last executing test programs: 3m8.61232117s ago: executing program 4 (id=244): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r5, &(0x7f0000000b80)=[{&(0x7f00000000c0)="f10dc44f7d20988057f85ab4dd61b58675fb03d944b014fb9cb34ce9a3428ca7df", 0x21}, {&(0x7f0000000640)="f14e4792586af7f2380c7d51d257826607fd39cc2d3571ac7e6b0f4edf17ed143170620ff63eaff5729afa9b52993626d76acc7c45ed66acb1ef8ba1cf478350334e2e3fac57df4578", 0x49}], 0x2) 3m8.434374108s ago: executing program 4 (id=247): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r1, 0x0, 0x1, 0x4}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3m8.276005434s ago: executing program 4 (id=248): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m8.1465573s ago: executing program 4 (id=251): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 3m7.960603168s ago: executing program 4 (id=256): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3m7.887351171s ago: executing program 4 (id=258): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 2m52.64826513s ago: executing program 32 (id=258): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 7.597693206s ago: executing program 2 (id=1359): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,']) 7.597334956s ago: executing program 5 (id=1360): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x80040, &(0x7f0000000500)={[{@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@usrjquota}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@nobarrier}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x5b6, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef00000600"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x32314247}) 7.377300366s ago: executing program 2 (id=1362): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 5.494649565s ago: executing program 1 (id=1367): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) io_setup(0x3, 0x0) 5.185269909s ago: executing program 1 (id=1368): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 4.756064517s ago: executing program 1 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) openat(0xffffffffffffff9c, 0x0, 0x143442, 0x0) 3.796719248s ago: executing program 1 (id=1372): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 3.528084009s ago: executing program 0 (id=1376): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000000c0)={0x6, {{0xa, 0x4e20, 0x1, @remote, 0x9}}}, 0x88) 3.434860993s ago: executing program 2 (id=1377): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r6, 0x0, 0x0, 0x0, 0x0) 3.28945448s ago: executing program 0 (id=1378): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) io_setup(0x3, 0x0) 3.213582573s ago: executing program 2 (id=1379): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f", @ANYRES32, @ANYBLOB="00000000020000000c"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.008612802s ago: executing program 0 (id=1381): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}]}, &(0x7f0000000080)=0x10) 2.926702495s ago: executing program 2 (id=1383): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) socket$kcm(0xa, 0x2, 0x88) r0 = socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x8d2, &(0x7f0000001400)={0x0, 0xd80e, 0x3010, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x100, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x14008045, 0x1}) socket(0x10, 0x3, 0x0) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x46032, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000680)=""/235, 0xeb, 0x10002) 2.844504709s ago: executing program 5 (id=1384): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) 2.490262163s ago: executing program 1 (id=1386): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.269168163s ago: executing program 5 (id=1387): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600), 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,']) 2.218660385s ago: executing program 1 (id=1388): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) times(&(0x7f0000000000)) 2.070690421s ago: executing program 0 (id=1389): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r6, 0x0, 0x0, 0x0, 0x0) 2.019929653s ago: executing program 5 (id=1390): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @local}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 1.982189895s ago: executing program 0 (id=1391): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x4}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)='9\x00\x00\x00', 0x4}], 0x1) 1.770132334s ago: executing program 0 (id=1392): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', 0x0) 1.736740176s ago: executing program 5 (id=1393): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f", @ANYRES32, @ANYBLOB="00000000020000000c"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.736359046s ago: executing program 2 (id=1394): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x80040, &(0x7f0000000500)={[{@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@usrjquota}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@nobarrier}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x5b6, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef00000600"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x32314247}) 1.566436063s ago: executing program 5 (id=1396): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) umount2(&(0x7f0000000100)='./file1\x00', 0x3) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000000d46f84a30dfdf44d55c801ee905422743b683c21f4dfba674da53048dccc8661091c163b4780a8edcb84ff9a2442b03c76373ada8efb2b4402900bc17b759bf1560930826eda2d20f1b1832f557c11defb1c0fbdc75fdce750edb42a3d0cf5b35f73251e8baa5ba007a5b00ac4b80aa7766c794761004cb18bcf56c913f0562c13720141bdf028195d175ec9031d42eff8b758994bc50445772d6961939", @ANYRES32, @ANYRES8, @ANYRES64], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x20080058) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000008ac050f024000010203010902240001014bc00409040087010301020209210b000001221b"], 0x0) 916.961021ms ago: executing program 3 (id=1400): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000240)=0x7, 0x4) 479.781639ms ago: executing program 3 (id=1401): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 404.528443ms ago: executing program 3 (id=1402): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timer_create(0x2, 0x0, &(0x7f0000000180)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x8010, r1, 0x4606f000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x6e22, 0x40000, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81006e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 258.220798ms ago: executing program 3 (id=1403): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x4}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)='9\x00\x00\x00', 0x4}], 0x1) 102.321885ms ago: executing program 3 (id=1404): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x0, @vbi={0x41, 0x3ff, 0xdd56, 0x4f424752, [0x81, 0x7d], [0x40, 0x4], 0x2}}, 0x4}) 0s ago: executing program 3 (id=1405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) getrlimit(0x9, &(0x7f0000000000)) sched_setscheduler(0x0, 0x6, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x11, r3) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x0) kernel console output (not intermixed with test programs): 75.049357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.060905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.070258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.080406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.089008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.103813][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.113607][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.123342][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.133526][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.159821][ T4203] device veth0_vlan entered promiscuous mode [ 75.174093][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.183298][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.210284][ T4203] device veth1_vlan entered promiscuous mode [ 75.223741][ T4185] device veth0_vlan entered promiscuous mode [ 75.241551][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.251499][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.260000][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.268536][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.276779][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.285672][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.294588][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.304069][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.311993][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.320217][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.328348][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.352362][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.361539][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.375674][ T4185] device veth1_vlan entered promiscuous mode [ 75.391693][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.408144][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.421714][ T4203] device veth0_macvtap entered promiscuous mode [ 75.443173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.452047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.462748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.471508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.481720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.490504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.499603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.524499][ T4203] device veth1_macvtap entered promiscuous mode [ 75.588058][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.597555][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.609008][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.620270][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.652885][ T4192] device veth0_vlan entered promiscuous mode [ 75.664896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.674394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.689058][ T4185] device veth0_macvtap entered promiscuous mode [ 75.701147][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.717853][ T4192] device veth1_vlan entered promiscuous mode [ 75.725455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.736328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.747012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.762367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.773949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.790487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.803767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.815567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.834674][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.858099][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.865633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.875401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.884322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.892421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.902363][ T4185] device veth1_macvtap entered promiscuous mode [ 75.913781][ T4203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.923222][ T4203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.932058][ T4203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.941827][ T4203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.014307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.025472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.035179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.044303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.055397][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.066330][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.078113][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.094552][ T4192] device veth0_macvtap entered promiscuous mode [ 76.121705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.132955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.142758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.152546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.161275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.169682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.181797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.190294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.199073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.208419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.216661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.225001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.233229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.243572][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.254953][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.266800][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.287040][ T4192] device veth1_macvtap entered promiscuous mode [ 76.294365][ T4189] device veth0_vlan entered promiscuous mode [ 76.304577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.313778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.323194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.333980][ T4190] device veth0_vlan entered promiscuous mode [ 