY9ACHoeW0ApaQxto+3+V/zL0gVegL/SDFOgPA+BVGAiDYDC8BkPgdRgKb8AweBOGwwgYCW/BKHgbRsM7MAbGwjgYDxNgIkyCyTAFpkIqvAvT4D2YDu/DDJgJs2A2pMEcmAsfwDyYDwvgQ1gIH8EiWAxLYCmkw8eQAcsgEz6B5fApZMEKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w2ewA3bCLtgNe2Av7IPPYT98AQfgS8iGr/6b+Wf/Q35PBAQUKFChwnyYD2MwBmMxFuMwDgtiQYxgBOMxHgthISyMhbEoFsUETMASWAINGiQkLIklMYpRLI2lMRETsSyWRYcOkzAJK+CtWBErYiWshJWxMlbBqlgVq2N1rIE18G6EKgHUwtpYG+tiXbwX78X7sAE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsZkTMYu2AW7Ylfsht2wO3bHHtgDe2Iv7IUv48v4Cr6C/bC26I8DcAAOxIEHcv8YXsPXcSi+gW/gmzgcR+BIfAvfwrdxNJ7BMTgWx+E4rCEm4iScjCSmYiqm4jSchtNxOs7AmTgTZ2MazsG5OBfn4Xycjx/iQvwIP8LFuBiXYjqmYwYuw0zMxOV4FrNwBa7EVbga1+BqXIfrcR1uxE24EbfgFtyG2/Az/Ax34k7cjbtxL+7Fz/Fz/AK/wOGYjdl4EA/iITyEh/Ew5mAOHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4AS/gRXwx4dtme8tsGA4ilxJK5BP5RIyIEbEiVsSJOFFQFBQRERHxIl4UEoVEYVFYFBVFRYJIECVECWGEESRCUVKUFFERFaVFaZEoEkVZUVY44USSSBIVRAVRUVQUlcTtorK4Q1QRVUUHV11UFzVER3e3qClqiVqitqgj6op6op6oL+qLBqKBaCgaikaikWgsHhJNRH8cjI+I3Mo0FyOwhRiJLUUr0Vq0EW/jE6KdGI3tRQfRUTwlxuIY7CzauWTxrOgiJmFX8byYjC+I7mIq9hAviZ6il+gtXhZ9RHvXV/QTM7C/GCBm40AxSAwWr4l5WEfkVqyueFMMFyPESPGWWIpvi9HiHTFGjBXjxHgxQUwUk8RkMUVMFaniXTFNvCemi/fFDDFTzBKzRZqYI+aKD8Q8MV8sEB+KheIjsUgsFkvEUpEuPhYZYpnIFJ+I5eJTkSVWiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9guPhM7xE6xS+wWe8ResU98LvaLL8QB8aXIFl+Jg+Iv4pD4WhwW34gc8a04Ir4TR8X34pj4QRwXP4oT4qQ4JX4Sp8XP4ow4K86J8+KC+EVcFJfEZeEFSJRCSqlkIPPJ/DJGFpCx8hoZJ6+VBeV1MiKvl/HyBllI3igLyyKyqCwmE2RxWUJqaaSVJENZUpaSUXmTLC1vlomyjCwry0kny8skeYusIG+VFeVtspK8XVaWd8gqsqqsJqvLO2UNeZe8W9aUteQ9srasI+vKevJeWV/eJxvI+2VD+YBsJB+UjeVDsol8WDaVj8hm8lHZXD4mW8jHZUvZSraWbWRb+YRsJ5+U7WUH2VE+JTvJp2Vn+YxMls/KLvI52VU+L7vJF2R3+aLsIV+SPWUv2Vtekpell31lP5ki+8sB8lU5UA6Sg+Vrcoh8XQ6Vb8hh8k05XI6QI+VbcpR8W46W78gxcqwcJ8fLCXKinCQnyylyqkyV78pp8j05Xb4vZ8iZcpacLdPkHDn4t5kW/Bfy3/sH+cN+ffZtcrv8TO6QO+UuuVvukXvlPrlP7pf75QF5QGbLbHlQHpSH5CF5WB6WOTJHHpFH5FF5VB6Tx+RxeVyekCflefmTPC1/lmfkWXlWnpcX5AV58befAShUQkmlVKDyqfwqRhVQseoaFaeuVQXVdSqirlfx6gZVSN2oCqsiqqgqphJUcVVCaWWUVaRCVVKVUlF1kyqtblaJqowqq8opp8qrJHXLv5z/R+trq9qqdqqdaq/aq46qo+qkOqnOqrNKVsmqi+qiuqquqpvqprqr7qqH6qF6qp6qt+qt+qg+qq/qq1JUihqgXlUD1SA1WL2mhqjX1VA1VA1Tw9RwNVyNVCPVKDVKjVaj1Rg1Ro1T49QENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Cl1Sp1Wp9UZdUadU+fUBXVBXVQX1WV1OfeyLxCBCFSggnxBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEoAMT2ICCMCgZlAqiwU1B6eDmIDEoE5QNygUuKB8kBbcEFYJbg4rBbUGl4PagcnBHUCWoGlQLqgd3BjWCu4K7g5pBreCeoHZQJ6gb1AvuDeoH9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo8EjQLHg2aB48FLYLHg5ZBq6B10CZo+6fO7/2ZIk+6vrqfTtH99QD9qh6oB+nB+jU9RL+uh+o39DD9ph6uR+iR+i09Sr+tR+t39Bg9Vo/T4/UEPVFP0pP1FD1Vp+p39TT9np6u39cz9Ew9S8/WaXqOnqs/0PP0fL1Af6gX6o/0Ir1YL9FLdbr+WGfoZTpTf6KX6091ll6hV+pVerVeo9fqdXq93qA36k16s96it+pterv+TO/QO/UuvVvv0Xv1Pv253q+/0Af0lzpbf6UP6r/oQ/prfVh/o3P0t/qI/k4f1d/rY/oHfVz/qE/ok/qU/kmf1j/rM/qsPqfP6wv6F31RX9KXtc+9uM99eTfKKJPP5DMxJsbEmlgTZ+JMQVPQREzExJt4U8gUMoVNYVPUFDUJJsGUMCVMLjJkSpqSJmqiprQpbRJNoilryhpnnEkySaaCqWAqmoqmkqlkKpvKpoqpYqqZauZOc6e5y9xlapqa5h5zj6lj6ph6pp6pb+qbBqaBaWgamkamkWlsGpsmpolpapqaZqaZaW6amxamhWlpWprWprVpa9qadqadaW/am46mo+lkOpnOprNJNsmmi+liupquppvpZrqb7qaH6WF6mp6mt+lt+pg+pq/pa1JMihlgBpiBZqAZbAabIWaIGWqGmmFmmBlfYVPN3JPTKDPKjDajzRgz1owz480EM9FMMpPNFDPVpJpUM81MM9PNdDPDzDCzzCyTZtLMXDPXzDPzzAKzwCw0C80is8gsMUtMukk3GSbDZJpMs9wsN1kmy6w0K81qs9qsNWvNerPebDQbzWaz2Ww1W812s93sMDvMLrPL7DF7zD6zz+w3+80Bc8Bkm+yY3w535rA5bHJMjjlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86ZC+YXc9FcMpeNNzFWQKy9xsbZa21Be52NsQXs38ZFbTGbYIvbElbbwrbI38XGWptoy9iytpx1trxNsrf8Lq5iq9pqtrq909awd9m7fxfXt/fZBvZ+29A+YOvZe/8ubmQftI3tY7aJfdw2ta1sM9vGNreP2Rb2cdvStrKtbRvbyT5tO9tnbLJ91naxz/0uzrDL7Hq7wW60m+x++4U9Z8/bo/Z7e8H+YvvafnaIfd0OtW/YYfZNO9yO+F08zo63E+xEO8lOtlPs1N/Fs+xsm2bn2Ln2AzvPzv9dnG4/tgttpl1kF9sldumvce6aMu0ndrn91GbZFXalXWVX2zV2rV3372tdZbfYrXab3Wc/tzvsTrvL7rZ77N5f49x9HLBf2mz7lT1iv7OH7Nf2sD1mc+y3v8a5+wP4wR63P9oT9qQ9ZX+yp+3P9ow9++v+c/f+k71kL1tvgZAESVIUUD7KTzFUgGLpGoqja6kgXUcRup7i6QYqRDdSYSpCRakYJVBxKkGaDFkiCqkklaIo3USl6WZKpDJUlsqRo/KURLdQBbqVKtJtVIlup8p0B1WhqlSNqtOdVIPuorupJtWie6g21aG6VI/upfp0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6kltaLW1Iba0hPUjp6k9tSBOtJT1Imeps70DCXTs9SFnqOu9Dx1oxeoO71IPegl6km9qDe9TH3oFepL/SiF+tMAepUG0iAaTK/REHqdhtIbNIzepOE0gkbSWzSK3qbR9A6NobE0jsbTBJpIk2gyTaGplErv0jR6j6bT+zSDZtIsmk1pNIfm0gc0j+bTAvqQFtJHtIgW0xJaSun0MWXQMsqkT2g5fUpZtIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+30Ge2gnbSLdtMe2kv76HPaT1/QAfqSsukrOkh/oUP0NR2mbyiHvqUj9B0dpe/pGP1Ax+lHOkEn6RT9RKfpZzpDZ+kcnacL9AtdpEt0mTxBiKEIZajCIMwX5g9jwgJhbHhNGBdeGxYMrwsj4fVhfHhDWCi8MSwcFgmLhsXChLB4WCLUoQltSGEYlgxLhdHwprB0eHOYGJYJy4blQheWD5PCW8IK4a1hxfC2sFJ4e1g5vCOsElYNH3ugenhnWCO8K7w7rBnWCu8Ja4d1wrphvfDesH54X9ggvD9sGD4QVgwfDBuHD4VNwofDpuEjYbPw0bB5+FjYInw8bBm2CluHbcK24RNhu/DJsH3YIewYPhV2Cp8OO4fPhMnhs2GX8Lk/HE8J+4cDwlfDV0Pv75dLokuj6dGPoxnRZdHM6CfR5dFPo1nRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W1R7+vlB4dOOOmUC1w+l9/FuAIu1l3j4ty1rqC7zkXc9S7e3eAKuRtdYVfEFXXFXIIr7ko47YyzjlzoSrpSLupucqXdzS7RlXFlXTnnXHmX5Nq4tq6ta+eedO1dB9fRPeWeck+7p90z7hn3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuiBvihrqhbpgb5oa74W6kG+lGuVFutBvtxrgxbpwb5ya4CW6Sm+SmuCku1aW6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl511q5N3ItMh7kemR9yMzIjMjsyKzI2mROZG5kQ8i8yLzIwsiH0YWRj6KLIosjiyJLI2kRz6OZESWRTIjn0SWRz6NZEVWRFZGVkVWR9ZEvC++I/QlfSkf9Tf50v5mn+jL+LK+nHe+vE/yt/gK/lZf0d/mK/nbfWV/h6/iq/pq/nHf0rfyrX0b39Y/4dv5J31738F39E/5Tv5p39k/45P9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2L/mh/jX/VD/hh/m3/TD/Qg/0r/lR/m3/Wj/jh/jx/pxfryf4Cf6SX6yn+Kn+lT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+8n/1PWv5/ifvpTPGGGOM/f8v9Q/G+/+D74nfWq4BAHDtzmI5fzsuAWBz4b/2B4mEThEAeLZfj0f+rdWunZKS8ttjsyQEpRYDQORK/q+XaL/FK6AjPA3J0AEq/MP1DRK9LtAfzB+9HSD2b3Ji/voxB/9h/lv/k/mfeGpcRuXwXPw/mX8xQGKpKzkF4Ep8Zf6K/8n8Rdr9wfoLfJ0K0P5vcuLgSnxl/iR4Ep6D5L97JGOMMcYYY4wx9leDRLVulHsihn9+Pk9QV3Lyw5X4j87njDHGGGOMMcYYu/pe6NX7mSeSkzt04w53uMOdf+9c7f9MjDHGGGOMsT/blYv+q70SxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs7/p/8XFiV3uPjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2fwIAAP//sN45jQ==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000006c0)={[], [{@fowner_gt}, {@obj_type={'obj_type', 0x3d, 'p\xd0E \a\xa3a|\xe72v\xf51\xf6b\xb2\t\xb8\'+b\b\xa5,\xfa|\xe5Q\v/\t\xbd\x15)\xe0\xb6H=\x1ee\x86\x01\x9f\xc9\xb1FN|\xb7\x85Y+\xe6.\x9e\xbb\x18l\x8c\xde\xe3\xba\xe9\xb9\xf4\xd5\xb9\xde\x0f\xec2\xcb\xb49\xc8M\x11\xa2\x0e\xdf\x94\xd0\x05w\x98\x8e\xbb\xa1\xa8`\xda\xf3\xaa)7\xd4\xeeN\xb6\xea\xf8\xe5\xc8\a\xac\xba\xd6w\x13\x15$~+'}}, {@fsname={'fsname', 0x3d, '\'(%!'}}, {@fowner_eq}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 11.110576544s ago: executing program 2 (id=807): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048810) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88d2cfe5e3ad3538}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0xb2fb, 0x100, 0xfffffffd, 0x4e}, &(0x7f0000001400)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, 0x0, r3, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = io_uring_setup(0x66a9, &(0x7f0000003040)={0x0, 0x3104, 0x1, 0xfffffffc, 0xf6}) r5 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r5, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) 9.170186884s ago: executing program 0 (id=809): socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) 7.930471592s ago: executing program 2 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) r6 = openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 6.855486072s ago: executing program 3 (id=811): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8dd, 0xc000, 0xa, 0x20002f4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000280)=[{r1, 0x414a}], 0x1, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5.334046582s ago: executing program 1 (id=812): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x3168, &(0x7f0000000000)={0x0, 0xcbe1, 0x100, 0x0, 0x2cd}, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x5, 0x8000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x42240, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000140)=0x5) 4.30016449s ago: executing program 3 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_procfs$userns(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.890402485s ago: executing program 0 (id=814): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) 2.888887256s ago: executing program 3 (id=815): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$FIONCLEX(r3, 0x5450) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32=r5, @ANYBLOB="200012800e0001006970366772657461700000000c0002800800010032"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 280.579137ms ago: executing program 3 (id=816): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "151122330edd66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566770400aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x32, 0x37, 0x32, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x32, 0xf]}, &(0x7f0000000740)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 228.824999ms ago: executing program 1 (id=817): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x1d, &(0x7f0000000680)}) 0s ago: executing program 3 (id=818): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000b, 0x12, r1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 76.783631][ T5766] cgroup: Unknown subsys name 'net' [ 76.920785][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.567123][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.630133][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.638831][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.646968][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.655730][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.664077][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.671606][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.724550][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.732762][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.787233][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.788360][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.802489][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.809961][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.809988][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.824780][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.825466][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.832969][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.839674][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.846797][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.855076][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.864616][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.875830][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.876466][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.883180][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.896444][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.321698][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.458866][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 81.471014][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.479146][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.486986][ T5778] bridge_slave_0: entered allmulticast mode [ 81.494305][ T5778] bridge_slave_0: entered promiscuous mode [ 81.510434][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 81.534616][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.542452][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.551053][ T5778] bridge_slave_1: entered allmulticast mode [ 81.558612][ T5778] bridge_slave_1: entered promiscuous mode [ 81.581701][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 81.609283][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.649241][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.749844][ T5778] team0: Port device team_slave_0 added [ 81.759557][ T5778] team0: Port device team_slave_1 added [ 81.829485][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.836853][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.844378][ T5782] bridge_slave_0: entered allmulticast mode [ 81.851230][ T5782] bridge_slave_0: entered promiscuous mode [ 81.869537][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.876871][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.884407][ T5784] bridge_slave_0: entered allmulticast mode [ 81.891285][ T5784] bridge_slave_0: entered promiscuous mode [ 81.901327][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.908887][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.916500][ T5784] bridge_slave_1: entered allmulticast mode [ 81.923484][ T5784] bridge_slave_1: entered promiscuous mode [ 81.931163][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.938538][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.946111][ T5783] bridge_slave_0: entered allmulticast mode [ 81.952944][ T5783] bridge_slave_0: entered promiscuous mode [ 81.960964][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.970756][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.978019][ T5782] bridge_slave_1: entered allmulticast mode [ 81.986220][ T5782] bridge_slave_1: entered promiscuous mode [ 81.993566][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.000759][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.029423][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.052002][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.059210][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.069323][ T5783] bridge_slave_1: entered allmulticast mode [ 82.076327][ T5783] bridge_slave_1: entered promiscuous mode [ 82.090843][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.097904][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.124109][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.164395][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.186544][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.198859][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.222325][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.234473][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.285020][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.331321][ T5784] team0: Port device team_slave_0 added [ 82.342700][ T5778] hsr_slave_0: entered promiscuous mode [ 82.349744][ T5778] hsr_slave_1: entered promiscuous mode [ 82.369799][ T5782] team0: Port device team_slave_0 added [ 82.379755][ T5782] team0: Port device team_slave_1 added [ 82.388028][ T5784] team0: Port device team_slave_1 added [ 82.408066][ T5783] team0: Port device team_slave_0 added [ 82.417487][ T5783] team0: Port device team_slave_1 added [ 82.490219][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.497258][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.526269][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.550564][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.558140][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.584569][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.603183][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.610239][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.636476][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.649567][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.656961][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.683092][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.694853][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.701870][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.731892][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.743320][ T5780] Bluetooth: hci0: command tx timeout [ 82.745491][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.756124][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.782553][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.858214][ T5784] hsr_slave_0: entered promiscuous mode [ 82.864961][ T5784] hsr_slave_1: entered promiscuous mode [ 82.871094][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.879321][ T5784] Cannot create hsr debugfs directory [ 82.921548][ T5782] hsr_slave_0: entered promiscuous mode [ 82.928027][ T5782] hsr_slave_1: entered promiscuous mode [ 82.937301][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.944350][ T5788] Bluetooth: hci2: command tx timeout [ 82.945841][ T5792] Bluetooth: hci3: command tx timeout [ 82.950868][ T5782] Cannot create hsr debugfs directory [ 82.956849][ T5780] Bluetooth: hci1: command tx timeout [ 83.029490][ T5783] hsr_slave_0: entered promiscuous mode [ 83.036183][ T5783] hsr_slave_1: entered promiscuous mode [ 83.042544][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.050895][ T5783] Cannot create hsr debugfs directory [ 83.387552][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.412568][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.426985][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.481606][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.530961][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.550146][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.579282][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.589190][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.678184][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.696111][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.707705][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.719840][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.852396][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.868142][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.885494][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.898769][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.924485][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.997702][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.032127][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.039593][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.073128][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.080561][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.117068][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.159866][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.172343][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.213599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.220783][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.242064][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.249240][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.271785][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.289106][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.320825][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.328195][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.367885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.375134][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.389586][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.462622][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.469985][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.506645][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.513855][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.795175][ T5780] Bluetooth: hci0: command tx timeout [ 84.810977][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.981312][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.011438][ T5778] veth0_vlan: entered promiscuous mode [ 85.026224][ T5780] Bluetooth: hci1: command tx timeout [ 85.035467][ T5792] Bluetooth: hci3: command tx timeout [ 85.035628][ T5788] Bluetooth: hci2: command tx timeout [ 85.080247][ T5778] veth1_vlan: entered promiscuous mode [ 85.173582][ T5784] veth0_vlan: entered promiscuous mode [ 85.188767][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.220395][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.228682][ T5784] veth1_vlan: entered promiscuous mode [ 85.256602][ T5778] veth0_macvtap: entered promiscuous mode [ 85.296501][ T5782] veth0_vlan: entered promiscuous mode [ 85.321357][ T5778] veth1_macvtap: entered promiscuous mode [ 85.333434][ T5782] veth1_vlan: entered promiscuous mode [ 85.365141][ T5784] veth0_macvtap: entered promiscuous mode [ 85.378001][ T5784] veth1_macvtap: entered promiscuous mode [ 85.423123][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.447610][ T5783] veth0_vlan: entered promiscuous mode [ 85.463380][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.481055][ T5783] veth1_vlan: entered promiscuous mode [ 85.500021][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.509502][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.518768][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.527991][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.541810][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.552868][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.564614][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.586691][ T5782] veth0_macvtap: entered promiscuous mode [ 85.605878][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.616724][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.628789][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.649043][ T5782] veth1_macvtap: entered promiscuous mode [ 85.686313][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.697960][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.707961][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.721546][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.734136][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.743452][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.756781][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.767662][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.776676][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.799499][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.815391][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.826362][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.837592][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.848939][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.881230][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.890667][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.899504][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.910681][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.959587][ T5783] veth0_macvtap: entered promiscuous mode [ 85.978403][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.996711][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.006682][ T5783] veth1_macvtap: entered promiscuous mode [ 86.108791][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.113068][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.135785][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.136607][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.167592][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.178595][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.189562][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.200207][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.211466][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.222928][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.235714][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.276895][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.293033][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.304622][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.316666][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.327051][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.337673][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.349719][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.368645][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.383349][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393898][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.403162][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.431442][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.455160][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.500512][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.527553][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.551210][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.572781][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.864107][ T5788] Bluetooth: hci0: command tx timeout [ 86.943322][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.157426][ T5788] Bluetooth: hci1: command tx timeout [ 87.163063][ T5788] Bluetooth: hci3: command tx timeout [ 87.171169][ T5788] Bluetooth: hci2: command tx timeout [ 87.580355][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.363238][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.449636][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.589428][ T5860] syz.2.3[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.661481][ T5860] loop2: detected capacity change from 0 to 512 [ 88.726159][ T5860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.738749][ T5860] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.943783][ T5780] Bluetooth: hci0: command tx timeout [ 89.185813][ T5780] Bluetooth: hci2: command tx timeout [ 89.191746][ T5788] Bluetooth: hci3: command tx timeout [ 89.202023][ T5780] Bluetooth: hci1: command tx timeout [ 89.560132][ T5860] EXT4-fs (loop2): 1 truncate cleaned up [ 89.600450][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.795000][ T5860] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 89.985912][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7'. [ 90.031209][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.727986][ T5886] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 92.735690][ T5886] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'. [ 93.924073][ T788] cfg80211: failed to load regulatory.db [ 95.759937][ T5897] loop1: detected capacity change from 0 to 1024 [ 95.773825][ T5897] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.517285][ T5897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.881868][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.312789][ T5903] loop1: detected capacity change from 0 to 128 [ 97.355493][ T5903] ext4: Unknown parameter 'fsname' [ 97.434108][ T5779] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.750947][ T5908] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:255": -EINTR [ 100.374140][ T5912] ======================================================= [ 100.374140][ T5912] WARNING: The mand mount option has been deprecated and [ 100.374140][ T5912] and is ignored by this kernel. Remove the mand [ 100.374140][ T5912] option from the mount to silence this warning. [ 100.374140][ T5912] ======================================================= [ 102.466466][ T5922] loop2: detected capacity change from 0 to 164 [ 103.845032][ T5928] netlink: set zone limit has 8 unknown bytes [ 105.394055][ T55] IPVS: starting estimator thread 0... [ 105.544000][ T5936] IPVS: using max 15 ests per chain, 36000 per kthread [ 106.347801][ T5938] loop2: detected capacity change from 0 to 128 [ 106.684609][ T5938] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 106.735311][ T5938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.204935][ T27] audit: type=1800 audit(1790124495.089:2): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 107.820659][ T27] audit: type=1400 audit(1790124495.739:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=5948 comm="syz.0.27" [ 108.843815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 110.835927][ T27] audit: type=1800 audit(1790124498.989:4): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20" name="addr_trtype" dev="configfs" ino=7348 res=0 errno=0 [ 110.895912][ T5965] nvmet_tcp: address family 255 not supported [ 111.688756][ T27] audit: type=1800 audit(1790124499.029:5): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20" name="addr_traddr" dev="configfs" ino=7349 res=0 errno=0 [ 113.583284][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.534529][ T5822] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.551200][ T5996] loop0: detected capacity change from 0 to 2048 [ 117.730756][ T5996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.764893][ T5822] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 117.806134][ T5822] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 117.823711][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.843696][ T5822] usb 2-1: Product: syz [ 117.849679][ T5822] usb 2-1: Manufacturer: syz [ 117.910755][ T5822] usb 2-1: SerialNumber: syz [ 118.733900][ T5822] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 118.742686][ T5822] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 118.750158][ T5822] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 118.758153][ T5822] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 118.858285][ T6001] loop1: detected capacity change from 0 to 16 [ 118.894214][ T5822] usb 2-1: USB disconnect, device number 2 [ 118.921562][ T6001] erofs: (device loop1): mounted with root inode @ nid 36. [ 119.148733][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.621888][ T6007] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 119.636269][ T6007] syz.1.38: attempt to access beyond end of device [ 119.636269][ T6007] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 119.849903][ T6007] syz.1.38 (6007) used greatest stack depth: 20872 bytes left [ 119.913888][ T27] audit: type=1800 audit(1790124507.999:6): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.38" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 120.454099][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.673753][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 120.706089][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.733711][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.774068][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.803756][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.840084][ T23] usb 2-1: config 0 descriptor?? [ 120.867699][ T23] hub 2-1:0.0: USB hub found [ 121.206079][ T6020] netlink: set zone limit has 8 unknown bytes [ 121.881272][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.894554][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.919458][ T23] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 121.991952][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 122.007153][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 122.057618][ T23] usb 2-1: USB disconnect, device number 3 [ 122.064988][ T5999] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 122.424686][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.770742][ T6027] netlink: 'syz.2.44': attribute type 3 has an invalid length. [ 124.341993][ T6042] netlink: 'syz.1.55': attribute type 3 has an invalid length. [ 124.564322][ T6044] loop2: detected capacity change from 0 to 1024 [ 124.578396][ T6044] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.255730][ T6044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.565439][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.961914][ T6050] netlink: 'syz.1.57': attribute type 3 has an invalid length. [ 126.974100][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.213031][ T5822] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 127.418904][ T5822] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 127.479643][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.504017][ T5822] usb 3-1: Product: syz [ 127.508265][ T5822] usb 3-1: Manufacturer: syz [ 127.530665][ T5822] usb 3-1: SerialNumber: syz [ 127.817742][ T6058] loop3: detected capacity change from 0 to 16 [ 127.854343][ T6058] erofs: (device loop3): mounted with root inode @ nid 36. [ 128.470226][ T6060] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 128.481646][ T6060] syz.3.49: attempt to access beyond end of device [ 128.481646][ T6060] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 128.513888][ T6060] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 128.534072][ T6060] syz.3.49: attempt to access beyond end of device [ 128.534072][ T6060] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 128.564450][ T6060] syz.3.49: attempt to access beyond end of device [ 128.564450][ T6060] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 128.580742][ T27] audit: type=1800 audit(1790124516.729:7): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.49" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 128.688425][ T6060] syz.3.49 (6060) used greatest stack depth: 19080 bytes left [ 129.371005][ T6069] loop1: detected capacity change from 0 to 512 [ 130.147072][ T5822] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 130.204139][ T5822] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 130.273346][ T5822] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 130.315060][ T5822] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 130.373067][ T6072] loop2: detected capacity change from 0 to 2048 [ 130.444870][ T5822] usb 3-1: USB disconnect, device number 2 [ 130.501116][ T6072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.723790][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.479366][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.525872][ T6069] EXT4-fs (loop1): Test dummy encryption mode enabled [ 131.533789][ T6069] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.547290][ T6069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.690929][ T6069] EXT4-fs (loop1): 1 truncate cleaned up [ 131.698229][ T6069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.756663][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 131.784410][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.584671][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.595416][ T55] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.606349][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.627964][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.635327][ T55] usb 1-1: config 0 descriptor?? [ 132.664819][ T55] hub 1-1:0.0: USB hub found [ 133.040296][ T6099] netlink: 'syz.3.60': attribute type 3 has an invalid length. [ 133.119431][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127297][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.493656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.733670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.763661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.833661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 133.933673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.053668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.173669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.413657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.454061][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.462893][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.190369][ T6080] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 135.542258][ T55] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 135.597906][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 135.633758][ T55] usbhid: probe of 1-1:0.0 failed with error -71 [ 135.666267][ T6111] loop0: detected capacity change from 0 to 16 [ 135.688377][ T55] usb 1-1: USB disconnect, device number 2 [ 135.701983][ T6111] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.204429][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.264751][ T6116] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 136.275676][ T6116] syz.0.63: attempt to access beyond end of device [ 136.275676][ T6116] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 136.327918][ T6116] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 136.338217][ T6116] syz.0.63: attempt to access beyond end of device [ 136.338217][ T6116] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 136.356512][ T6116] syz.0.63: attempt to access beyond end of device [ 136.356512][ T6116] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 136.391914][ T27] audit: type=1800 audit(1790124524.519:8): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.63" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 138.603624][ C0] sched: RT throttling activated [ 138.653744][ T55] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.013948][ T55] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 139.037716][ T55] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 139.052973][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.071309][ T55] usb 1-1: Product: syz [ 139.079111][ T55] usb 1-1: Manufacturer: syz [ 139.095508][ T55] usb 1-1: SerialNumber: syz [ 139.230921][ T6135] loop3: detected capacity change from 0 to 1024 [ 139.243693][ T6135] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.247373][ T55] usb 1-1: can't set config #1, error -71 [ 140.326665][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.482846][ T55] usb 1-1: USB disconnect, device number 3 [ 141.076445][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.086118][ T6144] loop0: detected capacity change from 0 to 512 [ 141.113293][ T6144] EXT4-fs (loop0): Test dummy encryption mode enabled [ 141.120309][ T6144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.173452][ T6144] EXT4-fs (loop0): 1 truncate cleaned up [ 141.180934][ T6144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.590424][ T6152] loop2: detected capacity change from 0 to 16 [ 141.598356][ T6150] netlink: 'syz.3.70': attribute type 3 has an invalid length. [ 141.755604][ T6152] erofs: (device loop2): mounted with root inode @ nid 36. [ 142.030037][ T6156] netlink: set zone limit has 8 unknown bytes [ 142.411406][ T6159] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 142.422088][ T6159] syz.2.74: attempt to access beyond end of device [ 142.422088][ T6159] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 142.754575][ T27] audit: type=1800 audit(1790124530.769:9): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.74" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 142.805311][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.944592][ T6168] team0 (unregistering): Port device team_slave_0 removed [ 144.063526][ T6168] team0 (unregistering): Port device team_slave_1 removed [ 146.307241][ T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.776175][ T55] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 146.801716][ T55] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 146.821381][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.830894][ T55] usb 4-1: Product: syz [ 146.835957][ T55] usb 4-1: Manufacturer: syz [ 146.840718][ T55] usb 4-1: SerialNumber: syz [ 146.975210][ T6193] loop0: detected capacity change from 0 to 1024 [ 146.987567][ T6193] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.095311][ T6193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.553958][ T55] usb 4-1: can't set config #1, error -71 [ 147.570787][ T55] usb 4-1: USB disconnect, device number 2 [ 147.591053][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.013859][ T6214] netlink: set zone limit has 8 unknown bytes [ 150.070606][ T6213] netlink: 'syz.2.87': attribute type 3 has an invalid length. [ 153.380047][ T27] audit: type=1400 audit(1790124541.489:10): apparmor="STATUS" operation="profile_replace" profile="unconfined" name=223A6F pid=6226 comm="syz.1.93" [ 155.552072][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.560918][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.569472][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.577990][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.586426][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.594845][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.603216][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.611639][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.620050][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.628473][ T6241] tc action pedit unable to extract header offset for header type (0x5) [ 155.636987][ T6241] 0: reclassify loop, rule prio 0, protocol 800 [ 156.020651][ T6247] loop1: detected capacity change from 0 to 128 [ 157.583938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 157.923271][ T6247] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.944772][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.023469][ T27] audit: type=1800 audit(1790124546.169:11): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 161.203828][ T27] audit: type=1400 audit(1790124549.269:12): apparmor="STATUS" operation="profile_replace" profile="unconfined" name=223A6F pid=6262 comm="syz.2.107" [ 163.215921][ T6276] netlink: 'syz.0.101': attribute type 3 has an invalid length. [ 164.058000][ T6279] loop0: detected capacity change from 0 to 256 [ 166.031799][ T6284] hub 8-0:1.0: USB hub found [ 166.039265][ T6284] hub 8-0:1.0: 1 port detected [ 170.864827][ T6302] syzkaller0: entered promiscuous mode [ 170.870400][ T6302] syzkaller0: entered allmulticast mode [ 170.924525][ T6302] tipc: Started in network mode [ 170.929793][ T6302] tipc: Node identity 3a676567b8cd, cluster identity 4711 [ 170.945374][ T6302] tipc: Enabled bearer , priority 0 [ 170.994557][ T6302] tipc: Resetting bearer [ 171.034078][ T6301] tipc: Resetting bearer [ 171.101296][ T6301] tipc: Disabling bearer [ 172.449287][ T6327] loop2: detected capacity change from 0 to 1024 [ 174.019791][ T5780] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 174.225087][ T6347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'. [ 174.239909][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'. [ 177.251062][ T6359] loop3: detected capacity change from 0 to 512 [ 178.685548][ T6362] ima: policy update failed [ 179.004626][ T27] audit: type=1802 audit(1790124566.839:13): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.132" res=0 errno=0 [ 179.143446][ T6367] loop0: detected capacity change from 0 to 512 [ 179.201528][ T6367] EXT4-fs (loop0): 1 truncate cleaned up [ 179.230428][ T6367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.191914][ T6369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 181.137573][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.329908][ T6385] loop2: detected capacity change from 0 to 1024 [ 181.616213][ T6387] Zero length message leads to an empty skb [ 183.404407][ T6401] xt_policy: output policy not valid in PREROUTING and INPUT [ 188.530081][ T6417] hub 8-0:1.0: USB hub found [ 188.537166][ T6417] hub 8-0:1.0: 1 port detected [ 190.120815][ T6422] md: loop0 has zero or unknown size, marking faulty! [ 190.134182][ T6422] md: error, md_import_device() returned -22 [ 191.987495][ T27] audit: type=1800 audit(1790124580.139:14): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.141" name="addr_trtype" dev="configfs" ino=8024 res=0 errno=0 [ 192.032181][ T6429] nvmet_tcp: address family 255 not supported [ 192.240403][ T27] audit: type=1800 