last executing test programs: 2m19.880353308s ago: executing program 4 (id=555): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="2e000000010002", 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0x9361, 0x0) 2m18.899865939s ago: executing program 4 (id=559): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept$alg(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x10) 2m18.833099161s ago: executing program 4 (id=560): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast1}, &(0x7f0000000300)=0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) 2m4.027535421s ago: executing program 4 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) 2m2.861506016s ago: executing program 4 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m1.020236175s ago: executing program 4 (id=611): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast1}, &(0x7f0000000300)=0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) 1m45.518798561s ago: executing program 32 (id=611): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast1}, &(0x7f0000000300)=0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) 14.499131502s ago: executing program 2 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(0xffffffffffffffff, 0xffff7ffc) mkdirat(0xffffffffffffffff, 0x0, 0x2b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) 11.799870969s ago: executing program 1 (id=938): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1000081, &(0x7f00000000c0), 0x6, 0x595, &(0x7f0000000840)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) socket$kcm(0x10, 0x2, 0x4) 10.771368511s ago: executing program 3 (id=940): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) truncate(&(0x7f0000000300)='./file1\x00', 0x591) write$binfmt_misc(r0, &(0x7f0000000a80)="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", 0xa01) 9.322952812s ago: executing program 3 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x800000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) 8.089182108s ago: executing program 3 (id=947): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) write(r4, &(0x7f0000000000)="1c0000001a005f02", 0x8) 7.03133313s ago: executing program 1 (id=953): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) munmap$binder(r1, 0x8954) 6.969523272s ago: executing program 0 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x111}]}]}, 0x24}}, 0x4882) 6.735158457s ago: executing program 0 (id=955): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c", 0x57, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c1", 0x2b}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d", 0x8b}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.538583321s ago: executing program 5 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r6 = io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 5.319239737s ago: executing program 0 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x13}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 5.307204907s ago: executing program 5 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x800000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) 5.089240952s ago: executing program 0 (id=959): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1000081, &(0x7f00000000c0), 0x6, 0x595, &(0x7f0000000840)="$eJzs3U9sHFcZAPBvJnZ2nTgkhR4KAhpKIaCq69hpo4pLywUJqgqkwqmH1LI3VuR1NvKuS20sYZ84cEWiEie4cOHEoRIHpJ4QV25w41IOSBGKQDUSQlPN7Gyyu911NvGfrePfTxrtm5m387038r4388a7L4BT63JE7ETE2Yh4OyIuRlJsT8olXusseb6P7m0v7d3bXkoiy97811R5hO2lbv6u8xHxs+5K5cH2nmS0NrdWFxuN+nq5PtdeuzPX2tx68dba4kp9pX57YeH6/PWrr1x7eeHQ6vrs2u/vfufW6z/64x++9OFfdr75k7zMr5b78rr1ZE2yLDt4wFe752U6ZstNaUTkZ+71gx/9U+FMWZ+zky4IjyX/e/xsRDxXpu+rTq5MAMDRyrKLkV3sXe9Io7P0SgbyAAAnU37PPxtJWivv/2cjTWu1Ygyv+nScSxvNVvuFm82N20l3iG86vXmrUb9ajBVGVGI6ydfnI+JSsXTWFwbWr0XEUxHxi8pMsV5bajaWJ3LFAwCcH+j//1PJ+//KOG/1hAAATjI9OQCcPp/s/6cnUg4A4Pi4/weA06en/x/ryT8AcPJVB777P1SWHEtZAIDjMXT8/60LD9LPJAM/8QUAnHSe/wPAqfKDN97Il2wvS4rfv15+Z3NjtfnOi8v11mptbWOpttRcv1NbaTZXit/sWRtyiN3elUazeWf+pdh4d65db7XnWptbN9aaG7fbN4rf9b5R98UCAJi8p5794G9JROx8a6ZYojuXw8P/IQA44dKImUmXAZiMM5MuADAxUx7/wallPB542D/3Dr1GmImI90ZnMLAAn25XPj9i/H/w2qD/ecD/D2F2bGDCyo/11KTLARy/g43/Gz2Ak2z/jt+TAXiSZVliPn8AOGXGuIMfPkTw08O/FgEm47Ge/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApN1ssSVor5wKfjTSt1SIuRMSlmE5u3mrUr0bEZyLir5XpSr4+P+lCAwAHlP4zKef/unLx+dnBvWeT/1aK14j48a/e/OW7i+3u1IH3t7ffK7a31xeGBqgcfR0AgB5Tgxu6/XTx2nMj/9G97aXucpwFvPvtzuSiedy9e9tLD+YjnioLX41827l/J32VSUZOTPxodnYj4pnB+qf3918qZz4djJ/HvnBk8aOo4Wxf/P7LqLTY13nNz8XnZsaMdwhlhifFB3n789qwz18al4vX8vM31d+YVuPnn2xcH0O3/dvLOu3fXk/8/Pjfv1At2pph7d/lcWO89Kfvjty3eyb7wlREN/ZeT/vTUS1Sw+I/P2b8v3/xy8+NOlnZryOuxH7xO6m59tqdudbm1u++9/6fV+or9dsLC9fnr1995drLC3PFGPVcd6S61NM57Nc03t2NODcifvUh9f/amPX/zf/efusr+8T/xleHxU/j6X3i533i12N9rPiL594fOX13Hn95RP2n+uKf7Xtfvu2FwYON+IP88B9by2MVFAA4Fq3NrdXFRqO+Pk4ija3Vxe7V1Njv6kvMPNa7xkzEkR15eGK67yRUjyrW+RG7fvvIB5yOYz0/h5bYfYTMlckU9Uw0urccD81c5ts5SNAsO0CZL5eJdJ88E2qQgGPz4EM/6ZIAAAAAAAAAAAAAAACjtH5Y/uTfIX8pqvfLcJOuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+ujwMAAP//IhjD+Q==") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) 4.010010165s ago: executing program 0 (id=960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.009797755s ago: executing program 1 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, 0x3d, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @ipv4=@empty=0x4000700}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 3.617797823s ago: executing program 5 (id=962): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt(r0, 0x5, 0x6, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffe07}}, 0x40440d0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r1, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.892284738s ago: executing program 1 (id=963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2.80874114s ago: executing program 2 (id=964): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) socket$kcm(0x10, 0x2, 0x4) 2.80806573s ago: executing program 5 (id=965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.704642394s ago: executing program 2 (id=966): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}]}}}}}}}, 0x0) 1.371654031s ago: executing program 0 (id=967): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c", 0x57, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c1", 0x2b}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d", 0x8b}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.289215012s ago: executing program 2 (id=968): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x50, r0, 0x101, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x3, 0x6, 0x0, {0x3, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x5}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4004880) 1.203229724s ago: executing program 1 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x13}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 1.179838705s ago: executing program 2 (id=970): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept$alg(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.097521437s ago: executing program 3 (id=971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x44000) 1.094717017s ago: executing program 5 (id=972): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x9, 0x5, 0x0, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x6e6bb3, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3501, 0x4, 0x3, 0xb7}}, 0xe8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f00000000c0)={0x43a0, 0x100000000, 0x7ffffffffff00002, 0x1, 0xffffdeff}) 1.021550818s ago: executing program 3 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, 0x3d, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @ipv4=@empty=0x4000700}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 117.654277ms ago: executing program 1 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(0xffffffffffffffff, 0xffff7ffc) mkdirat(0xffffffffffffffff, 0x0, 0x2b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) 117.448467ms ago: executing program 2 (id=975): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket(0x40000000015, 0x805, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(r5, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r6 = fsopen(&(0x7f0000000340)='smb3\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 78.998088ms ago: executing program 3 (id=976): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) socket$kcm(0x10, 0x2, 0x4) 0s ago: executing program 5 (id=977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) kernel console output (not intermixed with test programs): 3.044766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.054252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.093488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.103660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.112603][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.119674][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.128651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.137727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.146658][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.153786][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.164176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.174153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.183988][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.191089][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.202272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.210805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.219131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.226857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.234643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.244015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.251298][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 73.261708][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.273171][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.293854][ T4192] device veth0_vlan entered promiscuous mode [ 73.301335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.309349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.321412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.329993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.331230][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 73.338511][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 73.351852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.360394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.368300][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 73.369277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.374471][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 73.394291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.402406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.427927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.437268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.457307][ T4192] device veth1_vlan entered promiscuous mode [ 73.488142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.499902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.510493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.519895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.530161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.538935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.548478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.557180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.565429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.587525][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.598303][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.625222][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.639192][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.649820][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.665057][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.674359][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.683169][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.692080][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.700462][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.709106][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.717779][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.726622][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.735543][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.745492][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.754084][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.762695][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.770753][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.781149][ T4195] device veth0_vlan entered promiscuous mode [ 73.810928][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.832872][ T4195] device veth1_vlan entered promiscuous mode [ 73.857907][ T4192] device veth0_macvtap entered promiscuous mode [ 73.885486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.897108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.920424][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.941013][ T4192] device veth1_macvtap entered promiscuous mode [ 73.948388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.968735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.992536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.007801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.049517][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.063983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.084968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.114880][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.125394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.141902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.158922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.168166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.192157][ T4195] device veth0_macvtap entered promiscuous mode [ 74.214711][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.224409][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.235435][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.245905][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.262792][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.274447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.283026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.290462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.300665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.308190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.319011][ T4195] device veth1_macvtap entered promiscuous mode [ 74.329332][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.367056][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.379728][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.379782][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.386234][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.404214][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.427097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.435517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.444743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.456620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.468009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.482402][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.495259][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.506549][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.538129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.548857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.558414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.567652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.578557][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.589415][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.598490][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.607406][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.655487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.666169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.675429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.684312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.697056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.705090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.758633][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.767947][ T4189] device veth0_vlan entered promiscuous mode [ 74.770369][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.782065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.796735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.808009][ T4191] device veth0_vlan entered promiscuous mode [ 74.829930][ T4190] device veth0_vlan entered promiscuous mode [ 74.848488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.858094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.866499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.874988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.884495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.893246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.901996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.922919][ T4189] device veth1_vlan entered promiscuous mode [ 74.943225][ T4190] device veth1_vlan entered promiscuous mode [ 74.961164][ T4191] device veth1_vlan entered promiscuous mode [ 74.975449][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.986343][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.022075][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.030383][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.043212][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.053923][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.062893][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.086442][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.096123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.107243][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.113490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.154234][ T4189] device veth0_macvtap entered promiscuous mode [ 75.188178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.197795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.206750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.220220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.230903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.239689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.253902][ T4190] device veth0_macvtap entered promiscuous mode [ 75.265491][ T4189] device veth1_macvtap entered promiscuous mode [ 75.281831][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.289698][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.297336][ T4191] device veth0_macvtap entered promiscuous mode [ 75.323462][ T4190] device veth1_macvtap entered promiscuous mode [ 75.341594][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.351752][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.359805][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 75.360237][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.375381][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.385038][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.396886][ T4191] device veth1_macvtap entered promiscuous mode [ 75.439119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.451275][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 75.458458][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 75.465077][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 75.471522][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.482066][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 75.496899][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.508371][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.534932][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.558891][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.571517][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.584448][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.594962][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.605991][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.616801][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.629477][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.642851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.654105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.689033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.700243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.710458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.741879][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.765938][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.777263][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.788363][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.800814][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.828461][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.840345][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859192][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.870241][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.886026][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.898803][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.936122][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.945337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.955405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.964795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.974721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.996836][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.029574][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.249302][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.331081][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.490190][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.509801][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.526886][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.538429][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.548309][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.558804][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.568841][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.579752][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.592694][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.701416][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.710228][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.795565][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806378][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.839245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.997105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.411097][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 77.435966][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.446710][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.457664][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.468838][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.485895][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.500146][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.517891][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.529025][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.551789][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.554430][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 77.567927][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 77.572565][ T4234] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.574851][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 77.589561][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 77.600039][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.745022][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.755216][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.786814][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.797791][ T4298] loop2: detected capacity change from 0 to 512 [ 77.799184][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.825793][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.835214][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.156183][ T4298] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.230358][ T4298] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.262733][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.282519][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.300863][ T4295] fido_id[4295]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.438489][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.456481][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.589768][ T4298] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 78.608151][ T4298] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 78.622072][ T4298] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.11: Failed to acquire dquot type 0 [ 78.648454][ T4298] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 78.663135][ T4298] overlayfs: failed to verify upper root origin [ 79.236008][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.263226][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.322516][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.330361][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.406975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.480836][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.518342][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.525456][ T4317] loop3: detected capacity change from 0 to 512 [ 79.548630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.569192][ T390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.580523][ T4317] EXT4-fs (loop3): Ignoring removed bh option [ 79.588068][ T4317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.593029][ T390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.649808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.700734][ T4317] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.709819][ T4317] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 