last executing test programs: 4.445033105s ago: executing program 2 (id=613): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES16=0x0], 0x3, 0x248, &(0x7f0000000880)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000006c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffff9) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x2a, r3) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 4.444779935s ago: executing program 0 (id=614): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000080)={[{@nogrpid}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000300)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) 3.964355158s ago: executing program 2 (id=618): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000020c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c") setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 3.351794883s ago: executing program 3 (id=625): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983", 0xa4}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442da", 0x3a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9d", 0x9b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.962469113s ago: executing program 0 (id=628): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bind$inet(r0, &(0x7f0000000240)={0x2, 0xe20, @remote}, 0x10) 2.619942172s ago: executing program 0 (id=631): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r4}) 2.430750387s ago: executing program 4 (id=632): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000001440)=[{&(0x7f0000000280)="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", 0x1000}], 0x1) close(r0) 2.32262979s ago: executing program 3 (id=633): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) fallocate(r2, 0x20, 0x4000, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0xa, 0x8ffff) 2.304021041s ago: executing program 0 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0a9e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a09008c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cde22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa10500c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0x9, [{{0xffffffffffffffff, 0x1, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x9, 0x80000000000000ff, 0x2, 0x0, 0x2, 0x3f, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x12\x00\xf39\xfc\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85Z\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000340)=""/151, 0x97) 2.209269463s ago: executing program 1 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) close(r3) inotify_init1(0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, r4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) unshare(0x22020600) fsmount(r5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5, 0xffffffff}}, @TCA_CT_LABELS={0x14, 0x7, "97b357887853f846620853baa9b1ad04"}, @TCA_CT_ZONE={0x6, 0x4, 0x188}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c804}, 0x10008010) 2.061783176s ago: executing program 0 (id=636): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'macvlan1\x00', 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x15) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x4, &(0x7f0000000340)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r6, 0xfff}, 0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.976824249s ago: executing program 1 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.682499236s ago: executing program 1 (id=638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.682234346s ago: executing program 4 (id=639): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r2, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.651403207s ago: executing program 0 (id=640): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 1.466821302s ago: executing program 4 (id=641): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bind$inet(r0, &(0x7f0000000240)={0x2, 0xe20, @remote}, 0x10) 1.321472376s ago: executing program 3 (id=642): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', 0x0, &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) 1.295671556s ago: executing program 4 (id=643): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x8000002, @control64=0x2001, 0xfffffffffffffffc, 0x7, 0x3}}], 0x50}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.219676898s ago: executing program 1 (id=644): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r4, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r5}) 1.008014094s ago: executing program 1 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x77774002, 0x11b000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x8000000, 0x10000}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x2000)=nil, 0x2000}, 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000}) 901.109197ms ago: executing program 2 (id=646): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 798.675579ms ago: executing program 4 (id=647): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='syzkaller%', 0xa) add_key(0x0, 0x0, &(0x7f0000000240)="ff1d", 0x2, 0xffffffffffffffff) 769.50507ms ago: executing program 3 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 661.262023ms ago: executing program 1 (id=649): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x286, &(0x7f0000001300)="$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") keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x20, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 602.482934ms ago: executing program 4 (id=650): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+3 -4\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='2049\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) mount$nfs(0x0, &(0x7f0000000180)='127.0.0.1:/\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='nolock,addr=127.0.0.1,vers=3']) 385.34078ms ago: executing program 2 (id=651): openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000340)=""/213, 0xd5}], 0x3, 0x7, 0x20000000) 147.328836ms ago: executing program 3 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.cpu/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) keyctl$set_reqkey_keyring(0xe, 0x5) 77.198827ms ago: executing program 2 (id=653): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bind$inet(r0, &(0x7f0000000240)={0x2, 0xe20, @remote}, 0x10) 46.537999ms ago: executing program 3 (id=654): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r4, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r5}) 0s ago: executing program 2 (id=655): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r4, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r5}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 38.622764][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.638324][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. syzkaller login: [ 56.635143][ T4174] cgroup: Unknown subsys name 'net' [ 56.750058][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.000399][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.855570][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 59.913579][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 59.976086][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.008194][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.019398][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.028029][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.036897][ T4195] device bridge_slave_0 entered promiscuous mode [ 60.050325][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.057588][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.065955][ T4195] device bridge_slave_1 entered promiscuous mode [ 60.138072][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.155950][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.190033][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.199822][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.207409][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.215386][ T4190] device bridge_slave_0 entered promiscuous mode [ 60.227501][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.234582][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.243310][ T4190] device bridge_slave_1 entered promiscuous mode [ 60.278595][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.286205][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.294035][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.302846][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.310024][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.318417][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.337550][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.344718][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.352688][ T4192] device bridge_slave_0 entered promiscuous mode [ 60.375698][ T4195] team0: Port device team_slave_0 added [ 60.389039][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.396258][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.404050][ T4192] device bridge_slave_1 entered promiscuous mode [ 60.415997][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.427340][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.438760][ T4195] team0: Port device team_slave_1 added [ 60.452265][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.463775][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.515210][ T4190] team0: Port device team_slave_0 added [ 60.534274][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.551287][ T4190] team0: Port device team_slave_1 added [ 60.558109][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.565612][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.592250][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.606032][ T4187] team0: Port device team_slave_0 added [ 60.614174][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.623463][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.630890][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.638909][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.652789][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.659901][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.686427][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.699104][ T4187] team0: Port device team_slave_1 added [ 60.718094][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.725658][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.733311][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.764066][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.771164][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.797326][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.814338][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.821573][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.848342][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.861363][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.868460][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.895403][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.913452][ T4192] team0: Port device team_slave_0 added [ 60.919889][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.927159][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.953238][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.991623][ T4192] team0: Port device team_slave_1 added [ 61.008241][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.022831][ T4195] device hsr_slave_0 entered promiscuous mode [ 61.029709][ T4195] device hsr_slave_1 entered promiscuous mode [ 61.043566][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.050654][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.077040][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.094086][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.108751][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.115922][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.142061][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.180304][ T4186] team0: Port device team_slave_0 added [ 61.189484][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.196488][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.202957][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.210925][ T4190] Cannot create hsr debugfs directory [ 61.246932][ T4186] team0: Port device team_slave_1 added [ 61.274321][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.281455][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.288220][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.295832][ T4187] Cannot create hsr debugfs directory [ 61.312374][ T4192] device hsr_slave_0 entered promiscuous mode [ 61.319249][ T4192] device hsr_slave_1 entered promiscuous mode [ 61.326214][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.333795][ T4192] Cannot create hsr debugfs directory [ 61.359102][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.366904][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.393717][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.434007][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.442066][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.468230][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.545819][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.625253][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 61.633457][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.640012][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 61.646201][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 61.646543][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.652223][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 61.664457][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.672097][ T4186] Cannot create hsr debugfs directory [ 