last executing test programs: 20.412652112s ago: executing program 2 (id=878): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}, [@generic="0f00010070d871566b"]}, 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)="06000000", 0x4}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 16.662965264s ago: executing program 1 (id=882): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[], 0x0}, 0x94) 16.660210244s ago: executing program 4 (id=883): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) r4 = epoll_create1(0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000180)={r4, 0x2}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) recvmsg(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20063) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000002c0)) 15.164636997s ago: executing program 4 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) r3 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) 15.133958968s ago: executing program 0 (id=885): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, 'sys_mnt/block/zram0/disksize\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f00, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0xffff, 0x400006}, 0x0, {0x0, 0x9a}}) 13.983581973s ago: executing program 2 (id=886): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r4, r3, 0x0, 0x40001) 13.571779002s ago: executing program 1 (id=887): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) read$dsp(r4, &(0x7f0000000280)=""/189, 0xbd) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 13.479489804s ago: executing program 0 (id=889): syz_emit_ethernet(0x66, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0xfe37, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) 12.607536743s ago: executing program 4 (id=890): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 11.281750752s ago: executing program 2 (id=891): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') fgetxattr(r0, 0x0, &(0x7f00000001c0)=""/44, 0x2c) read$msr(r0, &(0x7f0000000100)=""/106, 0x6a) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) syz_emit_ethernet(0x0, 0x0, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) 10.755882064s ago: executing program 1 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1fe) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) close(r1) unlinkat(r1, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) 8.681522979s ago: executing program 0 (id=894): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000340)='\x00', 0x0) listen(r0, 0xfffffff7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x282422, &(0x7f0000000400)=ANY=[]) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) fsetxattr$security_ima(r3, 0x0, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 8.613941011s ago: executing program 1 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x0, 0xce2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) 6.859835039s ago: executing program 1 (id=898): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[], 0x0}, 0x94) 5.723019234s ago: executing program 2 (id=900): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x24040884}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r4, &(0x7f0000000180)='10', 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x20042, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) 5.716213275s ago: executing program 4 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000540), 0x0, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, r3) keyctl$clear(0x7, r3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x3008804, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 5.619981337s ago: executing program 0 (id=902): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r4, r3, 0x0, 0x40001) 4.10590225s ago: executing program 3 (id=903): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) pipe(&(0x7f0000000500)) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.012985842s ago: executing program 3 (id=904): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000300000000000000000000000000000200000000000000000000000602"], 0x0, 0x56}, 0x28) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4$alg(r2, 0x0, 0x0, 0x800) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.789929307s ago: executing program 4 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), 0x0, 0x2}, 0x20) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) 2.911300086s ago: executing program 0 (id=906): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) lchown(&(0x7f0000000040)='.\x02\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x10, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0xff]}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x800) mkdir(0x0, 0x12) shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmctl$SHM_INFO(r1, 0xe, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) 2.899651876s ago: executing program 3 (id=907): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x4040040) socket$packet(0x11, 0x2, 0x300) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) chdir(0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') preadv(r2, &(0x7f0000001140)=[{0x0}], 0x1, 0x1fd, 0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x4000000) 2.482237546s ago: executing program 2 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x12397344714f8a93, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.481989715s ago: executing program 4 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0x3}, {0xffffffff, 0x0, 0x9, 0xa}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x8e) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 2.481168055s ago: executing program 3 (id=910): syz_open_dev$hidraw(0x0, 0x785, 0x20000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x6, 0x280000) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x4000031, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000c80)=@v1={0x0, @aes128, 0x10, @desc2}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x7ff, 0x12) 1.723894872s ago: executing program 0 (id=911): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1e, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x1c) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x8]}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYRES8=r0], 0x60}}, 0x4000844) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) 1.39732407s ago: executing program 2 (id=912): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x40400) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000001c00)=[{&(0x7f0000000100)='2', 0x1}, {&(0x7f0000000400)="2d36f0", 0x3}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) 1.326340811s ago: executing program 3 (id=913): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) fcntl$notify(r0, 0x402, 0x29) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') preadv(r6, 0x0, 0x0, 0x7, 0x20000000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)={0x18, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) 196.702796ms ago: executing program 3 (id=914): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x6}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 1 (id=915): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000540)='12', 0x2) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='1843', 0x4) close(r1) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(0x0, &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0) symlink(0x0, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(0x0, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') unlink(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 55.881714][ T4173] cgroup: Unknown subsys name 'net' [ 56.010493][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.350167][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.829812][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 58.873569][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.979686][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.041342][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 59.057023][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.065812][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.075379][ T4197] device bridge_slave_0 entered promiscuous mode [ 59.083597][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.091906][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.099786][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.126323][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 59.136217][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.143956][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.152112][ T4197] device bridge_slave_1 entered promiscuous mode [ 59.159800][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.167143][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.175138][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.243043][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.260353][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.267688][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.276382][ T4187] device bridge_slave_0 entered promiscuous mode [ 59.293537][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.305582][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.325665][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.332933][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.341575][ T4187] device bridge_slave_1 entered promiscuous mode [ 59.361375][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.392462][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.399673][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.407862][ T4188] device bridge_slave_0 entered promiscuous mode [ 59.425775][ T4186] team0: Port device team_slave_0 added [ 59.441350][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.451690][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.459215][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.467183][ T4188] device bridge_slave_1 entered promiscuous mode [ 59.482376][ T4197] team0: Port device team_slave_0 added [ 59.490253][ T4186] team0: Port device team_slave_1 added [ 59.505077][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.540783][ T4197] team0: Port device team_slave_1 added [ 59.561079][ T4187] team0: Port device team_slave_0 added [ 59.575288][ T4187] team0: Port device team_slave_1 added [ 59.593704][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.600982][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.628142][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.642084][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.661206][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.670657][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.677985][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.686406][ T4192] device bridge_slave_0 entered promiscuous mode [ 59.695057][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.702468][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.729137][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.742211][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.750378][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.778810][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.811737][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.819225][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.827348][ T4192] device bridge_slave_1 entered promiscuous mode [ 59.834717][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.841688][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.868537][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.891192][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.898273][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.924281][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.948317][ T4188] team0: Port device team_slave_0 added [ 59.963010][ T4188] team0: Port device team_slave_1 added [ 59.970057][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.977288][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.003398][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.054612][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.067228][ T4197] device hsr_slave_0 entered promiscuous mode [ 60.075896][ T4197] device hsr_slave_1 entered promiscuous mode [ 60.085723][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.093461][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.101153][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.109131][ T4186] Cannot create hsr debugfs directory [ 60.123380][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.159013][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.166261][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.192691][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.212968][ T4192] team0: Port device team_slave_0 added [ 60.234821][ T4187] device hsr_slave_0 entered promiscuous mode [ 60.241543][ T4187] device hsr_slave_1 entered promiscuous mode [ 60.248928][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.258497][ T4187] Cannot create hsr debugfs directory [ 60.264525][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.271496][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.298011][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.314935][ T4192] team0: Port device team_slave_1 added [ 60.409851][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.417388][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.444530][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.459574][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.467909][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.495917][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.507427][ T4193] Bluetooth: hci0: command 0x0409 tx timeout [ 60.540886][ T4188] device hsr_slave_0 entered promiscuous mode [ 60.548382][ T4188] device hsr_slave_1 entered promiscuous mode [ 60.555941][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.563601][ T4188] Cannot create hsr debugfs directory [ 60.584925][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 60.597818][ T4192] device hsr_slave_0 entered promiscuous mode [ 60.604605][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 60.604806][ T4192] device hsr_slave_1 entered promiscuous mode [ 60.616760][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 60.625516][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 60.629761][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.640530][ T4192] Cannot create hsr debugfs directory [ 60.890454][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.907602][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.923086][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.932715][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.966779][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.977338][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.993287][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.019060][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.053249][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.077174][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.096357][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.125434][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.203629][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.217444][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.257487][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.267854][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.279305][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.297468][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.310360][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.323822][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.335940][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.357602][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.367405][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.378157][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.387716][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.398798][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.412553][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.434181][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.453225][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.480702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.491184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.501503][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.512570][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.522277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.552531][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.569330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.579868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.589448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.606171][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.630556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.639177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.650228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.659637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.671168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.693770][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.708167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.719872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.728543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.738969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.749579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.759139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.767932][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.775222][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.783480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.802688][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.820040][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.829694][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.838458][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.850864][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.861605][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.870675][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.878875][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.889395][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.899468][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.906790][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.919659][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.947404][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.958551][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.967905][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.977038][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.989418][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.000271][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.007573][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.016059][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.025070][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.037886][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.047962][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.059536][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.087231][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.100346][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.119957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.130653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.141493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.163489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.177286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.206123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.215318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.225593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.236573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.245582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.254095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.271426][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.284669][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.295183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.306048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.323228][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.354213][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.364199][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.374731][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.388335][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.419634][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.447390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.459307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.468296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.476785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.493766][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.507744][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.535039][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.565897][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.573167][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.586534][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 62.588632][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.618427][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.636951][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.653616][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.663441][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.673303][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 62.677089][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.681040][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 62.692069][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.702769][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 62.706719][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.711840][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 62.719043][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.736668][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.746389][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.755214][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.785809][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.801625][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.813434][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.831620][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.843951][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.860229][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.870331][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.878083][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.886268][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.894607][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.907743][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.921298][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.934279][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.943218][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.985486][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.998301][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.007782][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.017990][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.029476][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.039372][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.050152][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.059468][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.099159][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.112781][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.128812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.138789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.152684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.166150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.178176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.189047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.198436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.208648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.249799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.262628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.273817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.286543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.297382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.312726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.334122][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.355601][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.375825][ T4192] device veth0_vlan entered promiscuous mode [ 63.391363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.401855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.413684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.424877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.435825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.449165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.459110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.469657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.490577][ T4197] device veth0_vlan entered promiscuous mode [ 63.520035][ T4192] device veth1_vlan entered promiscuous mode [ 63.542035][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.561388][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.579843][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.590225][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.607382][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.619361][ T4197] device veth1_vlan entered promiscuous mode [ 63.638366][ T4186] device veth0_vlan entered promiscuous mode [ 63.653353][ T4186] device veth1_vlan entered promiscuous mode [ 63.663676][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.678669][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.690349][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.703156][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.712001][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.736185][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.751022][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.761624][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.776497][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.797206][ T4192] device veth0_macvtap entered promiscuous mode [ 63.818068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.827151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.837970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.846760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.861683][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.876574][ T4192] device veth1_macvtap entered promiscuous mode [ 63.906384][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.916509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.928668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.937466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.947573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.956556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.968967][ T4197] device veth0_macvtap entered promiscuous mode [ 63.984507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.005098][ T4197] device veth1_macvtap entered promiscuous mode [ 