audit(1790124580.169:15): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.141" name="addr_traddr" dev="configfs" ino=8025 res=0 errno=0 [ 193.045314][ T6433] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 193.088457][ T6433] netlink: 84 bytes leftover after parsing attributes in process `syz.2.142'. [ 194.575105][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.581506][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.956491][ T6450] loop0: detected capacity change from 0 to 512 [ 196.975781][ T6450] EXT4-fs (loop0): Test dummy encryption mode enabled [ 196.982618][ T6450] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.148359][ T6450] EXT4-fs (loop0): 1 truncate cleaned up [ 197.155697][ T6450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.592398][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.644508][ T6469] netlink: 165 bytes leftover after parsing attributes in process `syz.3.160'. [ 201.734431][ T6479] hub 8-0:1.0: USB hub found [ 201.740245][ T6479] hub 8-0:1.0: 1 port detected [ 203.327855][ T6487] syzkaller0: entered promiscuous mode [ 203.382262][ T6487] syzkaller0: entered allmulticast mode [ 203.523536][ T6489] tipc: Started in network mode [ 203.589944][ T6489] tipc: Node identity 02b111213474, cluster identity 4711 [ 203.745917][ T6489] tipc: Enabled bearer , priority 0 [ 203.825446][ T6487] tipc: Resetting bearer [ 203.870089][ T6486] tipc: Resetting bearer [ 203.944759][ T6486] tipc: Disabling bearer [ 204.074268][ T6493] loop1: detected capacity change from 0 to 128 [ 204.104193][ T6493] EXT4-fs (loop1): Test dummy encryption mode enabled [ 204.138226][ T6493] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.168304][ T6493] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.520505][ T6493] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 205.781788][ T6510] loop2: detected capacity change from 0 to 512 [ 206.021886][ T6510] EXT4-fs (loop2): Test dummy encryption mode enabled [ 206.028858][ T6510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.051967][ T6510] EXT4-fs (loop2): 1 truncate cleaned up [ 206.059439][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.104354][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.230403][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.354267][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.360717][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.366963][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.372727][ T6519] loop1: detected capacity change from 0 to 512 [ 206.373074][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.385562][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.391669][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.398479][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.404640][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.410764][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.416933][ T6517] tc action pedit 'at' offset 5 out of bounds [ 206.423059][ T6517] 0: reclassify loop, rule prio 0, protocol 800 [ 206.458772][ T6519] EXT4-fs (loop1): 1 truncate cleaned up [ 206.499340][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.713385][ T6523] loop2: detected capacity change from 0 to 512 [ 206.740214][ T6523] EXT4-fs: Ignoring removed i_version option [ 206.804246][ T6523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.860487][ T6523] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.107719][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 207.113987][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 207.120431][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 207.979094][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.033077][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.171543][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.177'. [ 210.186214][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 213.945544][ T6560] loop3: detected capacity change from 0 to 1024 [ 213.984253][ T6560] EXT4-fs: Ignoring removed oldalloc option [ 214.004122][ T6560] EXT4-fs: Ignoring removed orlov option [ 214.136304][ T6560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.193759][ T6560] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.525995][ T6566] mmap: syz.3.184 (6566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.893723][ T27] audit: type=1800 audit(1790124603.039:16): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.184" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 215.171786][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 215.347158][ T6570] loop0: detected capacity change from 0 to 512 [ 215.365912][ T6570] ext2: Unknown parameter 'noacl' [ 217.942358][ T6589] loop2: detected capacity change from 0 to 164 [ 218.100672][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'. [ 218.114062][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 222.098480][ T6609] xt_policy: output policy not valid in PREROUTING and INPUT [ 224.578918][ T6620] hub 8-0:1.0: USB hub found [ 224.585099][ T6620] hub 8-0:1.0: 1 port detected [ 234.997605][ T6659] loop2: detected capacity change from 0 to 256 [ 235.034758][ T6659] FAT-fs (loop2): Directory bread(block 1285) failed [ 235.041793][ T6659] FAT-fs (loop2): Directory bread(block 1286) failed [ 235.069092][ T6659] FAT-fs (loop2): Directory bread(block 1287) failed [ 235.089266][ T6659] FAT-fs (loop2): Directory bread(block 1288) failed [ 236.374519][ T6666] syzkaller0: entered promiscuous mode [ 236.406697][ T6666] syzkaller0: entered allmulticast mode [ 236.420673][ T6666] tipc: Started in network mode [ 236.425852][ T6666] tipc: Node identity 8a1f164f31e2, cluster identity 4711 [ 236.435023][ T6666] tipc: Enabled bearer , priority 0 [ 236.450830][ T6666] tipc: Resetting bearer [ 236.489830][ T6665] tipc: Resetting bearer [ 236.548892][ T6668] loop0: detected capacity change from 0 to 512 [ 236.640608][ T6668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.651859][ T6665] tipc: Disabling bearer [ 236.815612][ T6668] EXT4-fs (loop0): 1 truncate cleaned up [ 236.828807][ T6668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.130199][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.616785][ T6723] Bluetooth: MGMT ver 1.22 [ 248.559650][ T6725] netlink: 165 bytes leftover after parsing attributes in process `syz.1.226'. [ 252.312151][ T6741] loop0: detected capacity change from 0 to 32768 [ 252.801560][ T6741] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 252.903319][ T6741] XFS (loop0): Ending clean mount [ 252.923369][ T6741] XFS (loop0): Quotacheck needed: Please wait. [ 253.054132][ T6741] XFS (loop0): Quotacheck: Done. [ 253.543742][ T27] audit: type=1800 audit(1790124641.669:17): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.227" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 253.800846][ T6758] random: crng reseeded on system resumption [ 253.882858][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 255.951128][ T6764] hub 8-0:1.0: USB hub found [ 255.957116][ T6764] hub 8-0:1.0: 1 port detected [ 256.796910][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.803256][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.399875][ T6769] loop1: detected capacity change from 0 to 2048 [ 257.446159][ T6769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.194998][ T6778] team_slave_0: entered promiscuous mode [ 259.200987][ T6778] team_slave_1: entered promiscuous mode [ 259.236908][ T6778] vlan2: entered promiscuous mode [ 259.242012][ T6778] team0: entered promiscuous mode [ 262.248946][ T6798] xt_policy: output policy not valid in PREROUTING and INPUT [ 262.886564][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 262.899350][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 265.067517][ T6813] loop0: detected capacity change from 0 to 8 [ 265.083435][ T6813] squashfs: Unknown parameter 't' [ 266.182306][ T6815] loop0: detected capacity change from 0 to 4096 [ 266.209817][ T6815] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.280581][ T6815] EXT4-fs (loop0): Test dummy encryption mode enabled [ 268.282752][ T6815] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 268.283097][ T6815] EXT4-fs: failed to create workqueue [ 268.319104][ T6815] EXT4-fs (loop0): mount failed [ 268.531503][ T6822] loop3: detected capacity change from 0 to 2048 [ 268.610078][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.743801][ T6825] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 271.802879][ T6851] loop1: detected capacity change from 0 to 512 [ 271.813746][ T6851] EXT4-fs (loop1): Test dummy encryption mode enabled [ 271.820663][ T6851] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 271.876620][ T6851] EXT4-fs (loop1): 1 truncate cleaned up [ 271.883957][ T6851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.789373][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.459432][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.924146][ T6874] syzkaller0: entered promiscuous mode [ 278.931128][ T6874] syzkaller0: entered allmulticast mode [ 279.043973][ T6874] tipc: Started in network mode [ 279.048927][ T6874] tipc: Node identity 92bd3bf69b36, cluster identity 4711 [ 279.104263][ T6874] tipc: Enabled bearer , priority 0 [ 279.164532][ T6874] tipc: Resetting bearer [ 279.205147][ T6873] tipc: Resetting bearer [ 279.277365][ T6873] tipc: Disabling bearer [ 279.552696][ T6878] loop1: detected capacity change from 0 to 512 [ 279.595523][ T6878] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.775251][ T6878] EXT4-fs (loop1): 1 truncate cleaned up [ 279.821923][ T6878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.405925][ T6899] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 283.501797][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.162635][ T6907] loop0: detected capacity change from 0 to 512 [ 284.175689][ T6907] EXT4-fs (loop0): Test dummy encryption mode enabled [ 284.182517][ T6907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 284.205258][ T6907] EXT4-fs (loop0): 1 truncate cleaned up [ 284.212369][ T6907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.918611][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.991236][ T6942] bridge_slave_0: left allmulticast mode [ 293.043634][ T6942] bridge_slave_0: left promiscuous mode [ 293.050979][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.120235][ T6942] bridge_slave_1: left allmulticast mode [ 293.150942][ T6942] bridge_slave_1: left promiscuous mode [ 293.179530][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.256378][ T6942] bond0: (slave bond_slave_0): Releasing backup interface [ 293.333949][ T6942] bond0: (slave bond_slave_1): Releasing backup interface [ 293.367930][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.703745][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.743888][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.863935][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.561646][ T6968] loop1: detected capacity change from 0 to 512 [ 298.590644][ T6968] EXT4-fs (loop1): Test dummy encryption mode enabled [ 298.597666][ T6968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.820341][ T6968] EXT4-fs (loop1): 1 truncate cleaned up [ 298.833456][ T6968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.485398][ T6975] loop2: detected capacity change from 0 to 8 [ 299.492697][ T6975] squashfs: Unknown parameter 't' [ 299.692255][ T6693] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.463490][ T6975] loop2: detected capacity change from 0 to 4096 [ 300.477821][ T6975] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.501471][ T6975] EXT4-fs (loop2): Test dummy encryption mode enabled [ 300.524715][ T6975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.316415][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.446051][ T6985] vlan0: entered allmulticast mode [ 301.498283][ T6985] bond0: entered allmulticast mode [ 302.685351][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.565568][ T7031] hub 8-0:1.0: USB hub found [ 307.571255][ T7031] hub 8-0:1.0: 1 port detected [ 308.893943][ T7036] syzkaller0: entered promiscuous mode [ 308.908057][ T7036] syzkaller0: entered allmulticast mode [ 308.995063][ T7044] loop1: detected capacity change from 0 to 128 [ 309.045003][ T7044] FAT-fs (loop1): Directory bread(block 414) failed [ 309.051777][ T7044] FAT-fs (loop1): Directory bread(block 415) failed [ 309.058600][ T7044] FAT-fs (loop1): Directory bread(block 416) failed [ 309.065422][ T7044] FAT-fs (loop1): Directory bread(block 417) failed [ 309.072141][ T7044] FAT-fs (loop1): Directory bread(block 418) failed [ 309.078951][ T7044] FAT-fs (loop1): Directory bread(block 419) failed [ 309.085749][ T7044] FAT-fs (loop1): Directory bread(block 420) failed [ 309.092482][ T7044] FAT-fs (loop1): Directory bread(block 421) failed [ 309.544970][ T7036] simple: /dev/video#_0 [ 309.549516][ T7036] simple: /dev/video#_0 [ 309.553907][ T7036] simple: /dev/video#_0 [ 309.558134][ T7036] simple: /dev/video#_0 [ 309.562315][ T7036] simple: /dev/video#_0 [ 309.566553][ T7036] simple: /dev/video#_0 [ 309.570733][ T7036] simple: /dev/video#_0 [ 309.574965][ T7036] simple: /dev/video#_0 [ 309.579152][ T7036] simple: /dev/video#_0 [ 309.583343][ T7036] simple: /dev/video#_0 [ 309.587576][ T7036] simple: /dev/video#_0 [ 309.591758][ T7036] simple: /dev/video#_0 [ 309.595978][ T7036] simple: /dev/video#_0 [ 309.600251][ T7036] simple: /dev/video#_0 [ 309.604481][ T7036] simple: /dev/video#_0 [ 309.608661][ T7036] simple: /dev/video#_0 [ 309.612838][ T7036] simple: /dev/video#_0 [ 309.617065][ T7036] simple: /dev/video#_0 [ 309.621251][ T7036] simple: /dev/video#_0 [ 309.625476][ T7036] simple: /dev/video#_0 [ 309.629653][ T7036] simple: /dev/video#_0 [ 309.633870][ T7036] simple: /dev/video#_0 [ 309.638060][ T7036] simple: /dev/video#_0 [ 309.642248][ T7036] simple: /dev/video#_0 [ 309.646473][ T7036] simple: /dev/video#_0 [ 309.650656][ T7036] simple: /dev/video#_0 [ 309.654903][ T7036] simple: /dev/video#_0 [ 309.659093][ T7036] simple: /dev/video#_0 [ 309.663282][ T7036] simple: /dev/video#_0 [ 309.667535][ T7036] simple: /dev/video#_0 [ 309.671719][ T7036] simple: /dev/video#_0 [ 309.675965][ T7036] simple: /dev/video#_0 [ 309.680159][ T7036] TC_ACT_REPEAT