61.815167][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.826419][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.841684][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.857554][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.893348][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.903096][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.913223][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.932168][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.009624][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.024298][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.035799][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.054504][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.067647][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.077752][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.086903][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.106022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.115906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.125931][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.133211][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.142426][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.161173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.173485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.184507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.193606][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.200758][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.208928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.228383][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.241004][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.251869][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.263652][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.274212][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.310066][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.320203][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.344214][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.352977][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.363364][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.397247][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.406400][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.418789][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.427432][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.450799][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.498324][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.512650][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.526798][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.536263][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.549522][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.573254][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.585675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.598910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.618423][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.634152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.642436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.676516][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.686061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.695240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.703681][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.710792][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.718615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.728544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.737574][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.744615][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.752401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.760323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.770047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.782913][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.823705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.832274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.842469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.853024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.862130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.871580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.881003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.889674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.898587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.907912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.916458][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.923513][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.931465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.940139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.948896][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.956000][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.964385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.977475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.987587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.995983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.004681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.023860][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.039554][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.068669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.098458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.108446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.117999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.133885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.142967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.152946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.162279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.171143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.189414][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.201742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.221452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.245768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.270691][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.325282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.339664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.351481][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.365994][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.374610][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.381776][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.400809][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.418835][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.427169][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.436891][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.444457][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.453650][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.463153][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.470304][ T3042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.483861][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.506569][ T4195] device veth0_vlan entered promiscuous mode [ 63.519176][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.527420][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.537299][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.547446][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.556420][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.564845][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.573461][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.581823][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.590297][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.599044][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.610348][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.631080][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.638060][ T2239] Bluetooth: hci4: command 0x041b tx timeout [ 63.644121][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.654702][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.664666][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.673354][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.681927][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.696511][ T4195] device veth1_vlan entered promiscuous mode [ 63.705332][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 63.710975][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.711375][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 63.725383][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 63.728860][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.737188][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 63.759562][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.767990][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.777069][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.787546][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.794652][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.802976][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.815662][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.823975][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.833667][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.842256][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.851561][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.885342][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.893518][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.903943][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.917065][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.924165][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.935956][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.946543][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.955504][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.964083][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.983829][ T4192] device veth0_vlan entered promiscuous mode [ 64.011234][ T4192] device veth1_vlan entered promiscuous mode [ 64.018689][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.030790][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.043154][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.052325][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.061423][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.070820][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.080896][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.089770][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.098658][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.113380][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.123118][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.132119][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.140585][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.149434][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.157532][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.166396][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.189486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.198641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.243472][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.261090][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.270902][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.279980][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.289528][ T4190] device veth0_vlan entered promiscuous mode [ 64.298336][ T4195] device veth0_macvtap entered promiscuous mode [ 64.329209][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.339298][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.349127][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.359947][ T4190] device veth1_vlan entered promiscuous mode [ 64.368782][ T4195] device veth1_macvtap entered promiscuous mode [ 64.379565][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.414133][ T4192] device veth0_macvtap entered promiscuous mode [ 64.422778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.430996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.441821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.450150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.458396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.465909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.474946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.483472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.511668][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.524038][ T4192] device veth1_macvtap entered promiscuous mode [ 64.535679][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.552376][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.560769][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.569870][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.583086][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.601589][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.614060][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.626835][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.634338][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.643332][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.652390][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.662124][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.671843][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.680713][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.691834][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.701418][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.710451][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719471][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.739314][ T4190] device veth0_macvtap entered promiscuous mode [ 64.765299][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.773442][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.784263][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.793174][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.803519][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.817903][ T4190] device veth1_macvtap entered promiscuous mode [ 64.827591][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.841438][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.853054][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.871140][ T4187] device veth0_vlan entered promiscuous mode [ 64.888054][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.897289][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.907142][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.917964][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.926314][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.937634][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.946623][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.955665][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.964452][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.984287][ T4187] device veth1_vlan entered promiscuous mode [ 64.993649][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.002521][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.010859][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.024807][ T4186] device veth0_vlan entered promiscuous mode [ 65.036008][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.047625][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.057911][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.068668][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.079819][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.101387][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.110453][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.119910][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.129979][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.138695][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.178526][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.189526][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.200630][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.211120][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.223049][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.233791][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.243550][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.251618][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.260186][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.269231][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.278378][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.297768][ T4187] device veth0_macvtap entered promiscuous mode [ 65.315140][ T4186] device veth1_vlan entered promiscuous mode [ 65.351739][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.360678][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.371109][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.380004][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.422512][ T4187] device veth1_macvtap entered promiscuous mode [ 65.454224][ T3042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.457937][ T4186] device veth0_macvtap entered promiscuous mode [ 65.465633][ T3042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.494309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.505288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.513083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.523010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.533122][ T3042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.540417][ T4186] device veth1_macvtap entered promiscuous mode [ 65.545211][ T3042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.554107][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.567443][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.577566][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.588519][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.598526][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.609656][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.621914][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.651987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.662939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.671109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.679241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.688953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.699107][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.710236][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 65.710947][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.726264][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.736995][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.747329][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.758141][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.769420][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.792914][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.793197][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 65.808496][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 65.815577][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 65.821715][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.824211][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.831108][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 65.843631][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.857951][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.869138][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.878185][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.887203][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.896226][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.919103][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.935280][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.947447][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.959482][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.969611][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.980341][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.991044][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.001552][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013558][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.069012][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.080156][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.090163][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.100741][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.111759][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.122566][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.133758][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.144259][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.156440][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.164077][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.173652][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.182460][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.193771][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.220531][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.221386][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.241801][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.246950][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.269774][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.302954][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.312876][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.327234][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.457387][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.466868][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.522804][ T472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.697778][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.722394][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.770478][ T472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.803783][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.874998][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.954729][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.048695][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.060054][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.130453][ T4273] loop2: detected capacity change from 0 to 128 [ 67.197769][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.216258][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.257287][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.268566][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.289623][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.304189][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.642554][ T4280] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4280] [ 67.702375][ T4280] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.712931][ T4280] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.722133][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.106812][ T4200] Bluetooth: Wrong link type (-22) [ 68.457801][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 68.465367][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 68.471580][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 68.478875][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 68.485061][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 69.804766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.834768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.904768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.964776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.034771][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.094770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.469428][ T4296] capability: warning: `syz.4.8' uses deprecated v2 capabilities in a way that may be insecure [ 70.894770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.044775][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.134772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.244772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 71.391692][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400363][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.481763][ T4301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 71.500589][ T4301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.508328][ T4301] IPv6: NLM_F_CREATE should be set when creating new route [ 71.803691][ T4301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 71.831600][ T4301] Zero length message leads to an empty skb [ 74.028853][ T4334] loop0: detected capacity change from 0 to 256 [ 75.254760][ C0] sched: RT throttling activated [ 75.382622][ T4334] exfat: Deprecated parameter 'utf8' [ 75.422177][ T4341] loop1: detected capacity change from 0 to 512 [ 75.443135][ T4334] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 75.650455][ T4341] ======================================================= [ 75.650455][ T4341] WARNING: The mand mount option has been deprecated and [ 75.650455][ T4341] and is ignored by this kernel. Remove the mand [ 75.650455][ T4341] option from the mount to silence this warning. [ 75.650455][ T4341] ======================================================= [ 75.691971][ T4338] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 75.778953][ T4341] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 75.829394][ T4341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 75.873841][ T4341] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.959783][ T4341] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.17: bad orphan inode 3 [ 75.975393][ T4341] EXT4-fs (loop1): Remounting filesystem read-only [ 75.987795][ T26] audit: type=1800 audit(1786055666.271:2): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18" name="memory_backed" dev="configfs" ino=33378 res=0 errno=0 [ 76.042240][ T4341] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none. [ 76.074521][ T4347] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 76.102487][ T4347] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18'. [ 76.122440][ T26] audit: type=1800 audit(1786055666.341:3): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18" name="zoned" dev="configfs" ino=33379 res=0 errno=0 [ 76.178770][ T4350] Config c/1 of g1 needs at least one function. [ 76.248554][ T4350] udc dummy_udc.0: failed to start g1: -22 [ 76.258055][ T4341] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.17: dx entry: limit 0 != root limit 125 [ 76.310319][ T26] audit: type=1800 audit(1786055666.371:4): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="idVendor" dev="configfs" ino=32477 res=0 errno=0 [ 76.332803][ T4341] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.17: Corrupt directory, running e2fsck is recommended [ 76.341055][ T4353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.532322][ T26] audit: type=1800 audit(1786055666.381:5): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="idProduct" dev="configfs" ino=32478 res=0 errno=0 [ 76.553573][ T26] audit: type=1800 audit(1786055666.381:6): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="manufacturer" dev="configfs" ino=32480 res=0 errno=0 [ 76.574052][ T26] audit: type=1800 audit(1786055666.381:7): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="configuration" dev="configfs" ino=32485 res=0 errno=0 [ 76.594681][ T26] audit: type=1800 