last executing test programs: 1m59.497540246s ago: executing program 3 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x8, 0xe, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2}}}}) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) 1m58.178771097s ago: executing program 3 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10000, 0x6, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m56.937471346s ago: executing program 3 (id=204): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() modify_ldt$write(0x1, &(0x7f00000009c0)={0x5, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) unshare(0x62040200) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) 1m49.375760765s ago: executing program 3 (id=210): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 1m48.633489032s ago: executing program 3 (id=212): r0 = socket(0x1e, 0x4, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0x4}, {0x7, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) io_submit(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x1ff}, {0xa, 0x4e24, 0x0, @private2, 0x1200}, 0x0, {[0x7, 0x8, 0x7, 0x0, 0x1, 0xffff, 0x0, 0x7]}}, 0x5c) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001880)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x0, 0x178, 0x178, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @empty, 0xff, 0xff, 'geneve0\x00', 'team_slave_0\x00', {}, {0xff}, 0x21, 0x3, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x8, {0x5891}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x5]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x3, 0x2}, {0x4, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000200)=""/215, &(0x7f0000000340)=0xd7) 1m46.452282194s ago: executing program 3 (id=219): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() modify_ldt$write(0x1, &(0x7f00000009c0)={0x5, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) unshare(0x62040200) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) 1m43.435059446s ago: executing program 32 (id=219): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() modify_ldt$write(0x1, &(0x7f00000009c0)={0x5, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) unshare(0x62040200) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) 33.4664307s ago: executing program 2 (id=335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x150}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r3, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r3, 0x2, 0xd, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4001804) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8) 31.570102064s ago: executing program 2 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r1, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000002100)='usbip-vudc.0', 0xc) 30.654680376s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 30.07096051s ago: executing program 2 (id=342): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000840)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x407f0b00, 0x0, 0x1}]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f00000008c0)=""/58, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 28.319843891s ago: executing program 2 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="500100001000050400000000000000007f0000010000000000000000000000007f00000100"/47], 0x150}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r4, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r4, 0x2, 0xd, 0x8}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r5, 0x0, 0x4001804) connect$inet(r3, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 26.894382315s ago: executing program 2 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r3) 14.085686757s ago: executing program 4 (id=372): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 11.371020362s ago: executing program 33 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r3) 11.362002842s ago: executing program 4 (id=377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x150}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r3, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r3, 0x2, 0xd, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4001804) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8) 11.04445176s ago: executing program 4 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x3, 0x80, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x5, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x4, 0x100000000001], 0xeeee0000, 0x4fb40}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.665583263s ago: executing program 4 (id=385): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000002540)=ANY=[@ANYBLOB="400000008f0d03dd8211caeb24926ab5c6e6494bc6954bf7f13660504779c0efb1083936e43546966a1f9d42b76c9ac3f492c72b9522fb03a3fca74573d4d58bbbbb54d002012d2be3623837f672d82abdc34b67a81b9ecddf5a134eee6e440ee1e212eb45e0773aa8fb1ff26e1dfc9812dd783077ea56c4f915e6c9a3a0ea0f4972bddeb7102b43a6b8c618041fdd0c0edb20716a88d84f8df95987", @ANYRES16=r6, @ANYBLOB="200026bd7000ffdbdf250100000014000b00ff01000000000000000000000000000105000d000100000005000d001100000008"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x404c0c8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0x6, 0x6, 0xffff651f, 0x70, 0x15, "fcc573017ecd313d3c83480b9ab3be2e935318"}) tkill(r1, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000009b80)={0x40000012}) read$FUSE(r8, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r9, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x4800, 0x0, 0x4, 0x0, 0xb9a9, 0x9ce}) 4.993286872s ago: executing program 1 (id=387): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) fcntl$lock(r3, 0x25, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="000002000f001dc60000000000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000030000000000"], 0x2c, 0x3) 3.797424821s ago: executing program 1 (id=390): r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x5, 0xfffffffffffffffb) 3.572335587s ago: executing program 0 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x2c, 0x65, 0x0, 0x82, 0x11, 0x0, @rand_addr=0x65010102, @remote}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x10000000005ef}}}}}}}, 0x3e) 3.492901748s ago: executing program 1 (id=392): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f00000042c0)=[{&(0x7f00000000c0)=""/184, 0xb8}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x8, 0xd8, {{0x5, 0x4, 0x1, 0x3d, 0x14, 0x65, 0x0, 0xf8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.00791166s ago: executing program 0 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 2.763865995s ago: executing program 0 (id=394): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) 2.596769869s ago: executing program 0 (id=395): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000340)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x3, 0x27b, &(0x7f0000000980)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 2.476229732s ago: executing program 