abuse ? [ 309.714171][ T7045] syzkaller0: entered promiscuous mode [ 309.719866][ T7045] syzkaller0: entered allmulticast mode [ 309.821351][ T7039] simple: /dev/video#_1 [ 309.825976][ T7039] simple: /dev/video#_2 [ 309.830182][ T7039] simple: /dev/video#_3 [ 309.834447][ T7039] simple: /dev/video#_4 [ 309.838644][ T7039] simple: /dev/video#_5 [ 309.842836][ T7039] simple: /dev/video#_6 [ 309.847082][ T7039] simple: /dev/video#_7 [ 309.851289][ T7039] simple: /dev/video#_8 [ 309.855533][ T7039] simple: /dev/video#_9 [ 309.859729][ T7039] simple: /dev/video#_10 [ 309.864061][ T7039] simple: /dev/video#_11 [ 309.868342][ T7039] simple: /dev/video#_12 [ 309.872623][ T7039] simple: /dev/video#_13 [ 309.876948][ T7039] simple: /dev/video#_14 [ 309.881245][ T7039] simple: /dev/video#_15 [ 309.885643][ T7039] simple: /dev/video#_16 [ 309.889923][ T7039] simple: /dev/video#_17 [ 309.894255][ T7039] simple: /dev/video#_18 [ 309.898538][ T7039] simple: /dev/video#_19 [ 309.902807][ T7039] simple: /dev/video#_20 [ 309.907135][ T7039] simple: /dev/video#_21 [ 309.911410][ T7039] simple: /dev/video#_22 [ 309.915739][ T7039] simple: /dev/video#_23 [ 309.920009][ T7039] simple: /dev/video#_24 [ 309.924339][ T7039] simple: /dev/video#_25 [ 309.928615][ T7039] simple: /dev/video#_26 [ 309.932885][ T7039] simple: /dev/video#_27 [ 309.937258][ T7039] simple: /dev/video#_28 [ 309.941537][ T7039] simple: /dev/video#_29 [ 309.945876][ T7039] simple: /dev/video#_30 [ 309.950141][ T7039] simple: /dev/video#_31 [ 309.954476][ T7039] simple: /dev/video#_32 [ 309.958751][ T7039] TC_ACT_REPEAT abuse ? [ 310.316154][ T7054] UBIFS error (pid: 7054): cannot open "(null)", error -22 [ 317.238352][ T7092] loop3: detected capacity change from 0 to 8 [ 317.352197][ T7092] squashfs: Unknown parameter 't' [ 317.426821][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.433418][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.688861][ T7092] loop3: detected capacity change from 0 to 4096 [ 317.725076][ T7092] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.825942][ T7092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 317.919975][ T7092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.592699][ T5826] Process accounting resumed [ 319.941841][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.980409][ T7114] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 321.536887][ T7125] loop1: detected capacity change from 0 to 32768 [ 321.921855][ T7125] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.140131][ T7125] XFS (loop1): Ending clean mount [ 322.175173][ T7125] XFS (loop1): Quotacheck needed: Please wait. [ 322.240040][ T7125] XFS (loop1): Quotacheck: Done. [ 322.655935][ T27] audit: type=1800 audit(1790124710.799:18): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.323" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 323.191221][ T7147] netlink: 'syz.2.316': attribute type 10 has an invalid length. [ 323.313820][ T7147] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 323.327771][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.664905][ T7152] syzkaller0: entered promiscuous mode [ 323.670459][ T7152] syzkaller0: entered allmulticast mode [ 323.729184][ T7152] tipc: Enabled bearer , priority 0 [ 325.224299][ T7152] tipc: Resetting bearer [ 325.237910][ T55] tipc: Node number set to 2192205159 [ 325.275540][ T7151] tipc: Resetting bearer [ 325.305042][ T7151] tipc: Disabling bearer [ 326.132695][ T7166] hub 8-0:1.0: USB hub found [ 326.142530][ T7166] hub 8-0:1.0: 1 port detected [ 327.174635][ T7171] loop3: detected capacity change from 0 to 1024 [ 328.330695][ T7173] loop0: detected capacity change from 0 to 8 [ 328.368312][ T7173] md: array md0 already initialised! [ 329.701141][ T7173] md: pers->run() failed ... [ 331.137070][ T7195] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 331.323803][ T7193] loop3: detected capacity change from 0 to 40427 [ 331.346588][ T7193] F2FS-fs (loop3): invalid crc value [ 331.559874][ T7193] F2FS-fs (loop3): Found nat_bits in checkpoint [ 331.618768][ T7193] F2FS-fs (loop3): access invalid blkaddr:0 [ 331.624919][ T7193] CPU: 1 PID: 7193 Comm: syz.3.336 Not tainted syzkaller #0 [ 331.632252][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.642354][ T7193] Call Trace: [ 331.645668][ T7193] [ 331.648634][ T7193] dump_stack_lvl+0x18c/0x250 [ 331.653380][ T7193] ? show_regs_print_info+0x20/0x20 [ 331.658633][ T7193] ? __up_read+0x2b8/0x6b0 [ 331.663086][ T7193] ? __lock_acquire+0x7d80/0x7d80 [ 331.668239][ T7193] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 331.673665][ T7193] sanity_check_extent_cache+0xfc/0x1f0 [ 331.679254][ T7193] f2fs_iget+0x336f/0x47d0 [ 331.683726][ T7193] f2fs_fill_super+0x4853/0x6b60 [ 331.688748][ T7193] ? kill_f2fs_super+0x3f0/0x3f0 [ 331.693720][ T7193] ? down_write+0x16e/0x200 [ 331.698255][ T7193] ? down_read_killable+0x340/0x340 [ 331.703482][ T7193] ? setup_bdev_super+0x559/0x660 [ 331.708540][ T7193] ? setup_bdev_super+0x56b/0x660 [ 331.713599][ T7193] mount_bdev+0x21c/0x2c0 [ 331.717995][ T7193] ? kfree+0x31/0x1a0 [ 331.722035][ T7193] ? kill_f2fs_super+0x3f0/0x3f0 [ 331.727049][ T7193] ? get_tree_bdev+0x520/0x520 [ 331.731956][ T7193] ? vfs_parse_fs_param+0x420/0x420 [ 331.737216][ T7193] legacy_get_tree+0xea/0x180 [ 331.741969][ T7193] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 331.748259][ T7193] vfs_get_tree+0x8c/0x280 [ 331.752731][ T7193] do_new_mount+0x24a/0xa40 [ 331.757288][ T7193] __se_sys_mount+0x2e7/0x3d0 [ 331.762091][ T7193] ? __x64_sys_mount+0xc0/0xc0 [ 331.766896][ T7193] ? lockdep_hardirqs_on+0x98/0x150 [ 331.772128][ T7193] ? __x64_sys_mount+0x20/0xc0 [ 331.776936][ T7193] do_syscall_64+0x55/0xb0 [ 331.781398][ T7193] ? clear_bhb_loop+0x40/0x90 [ 331.786128][ T7193] ? clear_bhb_loop+0x40/0x90 [ 331.790848][ T7193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.796777][ T7193] RIP: 0033:0x7f387499f3ca [ 331.801768][ T7193] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.821431][ T7193] RSP: 002b:00007f3875832e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.829900][ T7193] RAX: ffffffffffffffda RBX: 00007f3875832ee0 RCX: 00007f387499f3ca [ 331.837911][ T7193] RDX: 0000200000000140 RSI: 00002000000002c0 RDI: 00007f3875832ea0 [ 331.845912][ T7193] RBP: 0000200000000140 R08: 00007f3875832ee0 R09: 0000000001000880 [ 331.853922][ T7193] R10: 0000000001000880 R11: 0000000000000246 R12: 00002000000002c0 [ 331.861927][ T7193] R13: 00007f3875832ea0 R14: 0000000000005545 R15: 0000200000000500 [ 331.869958][ T7193] [ 331.881381][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'. [ 331.894705][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 331.904043][ T7193] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 2] is incorrect, run fsck to fix [ 331.919489][ T7193] F2FS-fs (loop3): Failed to read root inode [ 332.140691][ T7193] netlink: 'syz.3.336': attribute type 4 has an invalid length. [ 332.148873][ T7193] netlink: 17 bytes leftover after parsing attributes in process `syz.3.336'. [ 337.155060][ T7232] md: array md0 already has disks! [ 337.179201][ T7230] loop2: detected capacity change from 0 to 32768 [ 337.198912][ T7232] md: could not open device unknown-block(7,0). [ 337.242102][ T7232] md: error, md_import_device() returned -16 [ 337.276065][ T7230] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.350223][ T7230] XFS (loop2): Ending clean mount [ 337.363223][ T7230] XFS (loop2): Quotacheck needed: Please wait. [ 337.535680][ T7230] XFS (loop2): Quotacheck: Done. [ 337.747970][ T7232] md: pers->run() failed ... [ 337.954173][ T27] audit: type=1800 audit(1790124726.099:19): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.343" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 338.549372][ T5782] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 341.127640][ T7254] bridge_slave_0: left allmulticast mode [ 341.139090][ T7254] bridge_slave_0: left promiscuous mode [ 341.153578][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.193035][ T7254] bridge_slave_1: left allmulticast mode [ 341.268021][ T7254] bridge_slave_1: left promiscuous mode [ 341.287200][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.555222][ T7254] bond0: (slave bond_slave_0): Releasing backup interface [ 341.586091][ T7254] bond0: (slave bond_slave_1): Releasing backup interface [ 342.425006][ T7254] team0: Port device team_slave_0 removed [ 342.515352][ T7254] team0: Port device team_slave_1 removed [ 342.541898][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.560955][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.571402][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.589516][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.685046][ T7259] team0: Port device xfrm0 added [ 342.704066][ T7263] tipc: Enabled bearer , priority 0 [ 344.339249][ T788] tipc: Node number set to 918884641 [ 345.295002][ T7285] FAULT_INJECTION: forcing a failure. [ 345.295002][ T7285] name failslab, interval 1, probability 0, space 0, times 1 [ 345.377729][ T7285] CPU: 0 PID: 7285 Comm: syz.0.355 Not tainted syzkaller #0 [ 345.385085][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.395271][ T7285] Call Trace: [ 345.398583][ T7285] [ 345.401553][ T7285] dump_stack_lvl+0x18c/0x250 [ 345.406288][ T7285] ? show_regs_print_info+0x20/0x20 [ 345.411544][ T7285] ? load_image+0x420/0x420 [ 345.416101][ T7285] ? __might_sleep+0xe0/0xe0 [ 345.420732][ T7285] ? __lock_acquire+0x7d80/0x7d80 [ 345.425812][ T7285] should_fail_ex+0x394/0x4c0 [ 345.430543][ T7285] should_failslab+0x9/0x20 [ 345.435112][ T7285] slab_pre_alloc_hook+0x59/0x300 [ 345.440191][ T7285] ? rcu_is_watching+0x15/0xb0 [ 345.445042][ T7285] ? mempool_create+0x5e/0xc0 [ 345.450018][ T7285] ? ceph_msgpool_init+0x180/0x180 [ 345.455169][ T7285] __kmem_cache_alloc_node+0x53/0x250 [ 345.460595][ T7285] ? mempool_create+0x5e/0xc0 [ 345.465320][ T7285] ? ceph_msgpool_init+0x180/0x180 [ 345.470467][ T7285] kmalloc_node_trace+0x26/0xe0 [ 345.475365][ T7285] ? msgpool_alloc+0x1b0/0x1b0 [ 345.480176][ T7285] ? ceph_msgpool_init+0x180/0x180 [ 345.485337][ T7285] mempool_create+0x5e/0xc0 [ 345.489906][ T7285] ceph_msgpool_init+0xa7/0x180 [ 345.494869][ T7285] ceph_osdc_init+0x54f/0x8c0 [ 345.499709][ T7285] ceph_create_client+0x246/0x300 [ 345.504791][ T7285] ceph_get_tree+0x1ca/0x1800 [ 345.509523][ T7285] ? bpf_lsm_capable+0x9/0x10 [ 345.514241][ T7285] ? security_capable+0x89/0xb0 [ 345.519155][ T7285] vfs_get_tree+0x8c/0x280 [ 345.523622][ T7285] vfs_cmd_create+0xe3/0x230 [ 345.528268][ T7285] __se_sys_fsconfig+0x70a/0x850 [ 345.533258][ T7285] ? __x64_sys_fsconfig+0xc0/0xc0 [ 345.538339][ T7285] ? lockdep_hardirqs_on+0x98/0x150 [ 345.543583][ T7285] ? __x64_sys_fsconfig+0x20/0xc0 [ 345.548679][ T7285] do_syscall_64+0x55/0xb0 [ 345.553151][ T7285] ? clear_bhb_loop+0x40/0x90 [ 345.557958][ T7285] ? clear_bhb_loop+0x40/0x90 [ 345.562690][ T7285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.568628][ T7285] RIP: 0033:0x7f5b7219e159 [ 345.573089][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.592742][ T7285] RSP: 002b:00007f5b730ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 345.601212][ T7285] RAX: ffffffffffffffda RBX: 00007f5b72425fa0 RCX: 00007f5b7219e159 [ 345.609241][ T7285] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 345.617261][ T7285] RBP: 00007f5b7223506b R08: 0000000000000000 R09: 0000000000000000 [ 345.625362][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.633375][ T7285] R13: 00007f5b72426038 R14: 00007f5b72425fa0 R15: 00007fffb8c91708 [ 345.641411][ T7285] [ 351.545261][ T7312] UBIFS error (pid: 7312): cannot open "(null)", error -22 [ 364.836370][ T7373] loop1: detected capacity change from 0 to 1024 [ 365.156939][ T7377] loop3: detected capacity change from 0 to 2048 [ 366.800079][ T7377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.953340][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 374.584475][ T7404] overlayfs: missing 'lowerdir' [ 374.752222][ T7409] oxu210hp-hcd serial8250: error -ENXIO: IRQ index 0 not found [ 376.992004][ T7424] UBIFS error (pid: 7424): cannot open "(null)", error -22 [ 379.649693][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.664818][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.455903][ T7455] futex_wake_op: syz.2.398 tries to shift op by 144; fix this program [ 381.493764][ T7455] loop2: detected capacity change from 0 to 256 [ 381.664932][ T7455] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 381.845807][ T27] audit: type=1800 audit(1790124769.949:20): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.398" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 384.759571][ T7469] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 384.860927][ T7471] loop2: detected capacity change from 0 to 8 [ 384.899256][ T7471] SQUASHFS error: zlib decompression failed, data probably corrupt [ 384.910861][ T7471] SQUASHFS error: Failed to read block 0x9b: -5 [ 384.921160][ T7471] SQUASHFS error: Unable to read metadata cache entry [99] [ 384.932298][ T7471] SQUASHFS error: Unable to read inode 0x127 [ 384.992472][ T7393] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 385.163301][ T7471] loop2: detected capacity change from 0 to 4096 [ 385.263038][ T7473] syzkaller0: entered promiscuous mode [ 385.283088][ T7473] syzkaller0: entered allmulticast mode [ 385.308104][ T7476] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.324037][ T7475] tipc: Enabled bearer , priority 0 [ 385.394079][ T7473] tipc: Resetting bearer [ 385.461213][ T7472] tipc: Resetting bearer [ 385.581114][ T7472] tipc: Disabling bearer [ 387.615010][ T7500] futex_wake_op: syz.3.408 tries to shift op by 144; fix this program [ 387.652615][ T7500] loop3: detected capacity change from 0 to 256 [ 387.728047][ T7500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 387.819816][ T27] audit: type=1800 audit(1790124775.959:21): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.408" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 390.798986][ T7527] xt_policy: too many policy elements [ 391.328884][ T7539] loop1: detected capacity change from 0 to 512 [ 392.931838][ T7539] EXT4-fs (loop1): Test dummy encryption mode enabled [ 392.938948][ T7539] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 392.953161][ T7539] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 392.953640][ T7539] EXT4-fs: failed to create workqueue [ 392.969005][ T7539] EXT4-fs (loop1): mount failed [ 395.668795][ T7556] Console: switching to colour VGA+ 80x25 [ 398.606124][ T7570] loop2: detected capacity change from 0 to 256 [ 401.080723][ T7574] tap0: tun_chr_ioctl cmd 1074025677 [ 401.107279][ T7574] tap0: linktype set to 776 [ 403.518175][ T7574] syzkaller1: entered promiscuous mode [ 403.543802][ T7574] syzkaller1: entered allmulticast mode [ 404.250625][ T7596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.431'. [ 404.688436][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 404.703037][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 404.712268][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 404.722232][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 404.883746][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 406.097453][ T7606] futex_wake_op: syz.0.437 tries to shift op by 144; fix this program [ 406.351474][ T7607] loop3: detected capacity change from 0 to 512 [ 406.383163][ T7607] EXT4-fs (loop3): Test dummy encryption mode enabled [ 406.390147][ T7607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 406.448419][ T7607] EXT4-fs (loop3): 1 truncate cleaned up [ 406.455683][ T7607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.963436][ T7615] loop1: detected capacity change from 0 to 256 [ 412.925014][ T7636] syz.2.442: attempt to access beyond end of device [ 412.925014][ T7636] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 412.955010][ T7636] syz.2.442: attempt to access beyond end of device [ 412.955010][ T7636] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 413.600471][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 413.624012][ T7636] syz.2.442: attempt to access beyond end of device [ 413.624012][ T7636] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 413.652407][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.712414][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 413.872620][ T7636] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 414.914492][ T7636] UDF-fs: Scanning with blocksize 512 failed [ 414.937830][ T7636] syz.2.442: attempt to access beyond end of device [ 414.937830][ T7636] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 415.025863][ T7636] syz.2.442: attempt to access beyond end of device [ 415.025863][ T7636] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 415.111006][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 415.147900][ T7636] syz.2.442: attempt to access beyond end of device [ 415.147900][ T7636] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 415.161465][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 415.177562][ T7636] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 415.185775][ T7636] UDF-fs: Scanning with blocksize 1024 failed [ 415.206760][ T7636] syz.2.442: attempt to access beyond end of device [ 415.206760][ T7636] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 415.297882][ T7654] jffs2: notice: (7654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 415.433358][ T7636] syz.2.442: attempt to access beyond end of device [ 415.433358][ T7636] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 415.731836][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 415.895520][ T7636] syz.2.442: attempt to access beyond end of device [ 415.895520][ T7636] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 415.952841][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 415.967289][ T7636] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 415.975087][ T7636] UDF-fs: Scanning with blocksize 2048 failed [ 415.981909][ T7636] syz.2.442: attempt to access beyond end of device [ 415.981909][ T7636] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 415.995955][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 416.005881][ T7636] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 416.015611][ T7636] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 416.023199][ T7636] UDF-fs: Scanning with blocksize 4096 failed [ 416.043714][ T7636] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 421.342927][ T7687] loop1: detected capacity change from 0 to 512 [ 421.355483][ T7687] EXT4-fs (loop1): Test dummy encryption mode enabled [ 421.362319][ T7687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 421.394039][ T7687] EXT4-fs (loop1): 1 truncate cleaned up [ 421.401132][ T7687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.489813][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 423.777401][ T55] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 423.793276][ T55] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 423.817845][ T55] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 423.828855][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.837361][ T55] usb 4-1: Product: syz [ 424.128718][ T55] usb 4-1: Manufacturer: syz [ 424.136701][ T55] usb 4-1: SerialNumber: syz [ 424.457068][ T55] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 424.968646][ T55] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 425.011475][ T55] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 425.589383][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.717746][ T55] usb 4-1: USB disconnect, device number 3 [ 427.805560][ T55] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 427.884659][ T55] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 427.953367][ T55] ti_usb_3410_5052 4-1:2.0: device disconnected [ 432.969375][ T7741] Set syz1 is full, maxelem 6117 reached [ 434.385969][ T7761] vivid-000: disconnect [ 434.395328][ T7761] vivid-000: reconnect [ 434.910592][ T7762] loop2: detected capacity change from 0 to 512 [ 434.963667][ T7762] EXT4-fs (loop2): Test dummy encryption mode enabled [ 434.970553][ T7762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 435.068102][ T7762] EXT4-fs (loop2): 1 truncate cleaned up [ 435.075414][ T7762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.208885][ T7769] syzkaller0: entered promiscuous mode [ 436.243674][ T7769] syzkaller0: entered allmulticast mode [ 436.267997][ T7769] simple: /dev/video#_0 [ 438.803856][ T7783] slcan: can't register candev [ 438.809746][ T7783] Falling back ldisc for ptm0. [ 441.006655][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.013308][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.530895][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.184088][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 447.759969][ T7818] loop3: detected capacity change from 0 to 8 [ 449.224526][ T7818] SQUASHFS error: zlib decompression failed, data probably corrupt [ 449.253989][ T7818] SQUASHFS error: Failed to read block 0x9b: -5 [ 449.260305][ T7818] SQUASHFS error: Unable to read metadata cache entry [99] [ 449.323864][ T7818] SQUASHFS error: Unable to read inode 0x127 [ 449.707471][ T7825] bio_check_eod: 2 callbacks suppressed [ 449.707543][ T7825] syz.0.488: attempt to access beyond end of device [ 449.707543][ T7825] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 449.750340][ T7818] loop3: detected capacity change from 0 to 4096 [ 449.768597][ T7825] syz.0.488: attempt to access beyond end of device [ 449.768597][ T7825] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 451.215146][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 451.301953][ T7825] syz.0.488: attempt to access beyond end of device [ 451.301953][ T7825] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 451.363766][ T7832] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.423570][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 451.433126][ T7825] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 451.477234][ T7825] UDF-fs: Scanning with blocksize 512 failed [ 451.512709][ T7825] syz.0.488: attempt to access beyond end of device [ 451.512709][ T7825] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 451.573786][ T7825] syz.0.488: attempt to access beyond end of device [ 451.573786][ T7825] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 451.633841][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 451.664126][ T7825] syz.0.488: attempt to access beyond end of device [ 451.664126][ T7825] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 451.743576][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 451.765129][ T7825] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 451.772759][ T7825] UDF-fs: Scanning with blocksize 1024 failed [ 451.844680][ T7825] syz.0.488: attempt to access beyond end of device [ 451.844680][ T7825] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 451.924312][ T7825] syz.0.488: attempt to access beyond end of device [ 451.924312][ T7825] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 453.383645][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 453.416952][ T7825] syz.0.488: attempt to access beyond end of device [ 453.416952][ T7825] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 453.473586][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 453.493950][ T7825] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 453.501590][ T7825] UDF-fs: Scanning with blocksize 2048 failed [ 453.515803][ T7825] syz.0.488: attempt to access beyond end of device [ 453.515803][ T7825] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 453.547312][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 453.574240][ T7825] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 453.593754][ T7825] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 453.613593][ T7825] UDF-fs: Scanning with blocksize 4096 failed [ 453.683454][ T7825] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 454.428257][ T7848] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.780242][ T5824] IPVS: starting estimator thread 0... [ 456.855010][ T7860] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 458.383760][ T7858] IPVS: using max 16 ests per chain, 38400 per kthread [ 460.638405][ T7874] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 462.338813][ T7884] loop2: detected capacity change from 0 to 164 [ 464.547207][ T7892] loop3: detected capacity change from 0 to 512 [ 464.667631][ T7894] rock: directory entry would overflow storage [ 464.674430][ T7894] rock: sig=0x4f50, size=4, remaining=3 [ 464.680240][ T7894] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 464.727114][ T7892] EXT4-fs (loop3): Test dummy encryption mode enabled [ 464.734174][ T7892] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 464.904342][ T7892] EXT4-fs (loop3): 1 truncate cleaned up [ 464.911494][ T7892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.599461][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.421976][ T7907] loop2: detected capacity change from 0 to 8192 [ 469.460339][ T7907] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 469.474058][ T7907] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 469.483966][ T7907] REISERFS (device loop2): using ordered data mode [ 469.490675][ T7907] reiserfs: using flush barriers [ 469.506141][ T7907] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 469.564974][ T7907] REISERFS (device loop2): checking transaction log (loop2) [ 469.624915][ T7907] REISERFS (device loop2): Using r5 hash to sort names [ 469.676323][ T7907] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 471.195133][ T7922] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 475.992630][ T7942] syz.3.510 (7942) used greatest stack depth: 17288 bytes left [ 476.079062][ T7926] tipc: Resetting bearer [ 477.284324][ T7926] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.293279][ T7926] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.303017][ T7926] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.312151][ T7926] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.802941][ T7949] loop3: detected capacity change from 0 to 512 [ 477.979836][ T7949] EXT4-fs (loop3): Test dummy encryption mode enabled [ 477.986851][ T7949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 479.519293][ T7949] EXT4-fs (loop3): 1 truncate cleaned up [ 479.526590][ T7949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.863367][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.431875][ T7981] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 484.465225][ T7976] x86/PAT: syz.2.526:7976 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 484.869275][ T7976] x86/PAT: syz.2.526:7976 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 485.368349][ T7991] warning: `syz.1.522' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 485.392979][ T7991] xt_CONNSECMARK: invalid mode: 0 [ 486.446076][ T7997] syzkaller0: entered promiscuous mode [ 486.461845][ T7997] syzkaller0: entered allmulticast mode [ 487.461867][ T8006] loop1: detected capacity change from 0 to 512 [ 487.664859][ T8006] EXT4-fs (loop1): Test dummy encryption mode enabled [ 487.671774][ T8006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 487.793953][ T8006] EXT4-fs (loop1): 1 truncate cleaned up [ 487.805414][ T8006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.252274][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.506862][ T8065] loop1: detected capacity change from 0 to 512 [ 496.533053][ T8065] EXT4-fs (loop1): Test dummy encryption mode enabled [ 496.539958][ T8065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 497.014407][ T8065] EXT4-fs (loop1): 1 truncate cleaned up [ 497.021512][ T8065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.965947][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.819880][ T8094] loop1: detected capacity change from 0 to 512 [ 500.260746][ T8094] EXT4-fs (loop1): Test dummy encryption mode enabled [ 500.267711][ T8094] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 500.301919][ T8094] EXT4-fs (loop1): 1 truncate cleaned up [ 500.309237][ T8094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.531052][ T8099] SET target dimension over the limit! [ 500.849586][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.986851][ T8102] tcf_pedit_act: 7 callbacks suppressed [ 500.986931][ T8102] tc action pedit 'at' offset 49 out of bounds [ 500.999271][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.005542][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.011728][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.017969][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.024186][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.030388][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.036630][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.042824][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.049081][ T8102] tc action pedit 'at' offset 49 out of bounds [ 501.055346][ T8102] 0: reclassify loop, rule prio 0, protocol 800 [ 502.584114][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.590482][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.706469][ T8109] loop1: detected capacity change from 0 to 4096 [ 503.899470][ T8117] loop1: detected capacity change from 0 to 512 [ 503.911110][ T8117] EXT4-fs (loop1): Test dummy encryption mode enabled [ 503.918002][ T8117] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 503.935652][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 503.971752][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 503.982218][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 503.995104][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 504.005141][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 504.231289][ T8117] EXT4-fs (loop1): 1 truncate cleaned up [ 504.237875][ T8117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.189357][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.307667][ T8124] loop1: detected capacity change from 0 to 164 [ 507.923227][ T8128] rock: directory entry would overflow storage [ 507.929669][ T8128] rock: sig=0x4f50, size=4, remaining=3 [ 507.935362][ T8128] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 513.956776][ T8154] loop1: detected capacity change from 0 to 1024 [ 516.514106][ T8164] program syz.2.