audit(1786055666.401:8): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="configuration" dev="configfs" ino=32489 res=0 errno=0 [ 76.688988][ T26] audit: type=1800 audit(1786055666.461:9): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="UDC" dev="configfs" ino=32493 res=0 errno=0 [ 76.943835][ T26] audit: type=1800 audit(1786055666.511:10): pid=4348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18" name="power" dev="configfs" ino=32495 res=0 errno=0 [ 78.498887][ T4373] loop3: detected capacity change from 0 to 512 [ 78.526651][ T4373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 78.561028][ T4373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 78.574861][ T4373] System zones: 1-12 [ 78.580784][ T4373] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.595890][ T4373] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.24: attempt to clear invalid blocks 1024 len 1 [ 78.618691][ T4373] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.24: bg 0: block 361: padding at end of block bitmap is not set [ 78.676368][ T4373] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 78.689124][ T4373] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.24: invalid indirect mapped block 1811939328 (level 0) [ 78.706361][ T4373] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.24: invalid indirect mapped block 2 (level 2) [ 78.725530][ T4373] EXT4-fs (loop3): 1 truncate cleaned up [ 78.731360][ T4373] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 80.236685][ T4382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.274531][ T4381] vivid-002: ================= START STATUS ================= [ 80.282692][ T4381] vivid-002: Radio HW Seek Mode: Bounded [ 80.288702][ T4381] vivid-002: Radio Programmable HW Seek: false [ 80.294908][ T4381] vivid-002: RDS Rx I/O Mode: Block I/O [ 80.300485][ T4381] vivid-002: Generate RBDS Instead of RDS: false [ 80.306892][ T4381] vivid-002: RDS Reception: true [ 80.311866][ T4381] vivid-002: RDS Program Type: 0 inactive [ 80.317676][ T4381] vivid-002: RDS PS Name: inactive [ 80.322906][ T4381] vivid-002: RDS Radio Text: inactive [ 80.328476][ T4381] vivid-002: RDS Traffic Announcement: false inactive [ 80.335306][ T4381] vivid-002: RDS Traffic Program: false inactive [ 80.341678][ T4381] vivid-002: RDS Music: false inactive [ 80.347227][ T4381] vivid-002: ================== END STATUS ================== [ 80.581776][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 81.175068][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.555491][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 81.975552][ T4232] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 81.985858][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.994074][ T4232] usb 3-1: Product: syz [ 82.002268][ T4232] usb 3-1: Manufacturer: syz [ 82.057863][ T4232] usb 3-1: SerialNumber: syz [ 82.108776][ T4232] usb 3-1: config 0 descriptor?? [ 82.527107][ T4232] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 82.550464][ T4232] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 82.665413][ T4470] loop4: detected capacity change from 0 to 512 [ 82.795394][ T4470] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.808614][ T4470] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.486301][ T4470] EXT4-fs (loop4): 1 truncate cleaned up [ 83.492031][ T4470] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 83.620723][ T4232] usb 3-1: USB disconnect, device number 2 [ 84.010925][ T4486] block device autoloading is deprecated and will be removed. [ 84.494114][ T4470] syz.4.36 (4470) used greatest stack depth: 20368 bytes left [ 85.504916][ T4508] 9pnet: Insufficient options for proto=fd [ 85.795016][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.144963][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 86.221810][ T4514] loop1: detected capacity change from 0 to 1024 [ 86.260746][ T4514] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.285253][ T4234] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.310795][ T4234] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.431074][ T4522] loop4: detected capacity change from 0 to 1024 [ 86.455024][ T4234] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 86.471090][ T4234] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 86.480992][ T4234] usb 3-1: Product: syz [ 86.500061][ T4234] usb 3-1: Manufacturer: syz [ 86.593591][ T4234] hub 3-1:4.0: USB hub found [ 86.650209][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.772119][ T1340] cfg80211: failed to load regulatory.db [ 86.830372][ T4234] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 87.295768][ T21] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 87.382495][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.485786][ T4234] usb 3-1: USB disconnect, device number 3 [ 87.554075][ T21] usb 4-1: Product: syz [ 87.569624][ T21] usb 4-1: Manufacturer: syz [ 87.574467][ T21] usb 4-1: SerialNumber: syz [ 87.581199][ T21] usb 4-1: config 0 descriptor?? [ 87.636965][ T21] hub 4-1:0.0: bad descriptor, ignoring hub [ 87.671661][ T21] hub: probe of 4-1:0.0 failed with error -5 [ 87.686069][ T4536] loop4: detected capacity change from 0 to 256 [ 87.734393][ T21] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 87.750091][ T4541] loop0: detected capacity change from 0 to 1024 [ 87.853433][ T4545] loop4: detected capacity change from 0 to 64 [ 87.868104][ T4541] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 87.887903][ T4541] hfsplus: xattr searching failed [ 87.957020][ T4541] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 87.978012][ T4541] hfsplus: xattr searching failed [ 88.015238][ T21] usb 4-1: USB disconnect, device number 2 [ 88.043692][ T21] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 88.126987][ T3042] hfsplus: b-tree write err: -5, ino 25 [ 88.134294][ T3042] hfsplus: b-tree write err: -5, ino 4 [ 88.149493][ T3042] hfsplus: b-tree write err: -5, ino 2 [ 88.164071][ T3042] hfsplus: b-tree write err: -5, ino 20 [ 88.241947][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.353855][ T4551] 9pnet: Insufficient options for proto=fd [ 89.004632][ T4555] loop0: detected capacity change from 0 to 512 [ 89.015107][ T4555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.065336][ T4555] EXT4-fs (loop0): 1 truncate cleaned up [ 89.071101][ T4555] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 89.134947][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 89.304352][ T4569] loop3: detected capacity change from 0 to 512 [ 89.878616][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.890215][ T4234] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.923107][ T4569] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.63: Unrecognised inode hash code 4 [ 89.973223][ T4569] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.63: Corrupt directory, running e2fsck is recommended [ 90.026164][ T4569] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 90.034477][ T4569] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.63: corrupted in-inode xattr [ 90.046887][ T4569] EXT4-fs (loop3): Remounting filesystem read-only [ 90.048034][ T4234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.053853][ T4569] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.63: couldn't read orphan inode 15 (err -117) [ 90.078992][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.090802][ T4234] usb 3-1: SerialNumber: syz [ 90.098388][ T4569] EXT4-fs (loop3): Remounting filesystem read-only [ 90.155738][ T4569] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 90.204423][ T4569] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #2: block 8: comm syz.3.63: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 90.206309][ T4234] cdc_acm 3-1:1.0: skipping garbage [ 90.241956][ T4234] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 90.300636][ T4569] EXT4-fs (loop3): Remounting filesystem read-only [ 90.322793][ T4569] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.63: directory missing '.' [ 90.386199][ T4234] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 90.393329][ T4234] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 90.996327][ T4588] loop1: detected capacity change from 0 to 128 [ 91.047729][ T21] usb 3-1: USB disconnect, device number 4 [ 91.868268][ T4598] trusted_key: encrypted_key: insufficient parameters specified [ 92.352497][ T4606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'. [ 92.361519][ T4606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'. [ 92.378928][ T4606] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 92.435106][ T4607] 9pnet: Insufficient options for proto=fd [ 93.226612][ T4615] loop2: detected capacity change from 0 to 512 [ 93.234236][ T4616] loop4: detected capacity change from 0 to 8 [ 93.244575][ T4615] EXT4-fs (loop2): Ignoring removed bh option [ 93.264998][ T4615] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.325531][ T4615] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 93.364049][ T4615] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.77: Corrupt directory, running e2fsck is recommended [ 93.381377][ T4615] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 93.386607][ T4616] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 93.389939][ T4615] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.77: corrupted in-inode xattr [ 93.420478][ T4615] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.77: couldn't read orphan inode 15 (err -117) [ 93.441156][ T4591] loop0: detected capacity change from 0 to 32768 [ 93.454500][ T4615] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback. [ 93.495205][ T4552] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.583441][ T4591] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 scanned by syz.0.69 (4591) [ 94.338262][ T4591] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 94.363894][ T4552] usb 4-1: Using ep0 maxpacket: 16 [ 94.438407][ T4591] BTRFS info (device loop0): using free space tree [ 94.464855][ T4591] BTRFS info (device loop0): has skinny extents [ 94.533102][ T4636] loop1: detected capacity change from 0 to 4096 [ 94.658415][ T4636] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 94.782477][ T4636] ntfs: volume version 3.1. [ 94.804701][ T4659] using random self ethernet address [ 94.810441][ T4659] using random host ethernet address [ 95.360072][ T4552] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 95.402204][ T4636] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 95.414171][ T4552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.431881][ T4660] loop2: detected capacity change from 0 to 512 [ 95.434525][ T4552] usb 4-1: Product: syz [ 95.456283][ T4636] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 95.483446][ T4552] usb 4-1: Manufacturer: syz [ 95.509454][ T4552] usb 4-1: SerialNumber: syz [ 95.533031][ T4660] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.548225][ T4660] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.552307][ T4552] usb 4-1: config 0 descriptor?? [ 95.598701][ T4591] BTRFS error (device loop0): open_ctree failed: -12 [ 95.598721][ T4180] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 scanned by udevd (4180) [ 95.707799][ T4660] EXT4-fs error (device loop2): ext4_group_add:1699: inode #7: comm syz.2.87: iget: checksum invalid [ 95.834609][ T4660] EXT4-fs warning (device loop2): ext4_group_add:1701: Error opening resize inode [ 95.881794][ T4552] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 95.889721][ T4552] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 96.084565][ T4679] 9pnet: Insufficient options for proto=fd [ 96.456259][ T26] audit: type=1326 audit(1786055686.741:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.0.92" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90b26aa0d9 code=0x0 [ 96.693441][ T4234] usb 4-1: USB disconnect, device number 3 [ 96.722155][ T4688] loop1: detected capacity change from 0 to 512 [ 96.781718][ T4688] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 96.854129][ T4688] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,quota,quota,stripe=0x0000000000000003,i_version,,errors=continue. Quota mode: writeback. [ 96.891014][ T4688] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.644881][ T4663] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.832938][ T4709] Set syz1 is full, maxelem 14 reached [ 97.987480][ T4714] netlink: 'syz.0.98': attribute type 10 has an invalid length. [ 97.995389][ T4714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.98'. [ 98.504377][ T4714] team0: Port device geneve0 added [ 98.606721][ T4663] usb 3-1: Using ep0 maxpacket: 32 [ 98.675987][ T4721] block nbd4: NBD_DISCONNECT [ 98.835286][ T4663] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.953468][ T4663] usb 3-1: config 0 has no interface number 0 [ 99.213167][ T4725] loop0: detected capacity change from 0 to 128 [ 99.425162][ T4663] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 100.120744][ T4663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.133474][ T4663] usb 3-1: Product: syz [ 100.138197][ T4663] usb 3-1: Manufacturer: syz [ 100.142850][ T4663] usb 3-1: SerialNumber: syz [ 100.154698][ T4735] overlayfs: unrecognized mount option "/workingset_restore_anon 0 [ 100.154698][ T4735] workingset_restore_file 0 [ 100.154698][ T4735] workingset_nodereclaim 0 [ 100.154698][ T4735] nr_anon_pages 5306 [ 100.154698][ T4735] nr_mapped 31348 [ 100.154698][ T4735] nr_file_pages 53993 [ 100.154698][ T4735] nr_dirty 263 [ 100.154698][ T4735] nr_writeback 0 [ 100.154698][ T4735] nr_writeback_temp 0 [ 100.154698][ T4735] nr_shmem 2636 [ 100.154698][ T4735] nr_shmem_hugepages 0 [ 100.154698][ T4735] nr_shmem_pmdmapped 0 [ 100.154698][ T4735] nr_file_hugepages 0 [ 100.154698][ T4735] nr_file_pmdmapped 0 [ 100.154698][ T4735] nr_anon_transparent_hugepages 0 [ 100.154698][ T4735] nr_vmscan_write 0 [ 100.154698][ T4735] nr_vmscan_immediate_reclaim 0 [ 100.154698][ T4735] nr_dirtied 2384 [ 100.154698][ T4735] nr_written 2119 [ 100.163356][ T4663] usb 3-1: config 0 descriptor?? [ 100.275014][ T4663] usb 3-1: can't set config #0, error -71 [ 100.328254][ T4663] usb 3-1: USB disconnect, device number 5 [ 100.855464][ T4745] trusted_key: encrypted_key: insufficient parameters specified [ 100.917958][ T4744] loop2: detected capacity change from 0 to 4096 [ 101.833423][ T4754] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.861200][ T4757] loop3: detected capacity change from 0 to 1024 [ 101.873640][ T4758] loop1: detected capacity change from 0 to 512 [ 102.013937][ T4758] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 102.053199][ T4758] EXT4-fs (loop1): 1 truncate cleaned up [ 102.090531][ T4758] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 102.112031][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.122901][ T4772] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.231346][ T4758] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 102.261177][ T4758] EXT4-fs (loop1): can't enable nombcache during remount [ 102.317311][ T4781] capability: warning: `syz.3.127' uses 32-bit capabilities (legacy support in use) [ 102.336217][ T4781] program syz.3.