79.727020][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.738997][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.772313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.789626][ T4317] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 79.803226][ T4317] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 79.815046][ T4317] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 80.047310][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 80.085061][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.687448][ T4327] device bridge_slave_1 left promiscuous mode [ 80.853900][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.290782][ T4343] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 81.979677][ T4356] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.144090][ T4373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.150016][ T26] audit: type=1107 audit(1782892959.066:2): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 82.236848][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 82.605118][ T4385] loop4: detected capacity change from 0 to 512 [ 82.774243][ T4385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.847387][ T4385] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.958868][ T4385] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.34: corrupted xattr block 33 [ 83.047087][ T4400] device syzkaller0 entered promiscuous mode [ 83.135504][ T4400] tipc: Started in network mode [ 83.150957][ T4400] tipc: Node identity 5a97f2d33c82, cluster identity 4711 [ 83.162639][ T4400] tipc: Enabled bearer , priority 0 [ 83.253454][ T4399] tipc: Resetting bearer [ 83.360943][ T4399] tipc: Disabling bearer [ 83.949241][ T4406] device syzkaller0 entered promiscuous mode [ 87.887563][ T4439] loop1: detected capacity change from 0 to 128 [ 87.988728][ T4441] loop0: detected capacity change from 0 to 128 [ 88.296829][ T4447] device syzkaller0 entered promiscuous mode [ 88.331407][ T4447] tipc: Started in network mode [ 88.346860][ T4447] tipc: Node identity 1a3fa0e4f265, cluster identity 4711 [ 88.371422][ T4447] tipc: Enabled bearer , priority 0 [ 88.398272][ T4446] tipc: Resetting bearer [ 88.433416][ T4446] tipc: Disabling bearer [ 88.704936][ T4451] Zero length message leads to an empty skb [ 88.791630][ T4439] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.803134][ T4439] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.875215][ T4441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.898793][ T4441] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.261063][ T4206] Bluetooth: Wrong link type (-22) [ 89.343921][ T4458] loop4: detected capacity change from 0 to 512 [ 91.153918][ T4458] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.173927][ T4458] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 92.402198][ T4494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.63'. [ 92.616951][ T4313] Bluetooth: hci5: command 0x1003 tx timeout [ 93.167101][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 93.510297][ T4518] loop1: detected capacity change from 0 to 4096 [ 93.541526][ T4518] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 94.818158][ T4518] EXT4-fs (loop1): Test dummy encryption mode enabled [ 95.008308][ T1109] cfg80211: failed to load regulatory.db [ 95.081804][ T4518] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 95.133221][ T4518] System zones: 0-5 [ 95.165895][ T4530] loop3: detected capacity change from 0 to 512 [ 95.220407][ T4530] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.242755][ T4518] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,errors=continue,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 95.250668][ T4234] Bluetooth: hci5: command 0x1001 tx timeout [ 95.278115][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 95.300255][ T4530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 95.316389][ T4530] System zones: 1-12 [ 95.356948][ T4530] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.509851][ T4530] EXT4-fs (loop3): 1 truncate cleaned up [ 95.536392][ T4530] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 95.649003][ T4541] overlayfs: failed to resolve './bus': -2 [ 95.699647][ T4552] loop0: detected capacity change from 0 to 512 [ 97.977590][ T4572] fuse: Unknown parameter 'user_id00000000000000000000' [ 98.727073][ T4234] Bluetooth: hci5: command 0x1009 tx timeout [ 98.801792][ T4582] netlink: 'syz.4.91': attribute type 40 has an invalid length. [ 98.968975][ T4585] loop1: detected capacity change from 0 to 4096 [ 99.156699][ T4590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.586029][ T4585] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 100.020205][ T4596] loop4: detected capacity change from 0 to 4096 [ 100.190899][ T4596] EXT4-fs (loop4): inline encryption not supported [ 100.200377][ T4585] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.241604][ T4596] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.289826][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 100.345668][ T4596] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 100.406936][ T4596] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 100.469765][ T4596] System zones: 0-5 [ 100.515806][ T4609] loop0: detected capacity change from 0 to 512 [ 100.522925][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,lazytime,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 100.582236][ T4614] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.585986][ T4609] EXT4-fs (loop0): unable to read superblock [ 100.637322][ T4585] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 100.758556][ T4619] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 100.830222][ T4612] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 101.558976][ T4632] fuse: Unknown parameter 'user_id00000000000000000000' [ 101.591009][ T4612] overlayfs: upper fs does not support tmpfile. [ 101.651361][ T4612] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 101.765468][ T4642] loop2: detected capacity change from 0 to 512 [ 101.970108][ T4642] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.750568][ C1] sched: RT throttling activated [ 103.443141][ T4642] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 105.125787][ T23] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 105.405630][ T26] audit: type=1107 audit(1782892982.326:3): pid=4665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.734594][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.300640][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.317496][ T4688] loop1: detected capacity change from 0 to 128 [ 106.400848][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 106.409038][ T23] usb 1-1: can't read configurations, error -71 [ 106.451446][ T4688] ======================================================= [ 106.451446][ T4688] WARNING: The mand mount option has been deprecated and [ 106.451446][ T4688] and is ignored by this kernel. Remove the mand [ 106.451446][ T4688] option from the mount to silence this warning. [ 106.451446][ T4688] ======================================================= [ 106.486432][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.193633][ T4688] EXT4-fs (loop1): Test dummy encryption mode enabled [ 107.285738][ T4688] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: none. [ 107.340910][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 107.356161][ T4688] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.391528][ T4698] loop4: detected capacity change from 0 to 512 [ 107.414011][ T4698] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.461073][ T4234] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.470273][ T4234] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 107.490845][ T4698] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 107.517299][ T4234] usb 3-1: config 179 has no interface number 0 [ 107.540696][ T4234] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.593366][ T4234] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.613337][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.432996][ T4710] device bridge1 entered promiscuous mode [ 109.689245][ T4234] usb 3-1: USB disconnect, device number 2 [ 111.684518][ T4753] netlink: 'syz.3.135': attribute type 11 has an invalid length. [ 111.935955][ T4759] loop4: detected capacity change from 0 to 512 [ 111.954538][ T4759] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.963859][ T4759] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 113.216005][ T4781] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.142'. [ 115.034916][ T4804] loop3: detected capacity change from 0 to 512 [ 115.060879][ T4804] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.079883][ T4804] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 117.041216][ T4833] netlink: 'syz.1.161': attribute type 12 has an invalid length. [ 117.057702][ T4833] netlink: 'syz.1.161': attribute type 29 has an invalid length. [ 117.066011][ T4833] netlink: 148 bytes leftover after parsing attributes in process `syz.1.161'. [ 117.081229][ T4833] netlink: 'syz.1.161': attribute type 2 has an invalid length. [ 117.089055][ T4833] netlink: 23 bytes leftover after parsing attributes in process `syz.1.161'. [ 117.105288][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 117.125728][ T4835] device veth1_to_team entered promiscuous mode [ 117.145280][ T4835] device gretap0 entered promiscuous mode [ 117.165788][ T4835] device hsr1 entered promiscuous mode [ 117.448488][ T4845] loop3: detected capacity change from 0 to 512 [ 117.488809][ T4846] loop1: detected capacity change from 0 to 2048 [ 117.687560][ T4845] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.826480][ T4845] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 118.397709][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.153634][ T4846] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 119.176545][ T4863] loop4: detected capacity change from 0 to 512 [ 119.203823][ T4846] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 119.223837][ T4846] EXT4-fs (loop1): This should not happen!! Data will be lost [ 119.223837][ T4846] [ 119.236538][ T4846] EXT4-fs (loop1): Total free blocks count 0 [ 119.379165][ T4846] EXT4-fs (loop1): Free/Dirty block details [ 119.398307][ T4846] EXT4-fs (loop1): free_blocks=4096 [ 119.623730][ T4863] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.657547][ T4846] EXT4-fs (loop1): dirty_blocks=16 [ 119.683798][ T4863] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 119.772882][ T4846] EXT4-fs (loop1): Block reservation details [ 119.778933][ T4846] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 119.788761][ T4878] loop0: detected capacity change from 0 to 512 [ 119.921235][ T4332] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 119.973644][ T4882] loop2: detected capacity change from 0 to 256 [ 119.980996][ T4332] EXT4-fs (loop1): This should not happen!! Data will be lost [ 119.980996][ T4332] [ 120.047912][ T4878] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.065968][ T4878] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 120.715363][ T4895] loop1: detected capacity change from 0 to 512 [ 120.826080][ T4895] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.858830][ T4895] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 122.217471][ T26] audit: type=1107 audit(1782892999.136:4): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 122.252130][ T26] audit: type=1107 audit(1782892999.176:5): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 125.197102][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.663832][ T4949] device syzkaller0 entered promiscuous mode [ 126.126011][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.187452][ T4971] loop1: detected capacity change from 0 to 512 [ 126.228383][ T4966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.249638][ T4971] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.300004][ T4971] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 126.880372][ T26] audit: type=1107 audit(1782893003.796:6): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.098739][ T4982] capability: warning: `syz.4.206' uses deprecated v2 capabilities in a way that may be insecure [ 127.206673][ T26] audit: type=1107 audit(1782893004.126:7): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.931576][ T5004] loop4: detected capacity change from 0 to 256 [ 128.018438][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.071954][ T5009] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 130.083523][ T5009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.116376][ T5010] loop4: detected capacity change from 0 to 512 [ 130.204710][ T5010] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 130.239202][ T5010] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.284775][ T5010] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 130.369568][ T5010] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 130.437799][ T5010] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.215: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 130.511574][ T5013] loop0: detected capacity change from 0 to 8192 [ 130.528292][ T5010] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.215: couldn't read orphan inode 13 (err -117) [ 130.610869][ T5010] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 130.697698][ T5010] netlink: 324 bytes leftover after parsing attributes in process `syz.4.215'. [ 131.402159][ T5028] loop1: detected capacity change from 0 to 1024 [ 131.525714][ T5028] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.594386][ T5038] loop3: detected capacity change from 0 to 512 [ 131.635885][ T5042] loop0: detected capacity change from 0 to 256 [ 131.700083][ T5038] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.750863][ T5038] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 132.664411][ T4527] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.715583][ T5059] loop3: detected capacity change from 0 to 512 [ 132.738804][ T4527] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 132.756919][ T4527] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.756919][ T4527] [ 132.767478][ T4527] EXT4-fs (loop1): Total free blocks count 0 [ 132.780035][ T5059] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.800712][ T4527] EXT4-fs (loop1): Free/Dirty block details [ 132.828197][ T4527] EXT4-fs (loop1): free_blocks=20480 [ 132.870440][ T4527] EXT4-fs (loop1): dirty_blocks=10288 [ 132.877674][ T4527] EXT4-fs (loop1): Block reservation details [ 132.883940][ T4527] EXT4-fs (loop1): i_reserved_data_blocks=643 [ 132.912423][ T5059] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 132.988336][ T4720] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 133.100098][ T4720] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.100098][ T4720] [ 133.958231][ T26] audit: type=1107 audit(1782893010.876:8): pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 135.303714][ T5090] loop0: detected capacity change from 0 to 128 [ 135.532842][ T5090] EXT4-fs (loop0): Ignoring removed nobh option [ 135.562222][ T5090] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 135.586192][ T5090] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.815364][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.824716][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.770789][ T1109] Bluetooth: hci5: command 0x1003 tx timeout [ 136.776977][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 137.774737][ T5110] fuse: Unknown parameter '0x0000000000000005' [ 137.932401][ T5113] netlink: 'syz.4.248': attribute type 4 has an invalid length. [ 137.967985][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 138.898812][ T4236] Bluetooth: hci5: command 0x1001 tx timeout [ 138.906026][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 139.520631][ T26] audit: type=1107 audit(1782893016.376:9): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 139.863540][ T5141] tipc: Enabled bearer , priority 0 [ 139.983246][ T5136] tipc: Disabling bearer [ 140.081839][ T5145] fuse: Unknown parameter '0x0000000000000005' [ 141.053934][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 142.251472][ T5183] device syzkaller0 entered promiscuous mode [ 142.263605][ T5183] tipc: Enabled bearer , priority 0 [ 142.435147][ T5182] tipc: Resetting bearer [ 142.456169][ T5182] tipc: Disabling bearer [ 142.473495][ T5186] fuse: Unknown parameter '0x0000000000000005' [ 142.482823][ T26] audit: type=1107 audit(1782893019.396:10): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 143.185321][ T5194] loop2: detected capacity change from 0 to 256 [ 143.272296][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.877784][ T5224] device syzkaller0 entered promiscuous mode [ 145.907095][ T5224] tipc: Started in network mode [ 145.961374][ T5224] tipc: Node identity 96488e224b78, cluster identity 4711 [ 146.054766][ T5224] tipc: Enabled bearer , priority 0 [ 146.066416][ T5223] tipc: Resetting bearer [ 146.106544][ T5223] tipc: Disabling bearer [ 147.710367][ T26] audit: type=1107 audit(1782893024.626:11): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 150.012421][ T5250] vivid-001: kernel_thread() failed [ 150.112537][ T5250] vivid-001: kernel_thread() failed [ 150.121075][ T5250] vivid-001: kernel_thread() failed [ 150.126761][ T5250] vivid-001: kernel_thread() failed [ 150.132315][ T5250] vivid-001: kernel_thread() failed [ 150.137842][ T5250] vivid-001: kernel_thread() failed [ 150.147061][ T5250] vivid-001: kernel_thread() failed [ 153.311701][ T5272] loop1: detected capacity change from 0 to 512 [ 153.377413][ T5272] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.433182][ T5272] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 154.987296][ T1109] Bluetooth: hci5: command 0x1003 tx timeout [ 154.994247][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 155.349511][ T5303] device syzkaller0 entered promiscuous mode [ 155.379619][ T5303] tipc: Enabled bearer , priority 0 [ 155.625127][ T5302] tipc: Resetting bearer [ 155.962608][ T5302] tipc: Disabling bearer [ 157.010648][ T1109] Bluetooth: hci5: command 0x1001 tx timeout [ 157.016802][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 159.289395][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 159.723055][ T5332] loop2: detected capacity change from 0 to 512 [ 159.774118][ T5335] netlink: 124 bytes leftover after parsing attributes in process `syz.0.308'. [ 159.824408][ T5332] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.844095][ T5332] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 160.920659][ T5355] loop2: detected capacity change from 0 to 512 [ 161.174984][ T5355] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.218105][ T5353] device syzkaller0 entered promiscuous mode [ 161.355471][ T5355] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 161.371853][ T5358] tipc: Enabled bearer , priority 0 [ 161.618185][ T5351] tipc: Resetting bearer [ 161.637834][ T5351] tipc: Disabling bearer [ 164.877992][ T5408] loop4: detected capacity change from 0 to 512 [ 165.129559][ T5416] loop2: detected capacity change from 0 to 512 [ 165.148562][ T5408] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.201280][ T5408] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 165.528189][ T5416] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.667903][ T5416] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 166.126577][ T5423] device syzkaller0 entered promiscuous mode [ 166.136871][ T5423] tipc: Enabled bearer , priority 0 [ 166.145604][ T5421] tipc: Resetting bearer [ 166.164450][ T5421] tipc: Disabling bearer [ 166.289861][ T5428] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 166.410692][ T5428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.529597][ T5435] bond1: (slave geneve2): making interface the new active one [ 166.545075][ T5435] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 166.903556][ T144] Bluetooth: Error in BCSP hdr checksum [ 167.161659][ T154] Bluetooth: Error in BCSP hdr checksum [ 167.167373][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 168.827225][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 168.835511][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 169.266254][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 169.675142][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 169.707000][ T5464] loop3: detected capacity change from 0 to 512 [ 169.753068][ T5464] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.795844][ T5464] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 169.821047][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.837944][ T4232] usb 2-1: config 0 has no interfaces? [ 170.021042][ T4232] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 170.034819][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 170.056454][ T4232] usb 2-1: Product: syz [ 170.069163][ T4232] usb 2-1: Manufacturer: syz [ 170.084411][ T4232] usb 2-1: SerialNumber: syz [ 170.121510][ T4232] usb 2-1: config 0 descriptor?? [ 170.650357][ T5470] loop3: detected capacity change from 0 to 512 [ 170.689807][ T5470] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.729790][ T5470] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 170.860778][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 170.867002][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 170.995326][ T5472] device syzkaller0 entered promiscuous mode [ 171.029882][ T5472] tipc: Started in network mode [ 171.056300][ T5006] usb 2-1: USB disconnect, device number 2 [ 171.060785][ T5472] tipc: Node identity e645e6838c44, cluster identity 4711 [ 171.069817][ T5472] tipc: Enabled bearer , priority 0 [ 171.095398][ T5471] tipc: Resetting bearer [ 171.126310][ T5471] tipc: Disabling bearer [ 171.365620][ T26] audit: type=1107 audit(1782893048.286:12): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.315103][ T5503] loop3: detected capacity change from 0 to 512 [ 172.346463][ T5503] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.370669][ T5503] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 172.742338][ T5512] device syzkaller0 entered promiscuous mode [ 172.940885][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 173.344056][ T5512] tipc: Enabled bearer , priority 0 [ 173.417471][ T5510] tipc: Resetting bearer [ 174.440824][ T5510] tipc: Disabling bearer [ 174.742790][ T4232] tipc: Node number set to 1712714451 [ 174.963246][ T5533] loop0: detected capacity change from 0 to 512 [ 175.143391][ T5533] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.240863][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.305358][ T5533] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 175.560915][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 175.691570][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.713910][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.396760][ T4232] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 176.405931][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 176.414848][ T4232] usb 5-1: Product: syz [ 176.419109][ T4232] usb 5-1: Manufacturer: syz [ 176.423802][ T4232] usb 5-1: SerialNumber: syz [ 176.433715][ T4232] usb 5-1: config 0 descriptor?? [ 176.544758][ T4232] hub 5-1:0.0: bad descriptor, ignoring hub [ 176.561130][ T4232] hub: probe of 5-1:0.0 failed with error -5 [ 176.627116][ T26] audit: type=1107 audit(1782893053.536:13): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 177.351468][ T5559] loop2: detected capacity change from 0 to 512 [ 177.555944][ T5559] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.586942][ T5559] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 177.864302][ T1109] usb 5-1: USB disconnect, device number 2 [ 178.008352][ T5567] device syzkaller0 entered promiscuous mode [ 178.048975][ T5567] tipc: Started in network mode [ 178.063149][ T5567] tipc: Node identity ae58195b76ee, cluster identity 4711 [ 178.082291][ T5567] tipc: Enabled bearer , priority 0 [ 178.094779][ T5566] tipc: Resetting bearer [ 178.170524][ T5566] tipc: Disabling bearer [ 180.557064][ T5583] loop4: detected capacity change from 0 to 512 [ 180.652584][ T5583] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.705900][ T5583] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 181.918988][ T5598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 182.128358][ T26] audit: type=1107 audit(1782893059.046:14): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 183.531142][ T5006] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.490964][ T5006] usb 2-1: Using ep0 maxpacket: 32 [ 184.611609][ T5006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.264605][ T5627] loop2: detected capacity change from 0 to 512 [ 185.281770][ T5006] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.370824][ T5627] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.423856][ T5627] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 185.460996][ T5006] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.500640][ T5006] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.508878][ T5006] usb 2-1: Product: syz [ 185.543702][ T5006] usb 2-1: Manufacturer: syz [ 185.559941][ T5006] usb 2-1: SerialNumber: syz [ 185.588213][ T5006] usb 2-1: config 0 descriptor?? [ 185.642370][ T5006] hub 2-1:0.0: bad descriptor, ignoring hub [ 185.676638][ T5006] hub: probe of 2-1:0.0 failed with error -5 [ 186.599049][ T26] audit: type=1107 audit(1782893063.496:15): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 187.909209][ T4232] usb 2-1: USB disconnect, device number 3 [ 187.996117][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.466885][ T5687] loop1: detected capacity change from 0 to 512 [ 188.759143][ T5687] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.850897][ T5687] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 191.029387][ T26] audit: type=1107 audit(1782893067.946:16): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 191.239258][ T5719] netlink: 68 bytes leftover after parsing attributes in process `syz.1.405'. [ 194.227763][ T5753] loop1: detected capacity change from 0 to 1024 [ 194.740042][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 