64.016352][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.045445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.058547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.079192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.095357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.111347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.122186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.138524][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.150006][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.165419][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.177771][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.191935][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.202756][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.217392][ T4186] device veth0_macvtap entered promiscuous mode [ 64.228012][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.237906][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.247121][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.260176][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.269408][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.288221][ T4188] device veth0_vlan entered promiscuous mode [ 64.333790][ T4186] device veth1_macvtap entered promiscuous mode [ 64.348505][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.359735][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.368864][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.383425][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.392762][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.414342][ T4188] device veth1_vlan entered promiscuous mode [ 64.429086][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.441538][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.453858][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.463323][ T4187] device veth0_vlan entered promiscuous mode [ 64.480340][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.492863][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.511826][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.526276][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.538773][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.553094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.566711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.578569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.589592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.602126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.611979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.628513][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.651733][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.667250][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.674913][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 64.685990][ T4187] device veth1_vlan entered promiscuous mode [ 64.705281][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.716203][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.729717][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.740789][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.752578][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.760868][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 64.771283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.780479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.781993][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 64.789331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.796565][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 64.803605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.817913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.827951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.835831][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 64.842434][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.852263][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.861935][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.872024][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.898753][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.910558][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.922015][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.932217][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.991686][ T4187] device veth0_macvtap entered promiscuous mode [ 65.015339][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.015433][ T4188] device veth0_macvtap entered promiscuous mode [ 65.023385][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.058224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.073445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.088396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.098567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.109425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.122677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.135040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.151808][ T4187] device veth1_macvtap entered promiscuous mode [ 65.174992][ T4188] device veth1_macvtap entered promiscuous mode [ 65.221428][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.232252][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.260334][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.283254][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.295577][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.310914][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.321685][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.333161][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.346203][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.355218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.363236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.372731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.391605][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.412152][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.422815][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.434772][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.447101][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.461672][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.473657][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.485161][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.498916][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.516789][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.529568][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.540159][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.552950][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.564285][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.576022][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.588954][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.599250][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.606484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.615084][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.628860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.639197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.652859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.665564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.689471][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.702496][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.718579][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.735599][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.750731][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.761916][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.773837][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.786581][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.801638][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.822303][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.832523][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.870504][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.873413][ T4264] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.897274][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.936643][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.947863][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.963648][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.973826][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.988378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.998803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.032507][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.049716][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.069069][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.077537][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.110197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.126878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.202559][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.218824][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.261076][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.018328][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.056797][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 67.066126][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 67.072597][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 67.089156][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.233290][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.244191][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.277848][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 67.285040][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 67.319326][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.327410][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.355194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.363488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.461261][ T4286] Zero length message leads to an empty skb [ 67.518391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.161056][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.212052][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.239033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.370449][ T4294] device syzkaller0 entered promiscuous mode [ 68.428332][ T4298] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.476057][ T4317] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.213112][ T4321] tipc: Started in network mode [ 70.237223][ T4321] tipc: Node identity 7e33c93a93dc, cluster identity 4711 [ 70.271925][ T4329] dccp_v6_rcv: dropped packet with invalid checksum [ 70.317025][ T4321] tipc: Enabled bearer , priority 0 [ 70.338437][ T4327] device syzkaller0 entered promiscuous mode [ 70.453730][ T4321] tipc: Resetting bearer [ 70.545921][ T4319] tipc: Resetting bearer [ 70.576729][ T4319] tipc: Disabling bearer [ 70.592663][ T4340] netlink: 292 bytes leftover after parsing attributes in process `syz.4.21'. [ 71.369707][ T4340] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.485092][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.492263][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.585578][ T4340] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.962590][ T4385] loop1: detected capacity change from 0 to 16 [ 74.164361][ T4385] netlink: 'syz.1.30': attribute type 8 has an invalid length. [ 75.362688][ T4403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 76.134942][ T4419] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 76.151926][ T4419] team0: Device veth1_vlan failed to register rx_handler [ 76.205421][ T4416] device syzkaller0 entered promiscuous mode [ 76.364909][ T4419] syz.1.36 (4419) used greatest stack depth: 20464 bytes left [ 78.015783][ T4433] netlink: 'syz.0.38': attribute type 12 has an invalid length. [ 78.026322][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 78.078656][ T4433] bond0: option primary_reselect: invalid value (183) [ 78.287887][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 78.307538][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 78.330325][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 78.346922][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 78.364932][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 78.383798][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 78.401747][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 79.246911][ T4446] loop3: detected capacity change from 0 to 512 [ 79.574102][ T4441] syz.4.43 (4441) used greatest stack depth: 20272 bytes left [ 79.611368][ T4446] EXT4-fs (loop3): Test dummy encryption mode enabled [ 79.661599][ T4446] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.677090][ T4446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.965228][ T4446] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.262699][ T4446] EXT4-fs (loop3): 1 truncate cleaned up [ 80.411992][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 83.032154][ T4505] loop2: detected capacity change from 0 to 40427 [ 83.145942][ T4505] F2FS-fs (loop2): invalid crc value [ 83.230414][ T4505] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.308114][ T4505] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.947149][ T4515] loop0: detected capacity change from 0 to 256 [ 85.214322][ C1] sched: RT throttling activated [ 85.400234][ T4192] attempt to access beyond end of device [ 85.400234][ T4192] loop2: rw=2049, want=45104, limit=40427 [ 85.881487][ T26] audit: type=1800 audit(1788381373.915:2): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="addr_trtype" dev="configfs" ino=33989 res=0 errno=0 [ 86.010408][ T4529] nvmet_tcp: malformed ip/port passed: 127.0.0.1: [ 86.061786][ T26] audit: type=1800 audit(1788381373.935:3): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="addr_traddr" dev="configfs" ino=33990 res=0 errno=0 [ 86.874984][ T26] audit: type=1800 audit(1788381374.045:4): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="addr_adrfam" dev="configfs" ino=33993 res=0 errno=0 [ 86.915936][ T7] cfg80211: failed to load regulatory.db [ 86.926404][ T4537] nvmet: Invalid value '9 [ 86.926404][ T4537] ½' for trtype [ 86.975478][ T4538] ip_tables: iptables: counters copy to user failed while replacing table [ 86.987251][ T4538] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.074553][ T26] audit: type=1800 audit(1788381374.965:5): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="addr_trsvcid" dev="configfs" ino=33996 res=0 errno=0 [ 87.189730][ T4544] device syzkaller0 entered promiscuous mode [ 87.229275][ T4544] tipc: Started in network mode [ 87.243488][ T4544] tipc: Node identity 467aea42567e, cluster identity 4711 [ 87.265620][ T4544] tipc: Enabled bearer , priority 0 [ 87.286717][ T4546] device syzkaller0 entered promiscuous mode [ 87.339854][ T4546] tipc: Started in network mode [ 87.365524][ T4546] tipc: Node identity 2eb9e6706f13, cluster identity 4711 [ 87.373313][ T4546] tipc: Enabled bearer , priority 0 [ 87.418508][ T4544] tipc: Resetting bearer [ 87.450547][ T4545] tipc: Resetting bearer [ 87.488774][ T4545] tipc: Disabling bearer [ 87.500835][ T4542] tipc: Resetting bearer [ 87.540944][ T4553] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.574232][ T4542] tipc: Disabling bearer [ 87.594788][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.610718][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.618548][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.636970][ T4548] device bridge_slave_0 left promiscuous mode [ 87.644675][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.683740][ T4548] device bridge_slave_1 left promiscuous mode [ 87.692147][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.706546][ T4548] bond0: (slave bond_slave_0): Releasing backup interface [ 87.723725][ T4548] bond0: (slave bond_slave_1): Releasing backup interface [ 87.787554][ T4548] team0: Port device team_slave_0 removed [ 87.815777][ T4548] team0: Port device team_slave_1 removed [ 87.822843][ T4548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.831997][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.848322][ T4548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.871161][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.002906][ T4555] loop1: detected capacity change from 0 to 16 [ 88.077422][ T4555] erofs: (device loop1): mounted with root inode @ nid 36. [ 88.169593][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.133088][ T4570] device syzkaller0 entered promiscuous mode [ 89.152445][ T4571] using random self ethernet address [ 89.271388][ T4571] using random host ethernet address [ 89.316757][ T4555] attempt to access beyond end of device [ 89.316757][ T4555] loop1: rw=524288, want=12304, limit=16 [ 89.349297][ T4555] attempt to access beyond end of device [ 89.349297][ T4555] loop1: rw=524288, want=1072, limit=16 [ 89.379243][ T4555] attempt to access beyond end of device [ 89.379243][ T4555] loop1: rw=0, want=12304, limit=16 [ 89.404348][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.409065][ T26] audit: type=1800 audit(1788381377.445:6): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.70" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 89.716881][ T4576] device syzkaller0 entered promiscuous mode [ 89.831491][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.845413][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.857064][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.868465][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.884082][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.897611][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.915173][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.930868][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.941629][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.952637][ T4577] tc action pedit offset must be on 32 bit boundaries [ 89.968492][ T4577] 0: reclassify loop, rule prio 0, protocol 800 [ 90.166101][ T4588] device syzkaller0 entered promiscuous mode [ 90.219561][ T4588] TC_ACT_REPEAT abuse ? [ 90.486791][ T4597] overlayfs: missing 'lowerdir' [ 90.719107][ T4594] netlink: 116 bytes leftover after parsing attributes in process `syz.3.80'. [ 91.110747][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.271944][ T4594] netlink: 'syz.3.80': attribute type 12 has an invalid length. [ 91.393661][ T4598] process 'syz.0.81' launched '/dev/fd/3' with NULL argv: empty string added [ 92.124340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 92.428753][ T4625] hub 9-0:1.0: USB hub found [ 92.439563][ T4625] hub 9-0:1.0: 1 port detected [ 92.453795][ T4626] loop4: detected capacity change from 0 to 164 [ 92.537169][ T4626] ======================================================= [ 92.537169][ T4626] WARNING: The mand mount option has been deprecated and [ 92.537169][ T4626] and is ignored by this kernel. Remove the mand [ 92.537169][ T4626] option from the mount to silence this warning. [ 92.537169][ T4626] ======================================================= [ 92.583784][ T4630] netlink: 'syz.0.89': attribute type 3 has an invalid length. [ 93.558989][ T4647] bridge0: port 1(ipvlan2) entered blocking state [ 93.565560][ T4647] bridge0: port 1(ipvlan2) entered disabled state [ 94.017221][ T4652] loop3: detected capacity change from 0 to 16 [ 94.026030][ T4651] loop1: detected capacity change from 0 to 8 [ 94.072932][ T4652] erofs: (device loop3): mounted with root inode @ nid 36. [ 94.122154][ T4657] netlink: 'syz.4.97': attribute type 1 has an invalid length. [ 94.140290][ T4657] netlink: 84 bytes leftover after parsing attributes in process `syz.4.97'. [ 94.358606][ T4651] SQUASHFS error: Unable to read inode 0xe3 [ 95.076491][ T4670] tipc: Enabling of bearer rejected, failed to enable media [ 97.050745][ T4671] device syzkaller0 entered promiscuous mode [ 97.098763][ T4688] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.110222][ T4688] crypto_alloc_aead failed rc=-4 [ 98.385918][ T4713] trusted_key: encrypted_key: insufficient parameters specified [ 100.287082][ T4735] device syzkaller0 entered promiscuous mode [ 100.674339][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.694338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.714337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.734347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.754336][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.774377][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 100.784354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 100.794350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.962929][ T4751] device syzkaller0 entered promiscuous mode [ 104.333311][ T4769] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.123'. [ 104.419370][ T4771] loop1: detected capacity change from 0 to 32768 [ 104.585703][ T4771] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.467485][ T4771] syz.1.124 (4771) used greatest stack depth: 18304 bytes left [ 105.538622][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 106.967378][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 106.985179][ T4789] netlink: 288 bytes leftover after parsing attributes in process `syz.4.117'. [ 108.264555][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.284264][ T4793] loop2: detected capacity change from 0 to 32768 [ 108.415011][ T4793] JBD2: Ignoring recovery information on journal [ 108.565340][ T4793] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 108.583136][ T4822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.135'. [ 108.654620][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.674219][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.711880][ T4233] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.736428][ T26] audit: type=1800 audit(1788381396.775:7): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.121" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 108.737722][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.845926][ T4233] usb 2-1: config 0 descriptor?? [ 109.061181][ T4792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.199340][ T4830] loop4: detected capacity change from 0 to 1024 [ 109.289292][ T4830] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 109.340078][ T4830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102] [ 109.359167][ T4830] System zones: 0-1, 3-12 [ 109.420680][ T4830] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,nodelalloc,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 110.105017][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 111.380042][ T23] usb 2-1: USB disconnect, device number 2 [ 111.384606][ T4850] device syzkaller0 entered promiscuous mode [ 111.555488][ T4853] loop2: detected capacity change from 0 to 1024 [ 111.735292][ T4858] device syzkaller0 entered promiscuous mode [ 111.971200][ T4861] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0 [ 112.210246][ T4863] syz.3.146 uses obsolete (PF_INET,SOCK_PACKET) [ 114.806455][ T4875] loop1: detected capacity change from 0 to 512 [ 115.307262][ T4875] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.379439][ T4875] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.214214][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.042056][ T4875] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 117.134211][ T4875] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.149: mark_inode_dirty error [ 117.242462][ T4875] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 117.364594][ T4233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.377456][ T4875] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.149: mark_inode_dirty error [ 117.762595][ T4917] futex_wake_op: syz.3.158 tries to shift op by -1; fix this program [ 117.915952][ T4875] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 118.435268][ T4233] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 118.444421][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.503790][ T4875] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.149: mark_inode_dirty error [ 118.515306][ T4233] usb 1-1: can't set config #1, error -71 [ 118.554574][ T4233] usb 1-1: USB disconnect, device number 2 [ 118.571105][ T4875] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 118.601942][ T4875] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.149: mark_inode_dirty error [ 118.635252][ T4875] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 119.405168][ T4875] EXT4-fs error (device loop1): ext4_ext_truncate:4487: inode #15: comm syz.1.149: mark_inode_dirty error [ 123.745795][ T4965] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 123.801517][ T4965] tipc: Enabled bearer , priority 10 [ 123.953018][ T26] audit: type=1800 audit(1788381411.985:8): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.185" name="addr_trtype" dev="configfs" ino=35861 res=0 errno=0 [ 123.957875][ T4978] nvmet_tcp: enabling port 1 (127.0.0.1:8) [ 124.009204][ T4980] loop1: detected capacity change from 0 to 1024 [ 124.041903][ T26] audit: type=1800 audit(1788381411.985:9): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.185" name="addr_traddr" dev="configfs" ino=35862 res=0 errno=0 [ 124.078345][ T4984] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 124.128555][ T26] audit: type=1800 audit(1788381411.985:10): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.185" name="addr_trsvcid" dev="configfs" ino=35863 res=0 errno=0 [ 124.257618][ T26] audit: type=1800 audit(1788381411.985:11): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.185" name="addr_adrfam" dev="configfs" ino=35864 res=0 errno=0 [ 124.335627][ T4991] loop4: detected capacity change from 0 to 16 [ 124.355994][ T4991] erofs: (device loop4): mounted with root inode @ nid 36. [ 124.885594][ T4994] loop2: detected capacity change from 0 to 512 [ 124.906677][ T4973] tipc: Node number set to 268757570 [ 125.051394][ T4991] attempt to access beyond end of device [ 125.051394][ T4991] loop4: rw=524288, want=12304, limit=16 [ 125.062662][ T4991] attempt to access beyond end of device [ 125.062662][ T4991] loop4: rw=524288, want=1072, limit=16 [ 125.073878][ T4991] attempt to access beyond end of device [ 125.073878][ T4991] loop4: rw=0, want=12304, limit=16 [ 125.084910][ T26] audit: type=1800 audit(1788381413.125:12): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.177" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 125.169457][ T4998] usb0: HOST MAC 22:ab:6a:5f:a0:3c [ 125.180400][ T4994] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.229477][ T4998] usb0: MAC 2a:cd:52:3c:d7:33 [ 125.239918][ T4994] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.344969][ T5014] overlayfs: missing 'lowerdir' [ 127.649200][ T4261] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.024458][ T4261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.050409][ T4261] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 128.098139][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.105137][ T5041] tipc: Started in network mode [ 128.141859][ T5050] loop1: detected capacity change from 0 to 164 [ 128.148696][ T5041] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 128.166938][ T5053] loop4: detected capacity change from 0 to 1024 [ 128.180038][ T5041] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 128.222911][ T5041] tipc: Enabled bearer , priority 10 [ 128.474801][ T4261] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 128.551332][ T5058] rock: directory entry would overflow storage [ 128.557799][ T5058] rock: sig=0x4f50, size=4, remaining=3 [ 128.563440][ T5058] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 129.250601][ T4261] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 86:ec:2b:06:77:79 [ 129.267742][ T4261] usb 3-1: USB disconnect, device number 2 [ 129.284894][ T4261] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 