76.345312][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.355523][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.365726][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.374689][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.402372][ T4189] device veth1_vlan entered promiscuous mode [ 76.425629][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.437348][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.447932][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.459051][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.470813][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.491344][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.504060][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.516083][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.526695][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.537962][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.549635][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.558724][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.568371][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.578789][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.600205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.610038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.619494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.628729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.638112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.646674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.657473][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 76.665451][ T4190] device veth1_vlan entered promiscuous mode [ 76.671662][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 76.678175][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 76.684295][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 76.696888][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.706904][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.733194][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.741327][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 76.743460][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.757553][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.780980][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.793398][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.827687][ T4189] device veth0_macvtap entered promiscuous mode [ 76.872694][ T4189] device veth1_macvtap entered promiscuous mode [ 76.885181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.894769][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.896423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.913021][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.914192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.930186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.939623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.953952][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.954645][ T4190] device veth0_macvtap entered promiscuous mode [ 76.962451][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.989523][ T4190] device veth1_macvtap entered promiscuous mode [ 77.007293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.015959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.042093][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.052812][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.064861][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.076123][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.086250][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.098142][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.110203][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.142387][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.152930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.162298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.179813][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.187336][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.194033][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.208276][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.218894][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.228771][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.239717][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.252635][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.261943][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.280686][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.295840][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.310756][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.320794][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.331709][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.341871][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.352519][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.363693][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.379437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.390845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.399939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.409249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.419351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.434528][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.444276][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.453398][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.463229][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475093][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.486723][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.524660][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.557755][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.568573][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.579344][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.590362][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.601157][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.612683][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.650262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.662910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.673149][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.675263][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.691758][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.694257][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.701017][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.718837][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.731933][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.751571][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.760422][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.772298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.944035][ T4304] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7'. [ 77.985093][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.994246][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.021474][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.061614][ T4309] fuseblk: Bad value for 'fd' [ 78.114517][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.136051][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.170324][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.229280][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.273277][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.305337][ T4315] netlink: 'syz.2.10': attribute type 4 has an invalid length. [ 78.392373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.411475][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.508347][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.517926][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.737982][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 78.744879][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 78.768536][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 78.784922][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 78.818532][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 78.841057][ T4333] loop1: detected capacity change from 0 to 2048 [ 78.948810][ T4333] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 78.993129][ T4333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.657654][ T4358] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 79.972330][ T4346] fuse: Bad value for 'group_id' [ 81.369425][ T4394] loop2: detected capacity change from 0 to 512 [ 81.412282][ T4394] EXT4-fs (loop2): Ignoring removed bh option [ 81.515563][ T4394] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 81.598447][ T4394] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.391763][ T4421] netlink: 228 bytes leftover after parsing attributes in process `syz.0.56'. [ 82.426435][ T4425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.57'. [ 82.700533][ T4433] loop3: detected capacity change from 0 to 512 [ 82.836157][ T4433] EXT4-fs (loop3): Ignoring removed bh option [ 82.848637][ T4438] loop0: detected capacity change from 0 to 512 [ 82.945377][ T4433] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 83.023205][ T4438] EXT4-fs (loop0): Ignoring removed bh option [ 83.053080][ T4433] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.148198][ T4438] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 83.197375][ T4438] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.434989][ T4449] loop2: detected capacity change from 0 to 4096 [ 83.608024][ T4452] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.707512][ T4449] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 84.257411][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.365313][ T4472] loop2: detected capacity change from 0 to 512 [ 84.476870][ T4472] EXT4-fs (loop2): Ignoring removed bh option [ 84.554461][ T4472] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 84.597975][ T4472] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.651039][ T4478] loop0: detected capacity change from 0 to 512 [ 84.683197][ T4262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.720706][ T4478] EXT4-fs (loop0): Ignoring removed bh option [ 84.734188][ T4262] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 84.767633][ T4262] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.776919][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.818845][ T4262] usb 4-1: config 0 descriptor?? [ 84.829902][ T4478] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 84.874781][ T4478] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.906640][ T4262] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 85.127246][ T1111] usb 4-1: USB disconnect, device number 2 [ 85.752864][ T4501] loop0: detected capacity change from 0 to 512 [ 85.813964][ T4501] EXT4-fs (loop0): Ignoring removed bh option [ 85.906461][ T4501] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 85.937460][ T4501] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.959554][ T4511] loop3: detected capacity change from 0 to 512 [ 86.014690][ T4511] EXT4-fs (loop3): Ignoring removed bh option [ 86.103199][ T4511] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 86.157239][ T4511] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.300379][ T4518] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 86.524132][ T4522] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.559566][ T4524] loop3: detected capacity change from 0 to 256 [ 86.601649][ T4524] exfat: Unknown parameter 'keep_last_dots' [ 86.773308][ T7] cfg80211: failed to load regulatory.db [ 87.812555][ T4547] loop0: detected capacity change from 0 to 512 [ 87.869881][ T4547] EXT4-fs (loop0): Ignoring removed bh option [ 87.982161][ T4547] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 88.062935][ T4547] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.490527][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 89.398731][ T4581] loop0: detected capacity change from 0 to 128 [ 89.487808][ T4581] ======================================================= [ 89.487808][ T4581] WARNING: The mand mount option has been deprecated and [ 89.487808][ T4581] and is ignored by this kernel. Remove the mand [ 89.487808][ T4581] option from the mount to silence this warning. [ 89.487808][ T4581] ======================================================= [ 89.590090][ T4581] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 89.648371][ T4581] hpfs: filesystem error: improperly stopped [ 89.655228][ T4581] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 89.678597][ T4581] hpfs: You really don't want any checks? You are crazy... [ 89.687358][ T4581] hpfs: hpfs_map_sector(): read error [ 89.692784][ T4581] hpfs: code page support is disabled [ 89.718364][ T4581] hpfs: hpfs_map_4sectors(): unaligned read [ 89.742498][ T4581] hpfs: hpfs_map_4sectors(): unaligned read [ 89.757279][ T4581] hpfs: filesystem error: unable to find root dir [ 90.130018][ T4586] autofs4:pid:4586:autofs_fill_super: called with bogus options [ 92.557254][ T4194] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.651018][ T4622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 94.207476][ T4194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.325232][ T4194] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 94.687230][ T4194] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.737150][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.831839][ T4194] usb 5-1: config 0 descriptor?? [ 94.887267][ T4194] usb 5-1: can't set config #0, error -71 [ 94.915866][ T4194] usb 5-1: USB disconnect, device number 2 [ 95.784093][ T4647] loop2: detected capacity change from 0 to 32768 [ 95.865886][ T4671] autofs4:pid:4671:autofs_fill_super: called with bogus options [ 96.409432][ T4647] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.825670][ T4687] loop1: detected capacity change from 0 to 2048 [ 96.867264][ T26] audit: type=1800 audit(1763543448.141:2): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.144" name=2E02 dev="loop2" ino=17058 res=0 errno=0 [ 96.924821][ T4687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.259932][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 97.429171][ T26] audit: type=1800 audit(1763543448.651:3): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.158" name="bus" dev="loop1" ino=1436 res=0 errno=0 [ 97.758124][ T4698] loop4: detected capacity change from 0 to 128 [ 97.980245][ T4698] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.017534][ T4698] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.125604][ T4706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 98.132715][ T4710] syz.4.164 (pid 4710) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 98.408198][ T4718] autofs4:pid:4718:autofs_fill_super: called with bogus options [ 98.437216][ T4262] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.642611][ T4729] netlink: 'syz.3.175': attribute type 4 has an invalid length. [ 98.977336][ T4262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.999063][ T4262] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 99.038102][ T4262] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.801243][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.811623][ T4262] usb 3-1: config 0 descriptor?? [ 99.866576][ T4262] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 99.921364][ T4747] loop3: detected capacity change from 0 to 22 [ 99.942525][ T4747] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 100.002882][ T4747] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 100.065034][ T4194] usb 3-1: USB disconnect, device number 2 [ 100.101584][ T4751] autofs4:pid:4751:autofs_fill_super: called with bogus options [ 100.137323][ T4262] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.352516][ T4760] netlink: 'syz.3.188': attribute type 4 has an invalid length. [ 100.397171][ T4262] usb 5-1: Using ep0 maxpacket: 16 [ 100.697304][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.840344][ T4776] input: syz1 as /devices/virtual/input/input5 [ 100.907842][ T4262] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.916948][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.951842][ T4262] usb 5-1: Product: syz [ 100.960583][ T4262] usb 5-1: Manufacturer: syz [ 100.967646][ T4262] usb 5-1: SerialNumber: syz [ 100.998634][ T4262] usb 5-1: config 0 descriptor?? [ 101.039836][ T4262] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 101.077143][ T4262] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 102.147298][ T4262] em28xx 5-1:0.0: chip ID is em2870 [ 103.424535][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.747364][ T4262] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 103.777326][ T4262] em28xx 5-1:0.0: board has no eeprom [ 103.972617][ T4262] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 104.013046][ T4262] em28xx 5-1:0.0: dvb set to bulk mode. [ 104.070935][ T4262] usb 5-1: USB disconnect, device number 3 [ 104.088400][ T4262] em28xx 5-1:0.0: Disconnecting em28xx [ 104.111588][ T1111] em28xx 5-1:0.0: Binding DVB extension [ 104.199157][ T1111] em28xx 5-1:0.0: Registering input extension [ 104.216376][ T4262] em28xx 5-1:0.0: Closing input extension [ 104.260663][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.290200][ T4262] em28xx 5-1:0.0: Freeing device [ 104.297030][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 104.369323][ T1108] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.383028][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.434823][ T1108] usb 2-1: config 0 descriptor?? [ 104.479571][ T1108] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 104.601587][ T4834] fuse: Bad value for 'group_id' [ 104.867599][ T4262] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.037350][ T1111] usb 2-1: USB disconnect, device number 2 [ 105.197352][ T4262] usb 5-1: Using ep0 maxpacket: 32 [ 105.431345][ T4262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.377339][ T4262] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 106.402044][ T4262] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 106.457876][ T4262] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 106.466979][ T4262] usb 5-1: config 128 has no interface number 0 [ 106.514613][ T4262] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 106.542826][ T4262] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.566925][ T4262] usb 5-1: config 128 interface 127 has no altsetting 0 [ 106.659920][ T4881] autofs4:pid:4881:autofs_fill_super: called with bogus options [ 106.807513][ T4262] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 106.834394][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.854625][ T4262] usb 5-1: Product: syz [ 106.864741][ T4262] usb 5-1: Manufacturer: syz [ 106.874863][ T4262] usb 5-1: SerialNumber: syz [ 108.105245][ T4885] fuse: Bad value for 'group_id' [ 108.110409][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.192278][ T4262] usb 5-1: USB disconnect, device number 4 [ 108.446857][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.527531][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.547829][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 108.600776][ T1111] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.634719][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.672190][ T1111] usb 4-1: config 0 descriptor?? [ 108.749585][ T1111] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 108.978015][ T1111] usb 4-1: USB disconnect, device number 3 [ 109.493156][ T4955] loop1: detected capacity change from 0 to 2048 [ 109.627437][ T4942] fuse: Bad value for 'group_id' [ 110.836408][ T4971] syz.3.270 (4971) used greatest stack depth: 17320 bytes left [ 112.092534][ T4990] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.606287][ T4997] loop2: detected capacity change from 0 to 64 [ 112.696067][ T4997] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 114.253227][ T5009] loop3: detected capacity change from 0 to 1024 [ 114.303785][ T5009] hfsplus: unable to parse mount options [ 115.113840][ T4232] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.145928][ T5034] loop1: detected capacity change from 0 to 1024 [ 115.178414][ T4232] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.465909][ T5037] fido_id[5037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.502915][ T154] hfsplus: b-tree write err: -5, ino 4 [ 116.458637][ T5051] loop2: detected capacity change from 0 to 764 [ 117.867850][ T5053] fuse: Bad value for 'group_id' [ 117.928794][ T5062] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 118.314130][ T5064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 120.343368][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.607186][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 120.719691][ T5102] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 120.807402][ T1111] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.903081][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.127524][ T1111] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 121.306787][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.316903][ T1111] usb 2-1: Product: syz [ 121.321388][ T1111] usb 2-1: Manufacturer: syz [ 121.326011][ T1111] usb 2-1: SerialNumber: syz [ 121.342649][ T1111] usb 2-1: config 0 descriptor?? [ 121.399210][ T1111] usbtouchscreen: probe of 2-1:0.0 failed with error -12 [ 121.609781][ T1111] usb 2-1: USB disconnect, device number 3 [ 121.948479][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.187150][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 122.228236][ T5116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.347355][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.427408][ T4232] usb 1-1: config 5 has an invalid interface number: 149 but max is 0 [ 122.435639][ T4232] usb 1-1: config 5 has no interface number 0 [ 122.467130][ T4232] usb 1-1: config 5 interface 149 altsetting 74 endpoint 0x4 has an invalid bInterval 81, changing to 7 [ 122.493413][ T4232] usb 1-1: config 5 interface 149 has no altsetting 0 [ 122.677365][ T4232] usb 1-1: New USB device found, idVendor=2833, idProduct=0211, bcdDevice= 0.b2 [ 122.697155][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.705289][ T4232] usb 1-1: Product: syz [ 122.743927][ T4232] usb 1-1: Manufacturer: syz [ 122.744013][ T5124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 122.762800][ T4232] usb 1-1: SerialNumber: syz [ 123.157376][ T4232] usb 1-1: Found UVC 0.00 device syz (2833:0211) [ 123.163921][ T4232] usb 1-1: No valid video chain found. [ 123.186002][ T4232] usb 1-1: USB disconnect, device number 2 [ 123.857440][ T4194] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.869779][ T5145] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 124.117305][ T4194] usb 1-1: Using ep0 maxpacket: 32 [ 124.245091][ T4194] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.518117][ T4194] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 124.587810][ T4194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.808912][ T4194] usb 1-1: Product: syz [ 124.813138][ T4194] usb 1-1: Manufacturer: syz [ 124.873586][ T4194] usb 1-1: SerialNumber: syz [ 124.909160][ T4194] usb 1-1: config 0 descriptor?? [ 124.993499][ T5152] loop1: detected capacity change from 0 to 512 [ 125.079069][ T5152] EXT4-fs (loop1): Ignoring removed bh option [ 125.198651][ T5152] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 125.225315][ T5152] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.253468][ T5153] chnl_net:caif_netlink_parms(): no params data found [ 125.345241][ T5165] fuse: Bad value for 'fd' [ 125.376569][ T5163] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.473187][ T4680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.659941][ T4680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.680348][ T5175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.725977][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.734383][ T5153] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.758131][ T5153] device bridge_slave_0 entered promiscuous mode [ 125.778156][ T5177] netlink: 56 bytes leftover after parsing attributes in process `syz.2.356'. [ 125.801794][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.817455][ T5153] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.825619][ T5153] device bridge_slave_1 entered promiscuous mode [ 125.855756][ T4680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.978395][ T5153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.022123][ T4680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.044041][ T5153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.090047][ T5186] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 126.142857][ T5153] team0: Port device team_slave_0 added [ 126.158847][ T5153] team0: Port device team_slave_1 added [ 126.392524][ T5153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.405725][ T5153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.464661][ T5153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.962263][ T5153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.092988][ T5153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.136378][ T1111] usb 1-1: USB disconnect, device number 3 [ 127.166430][ T4802] Bluetooth: hci5: command 0x0409 tx timeout [ 127.173336][ T5153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.398215][ T5153] device hsr_slave_0 entered promiscuous mode [ 127.410294][ T5203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.431209][ T5153] device hsr_slave_1 entered promiscuous mode [ 127.459799][ T5153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.497462][ T5153] Cannot create hsr debugfs directory [ 127.918042][ T5226] tmpfs: Unknown parameter 'nosw' [ 128.166380][ T5153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.654547][ T5153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.886487][ T5153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.949351][ T5153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.210684][ T5251] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.223103][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 129.483765][ T5153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.560956][ T5259] loop2: detected capacity change from 0 to 512 [ 129.594935][ T5153] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.628595][ T5259] EXT4-fs (loop2): Ignoring removed bh option [ 129.645189][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.679145][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.773005][ T5259] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 129.804134][ T4680] device hsr_slave_0 left promiscuous mode [ 129.819543][ T4680] device hsr_slave_1 left promiscuous mode [ 129.826114][ T5259] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.852905][ T4680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.896545][ T4680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.932221][ T4680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.966256][ T4680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.011784][ T4680] device bridge_slave_1 left promiscuous mode [ 130.031643][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.086492][ T5277] loop1: detected capacity change from 0 to 512 [ 130.138117][ T4680] device bridge_slave_0 left promiscuous mode [ 130.146609][ T5277] EXT4-fs (loop1): Ignoring removed bh option [ 130.165229][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.200072][ T5277] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 130.229118][ T5277] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.254463][ T4680] device veth1_macvtap left promiscuous mode [ 130.272468][ T4680] device veth0_macvtap left promiscuous mode [ 130.278891][ T4680] device veth1_vlan left promiscuous mode [ 130.285066][ T4680] device veth0_vlan left promiscuous mode [ 130.635951][ T5298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.985598][ T5309] loop0: detected capacity change from 0 to 512 [ 131.077990][ T5309] EXT4-fs (loop0): Ignoring removed bh option [ 131.089743][ T4680] team0 (unregistering): Port device team_slave_1 removed [ 131.151764][ T4680] team0 (unregistering): Port device team_slave_0 removed [ 131.178644][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 131.192896][ T4680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.223453][ T5309] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.234408][ T4680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.297676][ T4232] Bluetooth: hci5: command 0x040f tx timeout [ 131.518608][ T5319] loop1: detected capacity change from 0 to 512 [ 131.585114][ T5319] EXT4-fs (loop1): Ignoring removed bh option [ 131.615762][ T4680] bond0 (unregistering): Released all slaves [ 131.710888][ T5319] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 131.748174][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.757860][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.766431][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.773559][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.782147][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.791010][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.800348][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.807476][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.815513][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.825667][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.833960][ T5319] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.871238][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.914787][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.960290][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.000639][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.035167][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.080204][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.124327][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.187853][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.226122][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.277985][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.316240][ T5153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.820570][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829618][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.944840][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.962850][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.000362][ T5153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.377792][ T4269] Bluetooth: hci5: command 0x0419 tx timeout [ 133.410408][ T5372] loop1: detected capacity change from 0 to 512 [ 133.501454][ T5372] EXT4-fs (loop1): Ignoring removed bh option [ 133.596596][ T5372] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 133.637268][ T5372] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.819185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.828719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.903449][ T5153] device veth0_vlan entered promiscuous mode [ 133.952510][ T5153] device veth1_vlan entered promiscuous mode [ 134.038182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.046614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.082794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.083317][ T5385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.416'. [ 134.178875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.197773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.237741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.306981][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.317757][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.355414][ T5153] device veth0_macvtap entered promiscuous mode [ 134.552911][ T5153] device veth1_macvtap entered promiscuous mode [ 134.843519][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.956115][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.321411][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.385445][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.475541][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.527160][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.537028][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.618945][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.648018][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.717087][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.774785][ T5153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.821162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.861185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.901569][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.951524][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.987145][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.019027][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.049596][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.117244][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.147105][ T5153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.177176][ T5153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.237301][ T5153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.253294][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.297853][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.361178][ T5153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.402996][ T5153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.451901][ T5153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.469970][ T5153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.712351][ T4629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.757521][ T4629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.815482][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.858823][ T4629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.902408][ T4629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.959052][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.067142][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.153691][ T5431] loop2: detected capacity change from 0 to 512 [ 137.250684][ T5431] EXT4-fs (loop2): Ignoring removed bh option [ 137.332194][ T5431] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 137.427358][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.463494][ T5431] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.477332][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 137.533486][ T1108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.584200][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.648540][ T1108] usb 1-1: config 0 descriptor?? [ 137.719691][ T1108] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 137.922701][ T1108] usb 1-1: USB disconnect, device number 4 [ 138.488656][ T5465] tipc: Started in network mode [ 138.493915][ T5465] tipc: Node identity 4, cluster identity 4711 [ 138.587193][ T5465] tipc: Node number set to 4 [ 138.994424][ T5482] loop0: detected capacity change from 0 to 512 [ 139.393886][ T5482] EXT4-fs (loop0): Ignoring removed bh option [ 139.830020][ T5482] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 139.847353][ T5482] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.972491][ T5501] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 141.018662][ T5511] loop0: detected capacity change from 0 to 1024 [ 141.116400][ T5511] EXT4-fs (loop0): Ignoring removed orlov option [ 141.147252][ T4269] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.168993][ T5511] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 141.338754][ T5518] loop5: detected capacity change from 0 to 4096 [ 141.507442][ T4269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.547453][ T4269] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 141.550129][ T5518] ntfs: volume version 3.1. [ 141.597239][ T4269] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.626765][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.664254][ T4269] usb 2-1: config 0 descriptor?? [ 141.719647][ T4269] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 141.928840][ T4269] usb 2-1: USB disconnect, device number 4 [ 143.169736][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 143.301673][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 143.997214][ T4194] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.405108][ T5607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.417762][ T4194] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.443745][ T4194] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 144.496171][ T4194] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.541455][ T4194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.588533][ T4194] usb 6-1: config 0 descriptor?? [ 144.599648][ T5612] loop2: detected capacity change from 0 to 512 [ 144.669500][ T4194] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 144.775751][ T5612] EXT4-fs (loop2): Ignoring removed bh option [ 144.850215][ T5612] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 144.898199][ T1108] usb 6-1: USB disconnect, device number 2 [ 144.934458][ T5612] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.559388][ T5623] fuse: Bad value for 'group_id' [ 147.487170][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.831684][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.504'. [ 147.923125][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.973661][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 148.017164][ T1111] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.026410][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.055474][ T1111] usb 1-1: config 0 descriptor?? [ 148.097079][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 148.108555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 148.169593][ T1111] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 148.699322][ T1111] usb 1-1: USB disconnect, device number 5 [ 148.729832][ T5689] Malformed UNC in devname [ 148.729832][ T5689] [ 148.736743][ T5689] CIFS: VFS: Malformed UNC in devname [ 149.564416][ T5728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.516'. [ 150.287179][ T1111] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.525314][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 150.699668][ T5747] loop5: detected capacity change from 0 to 32768 [ 150.710598][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.737483][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 150.766601][ T1111] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.786088][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.807547][ T5747] (syz.5.526,5747,0):ocfs2_verify_volume:2383 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255 [ 150.828311][ T1111] usb 1-1: config 0 descriptor?? [ 150.845191][ T5747] (syz.5.526,5747,0):ocfs2_verify_volume:2392 ERROR: status = -22 [ 150.865118][ T5747] (syz.5.526,5747,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 150.895500][ T1111] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 150.943465][ T5747] (syz.5.526,5747,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 151.108697][ T1111] usb 1-1: USB disconnect, device number 6 [ 151.384917][ T5784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 151.560536][ T5780] loop2: detected capacity change from 0 to 8192 [ 151.872890][ T5799] loop1: detected capacity change from 0 to 1024 [ 152.197088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 152.210238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 152.222236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 152.231170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 152.244248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 152.257096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 152.278292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 152.288224][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 152.765651][ T26] audit: type=1326 audit(1763545807.452:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x0 [ 152.835206][ T5812] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 152.862590][ T5812] EXT4-fs (loop2): unable to read superblock [ 153.040686][ T5817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 153.507178][ T4232] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.554798][ T5835] loop0: detected capacity change from 0 to 164 [ 154.647323][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.667104][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 154.687154][ T4232] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.696240][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.712331][ T4232] usb 2-1: config 0 descriptor?? [ 154.781493][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'. [ 154.950612][ T4232] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 155.017289][ T4232] usb 2-1: USB disconnect, device number 5 [ 155.823876][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.577'. [ 159.974964][ T26] audit: type=1326 audit(1763545815.242:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 160.050798][ T26] audit: type=1326 audit(1763545815.292:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 160.167626][ T6014] Zero length message leads to an empty skb [ 160.173417][ T26] audit: type=1326 audit(1763545815.292:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 160.195586][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.303704][ T26] audit: type=1326 audit(1763545815.