194.746778][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 194.752887][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 194.758915][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 194.765003][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 194.885897][ T5753] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 195.173085][ T5761] loop2: detected capacity change from 0 to 512 [ 195.231334][ T5761] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.301080][ T5761] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 195.553411][ T26] audit: type=1107 audit(1782893072.326:17): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.490887][ T5778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.418'. [ 196.900702][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 197.151331][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 197.254397][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.273468][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.281118][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.470906][ T4232] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.491191][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.499398][ T4232] usb 5-1: Product: syz [ 197.534369][ T4232] usb 5-1: Manufacturer: syz [ 197.539017][ T4232] usb 5-1: SerialNumber: syz [ 197.559555][ T4232] usb 5-1: config 0 descriptor?? [ 197.621601][ T4232] hub 5-1:0.0: bad descriptor, ignoring hub [ 197.627558][ T4232] hub: probe of 5-1:0.0 failed with error -5 [ 198.562563][ T4234] usb 5-1: USB disconnect, device number 3 [ 199.849019][ T26] audit: type=1107 audit(1782893076.766:18): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 200.869152][ T5824] loop4: detected capacity change from 0 to 512 [ 201.967054][ T5824] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.009184][ T5824] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 202.475547][ T5837] netlink: 68 bytes leftover after parsing attributes in process `syz.0.436'. [ 204.710763][ T5006] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 205.580748][ T5006] usb 1-1: Using ep0 maxpacket: 32 [ 205.701054][ T5006] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.980849][ T5006] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 206.026959][ T5006] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 206.076205][ T5006] usb 1-1: Product: syz [ 206.242974][ T5006] usb 1-1: Manufacturer: syz [ 206.247747][ T5006] usb 1-1: SerialNumber: syz [ 206.274500][ T5006] usb 1-1: config 0 descriptor?? [ 206.314365][ T5006] hub 1-1:0.0: bad descriptor, ignoring hub [ 206.327762][ T5006] hub: probe of 1-1:0.0 failed with error -5 [ 207.218195][ T5883] tipc: Enabled bearer , priority 0 [ 207.272946][ T5882] tipc: Disabling bearer [ 207.680866][ T7] usb 1-1: USB disconnect, device number 4 [ 208.652171][ T144] Bluetooth: Error in BCSP hdr checksum [ 208.940462][ T5901] loop1: detected capacity change from 0 to 512 [ 209.006396][ T5901] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.065965][ T5901] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 209.739860][ T5907] device syzkaller0 entered promiscuous mode [ 210.707514][ T5357] Bluetooth: hci5: command 0x1003 tx timeout [ 210.718440][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 210.914141][ T5922] tipc: Enabled bearer , priority 0 [ 210.943207][ T5921] tipc: Disabling bearer [ 212.931814][ T4235] Bluetooth: hci5: command 0x1001 tx timeout [ 212.938035][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 213.421001][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 214.879495][ T5966] tipc: Enabled bearer , priority 0 [ 214.949340][ T5970] loop3: detected capacity change from 0 to 512 [ 214.955865][ T7] usb 2-1: device not accepting address 4, error -71 [ 215.010779][ T4235] Bluetooth: hci5: command 0x1009 tx timeout [ 215.048997][ T5970] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.067037][ T5970] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 215.101771][ T5965] tipc: Disabling bearer [ 218.378461][ T6019] loop0: detected capacity change from 0 to 512 [ 218.513155][ T6019] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.526810][ T6019] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 218.540018][ T6022] loop2: detected capacity change from 0 to 512 [ 218.669659][ T6022] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.692670][ T6022] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 219.182326][ T6033] loop4: detected capacity change from 0 to 4096 [ 219.278758][ T6033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.491458][ T6063] loop2: detected capacity change from 0 to 512 [ 221.582902][ T6063] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.627104][ T6063] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 222.950069][ T6065] loop4: detected capacity change from 0 to 512 [ 223.048799][ T6065] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 223.079575][ T4301] udevd[4301]: incorrect ext4 checksum on /dev/loop4 [ 223.138341][ T6075] loop0: detected capacity change from 0 to 512 [ 223.199843][ T6075] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.250680][ T6075] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 225.513782][ T6095] loop1: detected capacity change from 0 to 512 [ 225.611884][ T6095] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.682486][ T6095] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 227.178979][ T6108] loop4: detected capacity change from 0 to 512 [ 227.294268][ T6108] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.350806][ T6108] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 227.845803][ T6111] loop2: detected capacity change from 0 to 512 [ 227.886862][ T6111] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.920345][ T6111] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 230.247099][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 230.524626][ T6150] device syzkaller0 entered promiscuous mode [ 230.934207][ T6156] loop4: detected capacity change from 0 to 512 [ 231.020088][ T6156] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.059916][ T6156] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 231.473048][ T6171] loop3: detected capacity change from 0 to 512 [ 231.527750][ T6171] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.586344][ T6171] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 231.983519][ T6188] loop2: detected capacity change from 0 to 512 [ 232.039142][ T6188] EXT4-fs (loop2): Ignoring removed nobh option [ 232.103243][ T6188] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 232.131324][ T6188] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 232.196368][ T6188] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.528: inode has both inline data and extents flags [ 232.273957][ T6188] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.528: couldn't read orphan inode 13 (err -117) [ 232.320635][ T6188] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 232.603255][ T6188] EXT4-fs (loop2): shut down requested (2) [ 235.142342][ T155] Bluetooth: Error in BCSP hdr checksum [ 235.567660][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.611981][ T6224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.698338][ T6226] device syzkaller0 entered promiscuous mode [ 236.375608][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 236.931144][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 236.941905][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 238.328245][ T6266] device syzkaller0 entered promiscuous mode [ 238.600710][ T4178] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 238.824303][ T4178] usb 4-1: device descriptor read/64, error -71 [ 239.011653][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 239.017868][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 239.100789][ T4178] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 239.222316][ T6277] loop1: detected capacity change from 0 to 512 [ 239.301491][ T6277] EXT4-fs (loop1): 1 truncate cleaned up [ 239.310749][ T4178] usb 4-1: device descriptor read/64, error -71 [ 239.318285][ T6277] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 239.409205][ T6277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.551: bg 0: block 465: padding at end of block bitmap is not set [ 239.461044][ T4178] usb usb4-port1: attempt power cycle [ 239.486199][ T6277] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 239.505366][ T6282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.519488][ T6283] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 239.539676][ T6283] EXT4-fs (loop1): This should not happen!! Data will be lost [ 239.539676][ T6283] [ 239.549777][ T6277] EXT4-fs (loop1): This should not happen!! Data will be lost [ 239.549777][ T6277] [ 239.565554][ T6283] EXT4-fs (loop1): Total free blocks count 0 [ 239.572016][ T6277] EXT4-fs (loop1): Total free blocks count 0 [ 239.578335][ T6283] EXT4-fs (loop1): Free/Dirty block details [ 239.590404][ T6277] EXT4-fs (loop1): Free/Dirty block details [ 239.610286][ T6283] EXT4-fs (loop1): free_blocks=0 [ 239.620144][ T6277] EXT4-fs (loop1): free_blocks=0 [ 239.696226][ T6282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.512176][ T4178] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 241.081013][ T4178] usb 4-1: device descriptor read/8, error -71 [ 241.090645][ T5006] Bluetooth: hci5: command 0x1009 tx timeout [ 241.392871][ T6303] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.406124][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 250.609354][ T6404] loop0: detected capacity change from 0 to 512 [ 251.047012][ T6404] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 251.055147][ T6404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 251.063949][ T6404] System zones: 0-1, 15-15, 18-18, 34-34 [ 251.100529][ T6404] EXT4-fs (loop0): orphan cleanup on readonly fs [ 251.107124][ T6404] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 251.116724][ T6404] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 251.131351][ T6404] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 251.148239][ T6404] EXT4-fs (loop0): 1 truncate cleaned up [ 251.154104][ T6404] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 251.482049][ T6422] loop1: detected capacity change from 0 to 512 [ 251.550117][ T6422] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 251.611787][ T6422] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 252.334761][ T6430] loop0: detected capacity change from 0 to 256 [ 256.301455][ T6465] loop3: detected capacity change from 0 to 1024 [ 256.326426][ T6469] loop0: detected capacity change from 0 to 512 [ 256.493196][ T6463] tipc: Enabling of bearer rejected, failed to enable media [ 256.516117][ T6469] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.633164][ T6469] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 257.242962][ T6465] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,discard,lazytime,errors=remount-ro,stripe=0x0000000000000010,noload,init_itable,. Quota mode: none. [ 257.283054][ T6465] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 257.301648][ T6465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.598'. [ 258.421465][ T6490] device bond_slave_0 entered promiscuous mode [ 258.428110][ T6490] device bond_slave_1 entered promiscuous mode [ 258.716099][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.725196][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.064405][ T6490] device bond_slave_0 left promiscuous mode [ 259.070490][ T6490] device bond_slave_1 left promiscuous mode [ 260.380055][ T6527] tipc: Enabling of bearer rejected, failed to enable media [ 263.477529][ T6567] vivid-001: kernel_thread() failed [ 263.489091][ T6567] vivid-001: kernel_thread() failed [ 263.497467][ T6567] vivid-001: kernel_thread() failed [ 263.503214][ T6567] vivid-001: kernel_thread() failed [ 263.508745][ T6567] vivid-001: kernel_thread() failed [ 263.514428][ T6567] vivid-001: kernel_thread() failed [ 263.523216][ T6567] vivid-001: kernel_thread() failed [ 270.283992][ T6644] vivid-001: kernel_thread() failed [ 270.295429][ T6644] vivid-001: kernel_thread() failed [ 270.303577][ T6644] vivid-001: kernel_thread() failed [ 270.309070][ T6644] vivid-001: kernel_thread() failed [ 270.314642][ T6644] vivid-001: kernel_thread() failed [ 270.320190][ T6644] vivid-001: kernel_thread() failed [ 270.328780][ T6644] vivid-001: kernel_thread() failed [ 272.219250][ T6676] loop1: detected capacity change from 0 to 512 [ 273.363348][ T6676] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.423854][ T6676] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 276.393186][ T6730] loop3: detected capacity change from 0 to 512 [ 277.536336][ T6730] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.584246][ T6730] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 277.626239][ T6745] loop1: detected capacity change from 0 to 512 [ 277.717956][ T6745] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.747615][ T6745] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 278.954404][ T6738] chnl_net:caif_netlink_parms(): no params data found [ 279.241911][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.306160][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.340672][ T1354] Bluetooth: hci5: command 0x0409 tx timeout [ 279.367408][ T6738] device bridge_slave_0 entered promiscuous mode [ 279.419700][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.457390][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.491716][ T6738] device bridge_slave_1 entered promiscuous mode [ 279.575384][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.624902][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.704568][ T6738] team0: Port device team_slave_0 added [ 279.754866][ T6738] team0: Port device team_slave_1 added [ 279.816613][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.844137][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.932607][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.966397][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.994734][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.093245][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.209979][ T6738] device hsr_slave_0 entered promiscuous mode [ 280.231693][ T6738] device hsr_slave_1 entered promiscuous mode [ 280.258999][ T6738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.278548][ T6738] Cannot create hsr debugfs directory [ 280.508292][ T6738] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.539873][ T6738] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.575082][ T6738] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.592569][ T6738] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.777698][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.826969][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.903358][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.921740][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.995565][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.249467][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.499102][ T4527] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.506300][ T4527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.583694][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 281.593014][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.602052][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.611169][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.618252][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.643838][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.729061][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.732399][ T6786] loop3: detected capacity change from 0 to 512 [ 281.762340][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.792488][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.816686][ T6786] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.861207][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.876736][ T6786] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 281.877151][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.948102][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.964771][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.988236][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.001702][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.026274][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.183980][ T6805] loop1: detected capacity change from 0 to 512 [ 283.581039][ T6805] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.762732][ T1354] Bluetooth: hci5: command 0x040f tx timeout [ 283.770473][ T6805] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 283.806087][ T6810] loop3: detected capacity change from 0 to 512 [ 283.859423][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.869086][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.990861][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.011621][ T6810] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 284.071998][ T6810] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 284.168478][ T6810] System zones: 0-1, 15-15, 18-18, 34-34 [ 284.182245][ T6810] EXT4-fs (loop3): orphan cleanup on readonly fs [ 284.188898][ T6810] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 284.207171][ T6810] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 284.228911][ T6810] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 284.238398][ T6810] EXT4-fs (loop3): 1 truncate cleaned up [ 284.307632][ T6810] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 284.893382][ T6826] loop1: detected capacity change from 0 to 1024 [ 284.989738][ T6826] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 284.998647][ T6826] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 284.998647][ T6826] [ 285.009513][ T6826] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 285.663173][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.692669][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.734705][ T6738] device veth0_vlan entered promiscuous mode [ 285.765924][ T6738] device veth1_vlan entered promiscuous mode [ 285.778491][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.788285][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.797333][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.821048][ T4234] Bluetooth: hci5: command 0x0419 tx timeout [ 285.863189][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.941749][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.005562][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.411429][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.560152][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.617760][ T6853] loop2: detected capacity change from 0 to 512 [ 286.688351][ T6738] device veth0_macvtap entered promiscuous mode [ 286.748544][ T6738] device veth1_macvtap entered promiscuous mode [ 286.759730][ T6853] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.783785][ T6855] loop1: detected capacity change from 0 to 512 [ 286.793337][ T6853] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 286.831415][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.868579][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.880147][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.898095][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.911176][ T26] audit: type=1107 audit(1782893163.826:19): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 286.920064][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.007131][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.076531][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.097011][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.118543][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.139042][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.158692][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.177969][ T6863] loop0: detected capacity change from 0 to 512 [ 287.186185][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.197103][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.224291][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.269739][ T6855] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.283856][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.299508][ T6855] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 287.320787][ T6863] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.341061][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.369680][ T6863] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 287.386389][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.440605][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.530900][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.560454][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.610235][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.648072][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.675144][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.716250][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.900773][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.135080][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.278298][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.313749][ T6738] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.369579][ T6738] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.387051][ T6738] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.546490][ T6738] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.958474][ T6879] loop0: detected capacity change from 0 to 512 [ 289.025044][ T6879] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 289.055737][ T390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.080787][ T6879] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 289.111392][ T390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.138235][ T6879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 289.147435][ T6879] EXT4-fs (loop0): orphan cleanup on readonly fs [ 289.152065][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.167165][ T6879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.690: bg 0: block 361: padding at end of block bitmap is not set [ 289.301781][ T6879] EXT4-fs (loop0): Remounting filesystem read-only [ 289.359245][ T4677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.369380][ T6879] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 289.390752][ T4677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.398367][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.608971][ T6888] loop1: detected capacity change from 0 to 1024 [ 289.759667][ T6879] EXT4-fs (loop0): Remounting filesystem read-only [ 289.802703][ T6888] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 289.812218][ T6888] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 289.812218][ T6888] [ 289.823043][ T6888] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 289.891414][ T6879] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.690: attempt to clear invalid blocks 33619980 len 1 [ 290.126570][ T6879] EXT4-fs (loop0): Remounting filesystem read-only [ 290.135899][ T6879] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.690: invalid indirect mapped block 1811939328 (level 0) [ 290.198288][ T6879] EXT4-fs (loop0): Remounting filesystem read-only [ 290.223244][ T6879] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.690: invalid indirect mapped block 2185560079 (level 1) [ 290.356439][ T6879] EXT4-fs (loop0): Remounting filesystem read-only [ 290.369947][ T6879] EXT4-fs (loop0): 1 truncate cleaned up [ 290.386023][ T6879] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 290.886150][ T6897] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 290.946700][ T6879] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.690: dx entry: limit 0 != root limit 125 [ 291.068585][ T6879] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.690: Corrupt directory, running e2fsck is recommended [ 291.200833][ T6879] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 5: comm syz.0.690: path /141/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 292.206141][ T26] audit: type=1107 audit(1782893169.126:20): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 292.916553][ T6935] loop0: detected capacity change from 0 to 512 [ 293.003532][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.159394][ T6935] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.220441][ T6935] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 293.340587][ T6946] loop2: detected capacity change from 0 to 1024 [ 293.525818][ T6946] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 293.534696][ T6946] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 293.534696][ T6946] [ 293.545557][ T6946] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 295.418174][ T6964] loop0: detected capacity change from 0 to 512 [ 297.582726][ T6997] loop0: detected capacity change from 0 to 512 [ 298.186178][ T7001] loop1: detected capacity change from 0 to 512 [ 298.204018][ T6997] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 298.213767][ T6997] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 298.221966][ T6997] System zones: 0-1, 15-15, 18-18, 34-34 [ 298.228677][ T6997] EXT4-fs (loop0): orphan cleanup on readonly fs [ 298.235629][ T6997] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 298.245042][ T6997] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 298.259713][ T6997] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 298.268276][ T6997] EXT4-fs (loop0): 1 truncate cleaned up [ 298.274059][ T6997] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 298.325636][ T7001] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.346903][ T7004] loop5: detected capacity change from 0 to 512 [ 298.368404][ T7001] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 298.528347][ T7004] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.660687][ T7004] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 299.106285][ T7011] loop0: detected capacity change from 