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.522807][ T4785] 9pnet: Insufficient options for proto=fd [ 103.440764][ T4803] loop0: detected capacity change from 0 to 1024 [ 103.824925][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.065799][ T4809] loop0: detected capacity change from 0 to 1024 [ 104.174052][ T3042] hfsplus: b-tree write err: -5, ino 25 [ 104.180240][ T3042] hfsplus: b-tree write err: -5, ino 4 [ 104.199096][ T3042] hfsplus: b-tree write err: -5, ino 2 [ 104.212348][ T4816] loop2: detected capacity change from 0 to 512 [ 104.237190][ T4816] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 104.261208][ T4816] EXT4-fs (loop2): 1 truncate cleaned up [ 104.283207][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 104.391584][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.404935][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.414897][ T4234] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 104.423941][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.435620][ T4234] usb 2-1: config 0 descriptor?? [ 104.602127][ T4816] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 104.667783][ T4816] EXT4-fs (loop2): can't enable nombcache during remount [ 105.282051][ T4830] tipc: Started in network mode [ 105.333861][ T4830] tipc: Node identity -, cluster identity 4711 [ 105.360045][ T4234] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 105.426911][ T4836] 9pnet: Insufficient options for proto=fd [ 106.010303][ T4234] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 106.095927][ T4234] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 106.103569][ T4234] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 106.111266][ T4234] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 106.140609][ T4234] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 106.275023][ T4234] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 0 [ 106.302344][ T4234] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 106.351516][ T4234] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 106.422361][ T4234] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 106.874119][ T4234] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 107.035686][ T4234] usb 2-1: USB disconnect, device number 2 [ 107.467471][ T4880] fido_id[4880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 108.134714][ T4901] loop1: detected capacity change from 0 to 64 [ 108.193512][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 108.374959][ T26] audit: type=1800 audit(1786055698.621:12): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.168" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 108.422523][ T4915] loop0: detected capacity change from 0 to 256 [ 108.838438][ T4920] block nbd2: NBD_DISCONNECT [ 109.070686][ T26] audit: type=1800 audit(1786055699.351:13): pid=4915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.173" name=FFFFFFFF dev="loop0" ino=1048596 res=0 errno=0 [ 109.516665][ T4936] syz.1.190 uses obsolete (PF_INET,SOCK_PACKET) [ 109.547888][ T4939] loop3: detected capacity change from 0 to 512 [ 109.618429][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 109.626968][ T4930] loop2: detected capacity change from 0 to 8192 [ 109.710410][ T4930] loop2: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 109.710517][ T4930] loop2: partition table partially beyond EOD, [ 109.724959][ T4939] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 109.797985][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.860688][ T4930] truncated [ 110.011206][ T4930] loop2: p1 start 51379968 is beyond EOD, truncated [ 110.018928][ T4939] EXT4-fs (loop3): 1 truncate cleaned up [ 110.022561][ T4930] loop2: p5 start 51379968 is beyond EOD, truncated [ 110.032139][ T4930] loop2: p7 start 51379968 is beyond EOD, truncated [ 110.039571][ T4939] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 110.062173][ T4930] loop2: p9 start 51379968 is beyond EOD, truncated [ 110.121964][ T4953] 9pnet: Insufficient options for proto=fd [ 110.252623][ T4930] loop2: p11 start 51379968 is beyond EOD, truncated [ 110.502423][ T4930] loop2: p13 start 51379968 is beyond EOD, truncated [ 110.726695][ T4930] loop2: p15 start 51379968 is beyond EOD, truncated [ 110.760475][ T4930] loop2: p17 start 51379968 is beyond EOD, truncated [ 110.808291][ T4939] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option [ 111.024910][ T4939] EXT4-fs (loop3): can't enable nombcache during remount [ 111.032711][ T4930] loop2: p19 start 51379968 is beyond EOD, truncated [ 111.063547][ T4930] loop2: p21 start 51379968 is beyond EOD, truncated [ 111.532808][ T4930] loop2: p23 start 51379968 is beyond EOD, truncated [ 111.600699][ T4930] loop2: p25 start 51379968 is beyond EOD, truncated [ 111.628085][ T4930] loop2: p27 start 51379968 is beyond EOD, truncated [ 111.675966][ T4930] loop2: p29 start 51379968 is beyond EOD, truncated [ 111.690012][ T4930] loop2: p31 start 51379968 is beyond EOD, truncated [ 111.716639][ T4930] loop2: p33 start 51379968 is beyond EOD, truncated [ 111.746882][ T4930] loop2: p35 start 51379968 is beyond EOD, truncated [ 111.835007][ T4930] loop2: p37 start 51379968 is beyond EOD, truncated [ 111.871508][ T4930] loop2: p39 start 51379968 is beyond EOD, truncated [ 111.934159][ T4930] loop2: p41 start 51379968 is beyond EOD, truncated [ 111.956539][ T4930] loop2: p43 start 51379968 is beyond EOD, truncated [ 111.965699][ T4980] loop0: detected capacity change from 0 to 128 [ 112.025164][ T4930] loop2: p45 start 51379968 is beyond EOD, truncated [ 112.155893][ T4930] loop2: p47 start 51379968 is beyond EOD, truncated [ 112.222848][ T4930] loop2: p49 start 51379968 is beyond EOD, truncated [ 112.271230][ T4930] loop2: p51 start 51379968 is beyond EOD, truncated [ 112.293295][ T4988] trusted_key: encrypted_key: insufficient parameters specified [ 112.351407][ T4930] loop2: p53 start 51379968 is beyond EOD, truncated [ 112.401792][ T4987] loop3: detected capacity change from 0 to 512 [ 112.411455][ T4930] loop2: p55 start 51379968 is beyond EOD, truncated [ 112.480885][ T4930] loop2: p57 start 51379968 is beyond EOD, truncated [ 112.517936][ T4990] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 112.565784][ T4930] loop2: p59 start 51379968 is beyond EOD, truncated [ 112.570784][ T4987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.574911][ T4965] loop1: detected capacity change from 0 to 32768 [ 112.590280][ T4930] loop2: p61 start 51379968 is beyond EOD, truncated [ 112.611036][ T4930] loop2: p63 start 51379968 is beyond EOD, truncated [ 112.627613][ T4930] loop2: p65 start 51379968 is beyond EOD, truncated [ 112.638888][ T4930] loop2: p67 start 51379968 is beyond EOD, truncated [ 112.649274][ T4930] loop2: p69 start 51379968 is beyond EOD, truncated [ 112.661243][ T4965] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.189 (4965) [ 112.687710][ T4930] loop2: p71 start 51379968 is beyond EOD, truncated [ 112.710927][ T4930] loop2: p73 start 51379968 is beyond EOD, truncated [ 112.745808][ T4930] loop2: p75 start 51379968 is beyond EOD, truncated [ 112.755371][ T4965] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 112.774401][ T4965] BTRFS info (device loop1): using free space tree [ 112.863016][ T4965] BTRFS info (device loop1): has skinny extents [ 112.869618][ T4930] loop2: p77 start 51379968 is beyond EOD, truncated [ 112.886381][ T4930] loop2: p79 start 51379968 is beyond EOD, truncated [ 112.911528][ T4930] loop2: p81 start 51379968 is beyond EOD, truncated [ 112.924440][ T4930] loop2: p83 start 51379968 is beyond EOD, truncated [ 113.005473][ T4930] loop2: p85 start 51379968 is beyond EOD, truncated [ 113.050625][ T5006] loop3: detected capacity change from 0 to 2048 [ 113.119641][ T4930] loop2: p87 start 51379968 is beyond EOD, truncated [ 113.149946][ T4930] loop2: p89 start 51379968 is beyond EOD, truncated [ 113.188185][ T4930] loop2: p91 start 51379968 is beyond EOD, truncated [ 113.215182][ T4930] loop2: p93 start 51379968 is beyond EOD, truncated [ 113.410408][ T4930] loop2: p95 start 51379968 is beyond EOD, truncated [ 113.449759][ T5006] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.683919][ T4930] loop2: p97 start 51379968 is beyond EOD, truncated [ 113.839860][ T4930] loop2: p99 start 51379968 is beyond EOD, truncated [ 113.900141][ T4930] loop2: p101 start 51379968 is beyond EOD, truncated [ 113.919125][ T26] audit: type=1804 audit(1786055704.201:14): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.202" name="/newroot/41/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 113.940524][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.985489][ T4965] BTRFS info (device loop1): enabling ssd optimizations [ 114.031072][ T4930] loop2: p103 start 51379968 is beyond EOD, truncated [ 114.068643][ T4930] loop2: p105 start 51379968 is beyond EOD, truncated [ 114.113800][ T26] audit: type=1804 audit(1786055704.241:15): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.202" name="/newroot/41/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 114.138928][ T4930] loop2: p107 start 51379968 is beyond EOD, truncated [ 114.211698][ T4930] loop2: p109 start 51379968 is beyond EOD, truncated [ 114.230571][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'. [ 114.275815][ T4930] loop2: p111 start 51379968 is beyond EOD, truncated [ 114.312581][ T5034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.325129][ T4930] loop2: p113 start 51379968 is beyond EOD, truncated [ 114.398345][ T4930] loop2: p115 start 51379968 is beyond EOD, truncated [ 114.449665][ T4930] loop2: p117 start 51379968 is beyond EOD, truncated [ 114.473327][ T5039] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 114.534104][ T4930] loop2: p119 start 51379968 is beyond EOD, truncated [ 114.563870][ T4930] loop2: p121 start 51379968 is beyond EOD, truncated [ 114.581806][ T4930] loop2: p123 start 51379968 is beyond EOD, truncated [ 114.604004][ T5007] loop0: detected capacity change from 0 to 32768 [ 114.637396][ T4930] loop2: p125 start 51379968 is beyond EOD, truncated [ 114.674122][ T4930] loop2: p127 start 51379968 is beyond EOD, truncated [ 114.719918][ T4930] loop2: p129 start 51379968 is beyond EOD, truncated [ 114.827923][ T4930] loop2: p131 start 51379968 is beyond EOD, truncated [ 114.840613][ T4930] loop2: p133 start 51379968 is beyond EOD, truncated [ 114.858264][ T4930] loop2: p135 start 51379968 is beyond EOD, truncated [ 114.931794][ T5043] 9pnet: Insufficient options for proto=fd [ 115.161432][ T4930] loop2: p137 start 51379968 is beyond EOD, truncated [ 115.275984][ T5007] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.396411][ T4930] loop2: p139 start 51379968 is beyond EOD, truncated [ 115.449900][ T4930] loop2: p141 start 51379968 is beyond EOD, truncated [ 115.547265][ T4547] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop1 scanned by udevd (4547) [ 115.560800][ T4930] loop2: p143 start 51379968 is beyond EOD, truncated [ 115.611902][ T4930] loop2: p145 start 51379968 is beyond EOD, truncated [ 115.657377][ T5053] loop3: detected capacity change from 0 to 256 [ 115.662622][ T26] audit: type=1800 audit(1786055705.941:16): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.204" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 115.694391][ T4930] loop2: p147 start 51379968 is beyond EOD, truncated [ 115.704860][ T5056] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.724494][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.739546][ T4930] loop2: p149 start 51379968 is beyond EOD, truncated [ 115.750124][ T4930] loop2: p151 start 51379968 is beyond EOD, truncated [ 115.759326][ T4930] loop2: p153 start 51379968 is beyond EOD, truncated [ 115.772361][ T4930] loop2: p155 start 51379968 is beyond EOD, truncated [ 115.832012][ T4930] loop2: p157 start 51379968 is beyond EOD, truncated [ 115.888360][ T4930] loop2: p159 start 51379968 is beyond EOD, truncated [ 115.910146][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 115.927809][ T4930] loop2: p161 start 51379968 is beyond EOD, truncated [ 115.958029][ T4930] loop2: p163 start 51379968 is beyond EOD, truncated [ 115.973474][ T4930] loop2: p165 start 51379968 is beyond EOD, truncated [ 115.982114][ T4930] loop2: p167 start 51379968 is beyond EOD, truncated [ 115.996418][ T4930] loop2: p169 start 51379968 is beyond EOD, truncated [ 116.021152][ T4930] loop2: p171 start 51379968 is beyond EOD, truncated [ 116.033198][ T5037] loop4: detected capacity change from 0 to 40427 [ 116.047121][ T4930] loop2: p173 start 51379968 is beyond EOD, truncated [ 116.085375][ T4930] loop2: p175 start 51379968 is beyond EOD, truncated [ 116.100775][ T4930] loop2: p177 start 51379968 is beyond EOD, truncated [ 116.110092][ T5037] F2FS-fs (loop4): invalid crc value [ 116.129307][ T5060] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 116.158632][ T4930] loop2: p179 start 51379968 is beyond EOD, truncated [ 116.193058][ T4930] loop2: p181 start 51379968 is beyond EOD, truncated [ 116.225040][ T4930] loop2: p183 start 51379968 is beyond EOD, truncated [ 116.237819][ T5037] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.251234][ T4930] loop2: p185 start 51379968 is beyond EOD, truncated [ 116.274379][ T4930] loop2: p187 start 51379968 is beyond EOD, truncated [ 116.300497][ T4930] loop2: p189 start 51379968 is beyond EOD, truncated [ 116.344704][ T4930] loop2: p191 start 51379968 is beyond EOD, truncated [ 116.400751][ T4930] loop2: p193 start 51379968 is beyond EOD, truncated [ 116.440593][ T4930] loop2: p195 start 51379968 is beyond EOD, truncated [ 117.116215][ T4930] loop2: p197 start 51379968 is beyond EOD, truncated [ 117.164710][ T4930] loop2: p199 start 51379968 is beyond EOD, truncated [ 117.197803][ T5037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.215844][ T4930] loop2: p201 start 51379968 is beyond EOD, truncated [ 117.235405][ T5073] loop0: detected capacity change from 0 to 128 [ 117.255103][ T4930] loop2: p203 start 51379968 is beyond EOD, truncated [ 117.294118][ T4930] loop2: p205 start 51379968 is beyond EOD, truncated [ 117.351020][ T5037] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 117.362328][ T4930] loop2: p207 start 51379968 is beyond EOD, truncated [ 117.380937][ T4930] loop2: p209 start 51379968 is beyond EOD, truncated [ 117.393581][ T5077] loop3: detected capacity change from 0 to 2048 [ 117.415803][ T4930] loop2: p211 start 51379968 is beyond EOD, truncated [ 117.445803][ T4930] loop2: p213 start 51379968 is beyond EOD, truncated [ 117.601461][ T4930] loop2: p215 start 51379968 is beyond EOD, truncated [ 117.621892][ T5073] trusted_key: encrypted_key: insufficient parameters specified [ 117.705612][ T4930] loop2: p217 start 51379968 is beyond EOD, truncated [ 117.747989][ T5077] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.787989][ T4930] loop2: p219 start 51379968 is beyond EOD, truncated [ 117.887761][ T4930] loop2: p221 start 51379968 is beyond EOD, truncated [ 117.902101][ T5090] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 117.933455][ T4930] loop2: p223 start 51379968 is beyond EOD, truncated [ 117.985092][ T4930] loop2: p225 start 51379968 is beyond EOD, truncated [ 118.005056][ T5090] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 118.010654][ T4930] loop2: p227 start 51379968 is beyond EOD, truncated [ 118.046348][ T5090] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.046348][ T5090] [ 118.102755][ T4930] loop2: p229 start 51379968 is beyond EOD, truncated [ 118.107467][ T5090] EXT4-fs (loop3): Total free blocks count 0 [ 118.132778][ T5090] EXT4-fs (loop3): Free/Dirty block details [ 118.152108][ T4930] loop2: p231 start 51379968 is beyond EOD, [ 118.152121][ T5090] EXT4-fs (loop3): free_blocks=4096 [ 118.152168][ T5090] EXT4-fs (loop3): dirty_blocks=48 [ 118.158920][ T4930] truncated [ 118.212697][ T5090] EXT4-fs (loop3): Block reservation details [ 118.217650][ T4930] loop2: p233 start 51379968 is beyond EOD, truncated [ 118.232998][ T5090] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 118.253869][ T4930] loop2: p235 start 51379968 is beyond EOD, truncated [ 118.282675][ T4930] loop2: p237 start 51379968 is beyond EOD, truncated [ 118.305852][ T4930] loop2: p239 start 51379968 is beyond EOD, truncated [ 118.324289][ T4930] loop2: p241 start 51379968 is beyond EOD, truncated [ 118.367206][ T4930] loop2: p243 start 51379968 is beyond EOD, truncated [ 118.392946][ T4930] loop2: p245 start 51379968 is beyond EOD, truncated [ 118.418964][ T4930] loop2: p247 start 51379968 is beyond EOD, truncated [ 118.442261][ T4930] loop2: p249 start 51379968 is beyond EOD, truncated [ 118.450825][ T4930] loop2: p251 start 51379968 is beyond EOD, truncated [ 118.459412][ T4930] loop2: p253 start 51379968 is beyond EOD, truncated [ 118.473070][ T4930] loop2: p255 start 51379968 is beyond EOD, truncated [ 118.794297][ T5085] loop1: detected capacity change from 0 to 32768 [ 118.888816][ T5098] loop4: detected capacity change from 0 to 32768 [ 118.984028][ T5083] read_mapping_page failed! [ 119.621279][ T5083] ERROR: (device loop1): txCommit: [ 119.621279][ T5083] [ 119.641952][ T5083] ERROR: (device loop1): remounting filesystem as read-only [ 119.702481][ T5051] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.741057][ T5098] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.795923][ T5120] loop3: detected capacity change from 0 to 128 [ 119.827171][ T26] audit: type=1800 audit(1786055710.111:17): pid=5098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.226" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 120.039945][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 120.126184][ T5125] trusted_key: encrypted_key: insufficient parameters specified [ 120.297294][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.310606][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 120.325277][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 120.383245][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.424660][ T5131] udevd[5131]: inotify_add_watch(7, /dev/loop2p14, 10) failed: No such file or directory [ 120.485134][ T5051] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.499243][ T5130] udevd[5130]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 120.515524][ T5133] udevd[5133]: inotify_add_watch(7, /dev/loop2p18, 10) failed: No such file or directory [ 120.525822][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p24, 10) failed: No such file or directory [ 120.528770][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p22, 10) failed: No such file or directory [ 120.557481][ T5131] udevd[5131]: inotify_add_watch(7, /dev/loop2p32, 10) failed: No such file or directory [ 120.575135][ T5051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.597894][ T5139] tipc: Started in network mode [ 120.602803][ T5139] tipc: Node identity -, cluster identity 4711 [ 120.722016][ T5051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.737250][ T5051] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.905360][ T5051] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.924143][ T5051] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.973201][ T5051] usb 1-1: Manufacturer: syz [ 121.033113][ T5152] loop3: detected capacity change from 0 to 1024 [ 121.037316][ T5051] usb 1-1: config 0 descriptor?? [ 121.324513][ T5152] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 121.796196][ T5152] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,errors=continue,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 121.834696][ T5152] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.867450][ T5051] usbhid 1-1:0.0: can't add hid device: -71 [ 121.882388][ T5051] usbhid: probe of 1-1:0.0 failed with error -71 [ 121.896460][ T5051] usb 1-1: USB disconnect, device number 2 [ 121.936212][ T5152] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 2: comm syz.3.244: lblock 2 mapped to illegal pblock 2 (length 4) [ 122.241892][ T4463] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:18: bg 0: block 112: padding at end of block bitmap is not set [ 122.288064][ T4463] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 122.308920][ T4463] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.308920][ T4463] [ 122.321486][ T5169] loop2: detected capacity change from 0 to 4096 [ 122.349812][ T4463] EXT4-fs (loop3): Total free blocks count 0 [ 122.358919][ T4463] EXT4-fs (loop3): Free/Dirty block details [ 122.374035][ T4463] EXT4-fs (loop3): free_blocks=0 [ 122.379383][ T4463] EXT4-fs (loop3): dirty_blocks=16 [ 122.384584][ T4463] EXT4-fs (loop3): Block reservation details [ 122.429311][ T4463] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 122.512809][ T5169] ntfs3: loop2: Failed to load $Extend. [ 122.528669][ T5175] loop0: detected capacity change from 0 to 64 [ 122.666303][ T5169] ntfs3: loop2: ino=5, "/" directory corrupted [ 122.714055][ T5169] ntfs3: loop2: ino=5, "/" directory corrupted [ 124.087503][ T5204] loop2: detected capacity change from 0 to 512 [ 124.496556][ T5204] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.265: iget: bad i_size value: 38620345925642 [ 124.861202][ T5204] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.265: couldn't read orphan inode 15 (err -117) [ 124.930950][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,grpid,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 125.073540][ T5218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.345583][ T5186] loop1: detected capacity change from 0 to 40427 [ 126.012635][ T5232] loop3: detected capacity change from 0 to 4096 [ 126.068134][ T5232] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 126.092256][ T5239] syz.1.278[5239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.092406][ T5239] syz.1.278[5239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.122098][ T5232] ntfs3: loop3: Failed to load $Extend. [ 126.374116][ T5232] ntfs3: loop3: ino=5, "/" directory corrupted [ 126.454989][ T5248] loop0: detected capacity change from 0 to 2048 [ 126.522539][ T4187] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 126.594130][ T5248] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.702146][ T5264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.758566][ T5266] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003 [ 126.774656][ T5267] loop1: detected capacity change from 0 to 1024 [ 126.977500][ T4248] hfsplus: b-tree write err: -5, ino 25 [ 126.985215][ T4228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.001048][ T4248] hfsplus: b-tree write err: -5, ino 4 [ 127.035105][ T4248] hfsplus: b-tree write err: -5, ino 2 [ 127.338915][ T5254] loop2: detected capacity change from 0 to 32768 [ 127.509524][ T4228] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 127.575395][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.701570][ T4228] usb 4-1: Product: syz [ 127.824141][ T4228] usb 4-1: Manufacturer: syz [ 127.948523][ T4228] usb 4-1: SerialNumber: syz [ 128.259538][ T4228] usb 4-1: config 0 descriptor?? [ 128.335144][ T5254] XFS (loop2): Mounting V5 Filesystem [ 128.348712][ T4228] ch341 4-1:0.0: ch341-uart converter detected [ 128.619367][ T5254] XFS (loop2): Ending clean mount [ 128.641006][ T5270] loop1: detected capacity change from 0 to 40427 [ 129.164113][ T5270] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.435102][ T4228] usb 4-1: failed to send control message: -71 [ 129.447091][ T4228] ch341-uart: probe of ttyUSB0 failed with error -71 [ 129.465364][ T5270] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.513011][ T4228] usb 4-1: USB disconnect, device number 4 [ 129.561643][ T4228] ch341 4-1:0.0: device disconnected [ 129.589410][ T5308] netlink: 'syz.4.299': attribute type 2 has an invalid length. [ 129.606229][ T4192] XFS (loop2): Unmounting Filesystem [ 130.789445][ T5321] loop3: detected capacity change from 0 to 128 [ 131.000894][ T5321] trusted_key: encrypted_key: insufficient parameters specified [ 131.412882][ T5339] loop2: detected capacity change from 0 to 164 [ 132.178047][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.826733][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833271][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.662199][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 133.744626][ T5365] loop3: detected capacity change from 0 to 128 [ 133.872755][ T4233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.887842][ T4233] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.901586][ T4233] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.046842][ T5365] trusted_key: encrypted_key: insufficient parameters specified [ 134.165237][ T4233] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 134.176356][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.184419][ T4233] usb 2-1: Product: syz [ 134.189447][ T4233] usb 2-1: Manufacturer: syz [ 134.194076][ T4233] usb 2-1: SerialNumber: syz [ 134.378073][ T4233] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 134.409813][ T4233] usb 2-1: clock source 0 is not valid, cannot use [ 134.425872][ T5384] SET target dimension over the limit! [ 134.471210][ T4233] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 134.478330][ T4234] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.626351][ T4233] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 134.745414][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 134.868576][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.037129][ T4234] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.095106][ T5390] loop0: detected capacity change from 0 to 256 [ 135.190522][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.231894][ T4234] usb 3-1: config 0 descriptor?? [ 135.242688][ T4233] usb 2-1: USB disconnect, device number 3 [ 135.558242][ T4234] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.852971][ T5051] usb 3-1: USB disconnect, device number 6 [ 136.307526][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.766996][ T5423] loop3: detected capacity change