130.103877][ T4233] tipc: Node number set to 1 [ 131.412603][ T5093] loop4: detected capacity change from 0 to 512 [ 131.537846][ T5107] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.587133][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.664520][ T5093] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.800879][ T5120] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 131.918774][ T5120] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.194: mark_inode_dirty error [ 131.947072][ T5120] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 131.960357][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 132.256071][ T5120] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.194: mark_inode_dirty error [ 132.707260][ T5129] loop2: detected capacity change from 0 to 256 [ 132.828251][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836050][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.024452][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.600707][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 133.609766][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 133.619268][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 133.628225][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 133.636887][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 133.645293][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 133.653840][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 134.815227][ T4229] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.846582][ T4229] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 134.874397][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.050054][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 135.854887][ T4229] qmi_wwan: probe of 2-1:1.0 failed with error -71 [ 136.346605][ T4229] usb 2-1: USB disconnect, device number 3 [ 137.472423][ T5180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.594670][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 142.226149][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.288617][ T5224] loop0: detected capacity change from 0 to 128 [ 144.224662][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 144.234171][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 144.322678][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 144.386359][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 144.415237][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 144.439687][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 148.976387][ T5267] device syzkaller0 entered promiscuous mode [ 155.180166][ T5320] device syzkaller0 entered promiscuous mode [ 155.254773][ T5320] tipc: Enabled bearer , priority 0 [ 155.307681][ T5320] tipc: Resetting bearer [ 156.372396][ T5334] loop1: detected capacity change from 0 to 131072 [ 156.424118][ T4229] tipc: Node number set to 1101719152 [ 156.454682][ T5318] tipc: Resetting bearer [ 156.488361][ T5334] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 156.496392][ T5334] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 156.505054][ T5334] F2FS-fs (loop1): Test dummy encryption mode enabled [ 156.513200][ T5334] F2FS-fs (loop1): invalid crc value [ 156.572661][ T5318] tipc: Disabling bearer [ 156.572733][ T5334] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.080672][ T5334] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 157.140000][ T5334] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 157.152128][ T5334] F2FS-fs (loop1): Start checkpoint disabled! [ 157.403116][ T5334] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 157.410228][ T5334] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 159.125597][ T4189] Bluetooth: Wrong link type (-22) [ 163.002588][ T5407] loop4: detected capacity change from 0 to 1024 [ 163.012073][ T5408] loop1: detected capacity change from 0 to 256 [ 163.299729][ T5408] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 163.440665][ T5407] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.564134][ T5430] device syzkaller0 entered promiscuous mode [ 164.646150][ T5432] device syzkaller0 entered promiscuous mode [ 165.836738][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 165.900980][ T5443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.036846][ T5464] loop2: detected capacity change from 0 to 256 [ 167.100780][ T5443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.035572][ T5480] device syzkaller0 entered promiscuous mode [ 169.127800][ T5501] loop4: detected capacity change from 0 to 128 [ 169.221990][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 169.989451][ T5502] loop0: detected capacity change from 0 to 128 [ 170.055931][ T5502] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 170.068395][ T5502] hpfs: filesystem error: improperly stopped [ 170.074665][ T5502] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 170.083073][ T5502] hpfs: You really don't want any checks? You are crazy... [ 170.090471][ T5502] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 170.098466][ T5502] hpfs: code page support is disabled [ 170.110001][ T5502] hpfs: hpfs_map_4sectors(): unaligned read [ 170.124373][ T5502] hpfs: hpfs_map_4sectors(): unaligned read [ 170.130314][ T5502] hpfs: filesystem error: unable to find root dir [ 170.157679][ T5502] hpfs: hpfs_map_4sectors(): unaligned read [ 170.165919][ T5502] hpfs: hpfs_map_sector(): read error [ 170.510302][ T5507] loop2: detected capacity change from 0 to 1024 [ 170.594616][ T5507] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 170.794957][ T5510] loop4: detected capacity change from 0 to 256 [ 172.023253][ T5516] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 172.122645][ T5519] netlink: 84 bytes leftover after parsing attributes in process `syz.1.300'. [ 173.012344][ T5516] netlink: 84 bytes leftover after parsing attributes in process `syz.1.300'. [ 176.143823][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 176.203543][ T5550] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 177.406406][ T5573] device syzkaller0 entered promiscuous mode [ 177.420952][ T5575] loop1: detected capacity change from 0 to 512 [ 177.439125][ T5572] tc action pedit offset -64 out of bounds [ 177.444984][ T5572] tc action pedit offset -64 out of bounds [ 177.450787][ T5572] tc action pedit offset -64 out of bounds [ 177.456635][ T5572] tc action pedit offset -64 out of bounds [ 177.462446][ T5572] tc action pedit offset -64 out of bounds [ 177.468280][ T5572] tc action pedit offset -64 out of bounds [ 177.474082][ T5572] tc action pedit offset -64 out of bounds [ 177.479907][ T5572] tc action pedit offset -64 out of bounds [ 177.485733][ T5572] tc action pedit offset -64 out of bounds [ 177.491550][ T5572] tc action pedit offset -64 out of bounds [ 177.497395][ T5572] 0: reclassify loop, rule prio 0, protocol 800 [ 177.639869][ T5580] loop4: detected capacity change from 0 to 256 [ 178.373425][ T5575] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 178.450646][ T5575] EXT4-fs (loop1): Mount option "data_err=ignore" incompatible with ext2 [ 178.657754][ T5589] fuse: Bad value for 'fd' [ 180.511085][ T5602] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 181.384706][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 181.389189][ T5615] loop2: detected capacity change from 0 to 1024 [ 181.397428][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 181.404542][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 181.414630][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 181.434423][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 181.572479][ T5615] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 182.021121][ T5621] EXT4-fs warning (device loop2): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 182.197406][ T5623] capability: warning: `syz.0.328' uses deprecated v2 capabilities in a way that may be insecure [ 182.808640][ T5627] tipc: Started in network mode [ 182.813620][ T5627] tipc: Node identity dec1bf1b03a2, cluster identity 4711 [ 182.852086][ T5612] loop1: detected capacity change from 0 to 32768 [ 182.899246][ T5627] tipc: Enabled bearer , priority 0 [ 183.031040][ T5630] device syzkaller0 entered promiscuous mode [ 183.060136][ T5624] tipc: Resetting bearer [ 183.125992][ T5635] IPVS: sh: FWM 3 0x00000003 - no destination available [ 183.575504][ T5634] loop4: detected capacity change from 0 to 256 [ 183.775160][ T5624] tipc: Disabling bearer [ 184.896112][ T5640] loop2: detected capacity change from 0 to 131072 [ 185.001683][ T5640] F2FS-fs (loop2): invalid crc value [ 186.255279][ T5640] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.288445][ T5640] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 186.304727][ T5640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 187.783976][ T5673] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5673] [ 187.800295][ T5673] netlink: zone id is out of range [ 190.288297][ T5693] loop4: detected capacity change from 0 to 256 [ 191.245795][ T5705] hub 8-0:1.0: USB hub found [ 191.284433][ T5705] hub 8-0:1.0: 1 port detected [ 191.567231][ T4464] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 191.954684][ T4464] usb 2-1: not running at top speed; connect to a high speed hub [ 192.166151][ T4464] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 192.314773][ T4464] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.387662][ T4464] usb 2-1: config 1 has no interface number 0 [ 192.397847][ T4464] usb 2-1: config 1 interface 167 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.451913][ T4464] usb 2-1: config 1 interface 167 has no altsetting 0 [ 192.724508][ T4464] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 192.743449][ T4464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.770470][ T4464] usb 2-1: Product: syz [ 192.777780][ T4464] usb 2-1: Manufacturer: syz [ 192.782438][ T4464] usb 2-1: SerialNumber: syz [ 192.902324][ T5729] device syzkaller0 entered promiscuous mode [ 193.455950][ T5729] tipc: Enabled bearer , priority 0 [ 193.472645][ T5728] tipc: Resetting bearer [ 193.500358][ T5728] tipc: Disabling bearer [ 193.514789][ T4464] usb 2-1: USB disconnect, device number 4 [ 194.284757][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.293397][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400963][ T5743] ip_tables: iptables: counters copy to user failed while replacing table [ 194.426566][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 194.450042][ T5742] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 195.054591][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 195.334640][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 195.392835][ T5757] device syzkaller0 entered promiscuous mode [ 195.470093][ T1110] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.487088][ T1110] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.515677][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 195.556475][ T5761] CIFS: Attempting to mount \\127.0.0.1\share [ 195.562797][ T5761] CIFS: VFS: No username specified [ 195.662345][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.670735][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.679100][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.687456][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.695803][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.704123][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.712510][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.720858][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.729199][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.737545][ T5765] tc action pedit unable to extract header offset for header type (0x4) [ 195.745910][ T5765] 0: reclassify loop, rule prio 0, protocol 800 [ 195.841455][ T5763] infiniband syz0: set active [ 195.847630][ T1110] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.849376][ T5763] infiniband syz0: added bond0 [ 196.521687][ T5763] infiniband syz0: Couldn't open port 1 [ 196.567984][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.576243][ T1110] usb 5-1: Product: syz [ 196.580404][ T1110] usb 5-1: Manufacturer: syz [ 196.585330][ T1110] usb 5-1: SerialNumber: syz [ 196.614781][ T5763] RDS/IB: syz0: added [ 196.619243][ T5763] smc: adding ib device syz0 with port count 1 [ 196.625544][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 196.628702][ T5775] loop1: detected capacity change from 0 to 256 [ 196.631146][ T5763] smc: ib device syz0 port 1 has pnetid [ 196.637602][ T5776] loop2: detected capacity change from 0 to 256 [ 196.754652][ T21] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 196.778830][ T21] usb 1-1: config 0 has no interface number 0 [ 197.030969][ T1110] usb 5-1: 0:2 : does not exist [ 197.555687][ T1110] usb 5-1: USB disconnect, device number 2 [ 197.571027][ T21] usb 1-1: string descriptor 0 read error: -71 [ 197.589252][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 197.980094][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.995088][ T21] usb 1-1: config 0 descriptor?? [ 198.017571][ T21] usb 1-1: can't set config #0, error -71 [ 198.063980][ T21] usb 1-1: USB disconnect, device number 3 [ 198.117579][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 198.279603][ T5791] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 199.331024][ T4288] udevd[4288]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.454468][ T26] audit: type=1326 audit(1788381488.475:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 200.528436][ T26] audit: type=1326 audit(1788381488.475:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 200.552671][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.243389][ T26] audit: type=1326 audit(1788381488.525:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 201.275489][ T26] audit: type=1326 audit(1788381488.525:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 201.299384][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.335778][ T5821] loop0: detected capacity change from 0 to 256 [ 201.404386][ T26] audit: type=1326 audit(1788381488.525:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 202.402648][ T26] audit: type=1326 audit(1788381488.525:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 203.598522][ T26] audit: type=1326 audit(1788381488.525:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 203.977840][ T26] audit: type=1326 audit(1788381488.525:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 204.293410][ T26] audit: type=1326 audit(1788381488.525:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 204.317344][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.323577][ T26] audit: type=1326 audit(1788381488.525:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.2.