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.912276][ T8171] autofs4:pid:8171:autofs_fill_super: called with bogus options [ 517.901293][ T8173] netlink: 'syz.1.576': attribute type 8 has an invalid length. [ 517.929940][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 518.974161][ T8173] bond0: entered promiscuous mode [ 519.009497][ T8173] bond_slave_0: entered promiscuous mode [ 519.036155][ T8173] bond_slave_1: entered promiscuous mode [ 519.340604][ T8173] gretap0: entered promiscuous mode [ 519.412312][ T8173] team0: entered promiscuous mode [ 519.423641][ T8173] team_slave_0: entered promiscuous mode [ 519.478167][ T8173] team_slave_1: entered promiscuous mode [ 519.733643][ T8173] hsr1: entered promiscuous mode [ 521.554294][ T8200] loop3: detected capacity change from 0 to 164 [ 522.458774][ T8206] rock: directory entry would overflow storage [ 522.465184][ T8206] rock: sig=0x4f50, size=4, remaining=3 [ 522.470887][ T8206] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 524.411327][ T8214] loop1: detected capacity change from 0 to 164 [ 526.262822][ T8222] rock: directory entry would overflow storage [ 526.269209][ T8222] rock: sig=0x4f50, size=4, remaining=3 [ 526.274981][ T8222] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 526.744854][ T8221] loop3: detected capacity change from 0 to 8192 [ 526.803116][ T8221] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 526.872387][ T8221] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 526.926873][ T8221] REISERFS (device loop3): using ordered data mode [ 526.963759][ T8221] reiserfs: using flush barriers [ 527.008643][ T8221] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 527.064345][ T8221] REISERFS (device loop3): checking transaction log (loop3) [ 527.115562][ T8221] REISERFS (device loop3): Using r5 hash to sort names [ 527.155714][ T8221] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 531.827559][ T8248] device-mapper: table: 248:0: integrity: Device lookup failed (-EBUSY) [ 531.866867][ T8248] device-mapper: ioctl: error adding target to table [ 534.207681][ T8262] loop2: detected capacity change from 0 to 164 [ 534.601279][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.608715][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.615569][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.622383][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.629307][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.636141][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.642935][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.649778][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.656626][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.663468][ T8264] tc action pedit offset must be on 32 bit boundaries [ 534.670285][ T8264] 0: reclassify loop, rule prio 0, protocol 800 [ 534.862047][ T8266] rock: directory entry would overflow storage [ 534.868513][ T8266] rock: sig=0x4f50, size=4, remaining=3 [ 534.874207][ T8266] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 536.546641][ T8275] program syz.2.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.275530][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.607'. [ 542.953144][ T8309] loop2: detected capacity change from 0 to 164 [ 543.127633][ T8310] loop1: detected capacity change from 0 to 512 [ 543.137979][ T8310] EXT4-fs (loop1): Test dummy encryption mode enabled [ 543.144875][ T8310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 543.312909][ T8310] EXT4-fs (loop1): 1 truncate cleaned up [ 543.320298][ T8310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.401019][ T8314] rock: directory entry would overflow storage [ 543.407543][ T8314] rock: sig=0x4f50, size=4, remaining=3 [ 543.413230][ T8314] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 544.144812][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.924448][ T27] audit: type=1326 audit(1790124934.059:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.0.609" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b7219e159 code=0x0 [ 545.952516][ T8329] netlink: 'syz.2.617': attribute type 39 has an invalid length. [ 548.352796][ T8342] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5784] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8342] [ 548.377975][ T8342] loop1: detected capacity change from 0 to 512 [ 548.450775][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.464618][ T8342] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.235097][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.049032][ T8352] loop1: detected capacity change from 0 to 1024 [ 551.894216][ T8352] hfsplus: invalid btree flag [ 551.899343][ T8352] hfsplus: failed to load catalog file [ 552.788511][ T8358] loop2: detected capacity change from 0 to 512 [ 553.986553][ T8358] EXT4-fs (loop2): Test dummy encryption mode enabled [ 553.993414][ T8358] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 554.015426][ T8358] EXT4-fs (loop2): 1 truncate cleaned up [ 554.022531][ T8358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.346323][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.395410][ T8382] device-mapper: table: 248:0: integrity: Device lookup failed (-EBUSY) [ 558.413558][ T8382] device-mapper: ioctl: error adding target to table [ 558.786840][ T8389] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 560.776179][ T8405] loop1: detected capacity change from 0 to 512 [ 561.571564][ T8405] EXT4-fs (loop1): Test dummy encryption mode enabled [ 561.578473][ T8405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 561.808903][ T8405] EXT4-fs (loop1): 1 truncate cleaned up [ 561.815370][ T8405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.864134][ T8098] IPVS: starting estimator thread 0... [ 562.025400][ T8409] IPVS: using max 14 ests per chain, 33600 per kthread [ 562.817635][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.208354][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.215355][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.116629][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 564.124316][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 564.135119][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 564.149944][ T8421] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 564.168037][ T8421] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 564.211141][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 564.219895][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 564.227795][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 564.235997][ T8421] wlan0 speed is unknown, defaulting to 1000 [ 564.876571][ T8427] tipc: Enabled bearer , priority 0 [ 564.892413][ T8427] syzkaller0: entered promiscuous mode [ 564.902821][ T8427] syzkaller0: entered allmulticast mode [ 565.262276][ T8430] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 565.398040][ T8427] tipc: Resetting bearer [ 565.446555][ T8426] tipc: Resetting bearer [ 565.497855][ T8426] tipc: Disabling bearer [ 566.904591][ T8443] device-mapper: table: 248:0: integrity: Device lookup failed (-EBUSY) [ 566.919293][ T8443] device-mapper: ioctl: error adding target to table [ 569.297568][ T8460] loop1: detected capacity change from 0 to 512 [ 569.361257][ T8460] EXT4-fs (loop1): Test dummy encryption mode enabled [ 569.368779][ T8460] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 569.637628][ T8460] EXT4-fs (loop1): 1 truncate cleaned up [ 569.645018][ T8460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.146229][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.263932][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 575.024425][ T8478] md: array md0 already has disks! [ 575.129885][ T8478] md: pers->run() failed ... [ 582.584304][ T27] audit: type=1800 audit(1790124969.699:23): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.660" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 583.194620][ T8525] loop2: detected capacity change from 0 to 32768 [ 583.451257][ T8525] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 583.772480][ T8525] XFS (loop2): Ending clean mount [ 583.787922][ T8525] XFS (loop2): Quotacheck needed: Please wait. [ 584.000268][ T8525] XFS (loop2): Quotacheck: Done. [ 584.972195][ T5782] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 586.147437][ T8545] loop3: detected capacity change from 0 to 164 [ 587.301641][ T8547] rock: directory entry would overflow storage [ 587.307960][ T8547] rock: sig=0x4f50, size=4, remaining=3 [ 587.313651][ T8547] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 592.218109][ T8570] device-mapper: table: 248:0: integrity: Device lookup failed (-EBUSY) [ 592.243806][ T8570] device-mapper: ioctl: error adding target to table [ 594.104104][ T8583] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5783] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8583] [ 594.129944][ T8583] loop3: detected capacity change from 0 to 512 [ 594.207998][ T8583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.221386][ T8583] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.301474][ T8582] loop2: detected capacity change from 0 to 2048 [ 594.405226][ T8582] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 594.472930][ T8582] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 596.805225][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.465724][ T8613] device-mapper: table: 248:0: integrity: Device lookup failed (-EBUSY) [ 603.483562][ T8613] device-mapper: ioctl: error adding target to table [ 604.126154][ T8619] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8619] [ 606.533276][ T8631] loop3: detected capacity change from 0 to 128 [ 606.938887][ T8631] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 607.394846][ T8159] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 607.484332][ T5792] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 609.240146][ T8648] netlink: 165 bytes leftover after parsing attributes in process `syz.1.688'. [ 619.301731][ T8682] loop3: detected capacity change from 0 to 512 [ 619.410566][ T8682] EXT4-fs (loop3): Test dummy encryption mode enabled [ 619.417581][ T8682] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 620.085424][ T8682] EXT4-fs (loop3): 1 truncate cleaned up [ 620.092523][ T8682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.536023][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.533310][ T8691] syzkaller0: entered promiscuous mode [ 621.539166][ T8691] syzkaller0: entered allmulticast mode [ 623.044076][ T8691] tipc: Enabled bearer , priority 0 [ 623.646383][ T8702] tipc: Resetting bearer [ 624.925533][ T8703] netlink: 165 bytes leftover after parsing attributes in process `syz.0.700'. [ 625.814456][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.823967][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.858649][ T8690] tipc: Resetting bearer [ 626.036090][ T8690] tipc: Disabling bearer [ 627.900695][ T8714] configfs-gadget.g1 gadget.0: HOST MAC 66:ee:61:e7:e1:c9 [ 628.063642][ T8714] configfs-gadget.g1 gadget.0: MAC 72:0a:9f:b6:dc:be [ 628.223836][ T8714] configfs-gadget.g1 gadget.0: HOST MAC 22:71:d9:81:13:0d [ 628.231394][ T8714] configfs-gadget.g1 gadget.0: MAC 66:a1:bc:5d:25:b5 [ 628.563565][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 628.625113][ T8727] loop2: detected capacity change from 0 to 512 [ 628.645666][ T8727] EXT4-fs (loop2): Test dummy encryption mode enabled [ 628.652538][ T8727] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 629.067401][ T8727] EXT4-fs (loop2): 1 truncate cleaned up [ 629.074650][ T8727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.269264][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 630.344033][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 631.171580][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.190023][ T9] usb 1-1: SerialNumber: 1234567890 [ 631.307391][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.012493][ T9] usb 1-1: bad CDC descriptors [ 632.036955][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 632.078873][ T9] gspca_spca501: reg write: error -32 [ 632.123871][ T9] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 632.130888][ T9] spca501: probe of 1-1:1.0 failed with error -22 [ 632.285858][ T9] cdc_ether 1-1:1.1 usb2: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 22:71:d9:81:13:0d [ 634.297295][ T27] audit: type=1800 audit(1790125022.349:24): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.718" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 637.894428][ T8784] "syz.0.716" (8784) uses obsolete ecb(arc4) skcipher [ 647.987910][ T8828] FAULT_INJECTION: forcing a failure. [ 647.987910][ T8828] name failslab, interval 1, probability 0, space 0, times 0 [ 648.000683][ T8828] CPU: 0 PID: 8828 Comm: syz.3.728 Not tainted syzkaller #0 [ 648.008007][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.018095][ T8828] Call Trace: [ 648.021546][ T8828] [ 648.024549][ T8828] dump_stack_lvl+0x18c/0x250 [ 648.029456][ T8828] ? show_regs_print_info+0x20/0x20 [ 648.034726][ T8828] ? load_image+0x420/0x420 [ 648.039282][ T8828] ? __might_sleep+0xe0/0xe0 [ 648.044001][ T8828] ? __lock_acquire+0x7d80/0x7d80 [ 648.049096][ T8828] should_fail_ex+0x394/0x4c0 [ 648.053914][ T8828] should_failslab+0x9/0x20 [ 648.058518][ T8828] slab_pre_alloc_hook+0x59/0x300 [ 648.063663][ T8828] ? rng_is_initialized+0x40/0x40 [ 648.068791][ T8828] ? ceph_create_client+0x6f/0x300 [ 648.074013][ T8828] __kmem_cache_alloc_node+0x53/0x250 [ 648.079435][ T8828] ? ceph_create_client+0x6f/0x300 [ 648.084604][ T8828] kmalloc_trace+0x2a/0xe0 [ 648.089061][ T8828] ceph_create_client+0x6f/0x300 [ 648.094042][ T8828] ceph_get_tree+0x1ca/0x1800 [ 648.098827][ T8828] ? bpf_lsm_capable+0x9/0x10 [ 648.103571][ T8828] ? security_capable+0x89/0xb0 [ 648.108487][ T8828] vfs_get_tree+0x8c/0x280 [ 648.112969][ T8828] vfs_cmd_create+0xe3/0x230 [ 648.117637][ T8828] __se_sys_fsconfig+0x70a/0x850 [ 648.122617][ T8828] ? __x64_sys_fsconfig+0xc0/0xc0 [ 648.127687][ T8828] ? lockdep_hardirqs_on+0x98/0x150 [ 648.132957][ T8828] ? __x64_sys_fsconfig+0x20/0xc0 [ 648.138022][ T8828] do_syscall_64+0x55/0xb0 [ 648.142475][ T8828] ? clear_bhb_loop+0x40/0x90 [ 648.147280][ T8828] ? clear_bhb_loop+0x40/0x90 [ 648.152002][ T8828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.157934][ T8828] RIP: 0033:0x7f387499e159 [ 648.162414][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.182087][ T8828] RSP: 002b:00007f3875812028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 648.190539][ T8828] RAX: ffffffffffffffda RBX: 00007f3874c26180 RCX: 00007f387499e159 [ 648.198544][ T8828] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 648.206627][ T8828] RBP: 00007f3874a3506b R08: 0000000000000000 R09: 0000000000000000 [ 648.214626][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.222621][ T8828] R13: 00007f3874c26218 R14: 00007f3874c26180 R15: 00007ffd27115da8 [ 648.230637][ T8828] [ 649.670740][ T8841] netlink: 165 bytes leftover after parsing attributes in process `syz.3.730'. [ 658.854501][ T8892] syzkaller0: entered promiscuous mode [ 669.287210][ T8941] loop3: detected capacity change from 0 to 512 [ 669.355966][ T8941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.394167][ T8941] EXT4-fs error (device loop3): ext4_validate_block_bitmap:421: comm syz.3.744: bg 0: bad block bitmap checksum [ 669.746083][ T8928] netlink: 165 bytes leftover after parsing attributes in process `syz.2.741'. [ 670.925341][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.685025][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.718983][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.956951][ T9004] md: array md0 already has disks! [ 681.989633][ T9004] md: could not open device unknown-block(7,0). [ 682.023607][ T9004] md: error, md_import_device() returned -16 [ 682.467844][ T9004] md: pers->run() failed ... [ 683.494360][ T9025] syzkaller0: entered promiscuous mode [ 683.651237][ T9025] syzkaller0: entered allmulticast mode [ 683.752445][ T9025] tipc: Enabled bearer , priority 0 [ 683.876098][ T9025] tipc: Resetting bearer [ 683.922754][ T9024] tipc: Resetting bearer [ 684.094790][ T9024] tipc: Disabling bearer [ 684.972563][ T9040] netlink: 165 bytes leftover after parsing attributes in process `syz.3.755'. [ 686.077820][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.084331][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.686580][ T9081] dlm: Unknown command passed to DLM device : 3 [ 691.686580][ T9081] [ 699.001853][ T9108] "syz.3.764" (9108) uses obsolete ecb(arc4) skcipher [ 720.854762][ T27] audit: type=1326 audit(1790125108.019:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.3.786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f387499e159 code=0x0 [ 736.850514][ T9280] loop3: detected capacity change from 0 to 256 [ 737.024764][ T9280] exfat: Deprecated parameter 'namecase' [ 737.396179][ T9280] exfat: Deprecated parameter 'namecase' [ 737.510291][ T9280] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 744.834127][ T9329] ip6gretap1: entered allmulticast mode [ 744.854162][ T9329] batman_adv: batadv0: Adding interface: ip6gretap1 [ 744.861126][ T9329] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.887470][ T9329] batman_adv: batadv0: Interface activated: ip6gretap1 [ 746.298626][ T9339] ================================================================== [ 746.306829][ T9339] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 746.314645][ T9339] Read of size 8 at addr ffff888027014a18 by task syz.1.817/9339 [ 746.322495][ T9339] [ 746.324892][ T9339] CPU: 0 PID: 9339 Comm: syz.1.817 Not tainted syzkaller #0 [ 746.332217][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.342309][ T9339] Call Trace: [ 746.345622][ T9339] [ 746.348608][ T9339] dump_stack_lvl+0x18c/0x250 [ 746.353383][ T9339] ? read_lock_is_recursive+0x20/0x20 [ 746.358810][ T9339] ? show_regs_print_info+0x20/0x20 [ 746.364082][ T9339] ? load_image+0x420/0x420 [ 746.368627][ T9339] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 746.374233][ T9339] ? __virt_addr_valid+0x10c/0x380 [ 746.379411][ T9339] ? __virt_addr_valid+0x10c/0x380 [ 746.384574][ T9339] ? __virt_addr_valid+0x10c/0x380 [ 746.389733][ T9339] print_report+0xa8/0x210 [ 746.394215][ T9339] ? dvb_device_open+0xc9/0x360 [ 746.399104][ T9339] kasan_report+0x117/0x150 [ 746.403702][ T9339] ? dvb_device_open+0xc9/0x360 [ 746.408598][ T9339] dvb_device_open+0xc9/0x360 [ 746.413331][ T9339] chrdev_open+0x58c/0x600 [ 746.417785][ T9339] ? cd_forget+0x160/0x160 [ 746.422240][ T9339] ? fsnotify_perm+0x3ed/0x5e0 [ 746.427102][ T9339] do_dentry_open+0x880/0x14b0 [ 746.431957][ T9339] ? cd_forget+0x160/0x160 [ 746.436416][ T9339] path_openat+0x284f/0x3270 [ 746.441054][ T9339] ? do_filp_open+0x430/0x430 [ 746.445768][ T9339] ? asan.module_dtor+0x20/0x20 [ 746.450662][ T9339] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.456865][ T9339] do_filp_open+0x1f2/0x430 [ 746.461406][ T9339] ? vfs_tmpfile+0x620/0x620 [ 746.466042][ T9339] ? _raw_spin_unlock+0x3a/0x40 [ 746.470933][ T9339] ? alloc_fd+0x590/0x640 [ 746.475371][ T9339] do_sys_openat2+0x134/0x1d0 [ 746.480091][ T9339] ? do_sys_open+0xe0/0xe0 [ 746.484548][ T9339] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 746.490564][ T9339] ? lock_chain_count+0x20/0x20 [ 746.495452][ T9339] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 746.501486][ T9339] __x64_sys_openat+0x139/0x160 [ 746.506448][ T9339] do_syscall_64+0x55/0xb0 [ 746.510915][ T9339] ? clear_bhb_loop+0x40/0x90 [ 746.515638][ T9339] ? clear_bhb_loop+0x40/0x90 [ 746.520359][ T9339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.526297][ T9339] RIP: 0033:0x7faf50f5e98e [ 746.530745][ T9339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 746.550395][ T9339] RSP: 002b:00007faf4f1f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 746.558887][ T9339] RAX: ffffffffffffffda RBX: 00007faf4f1f66c0 RCX: 00007faf50f5e98e [ 746.566921][ T9339] RDX: 0000000000000400 RSI: 00007faf4f1f5c00 RDI: ffffffffffffff9c [ 746.574950][ T9339] RBP: 00007faf4f1f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 746.582967][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 746.590981][ T9339] R13: 00007faf51226128 R14: 00007faf51226090 R15: 00007fffd7be9f88 [ 746.599005][ T9339] [ 746.602066][ T9339] [ 746.604416][ T9339] Allocated by task 8379: [ 746.608846][ T9339] kasan_set_track+0x4e/0x70 [ 746.613484][ T9339] __kasan_kmalloc+0x8f/0xa0 [ 746.618113][ T9339] __kmalloc+0xb7/0x240 [ 746.622315][ T9339] iter_file_splice_write+0x1a4/0xcf0 [ 746.627719][ T9339] direct_splice_actor+0xe8/0x130 [ 746.632781][ T9339] splice_direct_to_actor+0x30b/0x8e0 [ 746.638185][ T9339] do_splice_direct+0x1d5/0x2f0 [ 746.643080][ T9339] do_sendfile+0x52b/0xe80 [ 746.647529][ T9339] __se_sys_sendfile64+0x145/0x1a0 [ 746.652677][ T9339] do_syscall_64+0x55/0xb0 [ 746.657136][ T9339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.663080][ T9339] [ 746.665432][ T9339] The buggy address belongs to the object at ffff888027014a00 [ 746.665432][ T9339] which belongs to the cache kmalloc-256 of size 256 [ 746.679569][ T9339] The buggy address is located 24 bytes inside of [ 746.679569][ T9339] freed 256-byte region [ffff888027014a00, ffff888027014b00) [ 746.693313][ T9339] [ 746.695665][ T9339] The buggy address belongs to the physical page: [ 746.702160][ T9339] page:ffffea00009c0500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888027014a00 pfn:0x27014 [ 746.713650][ T9339] head:ffffea00009c0500 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 746.722616][ T9339] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 746.730629][ T9339] page_type: 0xffffffff() [ 746.735092][ T9339] raw: 00fff00000000840 ffff888017c41b40 ffffea0000c15110 ffffea0000779390 [ 746.743721][ T9339] raw: ffff888027014a00 000000000010000f 00000001ffffffff 0000000000000000 [ 746.752340][ T9339] page dumped because: kasan: bad access detected [ 746.758778][ T9339] page_owner tracks the page as allocated [ 746.764527][ T9339] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16688654938, free_ts 0 [ 746.784288][ T9339] post_alloc_hook+0x1c1/0x200 [ 746.789167][ T9339] get_page_from_freelist+0x2181/0x22a0 [ 746.794758][ T9339] __alloc_pages+0x1f0/0x460 [ 746.799382][ T9339] alloc_page_interleave+0x24/0x1e0 [ 746.804617][ T9339] alloc_slab_page+0x5d/0x180 [ 746.809330][ T9339] new_slab+0x87/0x2d0 [ 746.813425][ T9339] ___slab_alloc+0xc5c/0x12f0 [ 746.818142][ T9339] __kmem_cache_alloc_node+0x11f/0x250 [ 746.823642][ T9339] kmalloc_trace+0x2a/0xe0 [ 746.828093][ T9339] bus_add_driver+0x162/0x630 [ 746.832908][ T9339] driver_register+0x23a/0x310 [ 746.837704][ T9339] usb_register_driver+0x1aa/0x360 [ 746.842913][ T9339] do_one_initcall+0x242/0x790 [ 746.847728][ T9339] do_initcall_level+0x13d/0x1f0 [ 746.852777][ T9339] do_initcalls+0x69/0xd0 [ 746.857140][ T9339] kernel_init_freeable+0x3d9/0x560 [ 746.862375][ T9339] page_owner free stack trace missing [ 746.867763][ T9339] [ 746.870111][ T9339] Memory state around the buggy address: [ 746.875768][ T9339] ffff888027014900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 746.883860][ T9339] ffff888027014980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 746.891957][ T9339] >ffff888027014a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 746.900042][ T9339] ^ [ 746.904922][ T9339] ffff888027014a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 746.913020][ T9339] ffff888027014b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 746.921105][ T9339] ================================================================== [ 746.931532][ T9339] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 746.938777][ T9339] CPU: 0 PID: 9339 Comm: syz.1.817 Not tainted syzkaller #0 [ 746.946111][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.956206][ T9339] Call Trace: [ 746.959517][ T9339] [ 746.962477][ T9339] dump_stack_lvl+0x18c/0x250 [ 746.967206][ T9339] ? show_regs_print_info+0x20/0x20 [ 746.972446][ T9339] ? load_image+0x420/0x420 [ 746.976990][ T9339] panic+0x2ca/0x720 [ 746.980929][ T9339] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.987123][ T9339] ? bpf_jit_dump+0xd0/0xd0 [ 746.991657][ T9339] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 746.997671][ T9339] ? _raw_spin_unlock+0x40/0x40 [ 747.002555][ T9339] ? dvb_device_open+0xc9/0x360 [ 747.007441][ T9339] check_panic_on_warn+0x84/0xa0 [ 747.012487][ T9339] ? dvb_device_open+0xc9/0x360 [ 747.017369][ T9339] end_report+0x6f/0x130 [ 747.021647][ T9339] kasan_report+0x128/0x150 [ 747.026182][ T9339] ? dvb_device_open+0xc9/0x360 [ 747.031069][ T9339] dvb_device_open+0xc9/0x360 [ 747.035916][ T9339] chrdev_open+0x58c/0x600 [ 747.040361][ T9339] ? cd_forget+0x160/0x160 [ 747.044809][ T9339] ? fsnotify_perm+0x3ed/0x5e0 [ 747.049620][ T9339] do_dentry_open+0x880/0x14b0 [ 747.054419][ T9339] ? cd_forget+0x160/0x160 [ 747.058864][ T9339] path_openat+0x284f/0x3270 [ 747.063495][ T9339] ? do_filp_open+0x430/0x430 [ 747.068199][ T9339] ? asan.module_dtor+0x20/0x20 [ 747.073088][ T9339] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 747.079279][ T9339] do_filp_open+0x1f2/0x430 [ 747.083809][ T9339] ? vfs_tmpfile+0x620/0x620 [ 747.088407][ T9339] ? _raw_spin_unlock+0x3a/0x40 [ 747.093277][ T9339] ? alloc_fd+0x590/0x640 [ 747.097641][ T9339] do_sys_openat2+0x134/0x1d0 [ 747.102322][ T9339] ? do_sys_open+0xe0/0xe0 [ 747.106755][ T9339] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 747.112746][ T9339] ? lock_chain_count+0x20/0x20 [ 747.117612][ T9339] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 747.123608][ T9339] __x64_sys_openat+0x139/0x160 [ 747.128461][ T9339] do_syscall_64+0x55/0xb0 [ 747.132891][ T9339] ? clear_bhb_loop+0x40/0x90 [ 747.137569][ T9339] ? clear_bhb_loop+0x40/0x90 [ 747.142242][ T9339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 747.148149][ T9339] RIP: 0033:0x7faf50f5e98e [ 747.152576][ T9339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 747.172189][ T9339] RSP: 002b:00007faf4f1f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 747.180605][ T9339] RAX: ffffffffffffffda RBX: 00007faf4f1f66c0 RCX: 00007faf50f5e98e [ 747.188589][ T9339] RDX: 0000000000000400 RSI: 00007faf4f1f5c00 RDI: ffffffffffffff9c [ 747.196560][ T9339] RBP: 00007faf4f1f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 747.204616][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 747.212576][ T9339] R13: 00007faf51226128 R14: 00007faf51226090 R15: 00007fffd7be9f88 [ 747.220544][ T9339] [ 747.223828][ T9339] Kernel Offset: disabled [ 747.228147][ T9339] Rebooting in 86400 seconds..