from 0 to 128 [ 137.404118][ T5423] trusted_key: encrypted_key: insufficient parameters specified [ 141.833018][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 142.537617][ T5511] loop1: detected capacity change from 0 to 2048 [ 142.814661][ T5511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.250144][ T5511] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.375246][ T5511] fs-verity: sha512 using implementation "sha512-avx2" [ 143.558756][ T5531] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.573072][ T5531] overlayfs: failed to set xattr on upper [ 143.607242][ T5531] overlayfs: ...falling back to index=off,metacopy=off. [ 143.661521][ T5531] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 143.834097][ T4662] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.724985][ T4662] usb 4-1: Using ep0 maxpacket: 32 [ 145.125384][ T4662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.212540][ T4662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.247039][ T5553] loop0: detected capacity change from 0 to 128 [ 145.904104][ T5551] trusted_key: encrypted_key: insufficient parameters specified [ 145.940020][ T4662] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.959659][ T4662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.991883][ T4662] usb 4-1: config 0 descriptor?? [ 146.065959][ T4662] hub 4-1:0.0: USB hub found [ 146.905574][ T4662] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 147.576194][ T5576] 9pnet: Insufficient options for proto=fd [ 147.598569][ T4662] usbhid 4-1:0.0: can't add hid device: -71 [ 147.609527][ T4662] usbhid: probe of 4-1:0.0 failed with error -71 [ 147.715691][ T4662] usb 4-1: USB disconnect, device number 5 [ 149.315067][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.745101][ T4234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.801285][ T4234] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 149.980140][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.110843][ T5621] block nbd0: NBD_DISCONNECT [ 150.783822][ T4234] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 150.921711][ T5629] 9pnet: Insufficient options for proto=fd [ 151.413573][ T4234] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 6e:39:bd:fe:ef:72 [ 151.557612][ T4234] usb 2-1: USB disconnect, device number 4 [ 151.618407][ T4234] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 152.012568][ T5649] kvm: apic: phys broadcast and lowest prio [ 152.372865][ T5667] device syzkaller0 entered promiscuous mode [ 152.823364][ T5676] block nbd2: NBD_DISCONNECT [ 153.459273][ T5654] loop4: detected capacity change from 0 to 40427 [ 153.678874][ T5654] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.903139][ T5654] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.991265][ T5698] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 154.480909][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 155.335345][ T5730] block nbd3: NBD_DISCONNECT [ 156.154489][ T5740] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 156.401669][ T5750] only policy match revision 0 supported [ 156.401688][ T5750] unable to load match [ 157.753825][ T5051] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.127958][ T5768] loop0: detected capacity change from 0 to 40427 [ 158.225021][ T5051] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 158.243386][ T5051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.259258][ T5768] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.325782][ T5051] usb 4-1: NFC: intf ffff88802a730000 id ffffffff8cb63280 [ 158.380359][ T5768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.414225][ T5051] nfcmrvl 4-1:1.0: NFC: registered with nci successfully [ 158.646644][ T4446] nfcmrvl 4-1:1.0: NFC: send entry, len 4 [ 159.694561][ T5789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.814876][ C1] nfcmrvl 4-1:1.0: NFC: urb ffff8880242f0800 status -2 count 0 [ 159.898836][ T5051] usb 4-1: USB disconnect, device number 6 [ 159.941085][ T5051] usb 4-1: NFC: intf ffff88802a730000 [ 160.643262][ T5819] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.767857][ T5821] loop2: detected capacity change from 0 to 1024 [ 160.896449][ T5821] EXT4-fs (loop2): Ignoring removed orlov option [ 161.140912][ T5821] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 161.162464][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.348849][ T5856] block nbd1: NBD_DISCONNECT [ 163.004893][ T5865] device syzkaller1 entered promiscuous mode [ 163.921681][ T5880] process 'syz.4.460' launched './file1' with NULL argv: empty string added [ 164.655027][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.236702][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.115287][ T7] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 166.155058][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.163113][ T7] usb 1-1: Product: syz [ 166.184190][ T7] usb 1-1: Manufacturer: syz [ 166.208586][ T7] usb 1-1: SerialNumber: syz [ 166.284706][ T7] usb 1-1: config 0 descriptor?? [ 166.479872][ T7] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 166.540151][ T7] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 166.710462][ T7] usb 1-1: USB disconnect, device number 3 [ 166.990483][ T5917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.011681][ T5917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.086799][ T5924] device syzkaller0 entered promiscuous mode [ 167.381458][ T5929] block nbd2: NBD_DISCONNECT [ 167.591468][ T5928] loop0: detected capacity change from 0 to 1024 [ 168.012506][ T5928] EXT4-fs (loop0): Ignoring removed bh option [ 168.080288][ T5928] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 168.235465][ T5928] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.262130][ T5928] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.477: bg 0: block 112: padding at end of block bitmap is not set [ 168.463644][ T5928] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 33 with max blocks 1 with error 28 [ 168.822017][ T5928] EXT4-fs (loop0): This should not happen!! Data will be lost [ 168.822017][ T5928] [ 168.981991][ T5928] EXT4-fs (loop0): Total free blocks count 0 [ 169.028379][ T5928] EXT4-fs (loop0): Free/Dirty block details [ 169.034442][ T5928] EXT4-fs (loop0): free_blocks=0 [ 169.047693][ T5928] EXT4-fs (loop0): dirty_blocks=16 [ 169.216457][ T5928] EXT4-fs (loop0): Block reservation details [ 169.222861][ T5928] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 169.346561][ T5968] device syzkaller0 entered promiscuous mode [ 169.425029][ T5972] device syzkaller0 entered promiscuous mode [ 169.434114][ T5974] loop2: detected capacity change from 0 to 128 [ 169.667925][ T5974] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.686178][ T5974] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.804865][ T5983] block nbd3: NBD_DISCONNECT [ 170.276203][ T5974] fscrypt: Error allocating hmac(sha512): -2 [ 170.391191][ T5990] dyndbg: unknown flag 'd' [ 170.396188][ T5990] dyndbg: flags parse failed [ 170.476487][ T7] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 171.199416][ T5997] fido_id[5997]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.499503][ T6004] loop1: detected capacity change from 0 to 256 [ 171.676558][ T6014] device syzkaller0 entered promiscuous mode [ 171.774147][ T6015] 9pnet: Insufficient options for proto=fd [ 172.298765][ T6004] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 172.455403][ T6009] loop3: detected capacity change from 0 to 8192 [ 172.493547][ T6021] device syzkaller1 entered promiscuous mode [ 172.602525][ T3559] loop3: p2 p3 p4 [ 172.612184][ T3559] loop3: p2 size 64053 extends beyond EOD, truncated [ 172.620647][ T3559] loop3: p3 start 65280 is beyond EOD, truncated [ 172.633275][ T3559] loop3: p4 size 50331904 extends beyond EOD, truncated [ 172.684616][ T6009] loop3: p2 p3 p4 [ 172.690273][ T6009] loop3: p2 size 64053 extends beyond EOD, truncated [ 172.698947][ T6009] loop3: p3 start 65280 is beyond EOD, truncated [ 172.705547][ T6009] loop3: p4 size 50331904 extends beyond EOD, truncated [ 172.788445][ T6026] block nbd2: NBD_DISCONNECT [ 173.386182][ T6032] loop4: detected capacity change from 0 to 128 [ 173.667586][ T6034] Set syz1 is full, maxelem 2076 reached [ 174.391916][ T4663] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.611825][ T6053] device syzkaller0 entered promiscuous mode [ 174.795161][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.825109][ T4663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.995912][ T4663] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 175.195035][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 175.285037][ T4663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.348268][ T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.366417][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 175.395678][ T21] usb 3-1: config 0 has no interface number 0 [ 175.402979][ T4663] usb 2-1: config 0 descriptor?? [ 175.407885][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 175.422530][ T21] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.458300][ T21] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.475726][ T4547] udevd[4547]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 175.475842][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 175.485772][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.520587][ T21] usb 3-1: config 0 descriptor?? [ 175.594412][ T21] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 175.885666][ T4663] ath6kl: Unsupported hardware version: 0x0 [ 176.511637][ T4663] ath6kl: Failed to init ath6kl core: -22 [ 176.560768][ T6069] VFS: file-max limit 0 reached [ 176.586836][ T4663] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 176.606972][ T5048] usb 3-1: USB disconnect, device number 7 [ 176.614842][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 176.625641][ T6067] iowarrior 3-1:0.1: Error -19 while submitting URB [ 176.772824][ T6072] 9pnet: Insufficient options for proto=fd [ 176.889336][ T4663] usb 2-1: USB disconnect, device number 5 [ 177.280701][ T4229] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.298053][ T6084] block nbd4: NBD_DISCONNECT [ 177.436220][ T6093] device syzkaller1 entered promiscuous mode [ 177.814020][ T6102] loop4: detected capacity change from 0 to 128 [ 177.955187][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.980681][ T4229] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.081721][ T6102] trusted_key: encrypted_key: insufficient parameters specified [ 178.201103][ T4229] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 178.231081][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.423392][ T4229] usb 4-1: Product: syz [ 178.428263][ T4229] usb 4-1: Manufacturer: syz [ 178.432887][ T4229] usb 4-1: SerialNumber: syz [ 178.687017][ T6125] 9pnet: Insufficient options for proto=fd [ 178.856849][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 178.993787][ T5048] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.013369][ T6128] block nbd1: NBD_DISCONNECT [ 179.070660][ T1108] usb 4-1: USB disconnect, device number 7 [ 179.637659][ T5048] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 179.647410][ T5048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.755841][ T6170] loop3: detected capacity change from 0 to 128 [ 179.979819][ T6170] trusted_key: encrypted_key: insufficient parameters specified [ 180.096375][ T6174] block nbd1: NBD_DISCONNECT [ 180.154979][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.230466][ T5048] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 180.256693][ T6180] device syzkaller1 entered promiscuous mode [ 180.263462][ T5048] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 180.277531][ T6180] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 180.296731][ T5048] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0003/input/input5 [ 180.524845][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 180.644986][ T1108] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 180.653243][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.695257][ C1] wacom 0003:056A:033B.0003: Event data for report 2 was too short (9 vs 3) [ 180.705056][ T1108] usb 1-1: config 0 has no interfaces? [ 180.871320][ T1108] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 180.905169][ T1108] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 180.923892][ T1108] usb 1-1: Product: syz [ 180.972109][ T6204] loop1: detected capacity change from 0 to 4096 [ 180.995065][ C1] wacom 0003:056A:033B.0003: Event data for report 2 was too short (9 vs 6) [ 181.014167][ T1108] usb 1-1: Manufacturer: syz [ 181.019796][ T1108] usb 1-1: SerialNumber: syz [ 181.031391][ T6204] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 181.032499][ T1108] usb 1-1: config 0 descriptor?? [ 181.195873][ T4666] usb 3-1: USB disconnect, device number 8 [ 181.212615][ T6206] 9pnet: Insufficient options for proto=fd [ 181.495980][ T6209] block nbd3: NBD_DISCONNECT [ 181.515374][ T4234] usb 1-1: USB disconnect, device number 4 [ 181.646434][ T6218] loop1: detected capacity change from 0 to 128 [ 181.890711][ T6218] trusted_key: encrypted_key: insufficient parameters specified [ 182.051851][ T6229] block nbd3: NBD_DISCONNECT [ 182.758639][ T6247] block nbd0: NBD_DISCONNECT [ 182.763558][ T6246] 9pnet: Insufficient options for proto=fd [ 183.083623][ T6251] trusted_key: encrypted_key: insufficient parameters specified [ 183.407397][ T6268] block nbd3: NBD_DISCONNECT [ 183.872761][ T5048] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.400640][ T6286] block nbd1: NBD_DISCONNECT [ 184.421480][ T6289] 9pnet: Insufficient options for proto=fd [ 184.595299][ T5048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 184.621949][ T5048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.697425][ T6295] trusted_key: encrypted_key: insufficient parameters specified [ 184.734092][ T6299] overlayfs: failed to get inode (-116) [ 184.741138][ T6299] overlayfs: failed to look up (file0) for ino (-116) [ 184.790162][ T5048] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 184.887144][ T6305] team0: Port device vlan2 added [ 184.975147][ T5048] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 184.989981][ T5048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.008033][ T5048] usb 4-1: Product: syz [ 185.018758][ T5048] usb 4-1: Manufacturer: syz [ 185.030055][ T5048] usb 4-1: SerialNumber: syz [ 185.050150][ T5048] usb 4-1: config 0 descriptor?? [ 185.338418][ T5048] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 185.586934][ T7] usb 4-1: USB disconnect, device number 8 [ 186.139256][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 186.147000][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 186.153397][ T6326] 9pnet: Insufficient options for proto=fd [ 186.195813][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 186.201942][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 186.208156][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 186.313982][ T6325] block nbd4: NBD_DISCONNECT [ 187.524416][ T6356] loop0: detected capacity change from 0 to 512 [ 187.533140][ T6357] loop2: detected capacity change from 0 to 128 [ 187.736710][ T6357] trusted_key: encrypted_key: insufficient parameters specified [ 187.761052][ T6363] 9pnet: Insufficient options for proto=fd [ 187.889911][ T6356] EXT4-fs (loop0): Ignoring removed nobh option [ 187.900219][ T6356] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.975452][ T6356] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 188.131821][ T6356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec119, mo2=0002] [ 188.150247][ T6356] System zones: 1-12 [ 188.157620][ T6371] block nbd4: NBD_DISCONNECT [ 188.164421][ T6356] EXT4-fs (loop0): orphan cleanup on readonly fs [ 188.174669][ T6356] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.614: Block bitmap for bg 0 marked uninitialized [ 188.207862][ T6356] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.614: Block bitmap for bg 0 marked uninitialized [ 188.242594][ T6356] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.614: Block bitmap for bg 0 marked uninitialized [ 188.265815][ T4666] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 188.307369][ T6356] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 188.352899][ T6382] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 188.405631][ T6356] EXT4-fs (loop0): 1 truncate cleaned up [ 188.412945][ T6356] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noload,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nobh,,errors=continue. Quota mode: writeback. [ 188.520134][ T4666] usb 3-1: Using ep0 maxpacket: 32 [ 188.685389][ T4666] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 188.710133][ T4666] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.843382][ T4666] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 188.853902][ T4666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.918680][ T4666] usb 3-1: config 0 descriptor?? [ 189.017538][ T6399] loop4: detected capacity change from 0 to 128 [ 189.243338][ T6399] trusted_key: encrypted_key: insufficient parameters specified [ 189.546712][ T6409] loop3: detected capacity change from 0 to 1024 [ 189.714461][ T6415] 9pnet: Insufficient options for proto=fd [ 189.775744][ T6409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.900548][ T4666] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 189.909893][ T6427] device syzkaller0 entered promiscuous mode [ 190.295772][ T6435] block nbd4: NBD_DISCONNECT [ 190.476487][ T4666] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -110 [ 190.554997][ T4666] usb 3-1: USB disconnect, device number 9 [ 190.865286][ T6446] fido_id[6446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 191.348086][ T6468] device syzkaller0 entered promiscuous mode [ 191.402747][ T6470] loop1: detected capacity change from 0 to 128 [ 191.634917][ T26] audit: type=1800 audit(1786055781.911:18): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.649" name="bus" dev="loop1" ino=1048601 res=0 errno=0 [ 191.707591][ T6469] svc: failed to register nfsdv3 RPC service (errno 111). [ 191.759186][ T6469] svc: failed to register nfsaclv3 RPC service (errno 111). [ 191.934408][ T4195] ================================================================== [ 191.942998][ T4195] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0 [ 191.950765][ T4195] Write of size 4 at addr ffff88806005b450 by task syz-executor/4195 [ 191.958928][ T4195] [ 191.961261][ T4195] CPU: 0 PID: 4195 Comm: syz-executor Not tainted syzkaller #0 [ 191.968807][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.978988][ T4195] Call Trace: [ 191.982283][ T4195] [ 191.985230][ T4195] dump_stack_lvl+0x188/0x250 [ 191.989936][ T4195] ? show_regs_print_info+0x20/0x20 [ 191.995160][ T4195] ? load_image+0x410/0x410 [ 191.999691][ T4195] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 192.005213][ T4195] ? rcu_lock_release+0x5/0x20 [ 192.010004][ T4195] print_address_description+0x60/0x2d0 [ 192.015569][ T4195] ? nfsd_shutdown_threads+0x89/0x1a0 [ 192.020963][ T4195] kasan_report+0xdf/0x130 [ 192.025405][ T4195] ? nfsd_shutdown_threads+0x89/0x1a0 [ 192.030812][ T4195] kasan_check_range+0x235/0x290 [ 192.035776][ T4195] nfsd_shutdown_threads+0x89/0x1a0 [ 192.040997][ T4195] nfsd_umount+0x3e/0xc0 [ 192.045256][ T4195] deactivate_locked_super+0x93/0xf0 [ 192.050560][ T4195] cleanup_mnt+0x426/0x4d0 [ 192.055094][ T4195] task_work_run+0x125/0x1a0 [ 192.059722][ T4195] exit_to_user_mode_loop+0x10f/0x130 [ 192.065126][ T4195] exit_to_user_mode_prepare+0xee/0x180 [ 192.070704][ T4195] syscall_exit_to_user_mode+0x16/0x40 [ 192.076186][ T4195] do_syscall_64+0x58/0xa0 [ 192.080617][ T4195] ? clear_bhb_loop+0x30/0x80 [ 192.085304][ T4195] ? clear_bhb_loop+0x30/0x80 [ 192.090008][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.095931][ T4195] RIP: 0033:0x7f422b520317 [ 192.100390][ T4195] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 192.120040][ T4195] RSP: 002b:00007ffd3f3cf598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.128473][ T4195] RAX: 0000000000000000 RBX: 00007f422b5b5474 RCX: 00007f422b520317 [ 192.136461][ T4195] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3f3cf650 [ 192.144452][ T4195] RBP: 00007ffd3f3cf650 R08: 00007ffd3f3d0650 R09: 00000000ffffffff [ 192.152485][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3f3d06e0 [ 192.160476][ T4195] R13: 00007f422b5b5474 R14: 000000000002ed74 R15: 00007ffd3f3d0720 [ 192.168483][ T4195] [ 192.171512][ T4195] [ 192.173839][ T4195] Allocated by task 6469: [ 192.178174][ T4195] __kasan_kmalloc+0xaf/0xe0 [ 192.182789][ T4195] __svc_create+0x60/0x9d0 [ 192.187221][ T4195] svc_create_pooled+0x62f/0x810 [ 192.192170][ T4195] nfsd_create_serv+0x2f9/0x700 [ 192.197023][ T4195] nfsd_svc+0x132/0x9e0 [ 192.201187][ T4195] write_threads+0x2ea/0x350 [ 192.205877][ T4195] nfsctl_transaction_write+0x105/0x150 [ 192.211429][ T4195] vfs_write+0x304/0xd70 [ 192.215661][ T4195] ksys_write+0x153/0x260 [ 192.219970][ T4195] do_syscall_64+0x4c/0xa0 [ 192.224363][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.230241][ T4195] [ 192.232553][ T4195] Freed by task 6469: [ 192.236510][ T4195] kasan_set_track+0x4b/0x70 [ 192.241083][ T4195] kasan_set_free_info+0x1f/0x40 [ 192.246018][ T4195] ____kasan_slab_free+0xd5/0x110 [ 192.251021][ T4195] slab_free_freelist_hook+0xec/0x170 [ 192.256373][ T4195] kfree+0xef/0x2a0 [ 192.260159][ T4195] nfsd_svc+0x7cf/0x9e0 [ 192.264301][ T4195] write_threads+0x2ea/0x350 [ 192.268994][ T4195] nfsctl_transaction_write+0x105/0x150 [ 192.274537][ T4195] vfs_write+0x304/0xd70 [ 192.278773][ T4195] ksys_write+0x153/0x260 [ 192.283092][ T4195] do_syscall_64+0x4c/0xa0 [ 192.287501][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.293404][ T4195] [ 192.295800][ T4195] The buggy address belongs to the object at ffff88806005b400 [ 192.295800][ T4195] which belongs to the cache kmalloc-512 of size 512 [ 192.309839][ T4195] The buggy address is located 80 bytes inside of [ 192.309839][ T4195] 512-byte region [ffff88806005b400, ffff88806005b600) [ 192.323034][ T4195] The buggy address belongs to the page: [ 192.328691][ T4195] page:ffffea0001801600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60058 [ 192.338851][ T4195] head:ffffea0001801600 order:2 compound_mapcount:0 compound_pincount:0 [ 192.347198][ T4195] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 192.355297][ T4195] raw: 00fff00000010200 ffffea0001808b00 0000000200000002 ffff888016c41c80 [ 192.363870][ T4195] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 192.372492][ T4195] page dumped because: kasan: bad access detected [ 192.378940][ T4195] page_owner tracks the page as allocated [ 192.384668][ T4195] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4192, ts 62798011992, free_ts 21660832407 [ 192.403750][ T4195] get_page_from_freelist+0x24f6/0x2670 [ 192.409292][ T4195] __alloc_pages+0x1ee/0x480 [ 192.413874][ T4195] new_slab+0xc0/0x4b0 [ 192.417955][ T4195] ___slab_alloc+0x807/0xdd0 [ 192.422528][ T4195] __kmalloc_node_track_caller+0x13d/0x3a0 [ 192.428312][ T4195] __alloc_skb+0x22c/0x750 [ 192.432717][ T4195] netlink_ack+0x35c/0xb10 [ 192.437115][ T4195] netlink_rcv_skb+0x267/0x430 [ 192.441857][ T4195] netlink_unicast+0x78f/0x940 [ 192.446645][ T4195] netlink_sendmsg+0x8ba/0xbe0 [ 192.451395][ T4195] __sys_sendto+0x46d/0x620 [ 192.455939][ T4195] __x64_sys_sendto+0xda/0xf0 [ 192.460594][ T4195] do_syscall_64+0x4c/0xa0 [ 192.464991][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.470866][ T4195] page last free stack trace: [ 192.475543][ T4195] free_unref_page_prepare+0x637/0x6c0 [ 192.481003][ T4195] free_unref_page+0x8f/0x2a0 [ 192.485682][ T4195] free_contig_range+0x96/0xf0 [ 192.490441][ T4195] destroy_args+0xef/0xa00 [ 192.494857][ T4195] debug_vm_pgtable+0x321/0x380 [ 192.499727][ T4195] do_one_initcall+0x272/0x730 [ 192.504487][ T4195] do_initcall_level+0x13d/0x1f0 [ 192.509416][ T4195] do_initcalls+0x4b/0x90 [ 192.513734][ T4195] kernel_init_freeable+0x3d5/0x560 [ 192.518923][ T4195] kernel_init+0x19/0x1b0 [ 192.523255][ T4195] ret_from_fork+0x1f/0x30 [ 192.527667][ T4195] [ 192.529994][ T4195] Memory state around the buggy address: [ 192.535612][ T4195] ffff88806005b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.543668][ T4195] ffff88806005b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.551757][ T4195] >ffff88806005b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.559810][ T4195] ^ [ 192.566470][ T4195] ffff88806005b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.574514][ T4195] ffff88806005b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.582576][ T4195] ================================================================== [ 192.590622][ T4195] Disabling lock debugging due to kernel taint [ 192.596837][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.684931][ T6470] attempt to access beyond end of device [ 192.684931][ T6470] loop1: rw=0, want=157, limit=128 [ 192.734899][ T4195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.742139][ T4195] CPU: 0 PID: 4195 Comm: syz-executor Tainted: G B syzkaller #0 [ 192.751076][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.761139][ T4195] Call Trace: [ 192.764423][ T4195] [ 192.767446][ T4195] dump_stack_lvl+0x188/0x250 [ 192.772139][ T4195] ? show_regs_print_info+0x20/0x20 [ 192.777352][ T4195] ? load_image+0x410/0x410 [ 192.781869][ T4195] panic+0x2f8/0x850 [ 192.785777][ T4195] ? bpf_jit_dump+0xd0/0xd0 [ 192.790301][ T4195] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 192.796296][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 192.801160][ T4195] ? nfsd_shutdown_threads+0x89/0x1a0 [ 192.806537][ T4195] check_panic_on_warn+0x80/0xa0 [ 192.811481][ T4195] ? nfsd_shutdown_threads+0x89/0x1a0 [ 192.816861][ T4195] end_report+0x6d/0xf0 [ 192.821026][ T4195] kasan_report+0x102/0x130 [ 192.825541][ T4195] ? nfsd_shutdown_threads+0x89/0x1a0 [ 192.830934][ T4195] kasan_check_range+0x235/0x290 [ 192.835892][ T4195] nfsd_shutdown_threads+0x89/0x1a0 [ 192.841103][ T4195] nfsd_umount+0x3e/0xc0 [ 192.845348][ T4195] deactivate_locked_super+0x93/0xf0 [ 192.850675][ T4195] cleanup_mnt+0x426/0x4d0 [ 192.855085][ T4195] task_work_run+0x125/0x1a0 [ 192.859664][ T4195] exit_to_user_mode_loop+0x10f/0x130 [ 192.865017][ T4195] exit_to_user_mode_prepare+0xee/0x180 [ 192.870541][ T4195] syscall_exit_to_user_mode+0x16/0x40 [ 192.875980][ T4195] do_syscall_64+0x58/0xa0 [ 192.880403][ T4195] ? clear_bhb_loop+0x30/0x80 [ 192.885061][ T4195] ? clear_bhb_loop+0x30/0x80 [ 192.889762][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.895641][ T4195] RIP: 0033:0x7f422b520317 [ 192.900043][ T4195] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 192.919640][ T4195] RSP: 002b:00007ffd3f3cf598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.928056][ T4195] RAX: 0000000000000000 RBX: 00007f422b5b5474 RCX: 00007f422b520317 [ 192.936019][ T4195] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3f3cf650 [ 192.943990][ T4195] RBP: 00007ffd3f3cf650 R08: 00007ffd3f3d0650 R09: 00000000ffffffff [ 192.952173][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3f3d06e0 [ 192.960137][ T4195] R13: 00007f422b5b5474 R14: 000000000002ed74 R15: 00007ffd3f3d0720 [ 192.968100][ T4195] [ 192.971336][ T4195] Kernel Offset: disabled [ 192.975658][ T4195] Rebooting in 86400 seconds..