last executing test programs: 9.411533819s ago: executing program 0 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f000000c2c0), 0x0, 0x0, 0x0) 9.091505735s ago: executing program 0 (id=451): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 8.378332799s ago: executing program 0 (id=453): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x70bd2a, 0x25dfdbfd, {0x5, 0x0, 0x8}, [@nested={0x8, 0xce, 0x0, 0x1, [@nested={0x4, 0xfa}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, &(0x7f0000000240)) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x84100, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 8.377332099s ago: executing program 1 (id=454): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 8.034664875s ago: executing program 0 (id=455): setitimer(0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 8.034316725s ago: executing program 1 (id=456): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) r4 = socket(0x28, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f00000001c0)=0xe8) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="f00d34fb2af7900425e916a4f59f3adcf6181b14e13cf3ad195aac0ac5a38f62af2d4b0f02c306380bfbdf9ea70464b8dd7065f69986cb4f15fa1c3321331a6468ddea951d3706ebb2d5a0d1542316d5e90143826a2b14f4eaef3d2bae948b61e3d8dc9f43352122eec012aa7a10fd164b099bdc26ffca632a39b4c0bd", 0x7d}, {&(0x7f0000000500)="c6a33d4a117359abcd5f9cc4c30a6c03f11d8afe7062723e291ebfd72b4d1ef57e9b36464dd04136b36eaffe21ec71eaafb92258e6d0b904ff0ad05269cfc6c852d6c51d0cb4879b4ba5727005aaa858fb065e86d4fbf43e113e842e42023c3b90bae8fcba0a8393ecf38ea790c9fdc8c394933ba26745a14e85ae9632f5714666a6e3e43a54a687c74cb5090d49d674345a19b22f2b0b6a8924deaa5fc4574e4d09df27b2824ba6676eef1d2ef0d7e57aa4126e0541be5296c65dfc6d73fbd786", 0xc1}, {&(0x7f0000000600)="b5b7990c3bcc2132ec19a5340867b8f342838330f790548b199c34a649f9ed5d6ee3c64172dafa26a8148e08ea2722ae7c41fca8b63ce3124ff6eaa90a05156e0614d493ef881970af1a73cf4af4b41d665162de9dea08558f745ff5debc2a6aa244a52c9ae3ed07e4107ee3a615ef7679e560c5dffcd1cfdafe5a9a9cd346008bf662d0391f82955828f8748d73e9d6182dc35a4a3205a3e3bfa682d1c2b932bb0e666457da0ee5fe846a7421", 0xad}, {&(0x7f0000000480)="6ffaecbcfd277068866538d3b00753f138d7", 0x12}, {&(0x7f00000006c0)="4236fc64e3013773a655502685ff6fdb84938c93ed571f4c124b64cf4f704e0afbac7d47589f157149e08b4a0a12d9101598332df558b23387eb18b48634c1c79d2283043c0bb913a50e2ba4ced2aeee78c0ce4c47c5", 0x56}, {&(0x7f0000000740)="f61ba370ce9232ba978c97147bd24d4d5ea63adf49bddbf9a54a3ca231c22a1d418616592c91c5ee42cfc52497bcfd2e1beb57075756fe1b9c0d5b9f589e7ddf7f15013e2e0122d30c2b434f860970eeb941b6abdf82529aad51321ec43ea10b85cc3c1d23aad752567d9d3a9a1f5da74049f1a98061419b91c0be76e8cf9fdb91de55b4640aa81b743b57516fa4a4be34a4e17430be4a279413e50954bddef1e7e56546bf09c8b1ae0bb3", 0xab}, {&(0x7f0000000800)="d95bb0acec3e35b6755237740da2682f7976e391e1e16efc29e5072678867bffb0160f132763e2acf171414ecccd06364867bb26f2f0edf61365bb20fa79ab62c07c5e5f4d0e9fe7f1f3a88d0d291bb618d8fc5d79adaef96070c36736ba36e2deea83db9547823d987479e9235e727840c149362dfee6d4962492be908226f67cc5e1bb86dcf6d12345cd95c4da439c904cdbd0a2f11493231f4e892601d4600536d2c299846e2591", 0xa9}, {&(0x7f00000008c0)="c778f6cf035e4b28257ced525c4dc05666c126", 0x13}], 0x9}, 0x0) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xe3e5625455e07f5}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000a40)="00d236422857657a2b21deadea1e84cd4185334d5b6a146d96377db0f62a28ef0d710f608e5d6e2822e2781c897ef4fd56548dda83f5294f522a06968d3945f2c041c374e3c1204c93403fd8f6e92f57bfb4e9355a7d67dd9641bb9ebe6e46c8d1d2cf9356419f78809f759f020be3ed9ad1ecb1ce0cfb5175326817a1e02803f63a434a441d610486076f39c84c0198fcf9978451cca84acf5b3aca8bc82a8a29ca0b44e1d33f5f6d4db51d3b8b866867e133d0c312436afa365eb8b5d501dcb45336c0b63b1911de82c809f365", 0xce}], 0x1) 6.269972499s ago: executing program 0 (id=458): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x1000840, &(0x7f0000000100)={[{@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@utf8no}]}, 0x3, 0x359, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) 6.066529223s ago: executing program 1 (id=460): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, 0x0) sendmsg$unix(r1, 0x0, 0x4000841) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 5.519654743s ago: executing program 0 (id=462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r3, &(0x7f0000004340)={0x2020}, 0x2020) 5.354277707s ago: executing program 2 (id=463): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000009f40)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002d00)="d5", 0x1}], 0x1}}], 0x1, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000003c0)=""/210, &(0x7f00000000c0)=0xd2) 4.744558479s ago: executing program 1 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x8, "96"}, @global=@item_012={0x2, 0x1, 0x2, "eafb"}]}}, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 3.867808595s ago: executing program 2 (id=467): timer_create(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 3.210242928s ago: executing program 2 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) dup3(r2, r3, 0x0) 3.044151751s ago: executing program 2 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 2.915402014s ago: executing program 3 (id=470): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x1000840, &(0x7f0000000100)={[{@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@utf8no}]}, 0x3, 0x359, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) 2.814131916s ago: executing program 2 (id=471): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000580)="15827cd29800469e13dedbadac9fb431f40a6190b2adde7bc7649dd3b7ba8517566da3d5d016a32cf7bd38201c27307bd27640350291cee68c968561880af4d9884f856e84c65080f1873ffa60278a", 0x4f}, {&(0x7f0000000600)}, {&(0x7f0000000880)="c7b187402937e6a04f646962cd6f95a8e1c16d949c818b9535132bd899057e181025c33ba636d7005c8b8d28671065786e25a8ca8d5aa48919ebab39ea27c273fdac3e91f10c760f802563944d3592cd9bd7cfe87cfd91cbadf1eef5b1650d3e1090fe6bfd29fc3fbebadde980669b377bf60408411d8500eaa84d2969d157d1073432a34fd8f8d9d3a80bd7f914c15491479263060fca7746e08d9d275ee72f52a532e865eed2f4b2f2e2bc", 0xac}], 0x3, &(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB="00000000180000000000000001000000010000"], 0x40, 0x20004001}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000800)="587aa5220e9b3894481f18e839f449a6883fd9305a32a67898e112d2303063149a24bba36a677c48902205c460e55b8d1fd6dda2699b3b0e3e6e", 0x3a}, {&(0x7f0000000a40)="7d20adeb3389e9c6e3eac546239d77edc10b836de2747239845d80a6d4a5b0cec1c1b671911fb13ed3a9d1df7b51e10d10942eac77a7d71af6d2e55defcd11b817eb14eaf2566013c453b31f4de23008050bfa722d0ab9527923f12ab14d1011ed0a579656e22250f8e4ac7122e5256f2d425b6216db9852721c8bfbdb7f902f52cad519b3298f9a4f6e4d921cb226a9d9e938a502c977a614fa7fbe11c82c8262ee3f76ad7758d1", 0xa8}, {&(0x7f0000000b00)="682be85a47332514947f47842b19e52f1ba4c44195353c21779a1106d2ddfde4c70c859c6f58837fd2e02287c9b982ed1f4f945b40cbaf3d7f9ac7f4eb468d3c1a29d9cd60c167f3c1a76a4c933c2c4102cfad1eb21f9cf3c2fdc6d562be77fb4a8cdf3c11cf02cb59ef97eade468fe4c6728bd33a278d7fa3f7143ba9520427943a31b2eb98d09551e30c55ee15501805a834", 0x93}, {&(0x7f0000000bc0)}], 0x4, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x80}}], 0x2, 0x4040010) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x80280, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x20040010) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="97e54c74e5eefa0000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf250200000014000380080002000800000008000100040000000c0009800800020001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xeeee0000, 0x10000, 0x3}) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000600)="9834ddeff7bf55dcc03b4d7062da2785abab036460f580abf9012c6735c339cb73208931c636187fc913945c0c3bc90fd39b717b353dd77d6e33c8b975a9f3ceaf3f4e12b8828231cfc3e78a926671707d10742fcd3615c6ff11ca7fce1bef8b52946402f7d8b43e8580708a30fd5e30f34d1658920705beb3e6f240640ccb6fb8a3ed22b9045cc3caa0b5742aa7076147c461f0ef8e9bf8c287df0be569591f70afc00741c1e9ffd1203f885ecbb3d703d5c4fd831ffd", &(0x7f0000000480)="d9c8b33faa42ace971b90e7dd4e9a1c20ea78d245b"}}, &(0x7f0000000700)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.686909058s ago: executing program 3 (id=472): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.475218452s ago: executing program 2 (id=473): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000001d40)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x20408e, &(0x7f0000000900)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@nobh}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}], [{@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./bus\x00', 0x1201060, &(0x7f0000000080), 0x67, 0x538, &(0x7f0000002380)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 2.430300073s ago: executing program 3 (id=474): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x70bd2a, 0x25dfdbfd, {0x5, 0x0, 0x8}, [@nested={0x8, 0xce, 0x0, 0x1, [@nested={0x4, 0xfa}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, &(0x7f0000000240)) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x84100, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 2.109305219s ago: executing program 3 (id=475): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000009f40)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002d00)="d5", 0x1}], 0x1}}], 0x1, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000003c0)=""/210, &(0x7f00000000c0)=0xd2) 1.944803573s ago: executing program 3 (id=476): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x10}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000a005}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.838200755s ago: executing program 1 (id=477): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) listxattr(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 807.980965ms ago: executing program 3 (id=478): setitimer(0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(0xffffffffffffffff) r0 = inotify_init1(0x800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r1 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r1) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 0s ago: executing program 1 (id=479): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x26143) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x45) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf25050000000c00018008000100", @ANYRES32, @ANYBLOB="1800038000d269b68308000200000000006f8ba015b725b80975f9a7a87a1bc5b18b509c1052cd81c0522abd521cb69cb18205b0c9126f70eb81fd202cf1cbd5252e71eff12bcf8fd09b3ec428a316c523ee26bf000ca777da"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="6401000010000100fcffff0700000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 73.738890][ T5778] cgroup: Unknown subsys name 'net' [ 73.912386][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.494626][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.039114][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.047978][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.063779][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.075416][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.085030][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.092543][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.101826][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.110298][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.123695][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.144331][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.163315][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.173381][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.182566][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.200263][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.209479][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.218027][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.226146][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.242457][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.250727][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.261868][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.262159][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.270012][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.298649][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.306920][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.746685][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 77.857235][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 77.871979][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 