last executing test programs: 3m36.647223436s ago: executing program 0 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) 3m35.365476298s ago: executing program 0 (id=189): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) 3m31.60026146s ago: executing program 0 (id=196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r9}, 0x4) 3m31.341923077s ago: executing program 0 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 3m30.142475884s ago: executing program 0 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 3m24.063805056s ago: executing program 0 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4097, 0x1001}, {0x0}], 0x2}, 0xfff}], 0x1, 0x10060, 0x0) 3m7.441028397s ago: executing program 32 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4097, 0x1001}, {0x0}], 0x2}, 0xfff}], 0x1, 0x10060, 0x0) 20.674066788s ago: executing program 4 (id=620): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x6c0000, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x6020400) socket$netlink(0x10, 0x3, 0x4) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x2000, 0x24000, 0x10000e}}) 19.500953974s ago: executing program 4 (id=623): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xfffff066, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80), 0x0, 0x24040091) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0xfffffeb1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) fallocate(r3, 0x10, 0x10c01, 0x8000) 15.452481404s ago: executing program 4 (id=631): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) socket$netlink(0x10, 0x3, 0xc) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x121, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfc}, 0x2) 12.971571084s ago: executing program 4 (id=635): ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") fspick(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000500)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x7, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 11.756068363s ago: executing program 3 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) syz_emit_ethernet(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1', 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = fsopen(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, 0x0, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 11.614447272s ago: executing program 4 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) 11.249626625s ago: executing program 3 (id=642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 10.2415347s ago: executing program 3 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r2, &(0x7f00000004c0)='\n', 0x1) 8.436999967s ago: executing program 1 (id=647): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004"], 0x50}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in=@local, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9b90000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 8.361761661s ago: executing program 5 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 8.361046661s ago: executing program 3 (id=649): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.340657123s ago: executing program 1 (id=650): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.307252105s ago: executing program 2 (id=651): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.992985515s ago: executing program 5 (id=652): capset(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.845413265s ago: executing program 2 (id=653): mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB]) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x300000d, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 7.810796467s ago: executing program 1 (id=654): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 6.788527593s ago: executing program 2 (id=655): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 6.67834413s ago: executing program 3 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0e01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x4, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x3}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x6, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0xff}], [{0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.813838734s ago: executing program 5 (id=658): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x2b}, 0x8) 3.049457914s ago: executing program 3 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 3.046090404s ago: executing program 5 (id=660): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x4) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="13", 0x1}], 0x1}}], 0x1, 0x0) 2.827323568s ago: executing program 2 (id=661): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004"], 0x50}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in=@local, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9b90000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.564363835s ago: executing program 2 (id=662): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$eJzs3D1oG2cYB/DnTlL9JYrbLoXSDyiltAbjsdDFXVowlGJKKbQFl1KyJNgBxyGblSlLhmROgqcsJmSLkzF4MVkCWZ3Eg7NkiMkQkyEZFKSTjSLLJEG2Lvh+Pzjfex+vn/ek+7/ScgqgsEYjYjIiShExFhGViEjaT/gqW0Zbm0tDazMR9frvT5Pmedl2ZqffSETUIuKHiFhNkzhejji98vfm8/Vfvj2/UPnm6spfQ329yJatzY1ft6/8du7G1MetPZNRbbXar+MgJXt3DR5GnfdJUs57BLyN6TPX7zdy/0lEfN3MfyXSyN68C/MfrFbi+8v79b345N5n/RwrcPDq9UrjM7BWBwonjYhqJOl4RGTtNB0fz77DPygNpyfm5k+NHZtbmP0/75kKOCjViI2fbw3cHOnI/+NSln/g6Grk/4/p5YeN9nYp79EAffF5tmrkf+zfxe9C/qFw5B+KS/6huOQfikv+objkH4pL/uEIq+w0al0Pyz8Ul/xDcck/FFd7/gGAYqkP5P0EMpCXvOcfAAAAAAAAAAAAAAAAAABgr6WhtZmdZXdnerg171yK2PopIsrd6pda5Qebf4efJY3TdiVZt57882WP/6BH13J++vrDR/nWv/tFvvUXZyNqZyNiolzee/8lPd/+H73heOW/Hgu8o6Rj+8c/+1u/08vlfOtPrUfcbsw/E93mnzQ+ba67zz/V9p9Yfk3nq7y/ky96GT0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD99CoAAP//qntqTQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0xf, 0x80000) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) 1.807231454s ago: executing program 5 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.787244455s ago: executing program 1 (id=664): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.308953795s ago: executing program 5 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x2004844, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,nodots,errors=remount-ro,nocase,flush,nodots,dots,nodots,dots,nodots,nodots,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',nodots,nodots,discard\x00\x00\x00\x00\x00,dots,check=relaxed,dots,\x00'], 0x1, 0x280, &(0x7f0000000300)="$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") r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x110000000000) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 586.336592ms ago: executing program 1 (id=666): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100)=0x401, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000040)={0x1, 0x8, 0x9, 0x6, 0x4, 0x10}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x3f4, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0xffffffff, 0x90}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x208}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.449737ms ago: executing program 2 (id=667): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x458, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') 27.022188ms ago: executing program 4 (id=668): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pipe2(&(0x7f0000001cc0), 0x800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 0s ago: executing program 1 (id=669): setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x8}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x1c, 0x5, 0x1, 0x7, 0x1a00c, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 78.886296][ T4173] cgroup: Unknown subsys name 'net' [ 78.996426][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.594044][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 82.598797][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 82.649800][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 82.737189][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 82.755518][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 82.811669][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.819621][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.828259][ T4185] device bridge_slave_0 entered promiscuous mode [ 82.845642][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 82.866430][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.873917][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.882282][ T4185] device bridge_slave_1 entered promiscuous mode [ 82.946953][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.954226][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.962524][ T4190] device bridge_slave_0 entered promiscuous mode [ 82.972893][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.007959][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.017319][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.027990][ T4190] device bridge_slave_1 entered promiscuous mode [ 83.041144][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.074532][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.084994][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.094599][ T4196] device bridge_slave_0 entered promiscuous mode [ 83.110765][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.118984][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.128546][ T4196] device bridge_slave_1 entered promiscuous mode [ 83.137012][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.144700][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.154218][ T4191] device bridge_slave_0 entered promiscuous mode [ 83.194276][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.203579][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.210684][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.219486][ T4191] device bridge_slave_1 entered promiscuous mode [ 83.230053][ T4185] team0: Port device team_slave_0 added [ 83.251490][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.280474][ T4185] team0: Port device team_slave_1 added [ 83.289679][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.298165][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.309822][ T4189] device bridge_slave_0 entered promiscuous mode [ 83.322217][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.354396][ T4190] team0: Port device team_slave_0 added [ 83.375209][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.386177][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.398075][ T4189] device bridge_slave_1 entered promiscuous mode [ 83.411052][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.433978][ T4190] team0: Port device team_slave_1 added [ 83.444528][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.492568][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.505740][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.518189][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.559285][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.587614][ T4196] team0: Port device team_slave_0 added [ 83.620541][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.632809][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.669039][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.687269][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.703223][ T4196] team0: Port device team_slave_1 added [ 83.712492][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.727712][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.737319][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.780987][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.830491][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.839924][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.880113][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.899069][ T4191] team0: Port device team_slave_0 added [ 83.910671][ T4191] team0: Port device team_slave_1 added [ 83.941557][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.954817][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.993985][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.030579][ T4189] team0: Port device team_slave_0 added [ 84.040390][ T4189] team0: Port device team_slave_1 added [ 84.059580][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.069228][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.107800][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.186670][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.199921][ T4192] Bluetooth: hci0: command 0x0409 tx timeout [ 84.211680][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.250984][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.273422][ T2256] Bluetooth: hci3: command 0x0409 tx timeout [ 84.281196][ T4185] device hsr_slave_0 entered promiscuous mode [ 84.293089][ T4192] Bluetooth: hci1: command 0x0409 tx timeout [ 84.302285][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 84.312127][ T4185] device hsr_slave_1 entered promiscuous mode [ 84.321459][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.331523][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.366956][ T2256] Bluetooth: hci4: command 0x0409 tx timeout [ 84.366979][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.402908][ T4190] device hsr_slave_0 entered promiscuous mode [ 84.413049][ T4190] device hsr_slave_1 entered promiscuous mode [ 84.422396][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.434719][ T4190] Cannot create hsr debugfs directory [ 84.443926][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.452974][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.481569][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.504186][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.512952][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.541643][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.571361][ T4196] device hsr_slave_0 entered promiscuous mode [ 84.579937][ T4196] device hsr_slave_1 entered promiscuous mode [ 84.589823][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.599033][ T4196] Cannot create hsr debugfs directory [ 84.677133][ T4189] device hsr_slave_0 entered promiscuous mode [ 84.684830][ T4189] device hsr_slave_1 entered promiscuous mode [ 84.691753][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.699788][ T4189] Cannot create hsr debugfs directory [ 84.756671][ T4191] device hsr_slave_0 entered promiscuous mode [ 84.765453][ T4191] device hsr_slave_1 entered promiscuous mode [ 84.772881][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.781042][ T4191] Cannot create hsr debugfs directory [ 85.113860][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.126784][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.137904][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.154495][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.205385][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.221831][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.234316][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.259389][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.315638][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.332403][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.349003][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.360036][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.437417][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.445939][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.459364][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.469037][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.494871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.505107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.526512][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.540665][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.563232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.573189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.585076][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.592426][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.606768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.628090][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.645740][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.658356][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.667920][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.675080][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.695958][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.711087][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.721118][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.731603][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.742864][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.753787][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.762741][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.776170][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.798224][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.812862][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.823161][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.833415][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.842079][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.855860][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.864695][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.895072][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.903706][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.927450][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.938835][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.962492][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.972238][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.981307][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.990414][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.004147][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.018189][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.031218][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.040590][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.051961][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.080911][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.101322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.167801][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.184945][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.201071][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.227763][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.248257][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.274532][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 86.301045][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.322427][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.355139][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 86.373957][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 86.380649][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.391362][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 86.412718][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.426770][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.437598][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 86.445101][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.455420][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.472151][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.485266][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.510923][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.544132][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.560550][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.576777][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.590525][ T1441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.601185][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.611917][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.621812][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.644887][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.662929][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.700596][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.732983][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.752350][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.768321][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.789045][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.799832][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.813165][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.844800][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.873928][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.887871][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.900879][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.925281][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.935897][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.949917][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.967123][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.978897][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.991984][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.003271][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.012282][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.033878][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.066137][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.082000][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.095722][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.107033][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.124109][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.138866][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.152337][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.163518][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.176116][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.215858][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.234659][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.258596][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.271516][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.283174][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.297958][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.309732][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.332027][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.341836][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.356337][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.367527][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.382458][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.402665][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.416366][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.429646][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.445167][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.456024][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.468486][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.481258][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.504022][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.515703][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.532151][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.583948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.597563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.612159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.651876][ T4185] device veth0_vlan entered promiscuous mode [ 87.680399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.690999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.709191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.721408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.732157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.744305][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.770404][ T4185] device veth1_vlan entered promiscuous mode [ 87.786610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.799855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.812283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.822870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.837194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.861023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.895466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.915990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.947494][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.994935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.012707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.035669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.054835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.079634][ T4185] device veth0_macvtap entered promiscuous mode [ 88.101957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.118691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.140901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.184832][ T4185] device veth1_macvtap entered promiscuous mode [ 88.209350][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.224291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.242393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.261676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.307470][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.332928][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.353837][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 88.354720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.385411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.405406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.426922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.444204][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 88.452258][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 88.462184][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 88.473060][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.488168][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.514189][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 88.528950][ T4190] device veth0_vlan entered promiscuous mode [ 88.573246][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.588406][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.617763][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.637987][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.664373][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.692073][ T4190] device veth1_vlan entered promiscuous mode [ 88.709995][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.747029][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.794602][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.821227][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.841978][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.867342][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.887499][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.908812][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.921850][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.936910][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.948532][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.960937][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.042938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.058970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.072046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.084782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.099243][ T4190] device veth0_macvtap entered promiscuous mode [ 89.112334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.122836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.137632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.157611][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.192010][ T4190] device veth1_macvtap entered promiscuous mode [ 89.224460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.236309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.249364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.292019][ T4196] device veth0_vlan entered promiscuous mode [ 89.302013][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.324125][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.339067][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.354061][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.420246][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.432500][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.450755][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.474596][ T4196] device veth1_vlan entered promiscuous mode [ 89.491815][ T4189] device veth0_vlan entered promiscuous mode [ 89.508148][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.519609][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.533590][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.548063][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.566728][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.582568][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.596926][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.614081][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.627870][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.644493][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.671436][ T4189] device veth1_vlan entered promiscuous mode [ 89.679990][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.696708][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.708017][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.717147][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.731281][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.744633][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.754961][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.766056][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.781158][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.796494][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.811574][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.834374][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.847312][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.889354][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903370][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.918182][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.929680][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.949491][ T4196] device veth0_macvtap entered promiscuous mode [ 89.960073][ T4191] device veth0_vlan entered promiscuous mode [ 89.976294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.986821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.000328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.027219][ T4191] device veth1_vlan entered promiscuous mode [ 90.046388][ T4196] device veth1_macvtap entered promiscuous mode [ 90.056665][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.060110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.081783][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.109786][ T4189] device veth0_macvtap entered promiscuous mode [ 90.119287][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.133115][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.150408][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.169236][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.215049][ T4189] device veth1_macvtap entered promiscuous mode [ 90.244246][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.262349][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.277654][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.301593][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.325461][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.377180][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.398914][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.408714][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.423060][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.438691][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.451700][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 90.459730][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.475401][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.489015][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.500616][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.512969][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.524147][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.525219][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 90.537521][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.557272][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.560817][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 90.569130][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.591216][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 90.591397][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.613828][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 90.630941][ T4191] device veth0_macvtap entered promiscuous mode [ 90.645068][ T4191] device veth1_macvtap entered promiscuous mode [ 90.656165][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.671646][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.684619][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.695727][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.711133][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.724320][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.735942][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.751198][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.761967][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.772762][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.783070][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.806531][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.821771][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.837297][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.849494][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.863115][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.877204][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.901422][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.934131][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.952538][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.963016][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.116484][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.128750][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.143018][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.156645][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.569061][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.067831][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.102892][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.139340][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.160462][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.171647][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.186077][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.192810][ T4275] loop0: detected capacity change from 0 to 128 [ 92.202980][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.221211][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.235644][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.257691][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.306891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.315595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.336540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.398086][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.410148][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.420765][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.431363][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.442379][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.453467][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.463519][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.474337][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.491510][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.505877][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518093][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.543480][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.557616][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.602896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.624897][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.645616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.655530][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.671916][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.905429][ T524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.918004][ T524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.812655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.866116][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.910356][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.977542][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.996695][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.007247][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.019848][ T4286] device syzkaller0 entered promiscuous mode [ 94.019884][ T4284] Zero length message leads to an empty skb [ 94.035497][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.074735][ T524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.097254][ T524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.203979][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.247132][ T4291] loop4: detected capacity change from 0 to 128 [ 94.327989][ T4291] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 94.533752][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 94.685125][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.696955][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.421002][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.459203][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.930471][ T4289] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.945778][ T4289] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.959987][ T4289] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.971063][ T4289] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.155852][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.164125][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.186879][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.217428][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.262918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.281154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.323703][ T23] cfg80211: failed to load regulatory.db [ 98.431496][ T4333] tmpfs: Unknown parameter 'm000000000000000005' [ 98.451835][ T4330] MPTCP: addr_signal error, add_addr=1, echo=0 [ 98.467564][ T4330] MPTCP: addr_signal error, rm_addr=1 [ 98.484460][ T4334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.616212][ T4333] netlink: 'syz.3.17': attribute type 17 has an invalid length. [ 99.706381][ T4339] device-mapper: ioctl: device has been removed from the dev hash table. [ 99.959837][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.107088][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 100.810306][ T4333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.875296][ T4361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21'. [ 100.904647][ T4363] hub 8-0:1.0: USB hub found [ 100.926314][ T4363] hub 8-0:1.0: 1 port detected [ 101.176130][ T4369] process 'syz.2.23' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 103.013369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 103.033328][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 103.043308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 103.053316][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 103.063310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 103.073306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.083311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.093307][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.230937][ T4372] loop2: detected capacity change from 0 to 1024 [ 103.512825][ T4372] EXT4-fs (loop2): mounted filesystem without journal. Opts: dax=never,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,errors=remount-ro,stripe=0x0000000000000005,lazytime,init_itable,. Quota mode: none. [ 103.585855][ T4372] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 103.851946][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.861282][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.876374][ T4364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.951163][ T4364] syz.4.21 (4364) used greatest stack depth: 19536 bytes left [ 104.225792][ T4387] loop0: detected capacity change from 0 to 256 [ 104.286659][ T4386] loop1: detected capacity change from 0 to 4096 [ 105.034371][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 105.148722][ T4386] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.219006][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 105.458433][ T4399] mmap: syz.1.30 (4399) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 105.614673][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 105.765422][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 106.614134][ T4189] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 107.025259][ T4413] loop4: detected capacity change from 0 to 256 [ 107.073991][ T4413] exfat: Deprecated parameter 'utf8' [ 107.108032][ T4414] tipc: Started in network mode [ 107.137086][ T4413] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 107.150582][ T4414] tipc: Node identity 1ea593b13414, cluster identity 4711 [ 107.174690][ T4414] tipc: Enabled bearer , priority 0 [ 107.182422][ T4423] device syzkaller0 entered promiscuous mode [ 107.210284][ T4424] device syzkaller0 entered promiscuous mode [ 107.255935][ T4417] tipc: Started in network mode [ 107.270220][ T4417] tipc: Node identity 1ee4c3ab16e4, cluster identity 4711 [ 107.287084][ T4417] tipc: Enabled bearer , priority 0 [ 107.319960][ T4414] tipc: Resetting bearer [ 107.346286][ T4417] tipc: Resetting bearer [ 107.408651][ T4410] tipc: Resetting bearer [ 107.596479][ T4410] tipc: Disabling bearer [ 107.756691][ T4416] tipc: Resetting bearer [ 107.948162][ T4416] tipc: Disabling bearer [ 108.427371][ T4438] device syzkaller0 entered promiscuous mode [ 108.773350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 108.793396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 110.397290][ T4453] loop1: detected capacity change from 0 to 40427 [ 110.547269][ T4453] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 110.553961][ T4453] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 110.608353][ T4453] F2FS-fs (loop1): invalid crc value [ 110.734631][ T4453] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.847137][ T4453] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 110.855421][ T4453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.710590][ T4470] attempt to access beyond end of device [ 111.710590][ T4470] loop1: rw=10241, want=53256, limit=40427 [ 112.476448][ T4189] attempt to access beyond end of device [ 112.476448][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 113.976340][ T4485] loop4: detected capacity change from 0 to 512 PÚÿÿÿ-D devtmpfs./dev/console[ 115.169877][ T4485] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 115.341163][ T4485] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 116.062245][ T4485] EXT4-fs (loop4): 1 truncate cleaned up [ 116.168878][ T4485] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 116.351435][ T4493] loop3: detected capacity change from 0 to 512 [ 116.606179][ T4493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.839219][ T4493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.012209][ T4493] EXT4-fs (loop3): 1 truncate cleaned up [ 117.024345][ T4493] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 117.212986][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 117.739063][ T4499] device syzkaller0 entered promiscuous mode [ 117.839628][ T4504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.904123][ T4522] netlink: 'syz.1.62': attribute type 2 has an invalid length. [ 118.925311][ T4524] netlink: 'syz.3.60': attribute type 11 has an invalid length. [ 118.994934][ T4527] device syzkaller0 entered promiscuous mode [ 119.025103][ T4529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 119.194347][ T4538] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 119.230973][ T4538] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 119.923705][ T4545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.231777][ T4544] sched: RT throttling activated [ 120.653735][ T4538] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 120.670199][ T4547] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 7 (only 8 groups) [ 120.710735][ T4538] netlink: 'syz.0.66': attribute type 3 has an invalid length. [ 120.742443][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 120.759441][ T4550] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 120.793641][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.823798][ T4550] netlink: 'syz.0.66': attribute type 3 has an invalid length. [ 120.855695][ T4538] netlink: 'syz.0.66': attribute type 3 has an invalid length. [ 120.902329][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 120.933540][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 120.958976][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 120.970844][ T4556] netlink: 108 bytes leftover after parsing attributes in process `syz.1.72'. [ 120.990442][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 121.002695][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 121.031444][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.092341][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 121.112743][ T4559] device veth0_macvtap left promiscuous mode [ 121.198584][ T4561] loop2: detected capacity change from 0 to 4096 [ 121.264078][ T4564] device syzkaller0 entered promiscuous mode [ 121.393360][ T26] audit: type=1800 audit(1791040503.475:2): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="memory_backed" dev="configfs" ino=33381 res=0 errno=0 [ 121.481028][ T26] audit: type=1800 audit(1791040503.525:3): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="zone_nr_conv" dev="configfs" ino=33382 res=0 errno=0 [ 121.514432][ T26] audit: type=1800 audit(1791040503.525:4): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="power" dev="configfs" ino=33383 res=0 errno=0 [ 121.562744][ T4561] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 121.591186][ T4561] ntfs3: loop2: Failed to load $Extend. [ 122.555379][ T4580] device syzkaller0 entered promiscuous mode [ 122.753651][ T4301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.997627][ T4591] netlink: 64 bytes leftover after parsing attributes in process `syz.4.83'. [ 123.015127][ T4273] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.284807][ T4273] usb 1-1: Using ep0 maxpacket: 32 [ 123.436839][ T4301] usb 2-1: config 127 has an invalid interface number: 138 but max is 0 [ 123.463992][ T4273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.531275][ C1] hrtimer: interrupt took 1446577 ns [ 123.637417][ T4301] usb 2-1: config 127 has no interface number 0 [ 123.973785][ T4301] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 124.003697][ T4301] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 124.153838][ T4273] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 124.213651][ T4301] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 124.230930][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 124.249094][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.278188][ T4273] usb 1-1: Product: syz [ 124.282463][ T4273] usb 1-1: Manufacturer: syz [ 124.293562][ T4301] usb 2-1: Product: syz [ 124.298080][ T4301] usb 2-1: Manufacturer: syz [ 124.316196][ T4301] usb 2-1: SerialNumber: syz [ 124.361733][ T4273] usb 1-1: config 0 descriptor?? [ 124.458107][ T4578] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.487967][ T4621] loop2: detected capacity change from 0 to 256 [ 124.506152][ T4578] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.582982][ T4616] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 124.606012][ T4273] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 124.669994][ T4621] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 125.091071][ T4273] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 125.141616][ T4273] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 125.675759][ T26] audit: type=1804 audit(1791040507.798:5): pid=4621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.88" name="/newroot/14/file0/bus" dev="loop2" ino=1048593 res=1 errno=0 [ 125.707671][ T4273] usb 1-1: USB disconnect, device number 2 [ 125.778564][ T4631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.89'. [ 126.009878][ T4301] usb 2-1: probing VID:PID(0424:012C) [ 126.036561][ T4301] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F [ 126.045184][ T4301] usb 2-1: vub300 testing BULK OUT EndPoint(1) 09 [ 126.057306][ T4301] usb 2-1: vub300 testing BULK OUT EndPoint(2) 0C [ 126.492944][ T4301] usb 2-1: ignoring unexpected bulk_out endpoint [ 126.499686][ T4301] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 126.531066][ T4301] vub300: probe of 2-1:127.138 failed with error -22 [ 127.185247][ T4645] loop2: detected capacity change from 0 to 256 [ 127.270799][ T4301] usb 2-1: USB disconnect, device number 2 [ 127.333465][ T4645] exfat: Bad value for 'time_offset' [ 127.786154][ T4643] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 127.881352][ T4648] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 127.914641][ T4302] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.184185][ T4653] loop2: detected capacity change from 0 to 32768 [ 128.240199][ T4653] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.95 (4653) [ 128.593425][ T4273] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.898341][ T4653] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 128.916143][ T4653] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 128.928151][ T4653] BTRFS info (device loop2): use zstd compression, level 3 [ 128.939015][ T4653] BTRFS info (device loop2): using free space tree [ 128.946777][ T4653] BTRFS info (device loop2): has skinny extents [ 129.417061][ T4302] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.431871][ T4302] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 129.456922][ T26] audit: type=1326 audit(1791040511.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.0.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c22a2159 code=0x0 [ 129.598353][ T4653] BTRFS info (device loop2): enabling ssd optimizations [ 129.627981][ T4273] usb 5-1: Using ep0 maxpacket: 16 [ 129.628633][ T4302] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 129.657884][ T4302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.668061][ T4302] usb 4-1: Product: syz [ 129.672977][ T4302] usb 4-1: Manufacturer: syz [ 129.679419][ T4302] usb 4-1: SerialNumber: syz [ 129.820106][ T4273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.957845][ T4273] usb 5-1: config 1 has an invalid interface number: 175 but max is 0 [ 129.978963][ T4273] usb 5-1: config 1 has no interface number 0 [ 130.038380][ T4302] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 130.748657][ T4273] usb 5-1: config 1 interface 175 has no altsetting 0 [ 130.800109][ T4302] usb 4-1: USB disconnect, device number 2 [ 130.883146][ T4302] usblp0: removed [ 132.182086][ T4706] device syzkaller0 entered promiscuous mode [ 132.191678][ T4273] usb 5-1: New USB device found, idVendor=04ca, idProduct=3006, bcdDevice=c2.a3 [ 132.226073][ T4273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.258202][ T4706] tipc: Started in network mode [ 132.282385][ T4273] usb 5-1: Product: syz [ 132.296087][ T4706] tipc: Node identity d22c4c816996, cluster identity 4711 [ 132.329418][ T4273] usb 5-1: Manufacturer: syz [ 132.361634][ T4706] tipc: Enabled bearer , priority 0 [ 132.421044][ T4273] usb 5-1: can't set config #1, error -71 [ 132.421377][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 132.496857][ T4273] usb 5-1: USB disconnect, device number 2 [ 132.536168][ T4716] ODEBUG: Out of memory. ODEBUG disabled [ 132.557111][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 132.830540][ T4705] tipc: Resetting bearer [ 133.349546][ T4705] tipc: Disabling bearer [ 134.333159][ T4726] device syzkaller0 entered promiscuous mode [ 136.295097][ T4750] loop3: detected capacity change from 0 to 512 [ 136.782175][ T4750] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.880795][ T4750] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.398984][ T4769] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.119'. [ 138.610032][ T4778] netlink: 'syz.2.120': attribute type 4 has an invalid length. [ 138.790742][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.804923][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.859331][ T4796] autofs4:pid:4796:autofs_fill_super: called with bogus options [ 139.964541][ T2256] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.058312][ T4804] loop0: detected capacity change from 0 to 736 [ 140.515999][ T2256] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 140.712170][ T2256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.656720][ T2256] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, f2:b5:16:bf:c3:37 [ 141.867907][ T2256] usb 3-1: USB disconnect, device number 2 [ 141.903290][ T2256] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 142.175155][ T4836] loop0: detected capacity change from 0 to 128 [ 142.250986][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 142.345966][ T4830] syz.4.130 (4830) used greatest stack depth: 19280 bytes left [ 142.835854][ T4846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.170393][ T4852] loop1: detected capacity change from 0 to 512 [ 144.585984][ T26] audit: type=1326 audit(1791040525.588:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.2.135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0779e09159 code=0x7fc00000 [ 144.843547][ T4852] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 145.284674][ T4852] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.319478][ T4859] loop2: detected capacity change from 0 to 256 [ 145.355403][ T4867] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 145.646320][ T4859] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 145.665641][ T4874] tipc: Started in network mode [ 145.713053][ T4874] tipc: Node identity 7f000001, cluster identity 4711 [ 145.729477][ T4874] tipc: New replicast peer: 127.0.0.1 [ 145.782023][ T4874] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 146.622079][ T26] audit: type=1326 audit(1791040526.