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 161.210006][ T26] audit: type=1326 audit(1763545815.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 161.317240][ T26] audit: type=1326 audit(1763545815.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 161.367361][ T4233] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.424123][ T26] audit: type=1326 audit(1763545815.302:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 161.446285][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.487160][ T26] audit: type=1326 audit(1763545815.302:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 161.559827][ T26] audit: type=1326 audit(1763545815.302:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 161.581976][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.647210][ T26] audit: type=1326 audit(1763545815.302:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x7ffc0000 [ 161.773191][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.802722][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 161.857624][ T4233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.903943][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.925176][ T4233] usb 2-1: config 0 descriptor?? [ 161.985756][ T4233] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 162.385676][ T4232] usb 2-1: USB disconnect, device number 6 [ 163.226600][ T6040] loop0: detected capacity change from 0 to 40427 [ 163.240391][ T6070] loop1: detected capacity change from 0 to 128 [ 163.332655][ T6040] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 163.974286][ T6070] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 164.054044][ T6040] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 164.205318][ T6040] F2FS-fs (loop0): invalid crc value [ 164.286173][ T6040] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.310438][ T4203] sysv_free_block: flc_count > flc_size [ 164.316464][ T4203] sysv_free_block: flc_count > flc_size [ 164.353771][ T4203] sysv_free_block: flc_count > flc_size [ 164.383443][ T4203] sysv_free_block: flc_count > flc_size [ 164.417109][ T4203] sysv_free_block: flc_count > flc_size [ 164.422772][ T4203] sysv_free_block: flc_count > flc_size [ 164.477285][ T4203] sysv_free_block: flc_count > flc_size [ 164.489967][ T6040] F2FS-fs (loop0): Start checkpoint disabled! [ 164.511522][ T4203] sysv_free_block: flc_count > flc_size [ 164.526809][ T4203] sysv_free_block: flc_count > flc_size [ 164.557196][ T4203] sysv_free_block: flc_count > flc_size [ 164.563839][ T4203] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 166.318354][ T4802] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.677594][ T4802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.807009][ T4802] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 168.131197][ T4802] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.187187][ T4802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.267631][ T4802] usb 4-1: config 0 descriptor?? [ 168.309719][ T4802] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 168.513012][ T4802] usb 4-1: USB disconnect, device number 4 [ 170.884708][ T6163] fuse: Bad value for 'group_id' [ 171.462911][ T4802] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.647211][ T4802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.677477][ T4802] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 172.717147][ T4802] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.726247][ T4802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.757836][ T4802] usb 2-1: config 0 descriptor?? [ 172.811188][ T4802] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 173.017818][ T4802] usb 2-1: USB disconnect, device number 7 [ 173.456605][ T6247] fuse: Bad value for 'group_id' [ 175.417478][ T1111] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.877881][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.959474][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 176.149235][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.207088][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.261890][ T1111] usb 2-1: config 0 descriptor?? [ 176.329631][ T1111] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 176.532669][ T1111] usb 2-1: USB disconnect, device number 8 [ 177.597757][ T6302] netlink: 268 bytes leftover after parsing attributes in process `syz.0.708'. [ 179.244297][ T6327] loop2: detected capacity change from 0 to 256 [ 179.366716][ T6327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 179.686356][ T6336] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 181.957617][ T6361] loop5: detected capacity change from 0 to 256 [ 182.056979][ T6361] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.113664][ T6361] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 182.557133][ T6361] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 182.860628][ T6371] overlayfs: failed to resolve './file0': -2 [ 183.854428][ T6360] loop0: detected capacity change from 0 to 32768 [ 183.937781][ T6360] XFS: noikeep mount option is deprecated. [ 184.086817][ T6360] XFS (loop0): Mounting V5 Filesystem [ 184.171249][ T6360] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 184.182580][ T4253] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.251366][ T6360] XFS (loop0): Starting recovery (logdev: internal) [ 184.309607][ T6360] XFS (loop0): Ending recovery (logdev: internal) [ 184.431325][ T26] audit: type=1800 audit(1763545839.702:15): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.736" name="file2" dev="loop0" ino=4423 res=0 errno=0 [ 184.472808][ T6360] XFS (loop0): User initiated shutdown received. [ 184.488290][ T6360] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 184.493353][ T4253] usb 6-1: Using ep0 maxpacket: 32 [ 184.524069][ T26] audit: type=1800 audit(1763545839.792:16): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.736" name="file2" dev="loop0" ino=4423 res=0 errno=0 [ 184.548380][ T6360] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 184.687363][ T4253] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 184.838464][ T4185] XFS (loop0): Unmounting Filesystem [ 184.917953][ T4253] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 184.928383][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.936416][ T4253] usb 6-1: Product: syz [ 184.946432][ T4253] usb 6-1: Manufacturer: syz [ 184.955887][ T4253] usb 6-1: SerialNumber: syz [ 184.995576][ T4253] usb 6-1: config 0 descriptor?? [ 185.037663][ T6386] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.348405][ T6386] loop5: detected capacity change from 0 to 8 [ 185.481299][ T6386] SQUASHFS error: lzo decompression failed, data probably corrupt [ 185.547156][ T6386] SQUASHFS error: Failed to read block 0x91: -5 [ 185.553494][ T6386] SQUASHFS error: Unable to read metadata cache entry [8f] [ 185.603236][ T6386] SQUASHFS error: Unable to read inode 0x11f [ 185.780969][ T4232] usb 6-1: USB disconnect, device number 3 [ 186.795278][ T6420] loop0: detected capacity change from 0 to 131072 [ 186.872034][ T6420] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 186.880259][ T6420] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 186.894826][ T6420] F2FS-fs (loop0): invalid crc value [ 186.973383][ T6420] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.053051][ T6420] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 187.060606][ T6420] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 187.213515][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.756'. [ 187.222579][ T6420] device bridge0 entered promiscuous mode [ 190.237214][ T1108] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 190.472535][ T6475] fuse: Bad value for 'group_id' [ 190.607409][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.628150][ T1108] usb 3-1: config 0 has no interfaces? [ 190.787392][ T1108] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 190.823239][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.891067][ T1108] usb 3-1: Product: syz [ 190.957228][ T1108] usb 3-1: Manufacturer: syz [ 190.961893][ T1108] usb 3-1: SerialNumber: syz [ 191.009619][ T1108] usb 3-1: config 0 descriptor?? [ 191.250772][ T4232] usb 3-1: USB disconnect, device number 3 [ 191.770993][ T6502] fuse: Bad value for 'fd' [ 192.215134][ T6484] loop0: detected capacity change from 0 to 32768 [ 192.307957][ T6484] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.780 (6484) [ 192.442392][ T6484] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 192.472987][ T6484] BTRFS info (device loop0): using free space tree [ 192.502666][ T6484] BTRFS info (device loop0): has skinny extents [ 192.878007][ T6507] fuse: Bad value for 'group_id' [ 193.057473][ T6484] BTRFS info (device loop0): enabling ssd optimizations [ 194.264999][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271366][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.757900][ T6588] loop3: detected capacity change from 0 to 1024 [ 194.831996][ T6588] EXT4-fs (loop3): Ignoring removed nobh option [ 194.858935][ T6588] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.017618][ T6588] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: writeback. [ 195.074210][ T6578] fuse: Bad value for 'group_id' [ 195.232059][ T6570] loop2: detected capacity change from 0 to 32768 [ 195.295162][ T6570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.809 (6570) [ 195.370388][ T6570] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 195.417107][ T6570] BTRFS info (device loop2): using free space tree [ 195.423681][ T6570] BTRFS info (device loop2): has skinny extents [ 195.628582][ T6605] netlink: 64 bytes leftover after parsing attributes in process `syz.5.820'. [ 195.904950][ T6570] BTRFS info (device loop2): enabling ssd optimizations [ 196.337239][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 196.344709][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 196.379290][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 196.464324][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 196.900870][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 197.541972][ T6650] loop5: detected capacity change from 0 to 7 [ 197.575667][ T6650] Dev loop5: unable to read RDB block 7 [ 197.596826][ T6650] loop5: unable to read partition table [ 197.623724][ T6650] loop5: partition table beyond EOD, truncated [ 197.643999][ T6650] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 197.662761][ T3560] Dev loop5: unable to read RDB block 7 [ 197.670837][ T3560] loop5: unable to read partition table [ 197.686936][ T3560] loop5: partition table beyond EOD, truncated [ 197.726676][ T6655] netlink: 'syz.5.834': attribute type 4 has an invalid length. [ 198.109586][ T6644] fuse: Bad value for 'group_id' [ 198.439707][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 198.967631][ T6682] loop1: detected capacity change from 0 to 8 [ 199.050891][ T6682] SQUASHFS error: lzo decompression failed, data probably corrupt [ 199.082315][ T6682] SQUASHFS error: Failed to read block 0x91: -5 [ 199.106630][ T6682] SQUASHFS error: Unable to read metadata cache entry [8f] [ 199.129667][ T6682] SQUASHFS error: Unable to read inode 0x11f [ 199.922283][ T6693] netlink: 'syz.0.847': attribute type 4 has an invalid length. [ 200.905267][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 203.331374][ T6763] bridge0: port 3(veth1_to_bridge) entered blocking state [ 203.363773][ T6763] bridge0: port 3(veth1_to_bridge) entered disabled state [ 203.374656][ T6763] device veth1_to_bridge entered promiscuous mode [ 203.390538][ T6763] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 203.424638][ T6763] bridge0: port 3(veth1_to_bridge) entered blocking state [ 203.432095][ T6763] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 203.691623][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.888'. [ 203.991631][ T6779] loop3: detected capacity change from 0 to 256 [ 204.511003][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.524540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.537071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.549660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.562437][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.574865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.587337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.599759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.612170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.624604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.938380][ T6803] mmap: syz.1.904 (6803) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 206.253175][ T6822] device syzkaller0 entered promiscuous mode [ 207.286966][ T6841] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 207.505278][ T6845] netlink: 268 bytes leftover after parsing attributes in process `syz.0.922'. [ 207.908302][ T6853] loop0: detected capacity change from 0 to 1024 [ 210.188442][ C0] net_ratelimit: 6388 callbacks suppressed [ 210.188461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.208352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.221494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.234489][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.247683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.260668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.273673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.286704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.299692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.314290][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.903431][ T6894] netlink: 268 bytes leftover after parsing attributes in process `syz.1.933'. [ 211.437108][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.948'. [ 211.456960][ T6903] loop3: detected capacity change from 0 to 40427 [ 211.575954][ T6903] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 211.583975][ T6903] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 211.676384][ T6911] netlink: 'syz.0.951': attribute type 4 has an invalid length. [ 211.694718][ T6903] F2FS-fs (loop3): invalid crc value [ 211.867203][ T6903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.083713][ T6903] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 212.090857][ T6903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.301508][ T6929] netlink: 268 bytes leftover after parsing attributes in process `syz.0.956'. [ 214.454968][ T6954] overlayfs: failed to set xattr on upper [ 214.477209][ T6954] overlayfs: ...falling back to index=off,metacopy=off. [ 214.580490][ T6956] netlink: 'syz.5.962': attribute type 4 has an invalid length. [ 214.956535][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.972'. [ 215.218241][ C0] net_ratelimit: 1474 callbacks suppressed [ 215.218261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.237124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.250164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.263232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.276238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.289297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.302366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.315416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.328414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.341429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.237991][ C0] net_ratelimit: 2127 callbacks suppressed [ 220.238011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.256848][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.269847][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.282835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.295849][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.308844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.321841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.335210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.348183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.361282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.509559][ T7059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.448917][ T4253] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 222.822890][ T4253] usb 4-1: Using ep0 maxpacket: 32 [ 222.997082][ T4253] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 223.021156][ T4253] usb 4-1: config 0 has no interface number 0 [ 223.027684][ T4253] usb 4-1: config 0 interface 104 has no altsetting 0 [ 223.295774][ T4253] usb 4-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice=45.bc [ 223.305088][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.329416][ T4253] usb 4-1: Product: syz [ 223.333646][ T4253] usb 4-1: Manufacturer: syz [ 223.363356][ T4253] usb 4-1: SerialNumber: syz [ 223.379227][ T4253] usb 4-1: config 0 descriptor?? [ 223.655865][ T7086] loop0: detected capacity change from 0 to 32768 [ 223.756606][ T4253] r8712u: register rtl8712_netdev_ops to netdev_ops [ 223.764472][ T7086] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 223.781645][ T7096] loop2: detected capacity change from 0 to 4096 [ 223.811111][ T4253] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 223.902825][ T4253] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 223.912044][ T4253] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 223.935889][ T4253] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 224.030838][ T7086] JBD2: Invalid start block of journal: 0 [ 224.031424][ T4253] usb 4-1: USB disconnect, device number 5 [ 224.067637][ T7086] (syz.0.1029,7086,1):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 224.098544][ T7096] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 224.126973][ T7086] (syz.0.1029,7086,1):ocfs2_check_volume:2424 ERROR: status = -22 [ 224.153461][ T7086] (syz.0.1029,7086,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 224.181625][ T7086] (syz.0.1029,7086,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 224.303666][ T7086] (syz.0.1029,7086,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 225.371129][ C0] net_ratelimit: 2616 callbacks suppressed [ 225.371149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.390361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.403281][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.416228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.429114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.442001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.455013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.467943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.480919][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.493831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.730433][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1042'. [ 227.799247][ T7132] loop2: detected capacity change from 0 to 32768 [ 228.022576][ T7132] (syz.2.1038,7132,0):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small! (size 0, needed 8) [ 228.759100][ T7137] loop3: detected capacity change from 0 to 1024 [ 229.734651][ T26] audit: type=1326 audit(1763545884.362:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.3.1047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05aca36c9 code=0x0 [ 230.519516][ C0] net_ratelimit: 1370 callbacks suppressed [ 230.519535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.538788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.551786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.564807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.577870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.590856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.603818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.616789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.629843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.642860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.894103][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1054'. [ 232.314914][ T7179] loop2: detected capacity change from 0 to 1024 [ 232.315799][ T7177] loop0: detected capacity change from 0 to 512 [ 233.646745][ T7198] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1072'. [ 234.208559][ T7216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.216481][ T7216] IPv6: NLM_F_CREATE should be set when creating new route [ 234.223794][ T7216] IPv6: NLM_F_CREATE should be set when creating new route [ 234.415351][ T7220] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1081'. [ 234.578613][ T7218] loop5: detected capacity change from 0 to 4096 [ 234.692229][ T7218] ntfs: (device loop5): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 234.737182][ T7218] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 234.766977][ T7218] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 234.813221][ T7218] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 234.919390][ T7227] loop0: detected capacity change from 0 to 512 [ 234.951972][ T7218] ntfs: volume version 3.1. [ 234.998222][ T7218] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 235.012888][ T7218] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 235.056330][ T7218] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 235.080902][ T7218] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 235.111506][ T7218] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 235.128644][ T7218] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 235.140456][ T7218] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 235.265259][ T7232] loop3: detected capacity change from 0 to 128 [ 235.406431][ T7232] attempt to access beyond end of device [ 235.406431][ T7232] loop3: rw=2049, want=226, limit=128 [ 235.527315][ C0] net_ratelimit: 1626 callbacks suppressed [ 235.527336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.546316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.559316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.577518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.590534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.603631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.616641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.629605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.642657][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.655658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 236.207643][ T7227] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.701192][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 236.740049][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 236.786360][ T7248] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1092'. [ 236.817810][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 236.851826][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 236.904509][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 236.955362][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 236.997366][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 237.063345][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 237.107610][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 237.135329][ T7245] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.180064][ T7245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.214257][ T7245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.317781][ T7253] loop0: detected capacity change from 0 to 32768 [ 238.967906][ T7253] [ 238.967906][ T7253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.967906][ T7253] [ 239.159793][ T7253] [ 239.159793][ T7253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.159793][ T7253] [ 239.190559][ T7267] ERROR: (device loop0): diWrite: ixpxd invalid [ 239.190559][ T7267] [ 239.216315][ T7253] JFS: metapage_get_blocks failed [ 239.284560][ T7253] [ 239.284560][ T7253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.284560][ T7253] [ 239.349445][ T7253] [ 239.349445][ T7253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.349445][ T7253] [ 239.350428][ T7267] ERROR: (device loop0): txCommit: [ 239.350428][ T7267] [ 239.450422][ T7267] [ 239.450422][ T7267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.450422][ T7267] [ 239.552676][ T7267] ERROR: (device loop0): diFree: invalid inoext [ 239.552676][ T7267] [ 239.786588][ T4800] ERROR: (device loop0): diWrite: ixpxd invalid [ 239.786588][ T4800] [ 239.826448][ T4800] ERROR: (device loop0): txCommit: [ 239.826448][ T4800] [ 239.891324][ T4800] jfs_write_inode: jfs_commit_inode failed! [ 239.917586][ T4185] [ 239.917586][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.917586][ T4185] [ 239.978413][ T4185] [ 239.978413][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.978413][ T4185] [ 240.537266][ C0] net_ratelimit: 4009 callbacks suppressed [ 240.537286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.555553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.567995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.580404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.592910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 240.605406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.618522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.630867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.644003][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 240.657185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.789706][ T7296] __nla_validate_parse: 64 callbacks suppressed [ 241.789724][ T7296] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1114'. [ 242.593095][ T7312] loop0: detected capacity change from 0 to 128 [ 242.750740][ T7312] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 243.030034][ T7312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.927209][ T4232] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 245.177107][ T4232] usb 6-1: Using ep0 maxpacket: 8 [ 245.299438][ T4232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 245.319623][ T4232] usb 6-1: no configurations [ 245.324568][ T7330] loop3: detected capacity change from 0 to 32768 [ 245.350340][ T4232] usb 6-1: can't read configurations, error -22 [ 245.547179][ C0] net_ratelimit: 4067 callbacks suppressed [ 245.547199][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.565526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.577993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.590425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.602876][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 245.615390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.628430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.640802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.653850][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 245.666936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.940392][ T7330] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1133 (7330) [ 246.013128][ T7330] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 246.059928][ T7368] loop1: detected capacity change from 0 to 2048 [ 246.071133][ T7330] BTRFS info (device loop3): force zlib compression, level 3 [ 246.101036][ T7330] BTRFS info (device loop3): using free space tree [ 246.139683][ T7330] BTRFS info (device loop3): has skinny extents [ 247.273338][ T7368] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.500761][ T7404] loop5: detected capacity change from 0 to 4096 [ 247.571752][ T4232] Bluetooth: hci5: command 0x0406 tx timeout [ 248.204731][ T7330] BTRFS error (device loop3): open_ctree failed: -22 [ 248.964988][ T7437] loop0: detected capacity change from 0 to 2048 [ 249.090148][ T7439] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.157908][ T7437] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 249.275682][ T7437] Remounting filesystem read-only [ 249.320347][ T7437] NILFS (loop0): error -2 truncating bmap (ino=16) [ 249.396075][ T4185] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 250.590435][ C0] net_ratelimit: 2725 callbacks suppressed [ 250.590455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 250.609424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.621784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.634337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.646716][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.659164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 250.671633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.684671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.697066][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.710333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 251.015684][ T7466] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1177'. [ 251.964314][ T7496] loop1: detected capacity change from 0 to 1024 [ 252.923947][ T26] audit: type=1326 audit(1763545907.762:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.1.1190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x0 [ 253.399520][ T7505] rtc_cmos 00:00: Alarms can be up to one day in the future [ 253.788830][ T7421] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.032129][ T7421] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.039884][ T7421] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.053067][ T7421] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.060438][ T7421] rtc rtc0: __rtc_set_alarm: err=-22 [ 255.621323][ C0] net_ratelimit: 2238 callbacks suppressed [ 255.621345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.639603][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.652619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 255.665722][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.678125][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.690590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.702977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.716585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 255.729049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.742105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.747649][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764044][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.812837][ T7535] syz.5.1206 uses obsolete (PF_INET,SOCK_PACKET) [ 255.995286][ T7537] loop5: detected capacity change from 0 to 1024 [ 256.174315][ T7537] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 256.582597][ T7544] netlink: 'syz.0.1209': attribute type 4 has an invalid length. [ 257.007172][ T4802] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 257.417310][ T4802] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 257.436073][ T4802] usb 1-1: config 0 has no interface number 0 [ 257.617378][ T4802] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 257.636714][ T4802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.664848][ T4802] usb 1-1: Product: syz [ 257.679454][ T4802] usb 1-1: Manufacturer: syz [ 257.684110][ T4802] usb 1-1: SerialNumber: syz [ 257.731090][ T4802] usb 1-1: config 0 descriptor?? [ 258.029101][ T4802] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 258.056258][ T4802] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 258.096838][ T4802] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 258.134952][ T4802] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 258.199457][ T4802] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 258.267933][ T4802] usb 1-1: USB disconnect, device number 7 [ 258.307982][ T4802] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 258.378312][ T4802] keyspan 1-1:0.133: device disconnected [ 258.724151][ T7569] netlink: 'syz.0.1220': attribute type 4 has an invalid length. [ 258.913931][ T4802] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 259.178890][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1226'. [ 259.342897][ T4802] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.377112][ T4802] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 259.466368][ T4802] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.504292][ T7596] capability: warning: `syz.3.1231' uses deprecated v2 capabilities in a way that may be insecure [ 259.531009][ T4802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.583366][ T4802] usb 6-1: config 0 descriptor?? [ 259.665108][ T4802] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 259.704312][ T7601] netlink: 'syz.2.1232': attribute type 4 has an invalid length. [ 260.063018][ T4802] usb 6-1: USB disconnect, device number 6 [ 260.629059][ C0] net_ratelimit: 3979 callbacks suppressed [ 260.629077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 260.648088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.660452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.672983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.685392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.697862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 260.710321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.723641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.736009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.749085][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 260.816770][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'. [ 260.938501][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'. [ 260.968968][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'. [ 261.735379][ T7635] loop1: detected capacity change from 0 to 256 [ 262.413672][ T7623] loop3: detected capacity change from 0 to 32768 [ 262.492154][ T7640] netlink: 'syz.2.1246': attribute type 4 has an invalid length. [ 262.657505][ T7623] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 262.676233][ T7623] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 262.696329][ T7623] XFS (loop3): DAX and reflink cannot be used together! [ 262.764246][ T7649] loop2: detected capacity change from 0 to 512 [ 263.475491][ T7651] device wlan0 entered promiscuous mode [ 263.514485][ T7651] device macsec1 entered promiscuous mode [ 264.522718][ T7647] sched: RT throttling activated [ 265.239235][ T7649] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 265.573571][ T7649] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1247: couldn't read orphan inode 26 (err -116) [ 265.590059][ T7649] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.601186][ T7649] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.637700][ C0] net_ratelimit: 2520 callbacks suppressed [ 265.637721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.655951][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.668302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.680494][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.692765][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 265.705297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.717975][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.730173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.742853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 265.837201][ T7421] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 265.853341][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.257542][ T7421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.300728][ T7421] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 266.349919][ T7421] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.390417][ T7421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.442807][ T7421] usb 4-1: config 0 descriptor?? [ 266.529744][ T7421] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 266.734538][ T7421] usb 4-1: USB disconnect, device number 6 [ 268.511667][ T7694] autofs4:pid:7694:autofs_fill_super: called with bogus options [ 270.337524][ T7420] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 270.657531][ C0] net_ratelimit: 2597 callbacks suppressed [ 270.657551][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.675865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.688901][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 270.702008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.714396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.726879][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.739264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.751735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 270.764172][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.769783][ T7420] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.777373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.833294][ T7420] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 270.881303][ T7420] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.921536][ T7420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.972514][ T7420] usb 6-1: config 0 descriptor?? [ 271.004913][ T7724] loop0: detected capacity change from 0 to 2048 [ 271.045398][ T7420] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 271.255132][ T7420] usb 6-1: USB disconnect, device number 7 [ 272.422682][ T7724] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 272.479532][ T7724] NILFS (loop0): mounting unchecked fs [ 272.567404][ T4201] udevd[4201]: incorrect nilfs2 checksum on /dev/loop0 [ 272.588819][ T7724] NILFS (loop0): recovery complete [ 272.598800][ T7731] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.935749][ T7730] fuse: Bad value for 'group_id' [ 273.382426][ T7734] loop0: detected capacity change from 0 to 2048 [ 273.456930][ T7734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.447633][ T7745] loop5: detected capacity change from 0 to 128 [ 274.745742][ T7745] qnx6: superblock #1 checksum error [ 274.896393][ T7755] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1290'. [ 275.672057][ C0] net_ratelimit: 3034 callbacks suppressed [ 275.672080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 275.691126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.703697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.716163][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.728553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.741039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 275.753534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.766706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.779073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.792135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 277.055274][ T7770] loop0: detected capacity change from 0 to 40427 [ 277.166851][ T7770] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 277.227034][ T7770] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 277.291354][ T7770] F2FS-fs (loop0): invalid crc value [ 277.454726][ T7770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 277.832314][ T7770] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 277.847735][ T7770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 277.975555][ T7785] loop1: detected capacity change from 0 to 16 [ 278.180944][ T7785] erofs: (device loop1): mounted with root inode @ nid 36. [ 278.909698][ T7787] ODEBUG: Out of memory. ODEBUG disabled [ 279.503055][ T7791] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1304'. [ 280.677755][ C0] net_ratelimit: 2572 callbacks suppressed [ 280.677778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.695990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.709058][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 