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f2474aa3159 code=0x7ffc0000 [ 207.110384][ T5847] loop1: detected capacity change from 0 to 256 [ 209.116257][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 209.349496][ T5851] bond0: option arp_all_targets: invalid value (183) [ 211.986639][ T5880] loop2: detected capacity change from 0 to 256 [ 217.277868][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 217.327881][ T5905] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 217.362014][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 217.377311][ T5915] tipc: Enabling of bearer rejected, failed to enable media [ 218.521887][ T5935] loop2: detected capacity change from 0 to 256 [ 220.454331][ T5943] loop4: detected capacity change from 0 to 256 [ 221.134471][ T5943] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.162179][ T5943] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 221.205940][ T5943] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 222.109797][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 222.109813][ T26] audit: type=1800 audit(1788381509.955:38): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.417" name="file1" dev="loop4" ino=1048669 res=0 errno=0 [ 222.476854][ T5964] loop2: detected capacity change from 0 to 32768 [ 222.696838][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 222.711299][ T5964] JBD2: Ignoring recovery information on journal [ 222.831239][ T5961] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 222.879842][ T5964] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 223.597797][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 223.669814][ T5987] loop4: detected capacity change from 0 to 256 [ 223.707027][ T5987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 223.787228][ T5990] loop1: detected capacity change from 0 to 8 [ 225.138946][ T6001] loop2: detected capacity change from 0 to 1024 [ 225.406994][ T6001] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 225.416628][ T6001] EXT4-fs (loop2): orphan cleanup on readonly fs [ 225.427008][ T6001] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.426: Invalid inode table block 0 in block_group 0 [ 225.441710][ T6001] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 225.453240][ T6001] EXT4-fs error (device loop2): ext4_quota_write:6648: inode #3: comm syz.2.426: mark_inode_dirty error [ 225.467019][ T6001] Quota error (device loop2): write_blk: dquota write failed [ 225.474441][ T6001] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 225.484595][ T6001] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.426: Failed to acquire dquot type 0 [ 225.500254][ T6001] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.426: Invalid inode table block 0 in block_group 0 [ 225.514476][ T6001] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 225.526308][ T6001] EXT4-fs error (device loop2): ext4_ext_truncate:4487: inode #15: comm syz.2.426: mark_inode_dirty error [ 225.538144][ T6001] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.426: Invalid inode table block 0 in block_group 0 [ 225.552030][ T6001] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 225.562703][ T6001] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 225.572872][ T6001] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.426: Invalid inode table block 0 in block_group 0 [ 225.589644][ T6001] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 225.600807][ T6001] EXT4-fs error (device loop2): ext4_truncate:4286: inode #15: comm syz.2.426: mark_inode_dirty error [ 225.612398][ T6001] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 225.623193][ T6001] EXT4-fs (loop2): 1 truncate cleaned up [ 225.629374][ T6001] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.044360][ T6019] device syzkaller0 entered promiscuous mode [ 226.077410][ T6019] loop1: detected capacity change from 0 to 8 [ 226.124824][ T6019] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 226.145484][ T4288] udevd[4288]: incorrect cramfs checksum on /dev/loop1 [ 227.348481][ T4233] Bluetooth: hci3: command 0x0405 tx timeout [ 228.310782][ T5999] udevd[5999]: incorrect cramfs checksum on /dev/loop1 [ 228.476421][ T6042] netlink: 'syz.4.440': attribute type 10 has an invalid length. [ 228.507662][ T6042] team0: Device veth1_vlan failed to register rx_handler [ 229.022856][ T6045] loop1: detected capacity change from 0 to 512 [ 229.120027][ T6051] loop0: detected capacity change from 0 to 256 [ 229.165508][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 229.179597][ T6043] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 229.247017][ T6053] input: syz1 as /devices/virtual/input/input5 [ 231.129858][ T6045] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.153132][ T6045] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.235583][ T26] audit: type=1800 audit(1788381519.275:39): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.447" name="idProduct" dev="configfs" ino=40115 res=0 errno=0 [ 231.308499][ T26] audit: type=1800 audit(1788381519.305:40): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.447" name="serialnumber" dev="configfs" ino=40117 res=0 errno=0 [ 231.337435][ T26] audit: type=1800 audit(1788381519.305:41): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.447" name="manufacturer" dev="configfs" ino=40118 res=0 errno=0 [ 233.506747][ T6092] loop2: detected capacity change from 0 to 256 [ 233.537551][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 233.554051][ T6092] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 233.603371][ T6100] loop1: detected capacity change from 0 to 128 [ 233.609981][ T6097] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 233.715792][ T6106] loop2: detected capacity change from 0 to 256 [ 233.740332][ T6100] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 234.089082][ T6100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.799624][ T6118] futex_wake_op: syz.4.461 tries to shift op by 144; fix this program [ 235.518544][ T6121] input: syz1 as /devices/virtual/input/input6 [ 235.877265][ T6126] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 235.919189][ T6133] device syzkaller0 entered promiscuous mode [ 235.927778][ T6126] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 236.099850][ T6136] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 236.658213][ T6138] loop4: detected capacity change from 0 to 256 [ 236.680483][ T6136] team0: Device veth1_vlan failed to register rx_handler [ 237.634093][ T6153] loop1: detected capacity change from 0 to 256 [ 238.539355][ T6160] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 238.582133][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 238.582161][ T6157] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 239.837734][ T6175] loop4: detected capacity change from 0 to 1024 [ 239.992597][ T6183] input: syz1 as /devices/virtual/input/input7 [ 241.207154][ T6198] netlink: 'syz.2.477': attribute type 10 has an invalid length. [ 241.568893][ T6198] team0: Device veth1_vlan failed to register rx_handler [ 241.578251][ T154] hfsplus: b-tree write err: -5, ino 25 [ 241.584274][ T154] hfsplus: b-tree write err: -5, ino 4 [ 241.675896][ T154] hfsplus: b-tree write err: -5, ino 2 [ 241.690701][ T6203] loop0: detected capacity change from 0 to 256 [ 241.694430][ T154] hfsplus: b-tree write err: -5, ino 26 [ 243.894835][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 243.904413][ T6224] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 243.925248][ T6223] kernel profiling enabled (shift: 10) [ 244.102949][ T6229] device syzkaller0 entered promiscuous mode [ 244.143314][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880620e8000: rx timeout, send abort [ 244.161180][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880620e8000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 244.393917][ T6232] loop2: detected capacity change from 0 to 32768 [ 245.386053][ T6232] XFS (loop2): Mounting V5 Filesystem [ 245.429706][ T6232] XFS (loop2): Ending clean mount [ 245.442881][ T6232] XFS (loop2): Quotacheck needed: Please wait. [ 245.488606][ T6232] XFS (loop2): Quotacheck: Done. [ 245.766495][ T26] audit: type=1800 audit(1788381533.765:42): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.489" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 245.808265][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.922333][ T6265] loop0: detected capacity change from 0 to 256 [ 246.109555][ T4192] XFS (loop2): Unmounting Filesystem [ 246.532497][ T6272] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 246.909137][ T6272] team0: Device veth1_vlan failed to register rx_handler [ 247.246304][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 247.260580][ T6275] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 248.110769][ T6287] loop1: detected capacity change from 0 to 128 [ 248.124843][ T6284] device syzkaller0 entered promiscuous mode [ 248.179907][ T6287] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.310298][ T6287] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.566878][ T6287] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 248.582014][ T6287] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.726011][ T6301] loop2: detected capacity change from 0 to 256 [ 252.557045][ T6337] netlink: 'syz.4.512': attribute type 10 has an invalid length. [ 252.568340][ T6337] team0: Device veth1_vlan failed to register rx_handler [ 252.957706][ T6346] loop1: detected capacity change from 0 to 256 [ 253.078147][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 253.131057][ T6344] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 254.147186][ T6357] smc: net device vlan1 applied user defined pnetid SYZ2 [ 255.013429][ T6359] loop1: detected capacity change from 0 to 512 [ 255.109656][ T6359] EXT4-fs (loop1): Test dummy encryption mode enabled [ 255.130900][ T6359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 255.734767][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.741113][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.813416][ T6373] futex_wake_op: syz.4.525 tries to shift op by -1; fix this program [ 256.354577][ T6375] futex_wake_op: syz.2.523 tries to shift op by -1; fix this program [ 257.220148][ T6359] EXT4-fs (loop1): 1 truncate cleaned up [ 257.246343][ T6359] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 258.637899][ T6385] loop2: detected capacity change from 0 to 256 [ 259.149336][ T6389] loop2: detected capacity change from 0 to 256 [ 259.688190][ T6394] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 259.702024][ T6394] team0: Device veth1_vlan failed to register rx_handler [ 260.372706][ T6396] loop1: detected capacity change from 0 to 512 [ 260.430450][ T6396] EXT4-fs (loop1): Test dummy encryption mode enabled [ 260.597818][ T6396] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 261.007359][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 261.057661][ T6408] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 261.095934][ T6396] EXT4-fs (loop1): 1 truncate cleaned up [ 261.101651][ T6396] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 263.506904][ T6433] loop2: detected capacity change from 0 to 256 [ 263.598070][ T6434] futex_wake_op: syz.0.538 tries to shift op by -1; fix this program [ 266.136864][ T6453] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 266.149944][ T6453] team0: Device veth1_vlan failed to register rx_handler [ 266.686957][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 266.735136][ T6462] loop4: detected capacity change from 0 to 512 [ 266.759965][ T6462] EXT4-fs (loop4): Test dummy encryption mode enabled [ 266.796618][ T6462] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.854559][ T6459] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 266.880385][ T6462] EXT4-fs (loop4): 1 truncate cleaned up [ 266.914381][ T6462] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 267.035615][ T6470] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 267.048359][ T6470] team0: Device veth1_vlan failed to register rx_handler [ 268.430682][ T6486] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.552'. [ 268.741502][ T6488] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 268.756602][ T6488] team0: Device veth1_vlan failed to register rx_handler [ 269.720519][ T6483] netlink: 'syz.1.551': attribute type 11 has an invalid length. [ 270.180460][ T6492] device syzkaller0 entered promiscuous mode [ 270.275059][ T6497] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.566'. [ 271.422741][ T6508] futex_wake_op: syz.4.553 tries to shift op by -1; fix this program [ 272.163401][ T6517] loop0: detected capacity change from 0 to 256 [ 273.378136][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 273.413599][ T6522] loop2: detected capacity change from 0 to 128 [ 273.431989][ T6522] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 273.443945][ T6522] hpfs: filesystem error: improperly stopped [ 273.450196][ T6522] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 273.458040][ T6522] hpfs: You really don't want any checks? You are crazy... [ 273.465337][ T6522] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 273.473257][ T6522] hpfs: code page support is disabled [ 273.482856][ T6522] hpfs: hpfs_map_4sectors(): unaligned read [ 273.489047][ T6522] hpfs: hpfs_map_4sectors(): unaligned read [ 273.495029][ T6522] hpfs: filesystem error: unable to find root dir [ 273.539413][ T6522] hpfs: hpfs_map_4sectors(): unaligned read [ 273.546139][ T6522] hpfs: hpfs_map_sector(): read error [ 273.592018][ T6525] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 273.898628][ T6530] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 273.908421][ T6530] netlink: 84 bytes leftover after parsing attributes in process `syz.1.567'. [ 274.087609][ T6534] Invalid ELF header magic: != ELF [ 275.190200][ T6542] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 275.336237][ T6544] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.571'. [ 275.354651][ T6542] team0: Device veth1_vlan failed to register rx_handler [ 275.799034][ T6552] loop0: detected capacity change from 0 to 512 [ 276.794600][ T6552] EXT4-fs (loop0): Test dummy encryption mode enabled [ 276.833521][ T6552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 276.836905][ T6556] loop4: detected capacity change from 0 to 256 [ 276.943727][ T6552] EXT4-fs (loop0): 1 truncate cleaned up [ 276.994427][ T6552] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 277.216300][ T6567] futex_wake_op: syz.1.575 tries to shift op by -1; fix this program [ 279.700927][ T6585] netlink: 'syz.1.581': attribute type 11 has an invalid length. [ 280.551357][ T6592] loop4: detected capacity change from 0 to 1024 [ 282.411743][ T6588] loop2: detected capacity change from 0 to 256 [ 282.422136][ T6588] exfat: Bad value for 'uid' [ 283.077860][ T6592] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 283.088825][ T6592] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 283.268834][ T6592] JBD2: no valid journal superblock found [ 283.277746][ T6592] EXT4-fs (loop4): error loading journal [ 283.340516][ T6600] fuse: Unknown parameter '0x0000000000000004' [ 286.628295][ T6625] loop1: detected capacity change from 0 to 256 [ 287.487355][ T6634] loop4: detected capacity change from 0 to 256 [ 287.520208][ T6635] loop2: detected capacity change from 0 to 512 [ 287.916867][ T6631] FAULT_INJECTION: forcing a failure. [ 287.916867][ T6631] name failslab, interval 1, probability 0, space 0, times 1 [ 287.929992][ T6631] CPU: 1 PID: 6631 Comm: syz.0.603 Not tainted syzkaller #0 [ 287.937276][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.947333][ T6631] Call Trace: [ 287.950612][ T6631] [ 287.953540][ T6631] dump_stack_lvl+0x188/0x250 [ 287.958236][ T6631] ? show_regs_print_info+0x20/0x20 [ 287.963442][ T6631] ? load_image+0x410/0x410 [ 287.967965][ T6631] ? __lock_acquire+0x7b50/0x7b50 [ 287.972998][ T6631] ? memset+0x1e/0x40 [ 287.976981][ T6631] ? lockdep_init_map_type+0x98/0x900 [ 287.982364][ T6631] should_fail+0x383/0x4b0 [ 287.986793][ T6631] should_failslab+0x5/0x20 [ 287.991298][ T6631] slab_pre_alloc_hook+0x51/0xc0 [ 287.996236][ T6631] ? security_inode_alloc+0x30/0x110 [ 288.001502][ T6631] kmem_cache_alloc+0x3d/0x280 [ 288.006249][ T6631] security_inode_alloc+0x30/0x110 [ 288.011345][ T6631] inode_init_always+0x8e5/0xc90 [ 288.016271][ T6631] new_inode_pseudo+0x8e/0x210 [ 288.021017][ T6631] new_inode+0x25/0x1d0 [ 288.025162][ T6631] mqueue_get_inode+0x27/0xbe0 [ 288.029928][ T6631] ? do_raw_spin_unlock+0x11d/0x230 [ 288.035111][ T6631] mqueue_create_attr+0x212/0x410 [ 288.040128][ T6631] vfs_mkobj+0x343/0x520 [ 288.044372][ T6631] ? do_mq_open+0x750/0x750 [ 288.048875][ T6631] do_mq_open+0x5fc/0x750 [ 288.053188][ T6631] ? mq_put_mnt+0x40/0x40 [ 288.057501][ T6631] ? __context_tracking_exit+0x4c/0x80 [ 288.062944][ T6631] __x64_sys_mq_open+0x182/0x1e0 [ 288.067867][ T6631] ? proc_ipc_sem_dointvec+0x330/0x330 [ 288.073326][ T6631] ? lockdep_hardirqs_on+0x94/0x140 [ 288.078537][ T6631] do_syscall_64+0x4c/0xa0 [ 288.082960][ T6631] ? clear_bhb_loop+0x30/0x80 [ 288.087635][ T6631] ? clear_bhb_loop+0x30/0x80 [ 288.092311][ T6631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.098215][ T6631] RIP: 0033:0x7f06786cc159 [ 288.102631][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.122243][ T6631] RSP: 002b:00007f0676924028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 288.130663][ T6631] RAX: ffffffffffffffda RBX: 00007f0678953fa0 RCX: 00007f06786cc159 [ 288.138635][ T6631] RDX: 00000000000001d0 RSI: 0000000000000040 RDI: 0000200000000180 [ 288.146615][ T6631] RBP: 00007f0678763024 R08: 0000000000000000 R09: 0000000000000000 [ 288.154583][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.162534][ T6631] R13: 00007f0678954038 R14: 00007f0678953fa0 R15: 00007ffe9af86ef8 [ 288.170490][ T6631] [ 288.264653][ T6635] EXT4-fs (loop2): Test dummy encryption mode enabled [ 288.297885][ T6635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 288.388507][ T6635] EXT4-fs (loop2): 1 truncate cleaned up [ 288.411941][ T6635] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 288.717672][ T150] block nbd1: Attempted send on invalid socket [ 288.724679][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.738532][ T6648] befs: (nbd1): unable to read superblock [ 290.001934][ T6659] loop4: detected capacity change from 0 to 256 [ 290.544859][ T6659] exfat: Bad value for 'uid' [ 291.790862][ T6672] loop1: detected capacity change from 0 to 32768 [ 292.760898][ T6672] JBD2: Ignoring recovery information on journal [ 293.631445][ T6672] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 293.838417][ T6690] loop0: detected capacity change from 0 to 256 [ 295.764136][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 296.141885][ T6708] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 296.711029][ T6719] loop0: detected capacity change from 0 to 256 [ 297.967299][ T6727] loop4: detected capacity change from 0 to 16 [ 298.520778][ T6730] loop1: detected capacity change from 0 to 256 [ 299.064725][ T6730] exfat: Bad value for 'uid' [ 299.349080][ T6732] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 299.466607][ T6732] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 300.619674][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.678148][ T6747] loop0: detected capacity change from 0 to 256 [ 300.726696][ T6747] exfat: Deprecated parameter 'utf8' [ 300.760239][ T6747] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 302.025382][ T6753] loop4: detected capacity change from 0 to 256 [ 302.518578][ T6754] loop0: detected capacity change from 0 to 4096 [ 303.607600][ T6763] device syzkaller0 entered promiscuous mode [ 303.649805][ T6763] tipc: Enabled bearer , priority 0 [ 303.659214][ T6754] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 303.670209][ T6763] tipc: Resetting bearer [ 303.682853][ T6762] tipc: Resetting bearer [ 303.700275][ T6762] tipc: Disabling bearer [ 303.829946][ T6754] ntfs3: loop0: Failed to load $Extend. [ 303.909672][ T6786] jffs2: notice: (6786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 304.303305][ T6782] loop4: detected capacity change from 0 to 4096 [ 305.089167][ T4260] Bluetooth: hci3: command 0x0405 tx timeout [ 306.418417][ T26] audit: type=1326 audit(1788381594.455:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35069cc159 code=0x0 [ 306.624483][ T6803] loop2: detected capacity change from 0 to 1764 [ 306.675452][ T26] audit: type=1326 audit(1788381594.645:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 306.720346][ T26] audit: type=1326 audit(1788381594.645:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 306.768956][ T6811] loop1: detected capacity change from 0 to 512 [ 306.796490][ T26] audit: type=1326 audit(1788381594.645:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 307.266861][ T6815] loop0: detected capacity change from 0 to 128 [ 307.376177][ T26] audit: type=1326 audit(1788381594.645:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 307.480726][ T26] audit: type=1326 audit(1788381594.645:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 307.511150][ T6815] omfs: Invalid superblock (7b3184f9) [ 307.528490][ T26] audit: type=1326 audit(1788381594.645:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 307.599632][ T26] audit: type=1326 audit(1788381594.645:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 307.630894][ T26] audit: type=1326 audit(1788381594.645:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 307.656344][ T26] audit: type=1326 audit(1788381594.645:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 307.682935][ T6818] loop2: detected capacity change from 0 to 256 [ 307.734242][ T6811] event trace: Could not enable event p [ 307.767087][ T6815] loop0: detected capacity change from 0 to 256 [ 309.684448][ T6829] loop1: detected capacity change from 0 to 256 [ 311.930278][ T6842] tipc: Enabling of bearer rejected, failed to enable media [ 313.343141][ T6861] loop4: detected capacity change from 0 to 4096 [ 315.812590][ T6886] loop0: detected capacity change from 0 to 256 [ 315.848355][ T6891] loop2: detected capacity change from 0 to 256 [ 316.000170][ T6893] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 316.838994][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 316.930969][ T6903] IPVS: sh: FWM 3 0x00000003 - no destination available [ 317.579780][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.743166][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.207608][ T6926] misc userio: Invalid payload size [ 319.214670][ T6926] netlink: 120 bytes leftover after parsing attributes in process `syz.2.665'. [ 319.376855][ T6928] loop0: detected capacity change from 0 to 2048 [ 319.685320][ T6928] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.706103][ T6928] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.811933][ T6964] IPVS: sh: FWM 3 0x00000003 - no destination available [ 323.224388][ T6951] loop0: detected capacity change from 0 to 32768 [ 323.538746][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 323.538788][ T26] audit: type=1800 audit(1788381611.575:113): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.671" name="file1" dev="loop0" ino=65 res=0 errno=0 [ 327.102794][ T6993] capability: warning: `syz.1.667' uses 32-bit capabilities (legacy support in use) [ 327.939575][ T7002] overlayfs: missing 'workdir' [ 328.748819][ T7003] "syz.1.686" (7003) uses obsolete ecb(arc4) skcipher [ 328.763405][ T7003] syz.1.686 sent an empty control message without MSG_MORE. [ 329.621348][ T7012] loop0: detected capacity change from 0 to 8 [ 329.715633][ T7012] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 330.597724][ T5999] udevd[5999]: incorrect cramfs checksum on /dev/loop0 [ 331.848055][ T5999] udevd[5999]: incorrect cramfs checksum on /dev/loop0 [ 332.348561][ T5999] udevd[5999]: incorrect cramfs checksum on /dev/loop0 [ 332.631385][ T7042] using random self ethernet address [ 332.636854][ T7042] using random host ethernet address [ 333.666082][ T7044] loop2: detected capacity change from 0 to 1024 [ 333.686491][ T7044] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 333.697447][ T7044] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 333.711482][ T7044] JBD2: no valid journal superblock found [ 333.717754][ T7044] EXT4-fs (loop2): error loading journal [ 335.872329][ T7057] input: syz0 as /devices/virtual/input/input8 [ 336.067475][ T7056] mmap: syz.1.687 (7056) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 336.723149][ T7074] loop2: detected capacity change from 0 to 256 [ 338.165048][ T7083] loop0: detected capacity change from 0 to 256 [ 339.307157][ T7092] overlayfs: failed to clone upperpath [ 339.656281][ T7094] loop4: detected capacity change from 0 to 512 [ 339.730612][ T7094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 340.951367][ T7094] EXT4-fs (loop4): 1 truncate cleaned up [ 340.963115][ T7094] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 340.966177][ T7104] netlink: 'syz.3.714': attribute type 11 has an invalid length. [ 342.369908][ T7123] loop0: detected capacity change from 0 to 128 [ 342.845917][ T7123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.856955][ T7123] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.349360][ T7157] loop2: detected capacity change from 0 to 256 [ 347.416064][ T7159] loop0: detected capacity change from 0 to 4096 [ 348.980154][ T7172] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 349.185059][ T7174] ubi0: attaching mtd0 [ 349.197971][ T7174] ubi0: scanning is finished [ 349.202809][ T7174] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 349.446400][ T7174] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 350.188451][ T7202] loop2: detected capacity change from 0 to 1024 [ 350.297903][ T7202] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 350.309368][ T7202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 350.333020][ T7202] JBD2: no valid journal superblock found [ 350.338833][ T7202] EXT4-fs (loop2): error loading journal [ 351.951847][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 351.991720][ T7212] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 352.013488][ T7216] loop2: detected capacity change from 0 to 128 [ 352.926322][ T7216] omfs: Invalid superblock (7b3184f9) [ 356.253452][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.430928][ T7245] loop1: detected capacity change from 0 to 256 [ 356.463562][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 356.472948][ T7245] exfat: Deprecated parameter 'utf8' [ 