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.2.135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0779e09159 code=0x7fc00000 [ 146.736615][ T4874] tipc: Enabled bearer , priority 10 [ 146.749767][ T4883] loop4: detected capacity change from 0 to 512 [ 146.859247][ T4884] tipc: Disabling bearer [ 146.906591][ T4883] EXT4-fs (loop4): Ignoring removed nobh option [ 146.933003][ T4883] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.141: invalid indirect mapped block 256 (level 2) [ 146.963926][ T4883] EXT4-fs (loop4): 2 truncates cleaned up [ 147.031257][ T4301] tipc: Node number set to 2130706433 [ 147.099846][ T4883] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 147.304637][ T4899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 148.814704][ T4881] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.141: bg 0: block 5: invalid block bitmap [ 148.858934][ T4881] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 148.876774][ T4881] EXT4-fs (loop4): This should not happen!! Data will be lost [ 148.876774][ T4881] [ 148.888206][ T4881] EXT4-fs (loop4): Total free blocks count 0 [ 148.897235][ T4881] EXT4-fs (loop4): Free/Dirty block details [ 148.905968][ T4881] EXT4-fs (loop4): free_blocks=0 [ 148.912174][ T4881] EXT4-fs (loop4): dirty_blocks=33 [ 148.918531][ T4881] EXT4-fs (loop4): Block reservation details [ 148.931078][ T4881] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 149.549161][ T4933] netlink: 56 bytes leftover after parsing attributes in process `syz.1.149'. [ 149.972257][ T4943] loop2: detected capacity change from 0 to 164 [ 152.052673][ T4954] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 152.090945][ T4954] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 152.114099][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.127073][ T4933] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.759357][ T4975] loop3: detected capacity change from 0 to 8 [ 152.831641][ T4975] unable to read xattr id index table [ 152.964817][ T4975] 9pnet_virtio: no channels available for device syz [ 153.393690][ T4975] loop3: detected capacity change from 0 to 32768 [ 153.410674][ T4933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.451826][ T4933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.467985][ T4975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.161 (4975) [ 153.709517][ T4975] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 153.730122][ T4975] BTRFS info (device loop3): using free space tree [ 153.737921][ T4975] BTRFS info (device loop3): has skinny extents [ 153.969909][ T4975] BTRFS info (device loop3): enabling ssd optimizations [ 154.614925][ T4933] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.624245][ T4933] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.635489][ T4933] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.660458][ T4933] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.843433][ T4942] netlink: 14 bytes leftover after parsing attributes in process `syz.4.150'. [ 154.943353][ T5001] binder_alloc: 5000: binder_alloc_buf, no vma [ 154.995950][ T4942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.023569][ T4942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.045691][ T4942] bond0 (unregistering): Released all slaves [ 155.065346][ T4959] netlink: 'syz.0.156': attribute type 14 has an invalid length. [ 155.080566][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 155.098931][ T4959] bond0: option xmit_hash_policy: invalid value (113) [ 155.120603][ T5003] netlink: 'syz.1.164': attribute type 13 has an invalid length. [ 155.157684][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 155.207378][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 155.226579][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 155.246849][ T5006] ip_tables: iptables: counters copy to user failed while replacing table [ 155.265268][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 155.353459][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 155.376534][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 155.614726][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 156.253647][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 156.293536][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 156.316954][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 156.341205][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 156.380686][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 156.425493][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 156.446186][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 156.489720][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 156.509307][ T5010] tipc: New replicast peer: 172.20.20.187 [ 156.539170][ T5010] tipc: Enabled bearer , priority 10 [ 156.632344][ T5023] tmpfs: Unknown parameter 'm000000000000000005' [ 156.795383][ T5023] netlink: 'syz.2.170': attribute type 17 has an invalid length. [ 156.899072][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.030028][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.653556][ T5023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.848457][ T23] tipc: Node number set to 134267819 [ 159.208448][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. PÚÿÿÿ-D devtmpfs./dev/console[ 160.642182][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 162.567278][ T5057] netlink: 'syz.2.179': attribute type 12 has an invalid length. [ 162.640573][ T2238] FS-Cache: Duplicate cookie detected [ 162.655753][ T2238] FS-Cache: O-cookie c=00000009 [p=00000006 fl=222 nc=0 na=1] [ 162.670617][ T2238] FS-Cache: O-cookie d=ffffffff8c747da0{AFS.cell} n=ffff88807b906800 [ 162.681677][ T2238] FS-Cache: O-key=[4] '73797a30' [ 162.692420][ T2238] FS-Cache: N-cookie c=0000000a [p=00000006 fl=2 nc=0 na=1] [ 162.708150][ T2238] FS-Cache: N-cookie d=ffffffff8c747da0{AFS.cell} n=ffff888024dc4000 [ 162.716958][ T2238] FS-Cache: N-key=[4] '73797a30' [ 162.724125][ T5068] kAFS: No cell specified [ 165.229967][ T5089] device syzkaller0 entered promiscuous mode [ 165.245297][ T5098] loop2: detected capacity change from 0 to 128 [ 179.340809][ T5166] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 181.643375][ T5174] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 183.855534][ T5189] loop4: detected capacity change from 0 to 40427 [ 184.031894][ T5189] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 184.046837][ T5189] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 184.154136][ T5197] ubi0: attaching mtd0 [ 184.261900][ T5197] ubi0: scanning is finished [ 184.270788][ T5197] ubi0: empty MTD device detected [ 184.340211][ T5189] F2FS-fs (loop4): invalid crc value [ 184.548766][ T5189] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 184.747186][ T5189] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 184.759715][ T5189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.907006][ T5197] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 185.499410][ T5217] attempt to access beyond end of device [ 185.499410][ T5217] loop4: rw=10241, want=53256, limit=40427 [ 186.592782][ T4196] attempt to access beyond end of device [ 186.592782][ T4196] loop4: rw=2049, want=45104, limit=40427 [ 186.910993][ T5222] loop2: detected capacity change from 0 to 2048 [ 187.409180][ T5222] EXT4-fs error (device loop2): __ext4_iget:4919: inode #2: block 127754: comm syz.2.220: invalid block [ 187.731517][ T5222] EXT4-fs (loop2): get root inode failed [ 187.750530][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.759254][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.868692][ T5222] EXT4-fs (loop2): mount failed [ 190.797646][ T5267] tmpfs: Unknown parameter 'm000000000000000005' [ 192.597551][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.701120][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.313282][ T5171] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.329906][ T5171] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.371060][ T5171] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.389054][ T5171] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.556653][ T5267] netlink: 'syz.1.226': attribute type 17 has an invalid length. [ 193.637869][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.668327][ T5267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.689189][ T5267] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.706547][ T5267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.875518][ T5281] device syzkaller0 entered promiscuous mode [ 194.090456][ T5289] loop3: detected capacity change from 0 to 40427 [ 194.176985][ T5289] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 194.193511][ T5289] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 194.209757][ T5289] F2FS-fs (loop3): invalid crc value [ 194.351608][ T5289] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 194.434972][ T5289] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 194.447669][ T5289] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 195.966222][ T5305] attempt to access beyond end of device [ 195.966222][ T5305] loop3: rw=10241, want=53256, limit=40427 [ 197.040434][ T4190] attempt to access beyond end of device [ 197.040434][ T4190] loop3: rw=2049, want=45104, limit=40427 [ 197.113992][ T5307] loop2: detected capacity change from 0 to 1024 [ 200.679708][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 200.941495][ T5349] tmpfs: Unknown parameter 'm000000000000000005' [ 201.087774][ T4295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 201.169567][ T5349] netlink: 'syz.4.241': attribute type 17 has an invalid length. [ 201.215900][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.234936][ T5349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.304984][ T5310] chnl_net:caif_netlink_parms(): no params data found [ 201.502698][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.808818][ T4295] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.829958][ T4295] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 201.843579][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.620738][ T4295] usb 2-1: config 0 descriptor?? [ 202.657822][ T4277] tipc: Left network mode [ 203.352637][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 203.403220][ T5310] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.475254][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.618124][ T5310] device bridge_slave_0 entered promiscuous mode [ 203.738693][ T5385] md: md0 stopped. [ 204.198515][ T5393] syz.2.253 (5393): attempted to duplicate a private mapping with mremap. This is not supported. [ 204.472550][ T4311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 204.890395][ T5397] device syzkaller0 entered promiscuous mode [ 204.970926][ T4311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.042071][ T4311] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 205.070819][ T5399] loop2: detected capacity change from 0 to 1024 [ 205.152395][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.274297][ T4311] usb 5-1: config 0 descriptor?? [ 205.418047][ T4311] pwc: Askey VC010 type 2 USB webcam detected. [ 206.022500][ T4311] pwc: recv_control_msg error -32 req 02 val 2b00 [ 206.079311][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.091320][ T5310] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.103493][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.124276][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 206.161286][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.207604][ T4311] pwc: recv_control_msg error -32 req 02 val 2700 [ 206.238578][ T5310] device bridge_slave_1 entered promiscuous mode [ 206.284047][ T4295] usbhid 2-1:0.0: can't add hid device: -71 [ 206.303930][ T4311] pwc: recv_control_msg error -32 req 02 val 2c00 [ 206.310980][ T4295] usbhid: probe of 2-1:0.0 failed with error -71 [ 206.332909][ T4295] usb 2-1: USB disconnect, device number 3 [ 206.413706][ T4311] pwc: recv_control_msg error -32 req 04 val 1000 [ 206.452044][ T5310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.551294][ T4311] pwc: recv_control_msg error -32 req 04 val 1300 [ 206.575646][ T5310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.619376][ T4311] pwc: recv_control_msg error -32 req 04 val 1400 [ 206.693905][ T4311] pwc: recv_control_msg error -32 req 02 val 2000 [ 206.713412][ T5310] team0: Port device team_slave_0 added [ 206.769860][ T4311] pwc: recv_control_msg error -32 req 02 val 2100 [ 206.802728][ T5310] team0: Port device team_slave_1 added [ 206.894753][ T5310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.911336][ T5310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.008487][ T5310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.062460][ T4311] pwc: recv_control_msg error -32 req 02 val 2500 [ 207.095791][ T5310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.118689][ T5310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.170914][ T4311] pwc: recv_control_msg error -32 req 02 val 2400 [ 207.214709][ T5310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.272841][ T4311] pwc: recv_control_msg error -32 req 02 val 2600 [ 207.325421][ T5310] device hsr_slave_0 entered promiscuous mode [ 207.350324][ T4311] pwc: recv_control_msg error -32 req 02 val 2900 [ 207.362968][ T5310] device hsr_slave_1 entered promiscuous mode [ 207.388991][ T5310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.410781][ T5310] Cannot create hsr debugfs directory [ 207.669727][ T4311] pwc: recv_control_msg error -71 req 04 val 1100 [ 207.745213][ T4311] pwc: recv_control_msg error -71 req 04 val 1200 [ 207.770197][ T4311] pwc: Registered as video103. [ 207.785671][ T4311] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 207.886161][ T4311] usb 5-1: USB disconnect, device number 3 [ 208.027073][ T4277] device hsr_slave_0 left promiscuous mode [ 208.065695][ T4277] device hsr_slave_1 left promiscuous mode [ 208.099245][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.117135][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.132203][ T4277] device bridge_slave_1 left promiscuous mode [ 208.149222][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.175164][ T4277] device bridge_slave_0 left promiscuous mode [ 