77.995138][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.002424][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.010265][ T5788] bridge_slave_0: entered allmulticast mode [ 78.017527][ T5788] bridge_slave_0: entered promiscuous mode [ 78.030012][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 78.056675][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.064054][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.071443][ T5788] bridge_slave_1: entered allmulticast mode [ 78.078584][ T5788] bridge_slave_1: entered promiscuous mode [ 78.177760][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.185587][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.192719][ T5791] bridge_slave_0: entered allmulticast mode [ 78.199839][ T5791] bridge_slave_0: entered promiscuous mode [ 78.207103][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.214438][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.222120][ T5798] bridge_slave_0: entered allmulticast mode [ 78.229336][ T5798] bridge_slave_0: entered promiscuous mode [ 78.238938][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.251134][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.270968][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.278861][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.286700][ T5791] bridge_slave_1: entered allmulticast mode [ 78.294081][ T5791] bridge_slave_1: entered promiscuous mode [ 78.301756][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.309699][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.316976][ T5798] bridge_slave_1: entered allmulticast mode [ 78.324356][ T5798] bridge_slave_1: entered promiscuous mode [ 78.385445][ T5788] team0: Port device team_slave_0 added [ 78.428637][ T5788] team0: Port device team_slave_1 added [ 78.458184][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.470449][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.481789][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.494440][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.514756][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.521917][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.530752][ T5792] bridge_slave_0: entered allmulticast mode [ 78.537894][ T5792] bridge_slave_0: entered promiscuous mode [ 78.579784][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.587023][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.613146][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.626077][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.633372][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.640646][ T5792] bridge_slave_1: entered allmulticast mode [ 78.649431][ T5792] bridge_slave_1: entered promiscuous mode [ 78.658413][ T5791] team0: Port device team_slave_0 added [ 78.667813][ T5791] team0: Port device team_slave_1 added [ 78.688357][ T5798] team0: Port device team_slave_0 added [ 78.702053][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.709253][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.735618][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.775370][ T5798] team0: Port device team_slave_1 added [ 78.810099][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.832217][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.839904][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.865848][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.879063][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.886090][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.918358][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.954170][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.986913][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.993993][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.021085][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.043598][ T5788] hsr_slave_0: entered promiscuous mode [ 79.050098][ T5788] hsr_slave_1: entered promiscuous mode [ 79.069694][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.076743][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.103251][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.147517][ T5792] team0: Port device team_slave_0 added [ 79.156738][ T5792] team0: Port device team_slave_1 added [ 79.194119][ T5791] hsr_slave_0: entered promiscuous mode [ 79.200564][ T5791] hsr_slave_1: entered promiscuous mode [ 79.207252][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.215359][ T5791] Cannot create hsr debugfs directory [ 79.283941][ T5798] hsr_slave_0: entered promiscuous mode [ 79.290481][ T5798] hsr_slave_1: entered promiscuous mode [ 79.298107][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.306084][ T5798] Cannot create hsr debugfs directory [ 79.306283][ T50] Bluetooth: hci0: command tx timeout [ 79.312403][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.318158][ T5797] Bluetooth: hci3: command tx timeout [ 79.330604][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.357009][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.388715][ T50] Bluetooth: hci2: command tx timeout [ 79.394600][ T5797] Bluetooth: hci1: command tx timeout [ 79.408547][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.415843][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.442490][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.609998][ T5792] hsr_slave_0: entered promiscuous mode [ 79.616767][ T5792] hsr_slave_1: entered promiscuous mode [ 79.622905][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.630792][ T5792] Cannot create hsr debugfs directory [ 79.848981][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.867641][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.878042][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.898532][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.984407][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.005111][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.016317][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.026870][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.132624][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.145291][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.156715][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.167615][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.182136][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.262184][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.294947][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.307503][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.326637][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.337676][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.349950][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.357342][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.402389][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.409603][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.455964][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.495171][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.552675][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.560057][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.592041][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.599221][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.630127][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.700349][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.716420][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.767020][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.774340][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.788262][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.795457][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.826943][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.878450][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.885669][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.895310][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.902454][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.926313][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.039827][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.194677][ T5788] veth0_vlan: entered promiscuous mode [ 81.226845][ T5788] veth1_vlan: entered promiscuous mode [ 81.335686][ T5788] veth0_macvtap: entered promiscuous mode [ 81.378116][ T5788] veth1_macvtap: entered promiscuous mode [ 81.384548][ T5797] Bluetooth: hci3: command tx timeout [ 81.390007][ T5797] Bluetooth: hci0: command tx timeout [ 81.463342][ T5797] Bluetooth: hci1: command tx timeout [ 81.468816][ T5797] Bluetooth: hci2: command tx timeout [ 81.479523][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.501166][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.520643][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.531739][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.541428][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.552261][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.569602][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.634574][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.657908][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.689504][ T5791] veth0_vlan: entered promiscuous mode [ 81.761026][ T5791] veth1_vlan: entered promiscuous mode [ 81.810303][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.838697][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.872868][ T5791] veth0_macvtap: entered promiscuous mode [ 81.908671][ T5792] veth0_vlan: entered promiscuous mode [ 81.927671][ T5791] veth1_macvtap: entered promiscuous mode [ 81.971622][ T5798] veth0_vlan: entered promiscuous mode [ 81.987345][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.002826][ T5792] veth1_vlan: entered promiscuous mode [ 82.013591][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.019887][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.048603][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.065230][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.086962][ T5798] veth1_vlan: entered promiscuous mode [ 82.155219][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.169687][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.182891][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.228409][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.249582][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.259032][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.269273][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.338346][ T5792] veth0_macvtap: entered promiscuous mode [ 82.368284][ T5792] veth1_macvtap: entered promiscuous mode [ 82.479548][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.498833][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.510462][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.527429][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.540629][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.597685][ T5798] veth0_macvtap: entered promiscuous mode [ 82.620956][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.644328][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.662856][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.680185][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.698529][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.788680][ T5798] veth1_macvtap: entered promiscuous mode [ 83.557744][ T50] Bluetooth: hci3: command tx timeout [ 83.563475][ T50] Bluetooth: hci2: command tx timeout [ 83.568903][ T50] Bluetooth: hci1: command tx timeout [ 83.575093][ T5797] Bluetooth: hci0: command tx timeout [ 83.588425][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.629850][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.655005][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.668592][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.788578][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.812828][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.887084][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.899959][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.930291][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.942651][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.963369][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.975020][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.988174][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.002377][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.014551][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.030664][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.042280][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.052393][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.063477][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.074286][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.085156][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.107809][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.144395][ T5887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.900822][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.921630][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.930866][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.946072][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.166218][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.181781][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.623118][ T5799] Bluetooth: hci1: command tx timeout [ 85.628783][ T5799] Bluetooth: hci0: command tx timeout [ 85.636344][ T5799] Bluetooth: hci2: command tx timeout [ 85.641984][ T5799] Bluetooth: hci3: command tx timeout [ 86.113503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.157692][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.183683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 86.193373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.274122][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.378378][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.386975][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.430416][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.509583][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.548949][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.886879][ T5913] syz.3.8[5913]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.912843][ T23] cfg80211: failed to load regulatory.db [ 86.928476][ T5913] loop3: detected capacity change from 0 to 512 [ 86.978939][ T5913] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 87.040851][ T5913] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 87.213180][ T5913] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 87.342441][ T5913] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.356207][ T5913] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 87.365008][ T5913] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.396706][ T5913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.8: bg 0: block 34: padding at end of block bitmap is not set [ 87.445943][ T5919] veth0: entered promiscuous mode [ 87.471930][ T5913] Quota error (device loop3): write_blk: dquota write failed [ 87.681292][ T5913] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 87.725226][ T5913] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.8: Failed to acquire dquot type 1 [ 87.975302][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 88.622733][ T5913] EXT4-fs (loop3): 1 truncate cleaned up [ 88.655229][ T5917] syz.1.2 (5917) used greatest stack depth: 17128 bytes left [ 88.675726][ T5913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.143280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.165252][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.213619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.222642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.231250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.239776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.273137][ T5938] ksmbd: Unknown IPC event: 0, ignore. [ 91.633256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.700123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.383291][ T5956] syz.0.14[5956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.383981][ T5956] syz.0.14[5956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.411651][ T5955] loop1: detected capacity change from 0 to 16 [ 93.510120][ T5957] loop0: detected capacity change from 0 to 256 [ 93.725328][ T5957] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 94.049297][ T5960] Zero length message leads to an empty skb [ 94.452944][ C0] sched: RT throttling activated [ 94.568648][ T5955] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.701019][ T5963] loop3: detected capacity change from 0 to 1024 [ 94.764415][ T5963] ======================================================= [ 94.764415][ T5963] WARNING: The mand mount option has been deprecated and [ 94.764415][ T5963] and is ignored by this kernel. Remove the mand [ 94.764415][ T5963] option from the mount to silence this warning. [ 94.764415][ T5963] ======================================================= [ 95.033262][ T5963] EXT4-fs: Ignoring removed oldalloc option [ 95.087900][ T5963] EXT4-fs: Ignoring removed bh option [ 95.126018][ T5963] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 95.928502][ T5975] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21'. [ 96.567007][ T5982] input: syz0 as /devices/virtual/input/input5 [ 96.719540][ T5986] ksmbd: Unknown IPC event: 0, ignore. [ 96.918924][ T5989] loop0: detected capacity change from 0 to 512 [ 97.008092][ T5989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.477871][ T5989] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.25: corrupted inode contents [ 97.721907][ T5989] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #16: comm syz.0.25: mark_inode_dirty error [ 97.945283][ T5989] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.25: corrupted inode contents [ 98.103135][ T5989] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.25: mark_inode_dirty error [ 98.117366][ T5989] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.25: corrupted inode contents [ 98.139494][ T5989] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 98.171572][ T5989] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #16: comm syz.0.25: corrupted inode contents [ 98.231943][ T5989] EXT4-fs error (device loop0): ext4_truncate:4288: inode #16: comm syz.0.25: mark_inode_dirty error [ 98.270232][ T5989] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 98.335310][ T5989] EXT4-fs (loop0): 1 truncate cleaned up [ 98.341932][ T5989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.403723][ T203] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 98.420789][ T5989] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.643196][ T203] EXT4-fs error (device loop0): ext4_release_dquot:6976: comm kworker/u4:5: Failed to release dquot type 1 [ 98.675103][ T5989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.439019][ T6022] 9pnet_fd: Insufficient options for proto=fd [ 102.639775][ T6026] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.31'. [ 103.577130][ T6040] ksmbd: Unknown IPC event: 0, ignore. [ 103.833417][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.063126][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 104.117163][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.139695][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.163372][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.183270][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.256368][ T5872] usb 1-1: config 0 descriptor?? [ 104.344370][ T5872] hub 1-1:0.0: USB hub found [ 104.493541][ T6051] binder: 6044:6051 unknown command 1074553619 [ 104.499899][ T6051] binder: 6044:6051 ioctl c0306201 200000000340 returned -22 [ 105.133154][ T5872] hub 1-1:0.0: 1 port detected [ 105.367167][ T6029] loop2: detected capacity change from 0 to 40427 [ 105.445841][ T6029] F2FS-fs (loop2): Image doesn't support compression [ 105.531896][ T6029] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 105.659339][ T5855] hub 1-1:0.0: activate --> -90 [ 106.432723][ T5923] usb 1-1: USB disconnect, device number 2 [ 106.447896][ T5855] usb 1-1-port1: cannot reset (err = -71) [ 106.493485][ T5855] usb 1-1-port1: attempt power cycle [ 107.389266][ T6071] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.45'. [ 108.224735][ T6078] ksmbd: Unknown IPC event: 0, ignore. [ 109.733535][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.994416][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 110.076655][ T23] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 110.158213][ T23] usb 3-1: config 0 has no interface number 0 [ 110.218875][ T23] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 110.321755][ T23] usb 3-1: config 0 interface 96 has no altsetting 0 [ 110.428632][ T23] usb 3-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 110.512422][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.604211][ T23] usb 3-1: Product: syz [ 110.646579][ T23] usb 3-1: Manufacturer: syz [ 110.689184][ T23] usb 3-1: SerialNumber: syz [ 110.820906][ T23] usb 3-1: config 0 descriptor?? [ 111.178915][ T23] usb 3-1: USB disconnect, device number 2 [ 112.523264][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.934202][ T6104] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.56'. [ 113.624419][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 113.637743][ T5834] usb 1-1: config index 0 descriptor too short (expected 786, got 18) [ 113.647651][ T5834] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.657568][ T5834] usb 1-1: config 0 has no interface number 0 [ 113.672309][ T5834] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.713106][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.737692][ T5834] usb 1-1: Product: syz [ 113.748090][ T5834] usb 1-1: Manufacturer: syz [ 113.752805][ T5834] usb 1-1: SerialNumber: syz [ 113.915265][ T5834] usb 1-1: config 0 descriptor?? [ 113.956390][ T5834] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 115.554320][ T5834] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 115.586421][ T5834] quatech2: probe of 1-1:0.51 failed with error -8 [ 115.761102][ T8] usb 1-1: USB disconnect, device number 7 [ 116.888866][ T6128] ksmbd: Unknown IPC event: 0, ignore. [ 119.094652][ T6135] loop0: detected capacity change from 0 to 256 [ 119.105924][ T6135] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.116672][ T6135] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 119.154891][ T6134] veth0_vlan: entered allmulticast mode [ 119.207379][ T6135] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 120.593502][ T6143] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.65'. [ 120.733916][ T6148] €Â: renamed from vlan0 [ 121.120513][ T6152] loop3: detected capacity change from 0 to 256 [ 121.220021][ T6152] exfat: Bad value for 'uid' [ 122.665296][ T6174] binder: BC_ACQUIRE_RESULT not supported [ 122.671199][ T6174] binder: 6172:6174 ioctl c0306201 200000000500 returned -22 [ 129.596593][ T6197] ksmbd: Unknown IPC event: 0, ignore. [ 130.573895][ T6204] netlink: 'syz.3.80': attribute type 12 has an invalid length. [ 131.019027][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.323161][ T8] usb 3-1: device descriptor read/64, error -71 [ 131.603189][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.922173][ T8] usb 3-1: device descriptor read/64, error -71 [ 132.961939][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 132.988259][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.002983][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.049944][ T6232] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.91'. [ 133.163192][ T8] usb usb3-port1: attempt power cycle [ 133.623393][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.765513][ T6237] loop3: detected capacity change from 0 to 40427 [ 133.799126][ T6237] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.840774][ T6237] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.165953][ T6237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.639019][ T6237] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.649445][ T6237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.844643][ T8] usb 3-1: device descriptor read/8, error -71 [ 135.633222][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 135.640448][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 136.124789][ T5788] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 136.206776][ T5788] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 136.214619][ T5788] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 136.222285][ T5788] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 136.243251][ T5788] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 136.253401][ T5788] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 136.261077][ T5788] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 136.857882][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 137.119503][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.457123][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.469127][ T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.487695][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.518572][ T8] usb 2-1: config 0 descriptor?? [ 137.799036][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 137.852714][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 137.893020][ T5872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.018447][ T8] usb 2-1: USB disconnect, device number 2 [ 138.163327][ T5872] usb 3-1: device descriptor read/64, error -71 [ 138.369069][ T6287] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.102'. [ 138.493422][ T5872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.443426][ T6293] loop3: detected capacity change from 0 to 512 [ 142.453014][ T5872] usb 3-1: device descriptor read/64, error -71 [ 142.468742][ T6293] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 142.469091][ T6293] EXT4-fs: failed to create workqueue [ 142.484183][ T6293] EXT4-fs (loop3): mount failed [ 142.589297][ T5872] usb usb3-port1: attempt power cycle [ 143.153066][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.252977][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 145.260916][ T23] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 145.274812][ T23] usb 1-1: config 0 has no interface number 0 [ 145.297045][ T23] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 145.313034][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.322425][ T23] usb 1-1: Product: syz [ 145.331563][ T23] usb 1-1: Manufacturer: syz [ 145.472947][ T23] usb 1-1: SerialNumber: syz [ 145.532493][ T23] usb 1-1: config 0 descriptor?? [ 147.800052][ T23] usb 1-1: can't set config #0, error -71 [ 147.813337][ T23] usb 1-1: USB disconnect, device number 8 [ 147.974093][ T6187] udevd[6187]: setting owner of /dev/bus/usb/001/008 to uid=0, gid=0 failed: No such file or directory [ 148.154161][ T6331] loop2: detected capacity change from 0 to 512 [ 150.252376][ T6331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.266207][ T6331] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.155238][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.438499][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.583243][ T6348] loop2: detected capacity change from 0 to 256 [ 151.740078][ T6348] exfat: Bad value for 'uid' [ 152.497694][ T8] usb 1-1: no configurations [ 152.502359][ T8] usb 1-1: can't read configurations, error -22 [ 152.653893][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.866079][ T8] usb 1-1: no configurations [ 152.871193][ T8] usb 1-1: can't read configurations, error -22 [ 152.894229][ T8] usb usb1-port1: attempt power cycle [ 152.994665][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.253206][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 153.291364][ T5855] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.327449][ T5855] usb 4-1: config 0 has no interface number 0 [ 153.373976][ T5855] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 153.391382][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.400023][ T5855] usb 4-1: Product: syz [ 153.404388][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.412367][ T5855] usb 4-1: Manufacturer: syz [ 153.417449][ T5855] usb 4-1: SerialNumber: syz [ 153.433264][ T5855] usb 4-1: config 0 descriptor?? [ 153.444770][ T8] usb 1-1: no configurations [ 153.451144][ T8] usb 1-1: can't read configurations, error -22 [ 153.503233][ T5855] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.680761][ T5855] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.705399][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.735072][ T5855] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 154.069309][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 154.077330][ T5855] usb 4-1: USB disconnect, device number 2 [ 154.150352][ T5855] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 154.208562][ T5855] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 154.287591][ T5855] quatech2 4-1:0.51: device disconnected [ 154.787960][ T8] usb 1-1: device descriptor read/8, error -71 [ 155.052190][ T8] usb usb1-port1: unable to enumerate USB device [ 158.118529][ T6394] loop2: detected capacity change from 0 to 256 [ 158.243748][ T6394] exfat: Bad value for 'uid' [ 158.730884][ T28] audit: type=1326 audit(1758580691.495:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 158.851398][ T28] audit: type=1326 audit(1758580691.505:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 158.991103][ T28] audit: type=1326 audit(1758580691.505:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.017461][ T28] audit: type=1326 audit(1758580691.505:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.060654][ T28] audit: type=1326 audit(1758580691.505:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.092751][ T28] audit: type=1326 audit(1758580691.505:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.119547][ T28] audit: type=1326 audit(1758580691.505:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.146329][ T28] audit: type=1326 audit(1758580691.505:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.273140][ T28] audit: type=1326 audit(1758580691.505:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.295013][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.308691][ T28] audit: type=1326 audit(1758580691.505:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 159.330620][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.383139][ T6404] loop0: detected capacity change from 0 to 512 [ 161.013098][ T6404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.027879][ T6404] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.843126][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.973001][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.249165][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.347052][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 162.497890][ T27] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.510800][ T27] usb 2-1: config 0 has no interface number 0 [ 162.517070][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 162.527605][ T27] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.733242][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.268121][ T23] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.373167][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.382203][ T27] usb 2-1: Product: syz [ 163.387027][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.394991][ T23] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 163.404852][ T27] usb 2-1: Manufacturer: syz [ 163.409491][ T27] usb 2-1: SerialNumber: syz [ 163.414388][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.436808][ T23] usb 3-1: config 0 descriptor?? [ 163.463628][ T27] usb 2-1: config 0 descriptor?? [ 163.485720][ T27] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 163.614932][ T9] usb 4-1: no configurations [ 163.655760][ T9] usb 4-1: can't read configurations, error -22 [ 163.686277][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 163.714386][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 163.785862][ T6413] loop2: detected capacity change from 0 to 512 [ 163.834683][ T6413] EXT4-fs (loop2): DAX unsupported by block device. [ 163.883312][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.153531][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 164.163148][ T27] usb 2-1: USB disconnect, device number 3 [ 164.173867][ T9] usb 4-1: no configurations [ 164.189140][ T9] usb 4-1: can't read configurations, error -22 [ 164.194743][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 164.260066][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.269372][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.031517][ T9] usb usb4-port1: attempt power cycle [ 165.086239][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 165.120339][ T27] quatech2 2-1:0.51: device disconnected [ 165.484862][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.156655][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 166.162716][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 166.179617][ T23] usb 3-1: USB disconnect, device number 10 [ 166.570482][ T6438] loop1: detected capacity change from 0 to 256 [ 167.104307][ T6438] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 170.291078][ T6445] loop0: detected capacity change from 0 to 256 [ 170.359936][ T6445] exfat: Bad value for 'uid' [ 170.439711][ T6429] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.583518][ T6445] loop0: detected capacity change from 0 to 2048 [ 170.663456][ T9] usb 4-1: device descriptor read/8, error -110 [ 171.662966][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.692145][ T6445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.728355][ T9] usb 4-1: device descriptor read/8, error -32 [ 171.814061][ T6454] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.151: Invalid inode table block 163208811354 in block_group 0 [ 171.880075][ T9] usb usb4-port1: unable to enumerate USB device [ 171.918025][ T6454] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 171.974098][ T6454] EXT4-fs error (device loop0): ext4_setattr:5584: inode #15: comm syz.0.151: mark_inode_dirty error [ 172.017429][ T6454] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 172.064292][ T6458] loop3: detected capacity change from 0 to 512 [ 172.071937][ T6454] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Out of memory [ 172.091611][ T6458] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.098885][ T6444] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #15: comm syz.0.151: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 172.126189][ T6458] EXT4-fs: inline encryption not supported [ 172.132662][ T6458] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.170427][ T6444] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 172.170633][ T6458] EXT4-fs (loop3): Test dummy encryption mode enabled [ 172.215273][ T6444] EXT4-fs (loop0): This should not happen!! Data will be lost [ 172.215273][ T6444] [ 172.240173][ T6458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.258355][ T6454] EXT4-fs error (device loop0): mpage_map_and_submit_extent:2315: inode #15: comm syz.0.151: mark_inode_dirty error [ 172.272220][ T6458] EXT4-fs (loop3): 1 truncate cleaned up [ 172.287348][ T6458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.334793][ T6454] EXT4-fs error (device loop0): mpage_map_and_submit_extent:2319: comm syz.0.151: Failed to mark inode 15 dirty [ 172.398231][ T6454] syz.0.151: attempt to access beyond end of device [ 172.398231][ T6454] loop0: rw=1, sector=7212754380, nr_sectors = 4 limit=2048 [ 172.471127][ T6454] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 1803188595) [ 172.492675][ T6454] Buffer I/O error on device loop0, logical block 1803188595 [ 172.562431][ T5791] EXT4-fs (loop0): Inode 15 (ffff88805f77bc00): i_reserved_data_blocks (1) not cleared! [ 172.584769][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.733081][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.776547][ T6470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.859329][ T6458] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 172.913263][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 172.926570][ T23] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.946273][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.958797][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 172.976329][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.000295][ T23] usb 2-1: config 0 descriptor?? [ 173.021032][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 173.151189][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.247291][ T6479] loop3: detected capacity change from 0 to 2048 [ 173.301360][ T6479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.331733][ T6479] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.362735][ T6482] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 174.171458][ T5834] usb 2-1: USB disconnect, device number 4 [ 174.265395][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 174.265411][ T28] audit: type=1800 audit(1758580707.025:51): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 175.620457][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.903158][ T5834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.351072][ T5834] usb 2-1: no configurations [ 176.919663][ T5834] usb 2-1: can't read configurations, error -22 [ 178.737576][ T5834] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.822594][ T6515] pim6reg1: entered promiscuous mode [ 178.835960][ T6515] pim6reg1: entered allmulticast mode [ 181.164386][ T6549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.275190][ T5855] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 182.684372][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 182.747596][ T5855] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 182.759444][ T5855] usb 1-1: config 0 has no interface number 0 [ 182.783043][ T5855] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 182.811700][ T5855] usb 1-1: config 0 interface 96 has no altsetting 0 [ 182.960107][ T6562] block device autoloading is deprecated and will be removed. [ 182.973249][ T5855] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 182.985744][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.687963][ T5834] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.789994][ T5855] usb 1-1: Product: syz [ 184.797776][ T5855] usb 1-1: Manufacturer: syz [ 184.802412][ T5855] usb 1-1: SerialNumber: syz [ 184.812853][ T5855] usb 1-1: config 0 descriptor?? [ 185.150525][ T5855] usb 1-1: can't set config #0, error -71 [ 185.173889][ T5834] usb 2-1: no configurations [ 185.186036][ T5834] usb 2-1: can't read configurations, error -22 [ 185.201307][ T5855] usb 1-1: USB disconnect, device number 13 [ 185.383151][ T5834] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.902426][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.113060][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.415092][ T6636] loop0: detected capacity change from 0 to 256 [ 199.428130][ T6636] exfat: Bad value for 'uid' [ 199.494620][ T6187] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.575121][ T6636] loop0: detected capacity change from 0 to 2048 [ 199.581664][ T6187] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.628640][ T6636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.643057][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.796452][ T6636] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.204: Invalid inode table block 163208811354 in block_group 0 [ 199.823101][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 199.828451][ T6636] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 199.844600][ T5855] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 199.863855][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.871993][ T6636] EXT4-fs error (device loop0): ext4_setattr:5584: inode #15: comm syz.0.204: mark_inode_dirty error [ 199.893241][ T5855] usb 2-1: Product: syz [ 199.897470][ T5855] usb 2-1: Manufacturer: syz [ 199.902083][ T5855] usb 2-1: SerialNumber: syz [ 199.913744][ T6636] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 199.936268][ T6636] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Out of memory [ 199.963819][ T5855] usb 2-1: config 0 descriptor?? [ 199.977307][ T5855] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 199.985790][ T6636] EXT4-fs error (device loop0): mpage_map_and_submit_extent:2315: inode #15: comm syz.0.204: mark_inode_dirty error [ 200.017479][ T5855] usb 2-1: Detected FT232H [ 200.038893][ T6636] EXT4-fs error (device loop0): mpage_map_and_submit_extent:2319: comm syz.0.204: Failed to mark inode 15 dirty [ 200.084441][ T6636] syz.0.204: attempt to access beyond end of device [ 200.084441][ T6636] loop0: rw=1, sector=7212754380, nr_sectors = 4 limit=2048 [ 200.108463][ T6636] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 1803188595) [ 200.121778][ T6636] Buffer I/O error on device loop0, logical block 1803188595 [ 200.184682][ T3467] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #15: comm kworker/u4:8: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 200.219107][ T5855] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 200.269300][ T3467] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 200.287397][ T3467] EXT4-fs (loop0): This should not happen!! Data will be lost [ 200.287397][ T3467] [ 200.306855][ T5791] EXT4-fs (loop0): Inode 15 (ffff88805f77a800): i_reserved_data_blocks (1) not cleared! [ 200.336962][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.794149][ T5855] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 200.811671][ T5855] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 200.832486][ T5855] usb 2-1: USB disconnect, device number 9 [ 201.624287][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 201.630361][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 201.636428][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 201.652824][ T5855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.663985][ T5855] ftdi_sio 2-1:0.0: device disconnected [ 201.692395][ T6661] loop0: detected capacity change from 0 to 256 [ 201.707025][ T6661] exfat: Deprecated parameter 'utf8' [ 201.713305][ T6661] exfat: Deprecated parameter 'utf8' [ 201.720646][ T6661] exfat: Deprecated parameter 'namecase' [ 201.764414][ T6661] exFAT-fs (loop0): error, The cluster chain has a loop [ 201.779544][ T6661] exFAT-fs (loop0): Filesystem has been set read-only [ 201.806522][ T6661] exFAT-fs (loop0): failed to count the number of clusters in root [ 201.819479][ T6661] exFAT-fs (loop0): failed to recognize exfat type [ 203.015506][ T6674] loop0: detected capacity change from 0 to 512 [ 203.189107][ T6674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.210641][ T6674] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.714002][ T6685] netlink: 92 bytes leftover after parsing attributes in process `syz.1.217'. [ 204.428515][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.779840][ T6692] Bluetooth: MGMT ver 1.22 [ 206.623327][ T6703] loop0: detected capacity change from 0 to 256 [ 207.309284][ T6703] FAT-fs (loop0): Directory bread(block 64) failed [ 207.339286][ T6703] FAT-fs (loop0): Directory bread(block 65) failed [ 207.355501][ T6703] FAT-fs (loop0): Directory bread(block 66) failed [ 207.362142][ T6703] FAT-fs (loop0): Directory bread(block 67) failed [ 207.391419][ T6703] FAT-fs (loop0): Directory bread(block 68) failed [ 207.398512][ T6703] FAT-fs (loop0): Directory bread(block 69) failed [ 207.408850][ T6703] FAT-fs (loop0): Directory bread(block 70) failed [ 207.417647][ T6703] FAT-fs (loop0): Directory bread(block 71) failed [ 207.427769][ T6703] FAT-fs (loop0): Directory bread(block 72) failed [ 207.434656][ T6703] FAT-fs (loop0): Directory bread(block 73) failed [ 209.098522][ T6723] loop0: detected capacity change from 0 to 512 [ 212.955903][ T6725] netlink: 92 bytes leftover after parsing attributes in process `syz.1.229'. [ 212.983016][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 213.452979][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 213.476245][ T27] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 214.242957][ T27] usb 1-1: config 0 has no interface number 0 [ 214.253550][ T27] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 214.273614][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.281652][ T27] usb 1-1: Product: syz [ 214.313014][ T27] usb 1-1: Manufacturer: syz [ 214.317669][ T27] usb 1-1: SerialNumber: syz [ 214.335989][ T27] usb 1-1: config 0 descriptor?? [ 214.346374][ T27] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 214.608497][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 214.626882][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 214.672362][ T6736] overlayfs: failed to resolve './file0': -2 [ 214.972669][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 214.973363][ T5841] usb 1-1: USB disconnect, device number 14 [ 215.935343][ T5841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 216.521220][ T5841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 216.579582][ T5841] quatech2 1-1:0.51: device disconnected [ 216.760506][ T6747] loop0: detected capacity change from 0 to 128 [ 216.784254][ T6747] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.726618][ T6747] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.808697][ T6747] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.169581][ T6773] netlink: 92 bytes leftover after parsing attributes in process `syz.3.241'. [ 220.880434][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.312834][ T6779] overlayfs: failed to resolve './file0': -2 [ 222.706650][ T6786] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.849096][ T5872] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.043093][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 223.212160][ T5872] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 223.303068][ T5872] usb 1-1: config 0 has no interface number 0 [ 223.323538][ T5872] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 223.337053][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.353357][ T5872] usb 1-1: Product: syz [ 223.357777][ T5872] usb 1-1: Manufacturer: syz [ 223.362607][ T5872] usb 1-1: SerialNumber: syz [ 223.372090][ T5872] usb 1-1: config 0 descriptor?? [ 223.389861][ T5872] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 223.654602][ T5872] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 223.689797][ T5872] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 224.691764][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 224.703050][ T5841] usb 1-1: USB disconnect, device number 15 [ 224.733714][ T5841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 224.747553][ T6798] loop1: detected capacity change from 0 to 512 [ 224.826041][ T6798] EXT4-fs: Ignoring removed bh option [ 224.919002][ T5841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 225.004691][ T5841] quatech2 1-1:0.51: device disconnected [ 225.825626][ T6798] EXT4-fs (loop1): Test dummy encryption mode enabled [ 225.832484][ T6798] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 225.873256][ T6798] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.900912][ T6798] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 227.113808][ T6813] netlink: 92 bytes leftover after parsing attributes in process `syz.2.252'. [ 227.569891][ T6810] fuse: Unknown parameter 'f¯þ0x000000000000000e' [ 227.987624][ T6818] loop1: detected capacity change from 0 to 256 [ 228.033199][ T6818] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.118037][ T6823] ksmbd: Unknown IPC event: 0, ignore. [ 228.157119][ T6818] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 228.175685][ T6818] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 231.545665][ T28] audit: type=1326 audit(1758580764.325:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 231.653242][ T28] audit: type=1326 audit(1758580764.325:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 231.815720][ T28] audit: type=1326 audit(1758580764.325:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 231.839845][ T28] audit: type=1326 audit(1758580764.325:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 231.885476][ T28] audit: type=1326 audit(1758580764.325:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 232.449030][ T6840] syz.0.259[6840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.463043][ T6840] syz.0.259[6840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.664507][ T6840] loop0: detected capacity change from 0 to 256 [ 237.061276][ T6840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 237.061597][ T28] audit: type=1326 audit(1758580764.325:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 237.360833][ T28] audit: type=1326 audit(1758580764.325:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.064992][ T28] audit: type=1326 audit(1758580764.325:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.087457][ T28] audit: type=1326 audit(1758580764.325:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.164896][ T28] audit: type=1326 audit(1758580764.325:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.209208][ T28] audit: type=1326 audit(1758580764.325:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.239899][ T28] audit: type=1326 audit(1758580764.325:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.401992][ T28] audit: type=1326 audit(1758580764.325:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.426550][ T28] audit: type=1326 audit(1758580764.325:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.450499][ T28] audit: type=1326 audit(1758580764.355:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x50000 [ 238.563754][ T6852] netlink: 92 bytes leftover after parsing attributes in process `syz.1.262'. [ 241.132990][ T5841] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 