356.478678][ T7258] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 356.493681][ T7245] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 357.901580][ T7265] loop0: detected capacity change from 0 to 512 [ 357.960717][ T7265] EXT4-fs (loop0): Test dummy encryption mode enabled [ 357.969091][ T7265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 357.989528][ T7265] EXT4-fs (loop0): 1 truncate cleaned up [ 357.995914][ T7265] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 360.206591][ T7292] loop4: detected capacity change from 0 to 256 [ 362.347786][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 362.383707][ T7314] loop2: detected capacity change from 0 to 256 [ 362.396618][ T7310] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 362.648402][ T26] audit: type=1326 audit(1788381650.685:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.137638][ T26] audit: type=1326 audit(1788381650.715:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.165830][ T7317] loop1: detected capacity change from 0 to 4096 [ 363.275252][ T26] audit: type=1326 audit(1788381651.215:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.447981][ T26] audit: type=1326 audit(1788381651.215:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.475104][ T26] audit: type=1326 audit(1788381651.215:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.499194][ T26] audit: type=1326 audit(1788381651.215:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.523933][ T26] audit: type=1326 audit(1788381651.215:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.548443][ T26] audit: type=1326 audit(1788381651.215:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.575024][ T26] audit: type=1326 audit(1788381651.215:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 363.599185][ T26] audit: type=1326 audit(1788381651.215:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.771" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f35069cc159 code=0x7ffc0000 [ 369.025929][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 369.052486][ T7367] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 369.159658][ T7369] loop4: detected capacity change from 0 to 256 [ 371.953552][ T7394] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 371.967905][ T7394] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 371.970953][ T7400] loop1: detected capacity change from 0 to 256 [ 372.269936][ T7405] loop4: detected capacity change from 0 to 1024 [ 372.377738][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 372.381345][ T7406] CIFS: Attempting to mount \\127.0.0.1\share [ 372.393113][ T7406] CIFS: VFS: No username specified [ 372.405010][ T7408] overlayfs: failed to clone upperpath [ 372.444598][ T7410] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 372.582712][ T7405] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 372.688265][ T7423] loop2: detected capacity change from 0 to 256 [ 373.500621][ T7431] EXT4-fs warning (device loop4): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 375.967942][ T7458] jffs2: notice: (7458) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 376.626661][ T7463] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7463] [ 376.643615][ T7463] netlink: zone id is out of range [ 377.938989][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 377.993959][ T7473] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 378.587152][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.593469][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.600472][ T7477] loop2: detected capacity change from 0 to 32768 [ 381.465284][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 381.465335][ T26] audit: type=1800 audit(1788381669.505:156): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.809" name="file1" dev="loop2" ino=65 res=0 errno=0 [ 384.047262][ T7513] block device autoloading is deprecated and will be removed. [ 384.281605][ T7519] loop4: detected capacity change from 0 to 256 [ 385.400030][ T7532] netlink: 'syz.3.829': attribute type 11 has an invalid length. [ 386.791748][ T7549] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7549] [ 386.794536][ T7549] netlink: zone id is out of range [ 388.542640][ T7552] loop4: detected capacity change from 0 to 32768 [ 388.949745][ T26] audit: type=1800 audit(1788381676.985:157): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.834" name="file1" dev="loop4" ino=65 res=0 errno=0 [ 389.292358][ T7554] loop0: detected capacity change from 0 to 1024 [ 390.286655][ T7554] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 391.577430][ T7571] loop1: detected capacity change from 0 to 256 [ 391.852042][ T7577] EXT4-fs warning (device loop0): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 397.286566][ T7608] binder: BINDER_SET_CONTEXT_MGR already set [ 397.292900][ T7608] binder: 7601:7608 ioctl 4018620d 200000004a80 returned -16 [ 397.951636][ T7616] input: syz0 as /devices/virtual/input/input9 [ 399.541276][ T7610] loop2: detected capacity change from 0 to 512 [ 399.701705][ T7610] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 399.709348][ T7610] EXT4-fs (loop2): Mount option "data_err=ignore" incompatible with ext2 [ 400.261324][ T7633] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 403.005945][ T7648] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 403.440742][ T7648] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 406.761513][ T7671] binder: 7667:7671 ioctl c0306201 200000000080 returned -14 [ 407.133724][ T7675] loop2: detected capacity change from 0 to 256 [ 409.928741][ T7694] input: syz0 as /devices/virtual/input/input10 [ 412.427387][ T26] audit: type=1800 audit(1788381700.465:158): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.877" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 420.760054][ T7767] loop0: detected capacity change from 0 to 1024 [ 427.157044][ T7818] socket: no more sockets [ 429.807783][ T7838] loop0: detected capacity change from 0 to 8 [ 432.089317][ T7847] loop2: detected capacity change from 0 to 2048 [ 432.216119][ T7847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.236712][ T7863] [ 432.239043][ T7863] ====================================================== [ 432.246047][ T7863] WARNING: possible circular locking dependency detected [ 432.253057][ T7863] syzkaller #0 Not tainted [ 432.257459][ T7863] ------------------------------------------------------ [ 432.264465][ T7863] syz.1.915/7863 is trying to acquire lock: [ 432.270341][ T7863] ffffffff8cece7d0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_frame_w_width_store+0x110/0x370 [ 432.280958][ T7863] [ 432.280958][ T7863] but task is already holding lock: [ 432.288307][ T7863] ffff888024a8b078 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 432.297612][ T7863] [ 432.297612][ T7863] which lock already depends on the new lock. [ 432.297612][ T7863] [ 432.307998][ T7863] [ 432.307998][ T7863] the existing dependency chain (in reverse order) is: [ 432.317002][ T7863] [ 432.317002][ T7863] -> #3 (&p->frag_sem){++++}-{3:3}: [ 432.324390][ T7863] down_write_killable+0x46/0x90 [ 432.329850][ T7863] configfs_rmdir+0x3e0/0x980 [ 432.335044][ T7863] vfs_rmdir+0x19d/0x410 [ 432.339803][ T7863] do_rmdir+0x27f/0x710 [ 432.344475][ T7863] __x64_sys_unlinkat+0xc0/0xe0 [ 432.349840][ T7863] do_syscall_64+0x4c/0xa0 [ 432.354772][ T7863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.361177][ T7863] [ 432.361177][ T7863] -> #2 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 432.369861][ T7863] down_write+0x38/0x60 [ 432.374525][ T7863] configfs_depend_item_unlocked+0x14f/0x430 [ 432.380999][ T7863] usbg_make_tpg+0x1f3/0x580 [ 432.386087][ T7863] target_fabric_make_tpg+0xa0/0x6d0 [ 432.391888][ T7863] configfs_mkdir+0x511/0x9e0 [ 432.397063][ T7863] vfs_mkdir+0x386/0x570 [ 432.401800][ T7863] do_mkdirat+0x1dd/0x5c0 [ 432.406624][ T7863] __x64_sys_mkdir+0x6a/0x80 [ 432.411709][ T7863] do_syscall_64+0x4c/0xa0 [ 432.416620][ T7863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.423008][ T7863] [ 432.423008][ T7863] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 432.430643][ T7863] __mutex_lock_common+0x1e5/0x2400 [ 432.436345][ T7863] mutex_lock_nested+0x17/0x20 [ 432.441623][ T7863] tcm_set_name+0x26/0x90 [ 432.446449][ T7863] function_make+0x195/0x350 [ 432.451532][ T7863] configfs_mkdir+0x511/0x9e0 [ 432.456701][ T7863] vfs_mkdir+0x386/0x570 [ 432.461435][ T7863] do_mkdirat+0x1dd/0x5c0 [ 432.466262][ T7863] __x64_sys_mkdir+0x6a/0x80 [ 432.471361][ T7863] do_syscall_64+0x4c/0xa0 [ 432.476274][ T7863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.482666][ T7863] [ 432.482666][ T7863] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 432.490894][ T7863] __lock_acquire+0x2c66/0x7b50 [ 432.496267][ T7863] lock_acquire+0x19e/0x400 [ 432.501299][ T7863] __mutex_lock_common+0x1e5/0x2400 [ 432.506998][ T7863] mutex_lock_nested+0x17/0x20 [ 432.512256][ T7863] uvcg_frame_w_width_store+0x110/0x370 [ 432.518303][ T7863] configfs_write_iter+0x30b/0x400 [ 432.523914][ T7863] vfs_write+0x748/0xd70 [ 432.528665][ T7863] ksys_write+0x153/0x260 [ 432.533490][ T7863] do_syscall_64+0x4c/0xa0 [ 432.538404][ T7863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.544796][ T7863] [ 432.544796][ T7863] other info that might help us debug this: [ 432.544796][ T7863] [ 432.555000][ T7863] Chain exists of: [ 432.555000][ T7863] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#22 --> &p->frag_sem [ 432.555000][ T7863] [ 432.569389][ T7863] Possible unsafe locking scenario: [ 432.569389][ T7863] [ 432.576811][ T7863] CPU0 CPU1 [ 432.582165][ T7863] ---- ---- [ 432.587503][ T7863] lock(&p->frag_sem); [ 432.591631][ T7863] lock(&sb->s_type->i_mutex_key#22); [ 432.599582][ T7863] lock(&p->frag_sem); [ 432.606231][ T7863] lock(gadget_subsys.su_mutex); [ 432.611227][ T7863] [ 432.611227][ T7863] *** DEADLOCK *** [ 432.611227][ T7863] [ 432.619340][ T7863] 4 locks held by syz.1.915/7863: [ 432.624335][ T7863] #0: ffff888076209270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 432.633524][ T7863] #1: ffff888146742460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 432.642455][ T7863] #2: ffff8880405e5688 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x7d/0x400 [ 432.652253][ T7863] #3: ffff888024a8b078 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 432.661971][ T7863] [ 432.661971][ T7863] stack backtrace: [ 432.667830][ T7863] CPU: 1 PID: 7863 Comm: syz.1.915 Not tainted syzkaller #0 [ 432.675082][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.685114][ T7863] Call Trace: [ 432.688380][ T7863] [ 432.691295][ T7863] dump_stack_lvl+0x188/0x250 [ 432.695948][ T7863] ? load_image+0x410/0x410 [ 432.700428][ T7863] ? show_regs_print_info+0x20/0x20 [ 432.705601][ T7863] ? print_circular_bug+0x12b/0x1a0 [ 432.710779][ T7863] check_noncircular+0x296/0x330 [ 432.715698][ T7863] ? add_chain_block+0x9b0/0x9b0 [ 432.720607][ T7863] ? lockdep_lock+0xf1/0x1f0 [ 432.725172][ T7863] ? __kernel_text_address+0x9a/0x100 [ 432.730519][ T7863] ? mark_lock+0x94/0x320 [ 432.734838][ T7863] ? _find_first_zero_bit+0xd1/0xf0 [ 432.740029][ T7863] __lock_acquire+0x2c66/0x7b50 [ 432.744862][ T7863] ? __lock_acquire+0x13dc/0x7b50 [ 432.749862][ T7863] ? verify_lock_unused+0x140/0x140 [ 432.755034][ T7863] ? __reset_page_owner+0x180/0x180 [ 432.760209][ T7863] lock_acquire+0x19e/0x400 [ 432.764687][ T7863] ? uvcg_frame_w_width_store+0x110/0x370 [ 432.770382][ T7863] ? __might_sleep+0xf0/0xf0 [ 432.774942][ T7863] ? read_lock_is_recursive+0x10/0x10 [ 432.780288][ T7863] __mutex_lock_common+0x1e5/0x2400 [ 432.785477][ T7863] ? uvcg_frame_w_width_store+0x110/0x370 [ 432.791169][ T7863] ? __might_fault+0xb7/0x110 [ 432.795819][ T7863] ? __lock_acquire+0x7b50/0x7b50 [ 432.800818][ T7863] ? uvcg_frame_w_width_store+0x110/0x370 [ 432.806512][ T7863] ? mutex_lock_io_nested+0x60/0x60 [ 432.811685][ T7863] ? _kstrtoull+0x3cb/0x4e0 [ 432.816176][ T7863] mutex_lock_nested+0x17/0x20 [ 432.820913][ T7863] uvcg_frame_w_width_store+0x110/0x370 [ 432.826431][ T7863] ? uvcg_frame_w_width_show+0x180/0x180 [ 432.832041][ T7863] ? down_read+0x1aa/0x2e0 [ 432.836430][ T7863] configfs_write_iter+0x30b/0x400 [ 432.841635][ T7863] ? uvcg_frame_w_width_show+0x180/0x180 [ 432.847247][ T7863] vfs_write+0x748/0xd70 [ 432.851463][ T7863] ? file_end_write+0x250/0x250 [ 432.856285][ T7863] ? mutex_lock_nested+0x17/0x20 [ 432.861195][ T7863] ? __fdget_pos+0x2bf/0x370 [ 432.865756][ T7863] ? ksys_write+0x70/0x260 [ 432.870143][ T7863] ksys_write+0x153/0x260 [ 432.874442][ T7863] ? __ia32_sys_read+0x80/0x80 [ 432.879178][ T7863] ? lockdep_hardirqs_on+0x94/0x140 [ 432.884355][ T7863] do_syscall_64+0x4c/0xa0 [ 432.888764][ T7863] ? clear_bhb_loop+0x30/0x80 [ 432.893420][ T7863] ? clear_bhb_loop+0x30/0x80 [ 432.898070][ T7863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.903934][ T7863] RIP: 0033:0x7f35fbcb5159 [ 432.908320][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.927899][ T7863] RSP: 002b:00007f35f9f0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.936285][ T7863] RAX: ffffffffffffffda RBX: 00007f35fbf3cfa0 RCX: 00007f35fbcb5159 [ 432.944233][ T7863] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000004 [ 432.952178][ T7863] RBP: 00007f35fbd4c024 R08: 0000000000000000 R09: 0000000000000000 [ 432.960121][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.968068][ T7863] R13: 00007f35fbf3d038 R14: 00007f35fbf3cfa0 R15: 00007ffd92cdba08 [ 432.976032][ T7863] [ 433.368955][ T7869] loop4: detected capacity change from 0 to 32768 [ 433.432915][ T7869] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 434.179673][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 440.025368][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.031668][ T1430] ieee802154 phy1 wpan1: encryption failed: -22