208.185504][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.374558][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 208.392016][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 208.406397][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.407438][ T4311] Bluetooth: hci0: command 0x0419 tx timeout [ 208.430818][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.509740][ T4277] bond0 (unregistering): Released all slaves [ 208.663478][ T5310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.712834][ T5310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.743391][ T5310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.776357][ T5310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.995453][ T5310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.034434][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.059110][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.094376][ T5310] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.144499][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.161831][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.176973][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.202653][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.236856][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.257022][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.280700][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.314091][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.334386][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.357636][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.448490][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.480368][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.499250][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.518053][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.536953][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.551449][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.589962][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.630608][ T5310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.664281][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.687626][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.697696][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.716086][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.166881][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.191651][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.246011][ T5310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.626006][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.655062][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.728376][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.761854][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.799489][ T5310] device veth0_vlan entered promiscuous mode [ 210.821689][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.855265][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.957436][ T5310] device veth1_vlan entered promiscuous mode [ 211.046472][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.073137][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.098156][ T5310] device veth0_macvtap entered promiscuous mode [ 211.120741][ T5310] device veth1_macvtap entered promiscuous mode [ 211.156406][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.210612][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.232473][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.255468][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.274598][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.290168][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.315225][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.349088][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.374525][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.397749][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.412116][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.432064][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.458529][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.499557][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.534501][ T5310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.549696][ T5310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.577565][ T5310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.601346][ T5310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.806882][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.831007][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.928054][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.967633][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.012309][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.033359][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.392264][ T5487] device syzkaller0 entered promiscuous mode [ 213.162831][ T5481] loop3: detected capacity change from 0 to 4096 [ 213.174231][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 213.181242][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 213.213296][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 213.223387][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 213.239098][ T5491] device syzkaller0 entered promiscuous mode [ 214.284279][ T5504] tmpfs: Unknown parameter 'm000000000000000005' [ 215.596750][ T5504] netlink: 'syz.5.256': attribute type 17 has an invalid length. [ 215.771296][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.803649][ T5504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.313889][ T5528] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 221.504517][ T5574] tmpfs: Unknown parameter 'm000000000000000005' [ 224.310065][ T5574] netlink: 'syz.5.278': attribute type 17 has an invalid length. [ 224.361312][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.432176][ T5574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.542098][ T5595] device syzkaller0 entered promiscuous mode [ 224.633096][ T5597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.641244][ T5597] IPv6: NLM_F_CREATE should be set when creating new route [ 227.531156][ T5632] loop2: detected capacity change from 0 to 128 [ 227.590031][ T5632] ======================================================= [ 227.590031][ T5632] WARNING: The mand mount option has been deprecated and [ 227.590031][ T5632] and is ignored by this kernel. Remove the mand [ 227.590031][ T5632] option from the mount to silence this warning. [ 227.590031][ T5632] ======================================================= [ 227.830987][ T5632] EXT4-fs (loop2): Test dummy encryption mode enabled [ 227.913752][ T5632] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 227.935938][ T5632] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.354621][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.365340][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.431690][ T5632] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 229.159415][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.333089][ T4867] IPVS: ip_vs_send_async error -101 [ 230.657950][ T5599] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.667435][ T5599] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.676836][ T5599] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.698760][ T5599] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.930209][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 231.170219][ T5658] tmpfs: Unknown parameter 'm000000000000000005' [ 231.214011][ T5661] loop5: detected capacity change from 0 to 128 [ 231.258429][ T5660] device syzkaller0 entered promiscuous mode [ 231.323679][ T5658] netlink: 'syz.2.295': attribute type 17 has an invalid length. [ 231.413579][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 231.535282][ T5657] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 232.264890][ T5674] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5310] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5674] [ 232.288407][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.297647][ T5657] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 232.397202][ T5658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.636196][ T5678] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.651641][ T5678] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.663927][ T5678] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.675495][ T5678] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.879570][ T5678] team0: Port device vxlan0 added [ 233.752791][ T5695] device syzkaller0 entered promiscuous mode [ 233.923115][ T5687] loop2: detected capacity change from 0 to 8192 [ 234.086300][ T5706] loop5: detected capacity change from 0 to 1024 [ 234.112409][ T5687] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.529914][ T5703] loop1: detected capacity change from 0 to 40427 PÚÿÿÿ-D devtmpfs./dev/console[ 234.660670][ T5703] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 234.676356][ T5703] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 234.713912][ T5703] F2FS-fs (loop1): invalid crc value [ 234.762109][ T5706] EXT4-fs (loop5): Ignoring removed bh option [ 234.892534][ T5703] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 235.038095][ T5703] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 235.045633][ T5703] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 235.082586][ T5706] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 235.125162][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.393643][ T5717] device syzkaller0 entered promiscuous mode [ 235.520810][ T5727] attempt to access beyond end of device [ 235.520810][ T5727] loop1: rw=10241, want=53256, limit=40427 [ 236.547286][ T5706] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.593211][ T4189] attempt to access beyond end of device [ 236.593211][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 236.879418][ T5733] device syzkaller0 entered promiscuous mode [ 236.965025][ T5737] tmpfs: Unknown parameter 'm000000000000000005' [ 237.096848][ T5737] netlink: 'syz.4.311': attribute type 17 has an invalid length. [ 237.325898][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.382778][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.414554][ T5737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.501033][ T5745] device syzkaller0 entered promiscuous mode [ 240.024495][ T5757] loop2: detected capacity change from 0 to 128 [ 240.168320][ T5776] device syzkaller0 entered promiscuous mode [ 242.493601][ T5811] FAULT_INJECTION: forcing a failure. [ 242.493601][ T5811] name failslab, interval 1, probability 0, space 0, times 1 [ 242.513338][ T5811] CPU: 0 PID: 5811 Comm: syz.1.325 Not tainted syzkaller #0 [ 242.525163][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.545853][ T5811] Call Trace: [ 242.554765][ T5811] [ 242.561025][ T5811] dump_stack_lvl+0x188/0x250 [ 242.566840][ T5811] ? show_regs_print_info+0x20/0x20 [ 242.578175][ T5811] ? load_image+0x410/0x410 [ 242.583042][ T5811] ? __lock_acquire+0x13b3/0x7d40 [ 242.588319][ T5811] should_fail+0x383/0x4b0 [ 242.593767][ T5811] should_failslab+0x5/0x20 [ 242.598522][ T5811] slab_pre_alloc_hook+0x51/0xc0 [ 242.603776][ T5811] ? radix_tree_node_alloc+0x197/0x3a0 [ 242.609279][ T5811] kmem_cache_alloc+0x3d/0x280 [ 242.614105][ T5811] radix_tree_node_alloc+0x197/0x3a0 [ 242.619766][ T5811] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.626010][ T5811] idr_get_free+0x28b/0xa10 [ 242.630750][ T5811] idr_alloc_cyclic+0x286/0x610 [ 242.636116][ T5811] ? idr_alloc+0x2e0/0x2e0 [ 242.640834][ T5811] ? do_raw_spin_lock+0x128/0x2f0 [ 242.645963][ T5811] __kernfs_new_node+0x12d/0x6b0 [ 242.650975][ T5811] ? kernfs_new_node+0x250/0x250 [ 242.655966][ T5811] ? unwind_get_return_address+0x49/0x80 [ 242.661660][ T5811] ? stack_trace_save+0xf0/0xf0 [ 242.666565][ T5811] ? arch_stack_walk+0xf2/0x140 [ 242.672674][ T5811] kernfs_new_node+0x148/0x250 [ 242.680231][ T5811] kernfs_create_dir_ns+0x40/0x120 [ 242.686794][ T5811] sysfs_create_dir_ns+0x12c/0x290 [ 242.692241][ T5811] ? sysfs_warn_dup+0xa0/0xa0 [ 242.697428][ T5811] ? do_raw_spin_unlock+0x11d/0x230 [ 242.704693][ T5811] kobject_add_internal+0x5ba/0xcd0 [ 242.711205][ T5811] kobject_add+0x160/0x230 [ 242.715886][ T5811] ? kobject_init+0x1c0/0x1c0 [ 242.721199][ T5811] ? kobject_init+0x7b/0x1c0 [ 242.728415][ T5811] get_device_parent+0x37d/0x3e0 [ 242.734509][ T5811] device_add+0x31b/0x1050 [ 242.741252][ T5811] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 242.751636][ T5811] wakeup_source_register+0x15f/0x230 [ 242.758987][ T5811] ep_insert+0xe5c/0x1930 [ 242.769169][ T5811] ? ep_loop_check+0x180/0x180 [ 242.775165][ T5811] ? ep_loop_check_proc+0x27d/0x2d0 [ 242.782386][ T5811] ? bpf_lsm_capable+0x5/0x10 [ 242.789144][ T5811] do_epoll_ctl+0x8bc/0xf20 [ 242.800430][ T5811] __x64_sys_epoll_ctl+0x162/0x1b0 [ 242.807973][ T5811] ? ep_modify+0xa80/0xa80 [ 242.815920][ T5811] ? lockdep_hardirqs_on+0x94/0x140 [ 242.822758][ T5811] do_syscall_64+0x4c/0xa0 [ 242.827236][ T5811] ? clear_bhb_loop+0x30/0x80 [ 242.831981][ T5811] ? clear_bhb_loop+0x30/0x80 [ 242.836714][ T5811] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.842679][ T5811] RIP: 0033:0x7fdd28ee1159 [ 242.847145][ T5811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.867364][ T5811] RSP: 002b:00007fdd27139028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 242.876022][ T5811] RAX: ffffffffffffffda RBX: 00007fdd29168fa0 RCX: 00007fdd28ee1159 [ 242.884054][ T5811] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 242.892184][ T5811] RBP: 00007fdd28f7806b R08: 0000000000000000 R09: 0000000000000000 [ 242.900232][ T5811] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.908264][ T5811] R13: 00007fdd29169038 R14: 00007fdd29168fa0 R15: 00007ffdb1bcef88 [ 242.916329][ T5811] [ 243.430623][ T5832] tmpfs: Unknown parameter 'm000000000000000005' [ 