280.722183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.734487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.769001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.781381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.793793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 280.806151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.819067][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.758655][ T7818] netlink: 'syz.1.1315': attribute type 4 has an invalid length. [ 282.104984][ T7820] loop2: detected capacity change from 0 to 4096 [ 282.436278][ T7832] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.510472][ T7858] loop1: detected capacity change from 0 to 1024 [ 284.720864][ T26] audit: type=1326 audit(1763545939.992:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.1.1335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663f32b6c9 code=0x0 [ 285.767831][ C0] net_ratelimit: 2540 callbacks suppressed [ 285.767852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.786258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.798720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.811066][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.823521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 285.835974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.848943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.861174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.873826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 285.886551][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.144539][ T7896] loop0: detected capacity change from 0 to 256 [ 286.917505][ T7904] overlayfs: unrecognized mount option "/" or missing value [ 288.956518][ T7927] loop1: detected capacity change from 0 to 128 [ 289.271507][ T7934] loop5: detected capacity change from 0 to 1024 [ 290.987691][ C0] net_ratelimit: 2313 callbacks suppressed [ 290.987714][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.006166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.018563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.031265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 291.043758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.056821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.069128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.081818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 291.094647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.106882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.522228][ T7949] netlink: 'syz.0.1365': attribute type 4 has an invalid length. [ 293.289169][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1375'. [ 294.188896][ T7990] loop3: detected capacity change from 0 to 512 [ 294.251933][ T7990] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 294.288888][ T7990] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 294.347589][ T7990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 294.371343][ T7990] System zones: 1-12 [ 294.546056][ T7990] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1385: inode #1: comm syz.3.1385: iget: illegal inode # [ 294.627379][ T7990] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1385: error while reading EA inode 1 err=-117 [ 294.752411][ T7990] EXT4-fs (loop3): 1 orphan inode deleted [ 294.768802][ T7990] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,usrjquota=,journal_dev=0x0000000000000dcd,resgid=0x0000000000000000,minixdf,debug,grpquota,nombcache,minixdf,nomblk_io_submit,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback. [ 295.096941][ T8012] loop2: detected capacity change from 0 to 1024 [ 295.355812][ T8018] 9pnet: Insufficient options for proto=fd [ 295.380291][ T8016] loop5: detected capacity change from 0 to 128 [ 295.475519][ T8016] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.580637][ T8016] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.952969][ T7421] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 295.997256][ C0] net_ratelimit: 3464 callbacks suppressed [ 295.997277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.015579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.027969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.040442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 296.052885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.065924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.078264][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.197323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:a9:4f:60:ef:0c, vlan:0) [ 296.210449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.222860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.237066][ T7421] usb 6-1: Using ep0 maxpacket: 8 [ 296.367405][ T7421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.417164][ T7421] usb 6-1: config 1 interface 0 altsetting 135 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.457092][ T7421] usb 6-1: config 1 interface 0 has no altsetting 0 [ 296.647190][ T7421] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 296.667697][ T7421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.715994][ T7421] usb 6-1: Product: syz [ 296.744008][ T7421] usb 6-1: Manufacturer: syz [ 296.808088][ T7421] usb 6-1: SerialNumber: syz [ 402.046973][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 402.053984][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8039/1:b..l [ 402.062496][ C0] (detected by 0, t=10502 jiffies, g=30061, q=247) [ 402.069135][ C0] task:syz.2.1394 state:R running task stack:25440 pid: 8039 ppid: 4192 flags:0x00004004 [ 402.081259][ C0] Call Trace: [ 402.084573][ C0] [ 402.087526][ C0] __schedule+0x11bb/0x4390 [ 402.092093][ C0] ? verify_lock_unused+0x140/0x140 [ 402.097319][ C0] ? mark_lock+0x94/0x320 [ 402.101676][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 402.107691][ C0] ? lock_chain_count+0x20/0x20 [ 402.112585][ C0] ? release_firmware_map_entry+0x190/0x190 [ 402.118629][ C0] ? preempt_schedule+0xa7/0xb0 [ 402.123518][ C0] preempt_schedule_common+0x82/0xd0 [ 402.128830][ C0] preempt_schedule+0xa7/0xb0 [ 402.133542][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 402.139199][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 402.144263][ C0] preempt_schedule_thunk+0x16/0x18 [ 402.149490][ C0] _raw_spin_unlock+0x36/0x40 [ 402.154177][ C0] filemap_map_pages+0x1031/0x1390 [ 402.159330][ C0] ? filemap_read_page+0x4c0/0x4c0 [ 402.164477][ C0] ? count_memcg_event_mm+0x311/0x360 [ 402.169880][ C0] ? follow_page_pte+0x320/0xc20 [ 402.174993][ C0] handle_mm_fault+0x257d/0x43b0 [ 402.179971][ C0] ? get_page+0xe0/0xe0 [ 402.184155][ C0] ? follow_page_mask+0xa6e/0x12d0 [ 402.189301][ C0] __get_user_pages+0x93e/0x11c0 [ 402.194292][ C0] ? populate_vma_page_range+0x290/0x290 [ 402.199949][ C0] ? read_lock_is_recursive+0x10/0x10 [ 402.205373][ C0] populate_vma_page_range+0x213/0x290 [ 402.210867][ C0] __mm_populate+0x26f/0x3a0 [ 402.215484][ C0] ? check_vma_flags+0x480/0x480 [ 402.220447][ C0] ? preempt_count_add+0x8d/0x190 [ 402.225514][ C0] ? up_write+0x1bb/0x420 [ 402.229869][ C0] vm_mmap_pgoff+0x203/0x2b0 [ 402.234502][ C0] ? account_locked_vm+0xe0/0xe0 [ 402.239467][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 402.244527][ C0] ksys_mmap_pgoff+0x140/0x780 [ 402.249316][ C0] ? mmap_region+0x1660/0x1660 [ 402.254103][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 402.259331][ C0] do_syscall_64+0x4c/0xa0 [ 402.263773][ C0] ? clear_bhb_loop+0x30/0x80 [ 402.268477][ C0] ? clear_bhb_loop+0x30/0x80 [ 402.273177][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 402.279116][ C0] RIP: 0033:0x7f0b0c8996c9 [ 402.283558][ C0] RSP: 002b:00007f0b0aadf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 402.292014][ C0] RAX: ffffffffffffffda RBX: 00007f0b0caf0090 RCX: 00007f0b0c8996c9 [ 402.300009][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 402.307999][ C0] RBP: 00007f0b0c91bf91 R08: ffffffffffffffff R09: 0000000000000000 [ 402.315988][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 402.323996][ C0] R13: 00007f0b0caf0128 R14: 00007f0b0caf0090 R15: 00007ffe4b214878 [ 402.332002][ C0] [ 402.335124][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10517 jiffies! g30061 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 402.347467][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=12332 [ 402.355370][ C0] rcu: rcu_preempt kthread starved for 10518 jiffies! g30061 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 402.366750][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 402.376728][ C0] rcu: RCU grace-period kthread stack dump: [ 402.382622][ C0] task:rcu_preempt state:I stack:27496 pid: 15 ppid: 2 flags:0x00004000 [ 402.391860][ C0] Call Trace: [ 402.395169][ C0] [ 402.398123][ C0] __schedule+0x11bb/0x4390 [ 402.402658][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 402.408071][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 402.413993][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 402.419930][ C0] ? _raw_spin_unlock+0x40/0x40 [ 402.424801][ C0] ? rcu_is_watching+0x11/0xa0 [ 402.429587][ C0] ? release_firmware_map_entry+0x190/0x190 [ 402.435521][ C0] schedule+0x11b/0x1e0 [ 402.439705][ C0] schedule_timeout+0x15c/0x280 [ 402.444595][ C0] ? console_conditional_schedule+0x40/0x40 [ 402.450513][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 402.456642][ C0] ? update_process_times+0x200/0x200 [ 402.462054][ C0] ? prepare_to_swait_event+0x331/0x350 [ 402.467634][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 402.472530][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 402.477762][ C0] ? dump_blkd_tasks+0x7e0/0x7e0 [ 402.482728][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 402.487524][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 402.492743][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 402.497977][ C0] rcu_gp_kthread+0x98/0x350 [ 402.502593][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 402.507728][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 402.513647][ C0] ? __kthread_parkme+0x157/0x1b0 [ 402.518706][ C0] kthread+0x436/0x520 [ 402.522795][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 402.527929][ C0] ? kthread_blkcg+0xd0/0xd0 [ 402.532546][ C0] ret_from_fork+0x1f/0x30 [ 402.537003][ C0] [ 402.540037][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 402.546380][ C0] NMI backtrace for cpu 0 [ 402.550724][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 402.557763][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.567833][ C0] Call Trace: [ 402.571133][ C0] [ 402.573992][ C0] dump_stack_lvl+0x168/0x230 [ 402.578721][ C0] ? show_regs_print_info+0x20/0x20 [ 402.583939][ C0] ? load_image+0x3b0/0x3b0 [ 402.588472][ C0] ? irq_work_queue+0xbf/0x140 [ 402.593263][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 402.598227][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 402.604405][ C0] ? _printk+0xcc/0x110 [ 402.608585][ C0] ? cpu_online+0x1d/0x30 [ 402.612930][ C0] ? load_image+0x3b0/0x3b0 [ 402.617469][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 402.623566][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 402.629571][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 402.635757][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 402.641246][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 402.646205][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 402.651522][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 402.656750][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 402.661626][ C0] ? account_process_tick+0x227/0x3a0 [ 402.667025][ C0] update_process_times+0x193/0x200 [ 402.672246][ C0] tick_sched_timer+0x37d/0x560 [ 402.677129][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 402.682358][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 402.687935][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 402.693074][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 402.699171][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 402.704153][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 402.710175][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 402.715843][ C0] [ 402.718788][ C0] [ 402.721743][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 402.727748][ C0] RIP: 0010:default_idle+0xb/0x10 [ 402.732801][ C0] Code: bf 48 89 df e8 66 76 09 f8 eb b5 e8 9f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 37 06 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 402.752417][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 402.758511][ C0] RAX: 0e9e755a7bb7ac00 RBX: ffffffff8bebc480 RCX: 0e9e755a7bb7ac00 [ 402.766500][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b1c60 RDI: ffffffff8a59e580 [ 402.774487][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed1017207662 [ 402.782476][ C0] R10: ffffed1017207662 R11: 1ffff11017207661 R12: ffffffff8d699d28 [ 402.790463][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7890 [ 402.798467][ C0] default_idle_call+0x81/0xc0 [ 402.803260][ C0] do_idle+0x21b/0x5b0 [ 402.807347][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 402.812574][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 402.818492][ C0] cpu_startup_entry+0x14/0x20 [ 402.823278][ C0] ? time_init+0x40/0x40 [ 402.827539][ C0] start_kernel+0x486/0x530 [ 402.832072][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 402.838005][ C0]