0 to 1024 [ 299.232590][ T7011] EXT4-fs (loop0): Unrecognized mount option "uid=00000000000000000000" or missing value [ 300.426326][ T7011] Invalid ELF header magic: != ELF [ 301.399738][ T7041] loop1: detected capacity change from 0 to 128 [ 301.560726][ T7041] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.614805][ T7041] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.873469][ T7053] device bond0 entered promiscuous mode [ 301.879079][ T7053] device bond_slave_0 entered promiscuous mode [ 301.920293][ T7053] device bond_slave_1 entered promiscuous mode [ 301.964910][ T7053] device batadv0 entered promiscuous mode [ 301.981336][ T7053] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 302.038909][ T7053] Cannot create hsr debugfs directory [ 302.049114][ T7053] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 302.049181][ T7055] loop1: detected capacity change from 0 to 256 [ 302.082351][ T7053] device bond0 left promiscuous mode [ 302.097958][ T7053] device bond_slave_0 left promiscuous mode [ 302.118375][ T7053] device bond_slave_1 left promiscuous mode [ 302.130778][ T7053] device batadv0 left promiscuous mode [ 302.522542][ T7061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 303.238038][ T26] audit: type=1107 audit(1782893180.156:21): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.318406][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 303.556883][ T7076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.734'. [ 303.728398][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 303.737543][ T7082] netlink: 64 bytes leftover after parsing attributes in process `syz.3.735'. [ 305.574244][ T7092] loop1: detected capacity change from 0 to 512 [ 305.674382][ T7092] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.700625][ T7092] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 305.708617][ T7096] loop0: detected capacity change from 0 to 8 [ 305.757757][ T7094] loop3: detected capacity change from 0 to 4096 [ 305.862914][ T7094] EXT4-fs (loop3): Test dummy encryption mode enabled [ 305.922057][ T7094] EXT4-fs (loop3): Ignoring removed orlov option [ 305.977459][ T7094] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 306.456560][ T7106] loop3: detected capacity change from 0 to 512 [ 306.696360][ T7106] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.817082][ T7111] loop0: detected capacity change from 0 to 512 [ 306.881769][ T7106] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 309.487076][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.746'. [ 310.137434][ T7128] loop5: detected capacity change from 0 to 256 [ 311.057018][ T7147] syz.3.755 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 312.268071][ T7162] loop2: detected capacity change from 0 to 512 [ 312.445673][ T7160] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 312.741241][ T7162] EXT4-fs (loop2): inline encryption not supported [ 312.747858][ T7162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 312.905338][ T7162] EXT4-fs (loop2): 1 truncate cleaned up [ 312.914375][ T7162] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 313.330278][ T7170] loop1: detected capacity change from 0 to 256 [ 313.716235][ T7175] loop2: detected capacity change from 0 to 512 [ 314.223145][ T7175] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.249215][ T7175] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 314.774651][ T7183] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 316.056438][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 318.871600][ T7233] device syzkaller0 entered promiscuous mode [ 319.365588][ T7237] tipc: Enabled bearer , priority 0 [ 319.411945][ T7236] tipc: Disabling bearer [ 319.779659][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 320.147431][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.154059][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.438986][ T7249] loop2: detected capacity change from 0 to 512 [ 320.510114][ T7249] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 320.593733][ T7249] EXT4-fs (loop2): 1 truncate cleaned up [ 320.599436][ T7249] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 321.209744][ T7253] loop1: detected capacity change from 0 to 8192 [ 321.326007][ T7253] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.658330][ T7285] loop5: detected capacity change from 0 to 512 [ 323.831088][ T7285] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.840305][ T7285] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 323.926042][ T7287] tipc: Enabled bearer , priority 0 [ 325.666510][ T7286] tipc: Disabling bearer [ 325.716479][ T7301] loop5: detected capacity change from 0 to 512 [ 325.798056][ T7301] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.869549][ T7301] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 325.942097][ T1109] tipc: Node number set to 3710946850 [ 327.460480][ T7332] loop3: detected capacity change from 0 to 512 [ 327.502056][ T7332] EXT4-fs (loop3): Ignoring removed nobh option [ 327.525553][ T7332] EXT4-fs (loop3): Ignoring removed bh option [ 329.539699][ T7306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.755360][ T7349] loop2: detected capacity change from 0 to 512 [ 331.039973][ T7349] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 331.048143][ T7349] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 331.056665][ T7349] System zones: 0-1, 15-15, 18-18, 34-34 [ 331.072314][ T7349] EXT4-fs (loop2): orphan cleanup on readonly fs [ 331.079320][ T7349] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 331.089004][ T7349] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 331.103697][ T7349] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 331.121149][ T7349] EXT4-fs (loop2): 1 truncate cleaned up [ 331.126926][ T7349] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 332.783496][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025cdd800: rx timeout, send abort [ 333.149539][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025cdd800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 334.369304][ T7404] loop5: detected capacity change from 0 to 512 [ 334.508536][ T7406] loop3: detected capacity change from 0 to 1024 [ 334.842477][ T7404] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.864324][ T7406] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 334.874049][ T7406] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 334.874049][ T7406] [ 334.884913][ T7406] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 334.945284][ T7404] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 335.289713][ T7410] device syzkaller0 entered promiscuous mode [ 336.108218][ T7417] tipc: Enabled bearer , priority 0 [ 336.395979][ T7416] tipc: Disabling bearer [ 340.848636][ T7464] tipc: Enabled bearer , priority 0 [ 340.872884][ T7463] tipc: Disabling bearer [ 341.616337][ T7480] loop3: detected capacity change from 0 to 1024 [ 342.554422][ T7480] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 342.563258][ T7480] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 342.563258][ T7480] [ 342.574011][ T7480] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 343.203286][ T7492] device syzkaller0 entered promiscuous mode [ 343.716299][ T7504] loop1: detected capacity change from 0 to 512 [ 343.879716][ T7504] EXT4-fs (loop1): Test dummy encryption mode enabled [ 344.086528][ T7504] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.854: inode has both inline data and extents flags [ 344.167182][ T7504] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.854: couldn't read orphan inode 15 (err -117) [ 344.255529][ T7504] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 344.794923][ T7510] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 344.804613][ T7510] overlayfs: upper fs does not support tmpfile. [ 344.811669][ T7510] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 345.388995][ T7523] tipc: Enabled bearer , priority 0 [ 345.459289][ T7522] tipc: Disabling bearer [ 347.359382][ T7542] device syzkaller0 entered promiscuous mode [ 347.725862][ T7551] loop1: detected capacity change from 0 to 512 [ 347.764536][ T7551] EXT4-fs (loop1): Ignoring removed bh option [ 347.790141][ T7551] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.842585][ T7551] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 347.854833][ T7551] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 347.879847][ T7551] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 347.889440][ T7551] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 348.977636][ T6678] Bluetooth: hci1: command 0x1003 tx timeout [ 349.006289][ T4203] Bluetooth: hci1: sending frame failed (-49) [ 350.130050][ T7582] device syzkaller0 entered promiscuous mode [ 350.987120][ T7606] loop3: detected capacity change from 0 to 128 [ 351.091762][ T1109] Bluetooth: hci1: command 0x1001 tx timeout [ 351.137718][ T4203] Bluetooth: hci1: sending frame failed (-49) [ 351.328050][ T7606] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.640698][ T7606] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.412985][ T7619] device syzkaller0 entered promiscuous mode [ 352.685165][ T7627] loop3: detected capacity change from 0 to 512 [ 352.983463][ T7627] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.887: bad orphan inode 11862016 [ 352.994602][ T7627] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.006149][ T7627] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.170985][ T4178] Bluetooth: hci1: command 0x1009 tx timeout [ 354.358202][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 354.930644][ T7660] loop2: detected capacity change from 0 to 512 [ 358.576758][ T7664] loop1: detected capacity change from 0 to 512 [ 359.217770][ T7664] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 359.226364][ T7664] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 359.234661][ T7664] System zones: 0-1, 15-15, 18-18, 34-34 [ 359.241505][ T7664] EXT4-fs (loop1): orphan cleanup on readonly fs [ 359.248504][ T7664] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 359.258169][ T7664] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 359.272845][ T7664] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 359.280147][ T7664] EXT4-fs (loop1): 1 truncate cleaned up [ 359.285888][ T7664] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 360.839769][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.907'. [ 360.857791][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 362.958845][ T7713] device syzkaller0 entered promiscuous mode [ 363.179179][ T7713] tipc: Enabled bearer , priority 0 [ 363.236891][ T7712] tipc: Resetting bearer [ 363.311619][ T7712] tipc: Disabling bearer [ 363.608168][ T7726] loop5: detected capacity change from 0 to 512 [ 363.672079][ T7726] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.729906][ T7726] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 364.475106][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.922'. [ 364.537421][ T26] audit: type=1326 audit(1782893241.456:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 364.642424][ T26] audit: type=1326 audit(1782893241.456:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 364.743413][ T7741] device syzkaller0 entered promiscuous mode [ 364.770341][ T26] audit: type=1326 audit(1782893241.456:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 365.151961][ T26] audit: type=1326 audit(1782893241.456:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 365.582767][ T26] audit: type=1326 audit(1782893241.456:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 365.606993][ T26] audit: type=1326 audit(1782893241.456:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 365.634588][ T26] audit: type=1326 audit(1782893241.456:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 365.660225][ T26] audit: type=1326 audit(1782893241.456:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9464db7e59 code=0x7ffc0000 [ 365.684964][ T7748] loop1: detected capacity change from 0 to 1024 [ 365.821912][ T7748] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.833178][ T7748] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.072719][ T7766] device syzkaller0 entered promiscuous mode [ 367.107735][ T7766] tipc: Enabled bearer , priority 0 [ 367.133709][ T7765] tipc: Resetting bearer [ 367.152457][ T7767] loop5: detected capacity change from 0 to 1024 [ 367.181186][ T7769] process 'syz.3.931' launched './file0' with NULL argv: empty string added [ 367.214026][ T7767] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 367.235917][ T7765] tipc: Disabling bearer [ 367.340695][ T7767] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 367.340695][ T7767] [ 367.389131][ T7767] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 367.536314][ T7775] loop3: detected capacity change from 0 to 512 [ 367.595985][ T7775] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.630722][ T7775] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 368.414208][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 368.459190][ T7786] device syzkaller0 entered promiscuous mode [ 368.576061][ T7790] loop1: detected capacity change from 0 to 512 [ 368.701649][ T7790] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.730770][ T7790] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 369.636969][ T7798] loop3: detected capacity change from 0 to 1024 [ 369.723478][ T7799] input: syz1 as /devices/virtual/input/input5 [ 370.501550][ T7798] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback. [ 370.516596][ T7798] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.626982][ T7798] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.940: Freeing blocks not in datazone - block = 0, count = 16 [ 370.731178][ T7811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.940: bg 0: block 112: padding at end of block bitmap is not set [ 370.846239][ T7811] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 370.905086][ T7811] EXT4-fs (loop3): This should not happen!! Data will be lost [ 370.905086][ T7811] [ 370.934197][ T7811] EXT4-fs (loop3): Total free blocks count 0 [ 370.940336][ T7811] EXT4-fs (loop3): Free/Dirty block details [ 370.947835][ T7811] EXT4-fs (loop3): free_blocks=0 [ 370.952917][ T7811] EXT4-fs (loop3): dirty_blocks=16 [ 370.958038][ T7811] EXT4-fs (loop3): Block reservation details [ 370.964079][ T7811] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 372.729611][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.948'. [ 372.914823][ T7834] device syzkaller0 entered promiscuous mode [ 372.967859][ T7836] capability: warning: `syz.5.950' uses 32-bit capabilities (legacy support in use) [ 374.165905][ T7858] loop5: detected capacity change from 0 to 512 [ 374.705687][ T7858] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 374.713800][ T7858] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 374.722025][ T7858] System zones: 0-1, 15-15, 18-18, 34-34 [ 374.728791][ T7858] EXT4-fs (loop5): orphan cleanup on readonly fs [ 374.735353][ T7858] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 374.744800][ T7858] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 374.759378][ T7858] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 374.773138][ T7858] EXT4-fs (loop5): 1 truncate cleaned up [ 374.778835][ T7858] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 376.664973][ T7877] device syzkaller0 entered promiscuous mode [ 377.084657][ T7877] tipc: Enabled bearer , priority 0 [ 377.246479][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 377.352740][ T7876] tipc: Resetting bearer [ 377.402556][ T7876] tipc: Disabling bearer [ 378.011114][ T7890] loop1: detected capacity change from 0 to 512 [ 378.798283][ T7890] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 378.806373][ T7890] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 378.814887][ T7890] System zones: 0-1, 15-15, 18-18, 34-34 [ 378.826890][ T7890] EXT4-fs (loop1): orphan cleanup on readonly fs [ 378.833891][ T7890] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 378.844911][ T7890] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 378.859524][ T7890] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 378.884480][ T7890] EXT4-fs (loop1): 1 truncate cleaned up [ 378.890233][ T7890] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 378.929708][ T7894] device syzkaller0 entered promiscuous mode [ 379.250072][ T7908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.970'. [ 379.279745][ T7910] loop5: detected capacity change from 0 to 128 [ 379.503925][ T7910] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.618349][ T7910] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.355192][ T7923] ================================================================== [ 380.363891][ T7923] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 380.371280][ T7923] Read of size 8 at addr ffff888028f0c418 by task syz.2.975/7923 [ 380.379848][ T7923] [ 380.382221][ T7923] CPU: 0 PID: 7923 Comm: syz.2.975 Not tainted syzkaller #0 [ 380.389507][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.399763][ T7923] Call Trace: [ 380.403095][ T7923] [ 380.406083][ T7923] dump_stack_lvl+0x188/0x250 [ 380.410899][ T7923] ? show_regs_print_info+0x20/0x20 [ 380.416242][ T7923] ? _printk+0xda/0x130 [ 380.420423][ T7923] ? dvb_device_open+0xc5/0x360 [ 380.425303][ T7923] ? load_image+0x410/0x410 [ 380.429817][ T7923] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 380.435295][ T7923] print_address_description+0x60/0x2d0 [ 380.440856][ T7923] ? dvb_device_open+0xc5/0x360 [ 380.445715][ T7923] kasan_report+0xdf/0x130 [ 380.450154][ T7923] ? dvb_device_open+0xc5/0x360 [ 380.455020][ T7923] dvb_device_open+0xc5/0x360 [ 380.459717][ T7923] chrdev_open+0x585/0x5f0 [ 380.464152][ T7923] ? cd_forget+0x160/0x160 [ 380.468587][ T7923] ? fsnotify_perm+0x3a7/0x560 [ 380.473374][ T7923] ? cd_forget+0x160/0x160 [ 380.477818][ T7923] do_dentry_open+0x7f7/0xf90 [ 380.482530][ T7923] ? vfs_open+0x2b/0x80 [ 380.486700][ T7923] path_openat+0x2718/0x2fb0 [ 380.491335][ T7923] ? __kasan_slab_alloc+0xa9/0xc0 [ 380.496387][ T7923] ? do_filp_open+0x400/0x400 [ 380.501100][ T7923] do_filp_open+0x1df/0x400 [ 380.505619][ T7923] ? vfs_tmpfile+0x300/0x300 [ 380.510235][ T7923] ? _raw_spin_unlock+0x24/0x40 [ 380.515093][ T7923] ? alloc_fd+0x59e/0x650 [ 380.519434][ T7923] do_sys_openat2+0x14b/0x500 [ 380.524114][ T7923] ? __lock_acquire+0x7b50/0x7b50 [ 380.529149][ T7923] ? do_sys_open+0xe0/0xe0 [ 380.533569][ T7923] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 380.539562][ T7923] ? lock_chain_count+0x20/0x20 [ 380.544437][ T7923] __x64_sys_openat+0x135/0x160 [ 380.549303][ T7923] do_syscall_64+0x4c/0xa0 [ 380.553743][ T7923] ? clear_bhb_loop+0x30/0x80 [ 380.558428][ T7923] ? clear_bhb_loop+0x30/0x80 [ 380.563120][ T7923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.569027][ T7923] RIP: 0033:0x7fb659c8268e [ 380.573513][ T7923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.593153][ T7923] RSP: 002b:00007fb657f19b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.601620][ T7923] RAX: ffffffffffffffda RBX: 00007fb657f1a6c0 RCX: 00007fb659c8268e [ 380.609633][ T7923] RDX: 0000000000000002 RSI: 00007fb657f19c00 RDI: ffffffffffffff9c [ 380.617605][ T7923] RBP: 00007fb657f19c00 R08: 0000000000000000 R09: 0000000000000000 [ 380.625574][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 380.633537][ T7923] R13: 00007fb659f4a038 R14: 00007fb659f49fa0 R15: 00007ffda8c6b858 [ 380.641512][ T7923] [ 380.644521][ T7923] [ 380.646832][ T7923] Allocated by task 7748: [ 380.651285][ T7923] __kasan_kmalloc+0xaf/0xe0 [ 380.655873][ T7923] mb_cache_create+0x79/0x500 [ 380.660533][ T7923] ext4_fill_super+0x7156/0x93f0 [ 380.665463][ T7923] mount_bdev+0x28a/0x3c0 [ 380.669782][ T7923] legacy_get_tree+0xe6/0x180 [ 380.674445][ T7923] vfs_get_tree+0x88/0x270 [ 380.678847][ T7923] do_new_mount+0x247/0xa40 [ 380.683333][ T7923] __se_sys_mount+0x2e3/0x3d0 [ 380.687999][ T7923] do_syscall_64+0x4c/0xa0 [ 380.692405][ T7923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.698286][ T7923] [ 380.700595][ T7923] Freed by task 4189: [ 380.704555][ T7923] kasan_set_track+0x4b/0x70 [ 380.709130][ T7923] kasan_set_free_info+0x1f/0x40 [ 380.714048][ T7923] ____kasan_slab_free+0xd5/0x110 [ 380.719059][ T7923] slab_free_freelist_hook+0xec/0x170 [ 380.724440][ T7923] kfree+0xef/0x2a0 [ 380.728231][ T7923] ext4_put_super+0x874/0xbc0 [ 380.732909][ T7923] generic_shutdown_super+0x130/0x300 [ 380.738287][ T7923] kill_block_super+0x7c/0xe0 [ 380.742964][ T7923] deactivate_locked_super+0x93/0xf0 [ 380.748242][ T7923] cleanup_mnt+0x426/0x4d0 [ 380.752648][ T7923] task_work_run+0x125/0x1a0 [ 380.757227][ T7923] exit_to_user_mode_loop+0x10f/0x130 [ 380.762586][ T7923] exit_to_user_mode_prepare+0xee/0x180 [ 380.768114][ T7923] syscall_exit_to_user_mode+0x16/0x40 [ 380.773557][ T7923] do_syscall_64+0x58/0xa0 [ 380.777961][ T7923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.783836][ T7923] [ 380.786146][ T7923] The buggy address belongs to the object at ffff888028f0c400 [ 380.786146][ T7923] which belongs to the cache kmalloc-256 of size 256 [ 380.800324][ T7923] The buggy address is located 24 bytes inside of [ 380.800324][ T7923] 256-byte region [ffff888028f0c400, ffff888028f0c500) [ 380.813500][ T7923] The buggy address belongs to the page: [ 380.819135][ T7923] page:ffffea0000a3c300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28f0c [ 380.829314][ T7923] head:ffffea0000a3c300 order:1 compound_mapcount:0 [ 380.835885][ T7923] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 380.843905][ T7923] raw: 00fff00000010200 ffffea0001858b80 0000000c00000007 ffff888016c41b40 [ 380.852472][ T7923] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 380.861031][ T7923] page dumped because: kasan: bad access detected [ 380.867422][ T7923] page_owner tracks the page as allocated [ 380.873155][ T7923] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2837, ts 23302791483, free_ts 0 [ 380.891463][ T7923] get_page_from_freelist+0x24f6/0x2670 [ 380.897009][ T7923] __alloc_pages+0x1ee/0x480 [ 380.901581][ T7923] new_slab+0xc0/0x4b0 [ 380.905634][ T7923] ___slab_alloc+0x807/0xdd0 [ 380.910204][ T7923] kmem_cache_alloc_trace+0xf9/0x290 [ 380.915470][ T7923] kthread+0x10a/0x520 [ 380.919563][ T7923] ret_from_fork+0x1f/0x30 [ 380.924036][ T7923] page_owner free stack trace missing [ 380.929414][ T7923] [ 380.931741][ T7923] Memory state around the buggy address: [ 380.937370][ T7923] ffff888028f0c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 380.945439][ T7923] ffff888028f0c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 380.953500][ T7923] >ffff888028f0c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 380.961545][ T7923] ^ [ 380.966378][ T7923] ffff888028f0c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 380.974422][ T7923] ffff888028f0c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 380.982464][ T7923] ================================================================== [ 380.990508][ T7923] Disabling lock debugging due to kernel taint [ 380.996775][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.004084][ T7923] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 381.011298][ T7923] CPU: 0 PID: 7923 Comm: syz.2.975 Tainted: G B syzkaller #0 [ 381.019984][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.030039][ T7923] Call Trace: [ 381.033319][ T7923] [ 381.036242][ T7923] dump_stack_lvl+0x188/0x250 [ 381.040923][ T7923] ? show_regs_print_info+0x20/0x20 [ 381.046119][ T7923] ? load_image+0x410/0x410 [ 381.050705][ T7923] panic+0x2f8/0x850 [ 381.054594][ T7923] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 381.060748][ T7923] ? bpf_jit_dump+0xd0/0xd0 [ 381.065252][ T7923] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 381.071226][ T7923] ? _raw_spin_unlock+0x40/0x40 [ 381.076073][ T7923] ? dvb_device_open+0xc5/0x360 [ 381.080919][ T7923] check_panic_on_warn+0x80/0xa0 [ 381.085860][ T7923] ? dvb_device_open+0xc5/0x360 [ 381.090704][ T7923] end_report+0x6d/0xf0 [ 381.094865][ T7923] kasan_report+0x102/0x130 [ 381.099370][ T7923] ? dvb_device_open+0xc5/0x360 [ 381.104255][ T7923] dvb_device_open+0xc5/0x360 [ 381.108937][ T7923] chrdev_open+0x585/0x5f0 [ 381.113367][ T7923] ? cd_forget+0x160/0x160 [ 381.117780][ T7923] ? fsnotify_perm+0x3a7/0x560 [ 381.122541][ T7923] ? cd_forget+0x160/0x160 [ 381.126950][ T7923] do_dentry_open+0x7f7/0xf90 [ 381.131632][ T7923] ? vfs_open+0x2b/0x80 [ 381.135782][ T7923] path_openat+0x2718/0x2fb0 [ 381.140443][ T7923] ? __kasan_slab_alloc+0xa9/0xc0 [ 381.145466][ T7923] ? do_filp_open+0x400/0x400 [ 381.150145][ T7923] do_filp_open+0x1df/0x400 [ 381.154659][ T7923] ? vfs_tmpfile+0x300/0x300 [ 381.159258][ T7923] ? _raw_spin_unlock+0x24/0x40 [ 381.164121][ T7923] ? alloc_fd+0x59e/0x650 [ 381.168458][ T7923] do_sys_openat2+0x14b/0x500 [ 381.173141][ T7923] ? __lock_acquire+0x7b50/0x7b50 [ 381.178185][ T7923] ? do_sys_open+0xe0/0xe0 [ 381.182603][ T7923] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 381.188594][ T7923] ? lock_chain_count+0x20/0x20 [ 381.193438][ T7923] __x64_sys_openat+0x135/0x160 [ 381.198273][ T7923] do_syscall_64+0x4c/0xa0 [ 381.202671][ T7923] ? clear_bhb_loop+0x30/0x80 [ 381.207329][ T7923] ? clear_bhb_loop+0x30/0x80 [ 381.211987][ T7923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 381.217865][ T7923] RIP: 0033:0x7fb659c8268e [ 381.222264][ T7923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.241849][ T7923] RSP: 002b:00007fb657f19b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 381.250369][ T7923] RAX: ffffffffffffffda RBX: 00007fb657f1a6c0 RCX: 00007fb659c8268e [ 381.258333][ T7923] RDX: 0000000000000002 RSI: 00007fb657f19c00 RDI: ffffffffffffff9c [ 381.266289][ T7923] RBP: 00007fb657f19c00 R08: 0000000000000000 R09: 0000000000000000 [ 381.274243][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 381.282201][ T7923] R13: 00007fb659f4a038 R14: 00007fb659f49fa0 R15: 00007ffda8c6b858 [ 381.290164][ T7923] [ 381.293529][ T7923] Kernel Offset: disabled [ 381.297870][ T7923] Rebooting in 86400 seconds..