244.652171][ T4273] Process accounting resumed [ 244.714530][ T5832] netlink: 'syz.5.330': attribute type 17 has an invalid length. [ 244.887905][ T5843] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.387835][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.724842][ T5832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.937022][ T5842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 246.705710][ T5858] loop3: detected capacity change from 0 to 1024 [ 246.952215][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.988773][ T5858] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.092245][ T5868] device syzkaller0 entered promiscuous mode [ 247.102373][ T5858] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 3) [ 247.313715][ T5865] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 247.396479][ T5858] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 247.560112][ T5858] EXT4-fs (loop3): This should not happen!! Data will be lost [ 247.560112][ T5858] [ 247.703653][ T5869] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 247.734156][ T5869] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 247.773827][ T5869] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 247.798728][ T5856] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 247.820645][ T5856] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 247.847069][ T5869] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 247.864229][ T5856] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 247.879179][ T5856] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.334: lblock 3 mapped to illegal pblock 3 (length 1) [ 248.013106][ T5858] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 248.034271][ T5858] EXT4-fs (loop3): This should not happen!! Data will be lost [ 248.034271][ T5858] [ 248.046940][ T5858] EXT4-fs (loop3): Total free blocks count 0 [ 248.058095][ T5858] EXT4-fs (loop3): Free/Dirty block details [ 248.064777][ T5858] EXT4-fs (loop3): free_blocks=0 [ 248.070112][ T5858] EXT4-fs (loop3): dirty_blocks=64 [ 248.077045][ T5858] EXT4-fs (loop3): Block reservation details [ 248.083754][ T5858] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 248.373869][ T5893] device syzkaller0 entered promiscuous mode [ 248.466288][ T5903] loop1: detected capacity change from 0 to 128 [ 248.834042][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.341'. [ 249.002853][ T5912] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5912] [ 249.330987][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 249.343777][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.344'. [ 249.755125][ T5924] tipc: Enabling of bearer rejected, failed to enable media [ 249.951197][ T5929] loop3: detected capacity change from 0 to 512 [ 250.353279][ T5943] tmpfs: Unknown parameter 'm000000000000000005' [ 250.419717][ T5948] device syzkaller0 entered promiscuous mode [ 250.436986][ T5943] netlink: 'syz.2.348': attribute type 17 has an invalid length. [ 250.472872][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 250.864415][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.905002][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.327134][ T5943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.356691][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.932797][ T4273] Bluetooth: hci0: command 0x0c3a tx timeout [ 252.366294][ T5977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 252.382156][ T5977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 252.405399][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.415231][ T5977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 252.428678][ T5977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 252.440323][ T5977] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 252.658969][ T5976] device syzkaller0 entered promiscuous mode [ 254.384434][ T4273] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.542084][ T1108] FS-Cache: Duplicate cookie detected [ 254.549955][ T1108] FS-Cache: O-cookie c=00000009 [p=00000006 fl=222 nc=0 na=1] [ 254.558934][ T1108] FS-Cache: O-cookie d=ffffffff8c747da0{AFS.cell} n=ffff88807b906800 [ 254.567596][ T1108] FS-Cache: O-key=[4] '73797a30' [ 254.572643][ T1108] FS-Cache: N-cookie c=0000000b [p=00000006 fl=2 nc=0 na=1] [ 254.580023][ T1108] FS-Cache: N-cookie d=ffffffff8c747da0{AFS.cell} n=ffff88802ac27000 [ 254.588172][ T1108] FS-Cache: N-key=[4] '73797a30' [ 254.615089][ T6012] device syzkaller0 entered promiscuous mode [ 255.333200][ T6028] loop1: detected capacity change from 0 to 164 [ 255.404873][ T6031] loop2: detected capacity change from 0 to 64 [ 256.439177][ T26] audit: type=1800 audit(1791040628.850:9): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.367" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 257.916148][ T4191] hfs: node 4:3 still has 1 user(s)! [ 258.099758][ T6066] loop1: detected capacity change from 0 to 2048 [ 258.121113][ T6062] device syzkaller0 entered promiscuous mode [ 258.285288][ T6066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.344049][ T6070] device syzkaller0 entered promiscuous mode [ 258.365977][ T6072] bonding: unable to delete non-existent bond0 [ 258.950837][ T6063] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.341478][ T6084] device syzkaller0 entered promiscuous mode [ 259.547815][ T6088] loop1: detected capacity change from 0 to 512 [ 260.637306][ T6095] kAFS: No cell specified [ 260.776594][ T6088] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 261.224347][ T6088] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 262.288537][ T6088] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #13: comm syz.1.379: iget: bad i_size value: 12154757448730 [ 262.460310][ T6088] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.379: couldn't read orphan inode 13 (err -117) [ 262.717736][ T6088] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 267.796855][ T6128] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 267.984885][ T6128] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 268.309739][ T6141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.440534][ T6146] device syzkaller0 entered promiscuous mode [ 270.692043][ T6173] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 271.439462][ T6173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.485213][ T6178] bond2: (slave ip6gretap1): making interface the new active one [ 271.494617][ T6178] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 271.507999][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 271.523499][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 271.576071][ T6186] device bridge_slave_1 left promiscuous mode [ 271.584534][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.649574][ T6186] device bridge_slave_0 left promiscuous mode [ 271.683238][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.659622][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.676565][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.028737][ T6188] device syzkaller0 entered promiscuous mode [ 273.941432][ T6215] loop1: detected capacity change from 0 to 2048 [ 274.335989][ T6215] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 274.441220][ T6215] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 274.615092][ T6215] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 274.648259][ T6222] loop5: detected capacity change from 0 to 164 [ 275.449791][ T6215] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.606105][ T6269] device syzkaller0 entered promiscuous mode [ 286.804473][ T6357] loop1: detected capacity change from 0 to 128 [ 287.078600][ T6351] loop2: detected capacity change from 0 to 512 [ 287.418729][ T6357] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6357] [ 288.047505][ T6351] loop2: detected capacity change from 0 to 256 [ 288.078389][ T6351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 288.319779][ T6372] loop1: detected capacity change from 0 to 164 [ 290.670557][ T6383] device syzkaller0 entered promiscuous mode PÚÿÿÿ-D devtmpfs./dev/console[ 296.836071][ T6450] loop1: detected capacity change from 0 to 128 [ 297.004945][ T4867] IPVS: ip_vs_send_async error -101 [ 297.516425][ T6453] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 299.388881][ T6488] loop5: detected capacity change from 0 to 164 [ 299.467113][ T6492] loop4: detected capacity change from 0 to 2048 [ 299.563631][ T6492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.925825][ T6520] netlink: 'syz.5.459': attribute type 12 has an invalid length. [ 301.996148][ T6523] loop1: detected capacity change from 0 to 512 [ 302.397121][ T6527] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 302.429423][ T6527] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 302.826221][ T6544] device syzkaller0 entered promiscuous mode [ 304.274959][ T6552] device syzkaller0 entered promiscuous mode [ 308.571647][ T6616] capability: warning: `syz.3.475' uses deprecated v2 capabilities in a way that may be insecure [ 308.757273][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.444655][ T6615] team0: Port device bond1 added [ 309.465024][ T1441] team0: Failed to send port change of device bond1 via netlink (err -105) [ 310.433985][ T6635] device syzkaller0 entered promiscuous mode [ 311.219989][ T6649] loop3: detected capacity change from 0 to 128 [ 311.927024][ T6657] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6657] [ 312.252492][ T6660] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 316.623877][ T6696] device syzkaller0 entered promiscuous mode [ 316.770605][ T6702] loop3: detected capacity change from 0 to 128 [ 316.827505][ T6702] EXT4-fs (loop3): Test dummy encryption mode enabled [ 316.847265][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 316.899737][ T6702] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 316.954440][ T6702] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.389260][ T6715] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 318.556372][ T6714] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 318.777558][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.846020][ T6731] loop1: detected capacity change from 0 to 1024 [ 318.905783][ T6735] netlink: 'syz.3.515': attribute type 13 has an invalid length. [ 318.945080][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 318.981171][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 319.089977][ T6731] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.105052][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 319.163345][ T6731] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.174853][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 319.225785][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 319.268191][ T6731] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 3) [ 319.287653][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 319.313787][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 319.328735][ T6731] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 319.353656][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 319.361505][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 319.381243][ T6731] EXT4-fs (loop1): This should not happen!! Data will be lost [ 319.381243][ T6731] [ 319.394750][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 319.419349][ T6748] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.439504][ T6730] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.440166][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 319.460845][ T6730] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.470281][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 319.484988][ T6730] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.492852][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 319.509679][ T6730] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.534144][ T6730] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.553241][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 319.561998][ T6730] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.581427][ T6748] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.597015][ T6748] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.506: lblock 3 mapped to illegal pblock 3 (length 1) [ 319.631186][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 319.661690][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 319.695574][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 319.713038][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 319.721253][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 319.735265][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 319.857748][ T6754] loop5: detected capacity change from 0 to 8192 [ 319.985132][ T6754] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 320.092775][ T6731] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 320.350577][ T6731] EXT4-fs (loop1): This should not happen!! Data will be lost [ 320.350577][ T6731] [ 320.413386][ T6731] EXT4-fs (loop1): Total free blocks count 0 [ 320.513777][ T6731] EXT4-fs (loop1): Free/Dirty block details [ 320.576625][ T6731] EXT4-fs (loop1): free_blocks=0 [ 320.630445][ T6731] EXT4-fs (loop1): dirty_blocks=64 [ 320.710844][ T6731] EXT4-fs (loop1): Block reservation details [ 320.808077][ T6731] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 322.432285][ T6788] loop5: detected capacity change from 0 to 512 [ 323.355316][ T6788] loop5: detected capacity change from 0 to 256 [ 324.340634][ T6788] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 324.684520][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 325.030325][ T6821] device syzkaller0 entered promiscuous mode [ 325.106696][ T6822] loop5: detected capacity change from 0 to 1024 [ 325.152775][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.164910][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.178614][ T21] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 325.187887][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.198758][ T21] usb 5-1: config 0 descriptor?? [ 325.586659][ T6822] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.729115][ T6822] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.974409][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 325.980454][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 326.011787][ T6819] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 3) [ 326.039579][ T6819] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 326.052359][ T21] usb 5-1: USB disconnect, device number 4 [ 326.061121][ T6819] EXT4-fs (loop5): This should not happen!! Data will be lost [ 326.061121][ T6819] [ 326.072229][ T6831] loop1: detected capacity change from 0 to 128 [ 326.092144][ T6819] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.107347][ T6819] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.122370][ T6819] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.340988][ T6819] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.361647][ T6819] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.387217][ T6818] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.430757][ T6818] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.494179][ T6819] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.522090][ T6818] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: block 3: comm syz.5.528: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.725580][ T6838] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6838] [ 326.740843][ T6822] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 326.766549][ T6822] EXT4-fs (loop5): This should not happen!! Data will be lost [ 326.766549][ T6822] [ 326.777473][ T6822] EXT4-fs (loop5): Total free blocks count 0 [ 326.783600][ T6822] EXT4-fs (loop5): Free/Dirty block details [ 326.790053][ T6822] EXT4-fs (loop5): free_blocks=0 [ 326.795147][ T6822] EXT4-fs (loop5): dirty_blocks=64 [ 326.800492][ T6822] EXT4-fs (loop5): Block reservation details [ 326.806955][ T6822] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 326.849201][ T6840] loop4: detected capacity change from 0 to 4096 [ 328.630464][ T6853] md: md0 stopped. [ 329.206539][ T6860] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 329.552952][ T6866] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 329.930864][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.972484][ T6869] device macvlan2 entered promiscuous mode [ 329.988713][ T6869] device bond1 entered promiscuous mode [ 329.995168][ T6869] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 330.003594][ T6869] team0: Port device macvlan2 added [ 330.034604][ T6866] bond1: (slave ip6gretap1): making interface the new active one [ 330.048025][ T6866] device ip6gretap1 entered promiscuous mode [ 330.056289][ T6866] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 330.065747][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 330.088005][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 331.376238][ T6897] loop1: detected capacity change from 0 to 512 [ 331.893606][ T6902] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 331.907602][ T6896] loop2: detected capacity change from 0 to 1024 [ 331.995372][ T6897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 332.004364][ T6897] System zones: 1-12 [ 332.014987][ T6897] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.550: missing EA_INODE flag [ 332.031854][ T6897] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.550: error while reading EA inode 12 err=-117 [ 332.157774][ T6897] EXT4-fs (loop1): 1 orphan inode deleted [ 332.186066][ T6897] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 332.214971][ T6896] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.232225][ T6896] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.264280][ T6896] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 3) [ 332.316964][ T6896] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 332.345939][ T6909] loop5: detected capacity change from 0 to 4096 [ 332.361540][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 332.386621][ T6896] EXT4-fs (loop2): This should not happen!! Data will be lost [ 332.386621][ T6896] [ 332.412383][ T6911] device bridge_slave_1 left promiscuous mode [ 332.426774][ T6912] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.444042][ T6912] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.459812][ T6912] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.475262][ T6912] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.491540][ T6912] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.506632][ T6892] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.592527][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.602017][ T6911] device bridge_slave_0 left promiscuous mode [ 332.609158][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.700035][ T6892] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.721098][ T6892] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.738132][ T6892] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.551: lblock 3 mapped to illegal pblock 3 (length 1) [ 334.716838][ T6915] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 334.729865][ T6915] EXT4-fs (loop2): This should not happen!! Data will be lost [ 334.729865][ T6915] [ 334.739682][ T6915] EXT4-fs (loop2): Total free blocks count 0 [ 334.745737][ T6915] EXT4-fs (loop2): Free/Dirty block details [ 334.751663][ T6915] EXT4-fs (loop2): free_blocks=0 [ 334.756904][ T6915] EXT4-fs (loop2): dirty_blocks=64 [ 334.762175][ T6915] EXT4-fs (loop2): Block reservation details [ 334.768878][ T6915] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 335.295924][ T4309] Bluetooth: hci0: command 0x0406 tx timeout [ 335.914426][ T6935] kvm: MONITOR instruction emulated as NOP! [ 336.543131][ T6958] loop2: detected capacity change from 0 to 128 [ 336.740833][ T6958] FAT-fs (loop2): Unrecognized mount option "shor name=lower" or missing value [ 337.473637][ T6958] loop2: detected capacity change from 0 to 2048 [ 337.508793][ T6968] loop4: detected capacity change from 0 to 1024 [ 337.542864][ T6958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.786818][ T6968] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.813719][ T6968] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.970120][ T6980] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.572: lblock 0 mapped to illegal pblock 0 (length 4) [ 337.986570][ T6980] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 337.999188][ T6980] EXT4-fs (loop4): This should not happen!! Data will be lost [ 337.999188][ T6980] [ 338.014040][ T6968] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 4: comm syz.4.572: lblock 4 mapped to illegal pblock 4 (length 2) [ 338.092566][ T6968] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 338.173614][ T6968] EXT4-fs (loop4): This should not happen!! Data will be lost [ 338.173614][ T6968] [ 338.329882][ T4319] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 338.424197][ T4319] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 338.560770][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.567142][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.665119][ T4319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 338.665119][ T4319] [ 339.474294][ T6989] netlink: 'syz.5.578': attribute type 1 has an invalid length. [ 339.482144][ T6989] netlink: 224 bytes leftover after parsing attributes in process `syz.5.578'. [ 343.615371][ T7024] loop4: detected capacity change from 0 to 1024 [ 343.650788][ T7024] EXT4-fs (loop4): Ignoring removed bh option [ 343.994938][ T7037] No source specified [ 344.425449][ T7024] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable,auto_da_alloc=0x0000000000000400,bh,acl,,errors=continue. Quota mode: writeback. [ 344.442605][ T7024] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.487747][ T7024] EXT4-fs (loop4): shut down requested (0) [ 347.861697][ T7059] device syzkaller0 entered promiscuous mode [ 348.678302][ T7071] loop2: detected capacity change from 0 to 1024 [ 349.129031][ T7071] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.145546][ T7071] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.899120][ T7071] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 3) [ 349.931461][ T7071] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 350.055455][ T7086] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.065033][ T7086] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.074978][ T7086] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.084401][ T7086] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.106721][ T7071] EXT4-fs (loop2): This should not happen!! Data will be lost [ 350.106721][ T7071] [ 350.138498][ T7086] team0: Port device vxlan0 added [ 350.154820][ T7083] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.175231][ T7070] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.189929][ T7083] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.204781][ T7070] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.219424][ T7083] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.234208][ T7070] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.248915][ T7083] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.264383][ T7070] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.279736][ T7083] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.598: lblock 3 mapped to illegal pblock 3 (length 1) [ 350.418298][ T7071] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 350.437620][ T7071] EXT4-fs (loop2): This should not happen!! Data will be lost [ 350.437620][ T7071] [ 350.523126][ T7071] EXT4-fs (loop2): Total free blocks count 0 [ 350.552892][ T7071] EXT4-fs (loop2): Free/Dirty block details [ 350.581732][ T7071] EXT4-fs (loop2): free_blocks=0 [ 350.640291][ T7071] EXT4-fs (loop2): dirty_blocks=64 [ 350.646109][ T7071] EXT4-fs (loop2): Block reservation details [ 350.652316][ T7071] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 353.295758][ T7113] netlink: 2 bytes leftover after parsing attributes in process `syz.2.609'. [ 353.499148][ T7117] device syzkaller0 entered promiscuous mode [ 359.960761][ T7190] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 362.236316][ T7206] loop2: detected capacity change from 0 to 2048 [ 362.335340][ T7208] loop4: detected capacity change from 0 to 1024 [ 362.540727][ T7206] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 362.572423][ T7208] EXT4-fs (loop4): Ignoring removed bh option [ 362.629247][ T7206] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 362.734749][ T7206] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 362.865909][ T7206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.018040][ T7208] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 363.564183][ T4867] IPVS: ip_vs_send_async error -101 [ 364.520936][ T7232] loop2: detected capacity change from 0 to 512 Stopping sshd: stopped /usr/sbin/sshd (pid 3942) OK Stopping crond: [ 366.768979][ T7250] serio: Serial port ttyS3 stopped /usr/sbin/crond (pid 3925) OK Stopping dhcpcd... [ 368.820002][ T7272] loop4: detected capacity change from 0 to 256 [ 368.956783][ T7272] FAT-fs (loop4): Directory bread(block 1285) failed [ 368.963576][ T7272] FAT-fs (loop4): Directory bread(block 1286) failed [ 369.012250][ T7272] FAT-fs (loop4): Directory bread(block 1287) failed [ 369.019280][ T7272] FAT-fs (loop4): Directory bread(block 1288) failed stopped /sbin/dhcpcd (pid 3850) Stopping network[ 370.172645][ T7291] nvmet: adding nsid 1 to subsystem testnqn : [ 370.194573][ T26] audit: type=1800 audit(1791040733.826:10): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="device_path" dev="configfs" ino=44167 res=0 errno=0 [ 370.236050][ T7291] nvmet: failed to open block device (null): (-22) [ 370.311021][ T26] audit: type=1800 audit(1791040733.844:11): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.638" name="enable" dev="configfs" ino=44168 res=0 errno=0 [ 370.499354][ T7298] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 370.641695][ T7307] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 370.725493][ T7298] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 371.487195][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.494831][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.501674][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.508508][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.515330][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.522188][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.529034][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.535841][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.542702][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.549534][ T7311] tc action pedit offset must be on 32 bit boundaries [ 371.556711][ T7311] 0: reclassify loop, rule prio 0, protocol 800 [ 371.666199][ T7315] Rounding down aligned max_sectors from 4294967295 to 4294967288 OK Stopping iptables: OK Stopping system message bus: [ 373.821647][ T7348] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 373.836154][ T7360] loop5: detected capacity change from 0 to 512 [ 373.844598][ T7348] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 374.250823][ T7369] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 379.831310][ T7401] loop2: detected capacity change from 0 to 128 [ 380.518517][ T7401] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 380.922361][ T7404] udevd[7404]: incorrect ext4 checksum on /dev/loop2 done [ 381.152532][ T7414] loop5: detected capacity change from 0 to 512 [ 381.280067][ T7414] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) serialport: VM disconnected.