241.380539][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 241.410536][ T5841] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.426570][ T5841] usb 1-1: config 0 has no interface number 0 [ 241.442001][ T5841] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.453309][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.461520][ T5841] usb 1-1: Product: syz [ 241.511078][ T5841] usb 1-1: Manufacturer: syz [ 241.520413][ T5841] usb 1-1: SerialNumber: syz [ 241.563384][ T5841] usb 1-1: config 0 descriptor?? [ 241.570523][ T5841] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 241.608194][ T6869] loop1: detected capacity change from 0 to 256 [ 241.759193][ T6869] FAT-fs (loop1): Directory bread(block 64) failed [ 241.781696][ T5841] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.805559][ T6869] FAT-fs (loop1): Directory bread(block 65) failed [ 241.832339][ T6869] FAT-fs (loop1): Directory bread(block 66) failed [ 241.849290][ T5841] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.858826][ T6869] FAT-fs (loop1): Directory bread(block 67) failed [ 241.858992][ T6869] FAT-fs (loop1): Directory bread(block 68) failed [ 241.859021][ T6869] FAT-fs (loop1): Directory bread(block 69) failed [ 241.859116][ T6869] FAT-fs (loop1): Directory bread(block 70) failed [ 241.859142][ T6869] FAT-fs (loop1): Directory bread(block 71) failed [ 241.859243][ T6869] FAT-fs (loop1): Directory bread(block 72) failed [ 241.859270][ T6869] FAT-fs (loop1): Directory bread(block 73) failed [ 242.208869][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 242.218230][ T5872] usb 1-1: USB disconnect, device number 16 [ 242.243734][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 242.714226][ T6876] IPv4: Oversized IP packet from 127.202.26.0 [ 242.933843][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 242.950381][ T5872] quatech2 1-1:0.51: device disconnected [ 243.234411][ T6888] loop1: detected capacity change from 0 to 2048 [ 243.286514][ T6888] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 243.334214][ T6893] netlink: 92 bytes leftover after parsing attributes in process `syz.3.274'. [ 243.873664][ T6895] syz.0.276[6895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.873802][ T6895] syz.0.276[6895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.784496][ T6910] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.279'. [ 249.077773][ T6929] loop1: detected capacity change from 0 to 256 [ 249.085388][ T6929] exfat: Deprecated parameter 'namecase' [ 249.092012][ T6929] exfat: Deprecated parameter 'utf8' [ 249.142604][ T6929] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 249.258590][ T6935] syz.2.287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 249.442721][ T6940] loop1: detected capacity change from 0 to 512 [ 249.451132][ T6940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.473890][ T6940] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.288: corrupted in-inode xattr: e_value size too large [ 249.757629][ T6945] netlink: 92 bytes leftover after parsing attributes in process `syz.0.286'. [ 250.030119][ T6940] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.288: couldn't read orphan inode 15 (err -117) [ 250.754903][ T6940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.794982][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 253.046434][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.123920][ T6965] syz.0.294[6965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.124069][ T6965] syz.0.294[6965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.143380][ T6965] loop0: detected capacity change from 0 to 256 [ 253.412091][ T6965] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 254.208191][ T6974] loop2: detected capacity change from 0 to 512 [ 255.170901][ T6974] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 255.238610][ T6974] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 255.253782][ T6979] netlink: 92 bytes leftover after parsing attributes in process `syz.3.299'. [ 255.294309][ T6974] System zones: 0-1, 15-15, 18-18, 34-34 [ 255.322596][ T6974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 255.330559][ T6974] __quota_error: 52 callbacks suppressed [ 255.330575][ T6974] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 255.352202][ T6974] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 255.384797][ T6974] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 255.397518][ T6974] EXT4-fs (loop2): 1 truncate cleaned up [ 255.406671][ T6974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.442640][ T6974] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 255.520452][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.554492][ T5841] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 255.755349][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.784964][ T5841] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 255.826848][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.868671][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.873063][ T5841] usb 1-1: config 0 descriptor?? [ 255.877970][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.574239][ T5841] uclogic 0003:5543:0004.0001: No inputs registered, leaving [ 256.659754][ T5841] uclogic 0003:5543:0004.0001: hidraw0: USB HID v0.02 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 256.737690][ T5841] usb 1-1: USB disconnect, device number 17 [ 257.031184][ T6999] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.304'. [ 257.914145][ T6996] fido_id[6996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 262.184918][ T7041] netlink: 92 bytes leftover after parsing attributes in process `syz.1.316'. [ 263.335172][ T7056] netlink: 'syz.1.319': attribute type 3 has an invalid length. [ 264.305504][ T7060] tipc: Started in network mode [ 264.341714][ T7060] tipc: Node identity ac14140f, cluster identity 4711 [ 264.572454][ T7060] tipc: New replicast peer: 255.255.255.255 [ 264.585983][ T7060] tipc: Enabled bearer , priority 10 [ 265.585913][ T5834] tipc: Node number set to 2886997007 [ 268.353945][ T7083] netlink: 92 bytes leftover after parsing attributes in process `syz.2.328'. [ 269.130656][ T7087] loop0: detected capacity change from 0 to 256 [ 269.169311][ T7087] exfat: Bad value for 'uid' [ 269.321637][ T7087] loop0: detected capacity change from 0 to 2048 [ 270.323323][ T7087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.809132][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.142061][ T7115] loop0: detected capacity change from 0 to 256 [ 271.225026][ T7115] FAT-fs (loop0): Directory bread(block 64) failed [ 271.252149][ T7115] FAT-fs (loop0): Directory bread(block 65) failed [ 271.270258][ T7115] FAT-fs (loop0): Directory bread(block 66) failed [ 271.284206][ T7115] FAT-fs (loop0): Directory bread(block 67) failed [ 271.290918][ T7115] FAT-fs (loop0): Directory bread(block 68) failed [ 271.302396][ T7115] FAT-fs (loop0): Directory bread(block 69) failed [ 271.315073][ T7115] FAT-fs (loop0): Directory bread(block 70) failed [ 271.321669][ T7115] FAT-fs (loop0): Directory bread(block 71) failed [ 271.340699][ T7115] FAT-fs (loop0): Directory bread(block 72) failed [ 271.347948][ T7115] FAT-fs (loop0): Directory bread(block 73) failed [ 271.860516][ T7123] netlink: 92 bytes leftover after parsing attributes in process `syz.2.340'. [ 272.675591][ T7136] loop1: detected capacity change from 0 to 256 [ 272.695396][ T7136] exfat: Bad value for 'uid' [ 273.564829][ T7136] loop1: detected capacity change from 0 to 2048 [ 273.620656][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.681549][ T7135] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 274.703172][ T7135] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 274.715728][ T7135] EXT4-fs (loop1): This should not happen!! Data will be lost [ 274.715728][ T7135] [ 274.726216][ T7135] EXT4-fs (loop1): Total free blocks count 0 [ 274.732669][ T7135] EXT4-fs (loop1): Free/Dirty block details [ 274.933094][ T7135] EXT4-fs (loop1): free_blocks=66060288 [ 274.938890][ T7135] EXT4-fs (loop1): dirty_blocks=32 [ 274.946344][ T7135] EXT4-fs (loop1): Block reservation details [ 274.952395][ T7135] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 275.646901][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.933494][ T7169] netlink: 92 bytes leftover after parsing attributes in process `syz.2.351'. [ 276.739429][ T7175] loop1: detected capacity change from 0 to 256 [ 276.784021][ T7175] exfat: Deprecated parameter 'utf8' [ 276.822330][ T7175] exfat: Deprecated parameter 'namecase' [ 276.863341][ T7175] exfat: Deprecated parameter 'utf8' [ 277.345529][ T7175] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 278.687855][ T7194] loop0: detected capacity change from 0 to 256 [ 278.720760][ T7194] exfat: Bad value for 'uid' [ 278.923829][ T6429] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.037314][ T7204] netlink: 92 bytes leftover after parsing attributes in process `syz.3.363'. [ 279.693589][ T7194] loop0: detected capacity change from 0 to 2048 [ 279.938123][ T7194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.863549][ T7193] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 280.888350][ T7193] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 280.928912][ T7193] EXT4-fs (loop0): This should not happen!! Data will be lost [ 280.928912][ T7193] [ 280.941609][ T7193] EXT4-fs (loop0): Total free blocks count 0 [ 280.948072][ T7193] EXT4-fs (loop0): Free/Dirty block details [ 280.955042][ T7193] EXT4-fs (loop0): free_blocks=66060288 [ 280.960643][ T7193] EXT4-fs (loop0): dirty_blocks=32 [ 280.966330][ T7193] EXT4-fs (loop0): Block reservation details [ 280.972349][ T7193] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 281.082563][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 281.806333][ T7223] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.370'. [ 282.664344][ T7230] overlayfs: missing 'lowerdir' [ 283.453546][ T7235] loop1: detected capacity change from 0 to 512 [ 283.697472][ T7235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.724824][ T7235] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.953613][ T7249] netlink: 92 bytes leftover after parsing attributes in process `syz.2.375'. [ 285.676436][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 286.139873][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.204868][ T7258] loop2: detected capacity change from 0 to 256 [ 286.230348][ T7258] exfat: Bad value for 'uid' [ 286.235948][ T7255] loop0: detected capacity change from 0 to 128 [ 286.254379][ T7255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.289353][ T7255] EXT4-fs (loop0): Test dummy encryption mode enabled [ 286.372696][ T7255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.396432][ T7258] loop2: detected capacity change from 0 to 2048 [ 286.418165][ T7255] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.517287][ T7258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.597437][ T7257] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 286.613282][ T7257] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 286.625534][ T7257] EXT4-fs (loop2): This should not happen!! Data will be lost [ 286.625534][ T7257] [ 286.722289][ T7257] EXT4-fs (loop2): Total free blocks count 0 [ 286.975469][ T7257] EXT4-fs (loop2): Free/Dirty block details [ 287.255349][ T7257] EXT4-fs (loop2): free_blocks=66060288 [ 287.260958][ T7257] EXT4-fs (loop2): dirty_blocks=32 [ 287.266854][ T7257] EXT4-fs (loop2): Block reservation details [ 287.308091][ T7257] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 287.953385][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 288.265263][ T7255] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 289.254240][ T7290] loop1: detected capacity change from 0 to 1024 [ 289.261689][ T7290] EXT4-fs: Ignoring removed nobh option [ 289.267451][ T7290] EXT4-fs: Ignoring removed bh option [ 291.823662][ T7290] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.837103][ T7290] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 291.968839][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.395262][ T7301] netlink: 92 bytes leftover after parsing attributes in process `syz.2.387'. [ 293.264219][ T7307] loop0: detected capacity change from 0 to 512 [ 293.330036][ T7307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.363099][ T7307] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.382496][ T7311] loop1: detected capacity change from 0 to 256 [ 293.413988][ T7311] exfat: Bad value for 'uid' [ 293.468904][ T6430] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.677889][ T7311] loop1: detected capacity change from 0 to 2048 [ 293.722141][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 293.759067][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 293.831440][ T7320] overlayfs: failed to resolve './file2': -2 [ 293.853138][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 294.184709][ T7311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.353589][ T7310] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 294.394565][ T7315] loop2: detected capacity change from 0 to 8192 [ 294.414440][ T7310] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 294.426935][ T7310] EXT4-fs (loop1): This should not happen!! Data will be lost [ 294.426935][ T7310] [ 294.428819][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.457290][ T7310] EXT4-fs (loop1): Total free blocks count 0 [ 294.496108][ T7310] EXT4-fs (loop1): Free/Dirty block details [ 294.513167][ T6430] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.513180][ T7310] EXT4-fs (loop1): free_blocks=66060288 [ 294.673244][ T7310] EXT4-fs (loop1): dirty_blocks=32 [ 294.678431][ T7310] EXT4-fs (loop1): Block reservation details [ 294.728991][ T7310] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 294.864029][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 298.971194][ T7378] blk-mq: failed to allocate request map [ 299.562242][ T7384] loop2: detected capacity change from 0 to 512 [ 299.602476][ T7387] loop1: detected capacity change from 0 to 256 [ 299.621641][ T7388] loop0: detected capacity change from 0 to 1024 [ 299.630890][ T7387] exfat: Bad value for 'uid' [ 299.661582][ T7388] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 299.679196][ T7384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.717143][ T7388] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 299.742248][ T7384] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.763487][ T6430] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.796507][ T7388] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.405: Failed to acquire dquot type 0 [ 299.860066][ T7388] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 299.943277][ T7387] loop1: detected capacity change from 0 to 2048 [ 299.949764][ T7388] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.405: corrupted inode contents [ 300.025345][ T7388] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #13: comm syz.0.405: mark_inode_dirty error [ 300.081382][ T7388] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.405: corrupted inode contents [ 300.118668][ T7387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.149701][ T7388] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.405: mark_inode_dirty error [ 300.243159][ T7395] overlayfs: failed to resolve './file2': -2 [ 300.538470][ T7388] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.405: corrupted inode contents [ 300.568516][ T7385] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 300.615168][ T7388] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 300.649039][ T7385] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 300.662380][ T7388] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.405: corrupted inode contents [ 300.705563][ T7385] EXT4-fs (loop1): This should not happen!! Data will be lost [ 300.705563][ T7385] [ 300.733393][ T7388] EXT4-fs error (device loop0): ext4_truncate:4288: inode #13: comm syz.0.405: mark_inode_dirty error [ 300.762976][ T7385] EXT4-fs (loop1): Total free blocks count 0 [ 300.783346][ T7388] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 300.807297][ T7385] EXT4-fs (loop1): Free/Dirty block details [ 300.833112][ T7385] EXT4-fs (loop1): free_blocks=66060288 [ 300.841617][ T7385] EXT4-fs (loop1): dirty_blocks=32 [ 300.849034][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.872326][ T7388] EXT4-fs (loop0): 1 truncate cleaned up [ 300.884401][ T7385] EXT4-fs (loop1): Block reservation details [ 300.892018][ T7388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.905462][ T7385] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 300.971293][ T7349] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 302.854261][ T7413] bridge: RTM_NEWNEIGH with invalid ether address [ 303.632671][ T7420] loop1: detected capacity change from 0 to 256 [ 303.657792][ T7422] loop2: detected capacity change from 0 to 256 [ 303.672785][ T7422] exfat: Bad value for 'uid' [ 303.706318][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.746447][ T7420] FAT-fs (loop1): Directory bread(block 64) failed [ 303.778708][ T7420] FAT-fs (loop1): Directory bread(block 65) failed [ 303.787901][ T7422] loop2: detected capacity change from 0 to 2048 [ 303.793236][ T7420] FAT-fs (loop1): Directory bread(block 66) failed [ 303.818443][ T7420] FAT-fs (loop1): Directory bread(block 67) failed [ 303.829690][ T7420] FAT-fs (loop1): Directory bread(block 68) failed [ 303.850423][ T7420] FAT-fs (loop1): Directory bread(block 69) failed [ 303.851895][ T7422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.859807][ T7420] FAT-fs (loop1): Directory bread(block 70) failed [ 303.923365][ T7420] FAT-fs (loop1): Directory bread(block 71) failed [ 303.940307][ T7420] FAT-fs (loop1): Directory bread(block 72) failed [ 303.949997][ T7421] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 303.953849][ T7420] FAT-fs (loop1): Directory bread(block 73) failed [ 303.974187][ T7421] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 303.994355][ T7421] EXT4-fs (loop2): This should not happen!! Data will be lost [ 303.994355][ T7421] [ 304.007705][ T7421] EXT4-fs (loop2): Total free blocks count 0 [ 304.015200][ T7421] EXT4-fs (loop2): Free/Dirty block details [ 304.021323][ T7421] EXT4-fs (loop2): free_blocks=66060288 [ 304.030676][ T7421] EXT4-fs (loop2): dirty_blocks=32 [ 304.041324][ T7421] EXT4-fs (loop2): Block reservation details [ 304.059104][ T7421] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 304.199401][ T203] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 305.490183][ T7442] loop0: detected capacity change from 0 to 512 [ 306.345312][ T7442] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.420: bad orphan inode 13 [ 306.356313][ T7442] ext4_test_bit(bit=12, block=4) = 1 [ 306.361644][ T7442] is_bad_inode(inode)=0 [ 306.366161][ T7442] NEXT_ORPHAN(inode)=0 [ 306.370270][ T7442] max_ino=32 [ 306.383199][ T7442] i_nlink=1 [ 306.459641][ T7442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.059367][ T7492] loop2: detected capacity change from 0 to 512 [ 311.089240][ T7492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 311.176125][ T7492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.203323][ T7492] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.271434][ T7492] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.435: corrupted xattr block 19: overlapping e_value [ 311.318039][ T7492] EXT4-fs error (device loop2): ext4_get_inode_usage:901: inode #15: comm syz.2.435: corrupted xattr block 19: overlapping e_value [ 311.471119][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.576300][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.947596][ T7501] loop2: detected capacity change from 0 to 4096 [ 312.139615][ T7501] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 312.279527][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.446003][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.586958][ T7515] loop1: detected capacity change from 0 to 128 [ 312.622541][ T7515] FAT-fs (loop1): Unrecognized mount option "Ä\pwÔìñ^ò‡!þ…þ1T"ìóÙ;‚5ò¡@¤\/h(J°<é Wi µ“}¸" or missing value [ 313.863438][ T28] audit: type=1326 audit(1758580845.885:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 314.062320][ T28] audit: type=1326 audit(1758580845.885:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 314.185777][ T28] audit: type=1326 audit(1758580845.885:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 314.264090][ T28] audit: type=1326 audit(1758580845.885:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 314.307617][ T28] audit: type=1326 audit(1758580845.885:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 314.538548][ T28] audit: type=1326 audit(1758580845.885:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 314.565770][ T28] audit: type=1326 audit(1758580845.885:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 314.969193][ T28] audit: type=1326 audit(1758580845.885:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4978eec9 code=0x7ffc0000 [ 315.500537][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'. [ 317.330422][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.337997][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.423689][ T7570] loop0: detected capacity change from 0 to 256 [ 317.448048][ T7570] FAT-fs (loop0): Directory bread(block 64) failed [ 317.454841][ T7570] FAT-fs (loop0): Directory bread(block 65) failed [ 317.461496][ T7570] FAT-fs (loop0): Directory bread(block 66) failed [ 317.488420][ T7570] FAT-fs (loop0): Directory bread(block 67) failed [ 317.501809][ T7570] FAT-fs (loop0): Directory bread(block 68) failed [ 317.509177][ T7570] FAT-fs (loop0): Directory bread(block 69) failed [ 317.519986][ T7570] FAT-fs (loop0): Directory bread(block 70) failed [ 317.529241][ T7574] loop1: detected capacity change from 0 to 512 [ 317.541670][ T7570] FAT-fs (loop0): Directory bread(block 71) failed [ 317.550204][ T7570] FAT-fs (loop0): Directory bread(block 72) failed [ 317.583615][ T7574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.607501][ T7570] FAT-fs (loop0): Directory bread(block 73) failed [ 317.680743][ T7574] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.708518][ T7583] loop0: detected capacity change from 0 to 128 [ 318.786876][ T7583] EXT4-fs (loop0): Test dummy encryption mode enabled [ 319.193031][ T7583] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.291718][ T7583] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.353908][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.033251][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 320.232962][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 320.248559][ T8] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.267974][ T28] audit: type=1326 audit(1758580853.025:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.295549][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.304258][ T8] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 320.323741][ T28] audit: type=1326 audit(1758580853.075:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.351586][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.367994][ T28] audit: type=1326 audit(1758580853.075:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.391884][ T8] usb 2-1: config 0 descriptor?? [ 320.406829][ T28] audit: type=1326 audit(1758580853.075:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.434510][ T28] audit: type=1326 audit(1758580853.075:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.469535][ T28] audit: type=1326 audit(1758580853.085:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.502328][ T28] audit: type=1326 audit(1758580853.085:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.553102][ T28] audit: type=1326 audit(1758580853.085:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.623215][ T28] audit: type=1326 audit(1758580853.085:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.688364][ T28] audit: type=1326 audit(1758580853.085:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5798eec9 code=0x7ffc0000 [ 320.786665][ T7606] ksmbd: Unknown IPC event: 0, ignore. [ 320.831153][ T8] uclogic 0003:5543:0042.0002: No inputs registered, leaving [ 320.843427][ T8] uclogic 0003:5543:0042.0002: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 321.044891][ T8] usb 2-1: USB disconnect, device number 10 [ 321.092171][ T7610] fido_id[7610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 321.109045][ T7613] loop2: detected capacity change from 0 to 256 [ 321.168835][ T7613] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.258426][ T7613] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 321.284887][ T7613] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 322.495835][ T7624] loop1: detected capacity change from 0 to 1024 [ 322.530505][ T7624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.969575][ T7628] syz.2.473[7628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.970374][ T7628] syz.2.473[7628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.152229][ T7624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.466152][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.680484][ T7636] ================================================================== [ 324.688619][ T7636] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0xa6b/0x1700 [ 324.696835][ T7636] Read of size 1 at addr ffff88805e1e46f8 by task syz.1.479/7636 [ 324.704574][ T7636] [ 324.706926][ T7636] CPU: 0 PID: 7636 Comm: syz.1.479 Not tainted syzkaller #0 [ 324.714228][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.724424][ T7636] Call Trace: [ 324.727714][ T7636] [ 324.730674][ T7636] dump_stack_lvl+0x16c/0x230 [ 324.735387][ T7636] ? read_lock_is_recursive+0x20/0x20 [ 324.740786][ T7636] ? show_regs_print_info+0x20/0x20 [ 324.746014][ T7636] ? load_image+0x3b0/0x3b0 [ 324.750539][ T7636] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 324.755938][ T7636] ? __virt_addr_valid+0x18c/0x540 [ 324.761076][ T7636] ? __virt_addr_valid+0x469/0x540 [ 324.766215][ T7636] print_report+0xac/0x220 [ 324.770666][ T7636] ? __xfrm_state_insert+0xa6b/0x1700 [ 324.776067][ T7636] kasan_report+0x117/0x150 [ 324.780595][ T7636] ? __lock_acquire+0x7c80/0x7c80 [ 324.785651][ T7636] ? __xfrm_state_insert+0xa6b/0x1700 [ 324.791139][ T7636] __xfrm_state_insert+0xa6b/0x1700 [ 324.796369][ T7636] ? xfrm_state_insert+0x44/0x60 [ 324.801349][ T7636] xfrm_state_insert+0x54/0x60 [ 324.806141][ T7636] ipcomp6_init_state+0x5ab/0x7f0 [ 324.811202][ T7636] __xfrm_init_state+0xd8b/0x11c0 [ 324.816270][ T7636] ? __xfrm_init_state+0x7fc/0x11c0 [ 324.821514][ T7636] xfrm_add_sa+0x236d/0x30a0 [ 324.826134][ T7636] ? xfrm_user_rcv_msg+0x870/0x870 [ 324.831285][ T7636] ? __nla_parse+0x40/0x50 [ 324.835751][ T7636] xfrm_user_rcv_msg+0x596/0x870 [ 324.840728][ T7636] ? lockdep_hardirqs_on+0x98/0x150 [ 324.845966][ T7636] ? xfrm_netlink_rcv+0x90/0x90 [ 324.850906][ T7636] ? __local_bh_enable_ip+0x12e/0x1c0 [ 324.856325][ T7636] ? __dev_queue_xmit+0x245/0x35a0 [ 324.861477][ T7636] ? __mutex_trylock_common+0x153/0x250 [ 324.867072][ T7636] netlink_rcv_skb+0x216/0x480 [ 324.871868][ T7636] ? xfrm_netlink_rcv+0x90/0x90 [ 324.876741][ T7636] ? netlink_ack+0x1110/0x1110 [ 324.881550][ T7636] ? netlink_deliver_tap+0x2e/0x1b0 [ 324.886781][ T7636] ? __lock_acquire+0x7c80/0x7c80 [ 324.891840][ T7636] xfrm_netlink_rcv+0x79/0x90 [ 324.896549][ T7636] netlink_unicast+0x751/0x8d0 [ 324.901371][ T7636] netlink_sendmsg+0x8c1/0xbe0 [ 324.906205][ T7636] ? netlink_getsockopt+0x580/0x580 [ 324.911444][ T7636] ? aa_sock_msg_perm+0x94/0x150 [ 324.916421][ T7636] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 324.921739][ T7636] ? security_socket_sendmsg+0x80/0xa0 [ 324.927222][ T7636] ? netlink_getsockopt+0x580/0x580 [ 324.932447][ T7636] ____sys_sendmsg+0x5bf/0x950 [ 324.937250][ T7636] ? __asan_memset+0x22/0x40 [ 324.941866][ T7636] ? __sys_sendmsg_sock+0x30/0x30 [ 324.946920][ T7636] ? __import_iovec+0x5f2/0x860 [ 324.951801][ T7636] ? import_iovec+0x73/0xa0 [ 324.956332][ T7636] ___sys_sendmsg+0x220/0x290 [ 324.961049][ T7636] ? __sys_sendmsg+0x270/0x270 [ 324.965876][ T7636] __se_sys_sendmsg+0x1a5/0x270 [ 324.970765][ T7636] ? _raw_spin_unlock+0x28/0x40 [ 324.975644][ T7636] ? __x64_sys_sendmsg+0x80/0x80 [ 324.980626][ T7636] ? lockdep_hardirqs_on+0x98/0x150 [ 324.985867][ T7636] do_syscall_64+0x55/0xb0 [ 324.990313][ T7636] ? clear_bhb_loop+0x40/0x90 [ 324.995016][ T7636] ? clear_bhb_loop+0x40/0x90 [ 324.999719][ T7636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.005646][ T7636] RIP: 0033:0x7f9949b8eec9 [ 325.010103][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.029833][ T7636] RSP: 002b:00007f994a99a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.038280][ T7636] RAX: ffffffffffffffda RBX: 00007f9949de6180 RCX: 00007f9949b8eec9 [ 325.046355][ T7636] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 000000000000000a [ 325.054363][ T7636] RBP: 00007f9949c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 325.062349][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.070344][ T7636] R13: 00007f9949de6218 R14: 00007f9949de6180 R15: 00007ffc3719c438 [ 325.078353][ T7636] [ 325.081387][ T7636] [ 325.083727][ T7636] Allocated by task 7103: [ 325.088063][ T7636] kasan_set_track+0x4e/0x70 [ 325.092703][ T7636] __kasan_slab_alloc+0x6c/0x80 [ 325.097587][ T7636] slab_post_alloc_hook+0x6e/0x4d0 [ 325.102728][ T7636] kmem_cache_alloc+0x11e/0x2e0 [ 325.107700][ T7636] xfrm_state_alloc+0x22/0x2a0 [ 325.112488][ T7636] __find_acq_core+0x7d8/0x19d0 [ 325.117363][ T7636] xfrm_find_acq+0x6a/0x90 [ 325.121828][ T7636] xfrm_alloc_userspi+0x57a/0xa90 [ 325.126874][ T7636] xfrm_user_rcv_msg+0x596/0x870 [ 325.131842][ T7636] netlink_rcv_skb+0x216/0x480 [ 325.136638][ T7636] xfrm_netlink_rcv+0x79/0x90 [ 325.141336][ T7636] netlink_unicast+0x751/0x8d0 [ 325.146130][ T7636] netlink_sendmsg+0x8c1/0xbe0 [ 325.150920][ T7636] ____sys_sendmsg+0x5bf/0x950 [ 325.155712][ T7636] ___sys_sendmsg+0x220/0x290 [ 325.160420][ T7636] __se_sys_sendmsg+0x1a5/0x270 [ 325.165334][ T7636] do_syscall_64+0x55/0xb0 [ 325.169785][ T7636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.175715][ T7636] [ 325.178060][ T7636] The buggy address belongs to the object at ffff88805e1e4400 [ 325.178060][ T7636] which belongs to the cache xfrm_state of size 848 [ 325.192051][ T7636] The buggy address is located 760 bytes inside of [ 325.192051][ T7636] freed 848-byte region [ffff88805e1e4400, ffff88805e1e4750) [ 325.205872][ T7636] [ 325.208213][ T7636] The buggy address belongs to the physical page: [ 325.214647][ T7636] page:ffffea0001787900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805e1e4000 pfn:0x5e1e4 [ 325.226132][ T7636] head:ffffea0001787900 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 325.235175][ T7636] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 325.243179][ T7636] page_type: 0xffffffff() [ 325.247543][ T7636] raw: 00fff00000000840 ffff888140683640 dead000000000122 0000000000000000 [ 325.256152][ T7636] raw: ffff88805e1e4000 000000008010000e 00000001ffffffff 0000000000000000 [ 325.264747][ T7636] page dumped because: kasan: bad access detected [ 325.271184][ T7636] page_owner tracks the page as allocated [ 325.276923][ T7636] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5887, tgid 5881 (syz.3.5), ts 84194485494, free_ts 24969835917 [ 325.297174][ T7636] post_alloc_hook+0x1cd/0x210 [ 325.301966][ T7636] get_page_from_freelist+0x195c/0x19f0 [ 325.307539][ T7636] __alloc_pages+0x1e3/0x460 [ 325.312158][ T7636] alloc_slab_page+0x5d/0x170 [ 325.316872][ T7636] new_slab+0x87/0x2e0 [ 325.320974][ T7636] ___slab_alloc+0xc6d/0x1300 [ 325.325685][ T7636] kmem_cache_alloc+0x1b7/0x2e0 [ 325.330570][ T7636] xfrm_state_alloc+0x22/0x2a0 [ 325.335363][ T7636] __find_acq_core+0x7d8/0x19d0 [ 325.340248][ T7636] xfrm_find_acq+0x6a/0x90 [ 325.344699][ T7636] xfrm_alloc_userspi+0x57a/0xa90 [ 325.349751][ T7636] xfrm_user_rcv_msg+0x596/0x870 [ 325.354706][ T7636] netlink_rcv_skb+0x216/0x480 [ 325.359496][ T7636] xfrm_netlink_rcv+0x79/0x90 [ 325.364192][ T7636] netlink_unicast+0x751/0x8d0 [ 325.368978][ T7636] netlink_sendmsg+0x8c1/0xbe0 [ 325.373767][ T7636] page last free stack trace: [ 325.378453][ T7636] free_unref_page_prepare+0x7ce/0x8e0 [ 325.383944][ T7636] free_unref_page+0x32/0x2e0 [ 325.388651][ T7636] free_contig_range+0xa1/0x160 [ 325.393523][ T7636] destroy_args+0x80/0x850 [ 325.397961][ T7636] debug_vm_pgtable+0x3cc/0x410 [ 325.402829][ T7636] do_one_initcall+0x1fd/0x750 [ 325.407632][ T7636] do_initcall_level+0x137/0x1f0 [ 325.412596][ T7636] do_initcalls+0x69/0xd0 [ 325.416949][ T7636] kernel_init_freeable+0x3d2/0x570 [ 325.422171][ T7636] kernel_init+0x1d/0x1c0 [ 325.426523][ T7636] ret_from_fork+0x48/0x80 [ 325.430968][ T7636] ret_from_fork_asm+0x11/0x20 [ 325.435762][ T7636] [ 325.438107][ T7636] Memory state around the buggy address: [ 325.443754][ T7636] ffff88805e1e4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.451832][ T7636] ffff88805e1e4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.459920][ T7636] >ffff88805e1e4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.468078][ T7636] ^ [ 325.476068][ T7636] ffff88805e1e4700: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 325.484153][ T7636] ffff88805e1e4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.492243][ T7636] ================================================================== [ 325.500454][ T7636] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 325.507669][ T7636] CPU: 0 PID: 7636 Comm: syz.1.479 Not tainted syzkaller #0 [ 325.514963][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.525041][ T7636] Call Trace: [ 325.528332][ T7636] [ 325.531279][ T7636] dump_stack_lvl+0x16c/0x230 [ 325.535991][ T7636] ? show_regs_print_info+0x20/0x20 [ 325.541215][ T7636] ? load_image+0x3b0/0x3b0 [ 325.545749][ T7636] panic+0x2c0/0x710 [ 325.549675][ T7636] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.555854][ T7636] ? bpf_jit_dump+0xd0/0xd0 [ 325.560388][ T7636] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 325.566316][ T7636] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 325.572232][ T7636] ? _raw_spin_unlock+0x40/0x40 [ 325.577100][ T7636] ? __xfrm_state_insert+0xa6b/0x1700 [ 325.582501][ T7636] check_panic_on_warn+0x84/0xa0 [ 325.587464][ T7636] ? __xfrm_state_insert+0xa6b/0x1700 [ 325.592862][ T7636] end_report+0x6f/0x140 [ 325.597129][ T7636] kasan_report+0x128/0x150 [ 325.601652][ T7636] ? __lock_acquire+0x7c80/0x7c80 [ 325.606697][ T7636] ? __xfrm_state_insert+0xa6b/0x1700 [ 325.612095][ T7636] __xfrm_state_insert+0xa6b/0x1700 [ 325.617383][ T7636] ? xfrm_state_insert+0x44/0x60 [ 325.622440][ T7636] xfrm_state_insert+0x54/0x60 [ 325.627247][ T7636] ipcomp6_init_state+0x5ab/0x7f0 [ 325.632305][ T7636] __xfrm_init_state+0xd8b/0x11c0 [ 325.637377][ T7636] ? __xfrm_init_state+0x7fc/0x11c0 [ 325.642611][ T7636] xfrm_add_sa+0x236d/0x30a0 [ 325.647227][ T7636] ? xfrm_user_rcv_msg+0x870/0x870 [ 325.652378][ T7636] ? __nla_parse+0x40/0x50 [ 325.656917][ T7636] xfrm_user_rcv_msg+0x596/0x870 [ 325.661878][ T7636] ? lockdep_hardirqs_on+0x98/0x150 [ 325.667110][ T7636] ? xfrm_netlink_rcv+0x90/0x90 [ 325.671984][ T7636] ? __local_bh_enable_ip+0x12e/0x1c0 [ 325.677400][ T7636] ? __dev_queue_xmit+0x245/0x35a0 [ 325.682540][ T7636] ? __mutex_trylock_common+0x153/0x250 [ 325.688123][ T7636] netlink_rcv_skb+0x216/0x480 [ 325.692915][ T7636] ? xfrm_netlink_rcv+0x90/0x90 [ 325.697790][ T7636] ? netlink_ack+0x1110/0x1110 [ 325.702586][ T7636] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.707807][ T7636] ? __lock_acquire+0x7c80/0x7c80 [ 325.712857][ T7636] xfrm_netlink_rcv+0x79/0x90 [ 325.717555][ T7636] netlink_unicast+0x751/0x8d0 [ 325.722385][ T7636] netlink_sendmsg+0x8c1/0xbe0 [ 325.727240][ T7636] ? netlink_getsockopt+0x580/0x580 [ 325.732499][ T7636] ? aa_sock_msg_perm+0x94/0x150 [ 325.737479][ T7636] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.742805][ T7636] ? security_socket_sendmsg+0x80/0xa0 [ 325.748287][ T7636] ? netlink_getsockopt+0x580/0x580 [ 325.753559][ T7636] ____sys_sendmsg+0x5bf/0x950 [ 325.758370][ T7636] ? __asan_memset+0x22/0x40 [ 325.763086][ T7636] ? __sys_sendmsg_sock+0x30/0x30 [ 325.768133][ T7636] ? __import_iovec+0x5f2/0x860 [ 325.773015][ T7636] ? import_iovec+0x73/0xa0 [ 325.777637][ T7636] ___sys_sendmsg+0x220/0x290 [ 325.782354][ T7636] ? __sys_sendmsg+0x270/0x270 [ 325.787284][ T7636] __se_sys_sendmsg+0x1a5/0x270 [ 325.792190][ T7636] ? _raw_spin_unlock+0x28/0x40 [ 325.797065][ T7636] ? __x64_sys_sendmsg+0x80/0x80 [ 325.802043][ T7636] ? lockdep_hardirqs_on+0x98/0x150 [ 325.807286][ T7636] do_syscall_64+0x55/0xb0 [ 325.811748][ T7636] ? clear_bhb_loop+0x40/0x90 [ 325.816450][ T7636] ? clear_bhb_loop+0x40/0x90 [ 325.821154][ T7636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.827071][ T7636] RIP: 0033:0x7f9949b8eec9 [ 325.831500][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.851206][ T7636] RSP: 002b:00007f994a99a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.859728][ T7636] RAX: ffffffffffffffda RBX: 00007f9949de6180 RCX: 00007f9949b8eec9 [ 325.867720][ T7636] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 000000000000000a [ 325.875705][ T7636] RBP: 00007f9949c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 325.883704][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.891688][ T7636] R13: 00007f9949de6218 R14: 00007f9949de6180 R15: 00007ffc3719c438 [ 325.899679][ T7636] [ 325.903025][ T7636] Kernel Offset: disabled [ 325.907369][ T7636] Rebooting in 86400 seconds..