1 (id=396): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) 2.322094905s ago: executing program 0 (id=397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x150}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r3, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r3, 0x2, 0xd, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4001804) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8) 1.333758329s ago: executing program 1 (id=398): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, 0x0, 0x20000000) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 1.133511074s ago: executing program 0 (id=399): unshare(0x22020600) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 918.168219ms ago: executing program 1 (id=400): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000002540)=ANY=[@ANYBLOB="400000008f0d03dd8211caeb24926ab5c6e6494bc6954bf7f13660504779c0efb1083936e43546966a1f9d42b76c9ac3f492c72b9522fb03a3fca74573d4d58bbbbb54d002012d2be3623837f672d82abdc34b67a81b9ecddf5a134eee6e440ee1e212eb45e0773aa8fb1ff26e1dfc9812dd783077ea56c4f915e6c9a3a0ea0f4972bddeb7102b43a6b8c618041fdd0c0edb20716a88d84f8df95987", @ANYRES16=r2, @ANYBLOB="200026bd7000ffdbdf250100000014000b00ff01000000000000000000000000000105000d000100000005000d001100000008"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x1) tkill(r0, 0x18) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000009b80)={0x40000012}) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) 563.510178ms ago: executing program 4 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0xfffd, 0xa, 0x80, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1000000001, 0x9, 0x80}, 0x4, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731112000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r2, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000000)='./config\x00', r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 0s ago: executing program 4 (id=402): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xb, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="0100", 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 83.121553][ T5763] cgroup: Unknown subsys name 'net' [ 83.237722][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.252433][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.133884][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.143029][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.151378][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.164264][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.177434][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.263167][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.271750][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.281451][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.291123][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.297177][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.301805][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.313257][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.313300][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.329198][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.334042][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.344621][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.351923][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.357887][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.362482][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.369533][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.379191][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.383487][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.390651][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.403667][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.185275][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.215326][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.276426][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 88.308331][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.415799][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.425847][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.434937][ T5775] bridge_slave_0: entered allmulticast mode [ 88.443497][ T5775] bridge_slave_0: entered promiscuous mode [ 88.493891][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.501573][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.509270][ T5775] bridge_slave_1: entered allmulticast mode [ 88.520789][ T5775] bridge_slave_1: entered promiscuous mode [ 88.613832][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.622721][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.630644][ T5779] bridge_slave_0: entered allmulticast mode [ 88.639240][ T5779] bridge_slave_0: entered promiscuous mode [ 88.660532][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.674436][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.699668][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.710567][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.718552][ T5779] bridge_slave_1: entered allmulticast mode [ 88.726511][ T5779] bridge_slave_1: entered promiscuous mode [ 88.803638][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.811556][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.819375][ T5787] bridge_slave_0: entered allmulticast mode [ 88.827791][ T5787] bridge_slave_0: entered promiscuous mode [ 88.867523][ T5775] team0: Port device team_slave_0 added [ 88.875055][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.886473][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.894191][ T5787] bridge_slave_1: entered allmulticast mode [ 88.902839][ T5787] bridge_slave_1: entered promiscuous mode [ 88.925831][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.942031][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.953864][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.966434][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.976947][ T5774] bridge_slave_0: entered allmulticast mode [ 88.987657][ T5774] bridge_slave_0: entered promiscuous mode [ 88.999702][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.007098][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.014506][ T5774] bridge_slave_1: entered allmulticast mode [ 89.022855][ T5774] bridge_slave_1: entered promiscuous mode [ 89.034550][ T5775] team0: Port device team_slave_1 added [ 89.121675][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.132744][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.143101][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.171827][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.189137][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.196763][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.223576][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.262524][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.275469][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.300784][ T5779] team0: Port device team_slave_0 added [ 89.312566][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.357449][ T5779] team0: Port device team_slave_1 added [ 89.405556][ T5787] team0: Port device team_slave_0 added [ 89.448256][ T5774] team0: Port device team_slave_0 added [ 89.458670][ T5787] team0: Port device team_slave_1 added [ 89.465916][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.473763][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.504517][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.504844][ T5783] Bluetooth: hci0: command tx timeout [ 89.521768][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.522963][ T51] Bluetooth: hci2: command tx timeout [ 89.530704][ T5791] Bluetooth: hci1: command tx timeout [ 89.542339][ T5781] Bluetooth: hci3: command tx timeout [ 89.551139][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.581932][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.601937][ T5775] hsr_slave_0: entered promiscuous mode [ 89.609520][ T5775] hsr_slave_1: entered promiscuous mode [ 89.618600][ T5774] team0: Port device team_slave_1 added [ 89.688442][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.696092][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.724552][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.754548][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.762093][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.789363][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.802731][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.810048][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.838038][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.853978][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.861951][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.888906][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.977796][ T5779] hsr_slave_0: entered promiscuous mode [ 89.985086][ T5779] hsr_slave_1: entered promiscuous mode [ 89.992070][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.001458][ T5779] Cannot create hsr debugfs directory [ 90.082549][ T5774] hsr_slave_0: entered promiscuous mode [ 90.089371][ T5774] hsr_slave_1: entered promiscuous mode [ 90.095933][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.103967][ T5774] Cannot create hsr debugfs directory [ 90.223385][ T5787] hsr_slave_0: entered promiscuous mode [ 90.232850][ T5787] hsr_slave_1: entered promiscuous mode [ 90.239804][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.249047][ T5787] Cannot create hsr debugfs directory [ 90.654822][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.675654][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.709604][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.750290][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.814293][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.842305][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.858736][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.893211][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.962382][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.013753][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.041443][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.074526][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.150470][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.193735][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.205744][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.244859][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.405913][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.471550][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.506063][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.559866][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.570823][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.583151][ T5781] Bluetooth: hci3: command tx timeout [ 91.583186][ T5783] Bluetooth: hci0: command tx timeout [ 91.591073][ T5791] Bluetooth: hci1: command tx timeout [ 91.602067][ T51] Bluetooth: hci2: command tx timeout [ 91.651829][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.662381][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.689941][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.751662][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.762670][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.815713][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.825161][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.915955][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.984207][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.027060][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.053525][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.066405][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.105501][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.114158][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.211629][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.252145][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.261657][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.355007][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.363891][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.899896][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.055488][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.143127][ T5775] veth0_vlan: entered promiscuous mode [ 93.200398][ T5775] veth1_vlan: entered promiscuous mode [ 93.241948][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.354393][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.380130][ T5774] veth0_vlan: entered promiscuous mode [ 93.433371][ T5774] veth1_vlan: entered promiscuous mode [ 93.459351][ T5775] veth0_macvtap: entered promiscuous mode [ 93.467613][ T5787] veth0_vlan: entered promiscuous mode [ 93.492716][ T5787] veth1_vlan: entered promiscuous mode [ 93.520481][ T5775] veth1_macvtap: entered promiscuous mode [ 93.572588][ T5779] veth0_vlan: entered promiscuous mode [ 93.619905][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.646883][ T5779] veth1_vlan: entered promiscuous mode [ 93.657292][ T51] Bluetooth: hci3: command tx timeout [ 93.662781][ T51] Bluetooth: hci0: command tx timeout [ 93.666611][ T5791] Bluetooth: hci2: command tx timeout [ 93.668930][ T5783] Bluetooth: hci1: command tx timeout [ 93.683394][ T5774] veth0_macvtap: entered promiscuous mode [ 93.700499][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.729601][ T5787] veth0_macvtap: entered promiscuous mode [ 93.744541][ T5774] veth1_macvtap: entered promiscuous mode [ 93.781260][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.791697][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.802880][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.813832][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.830680][ T5787] veth1_macvtap: entered promiscuous mode [ 93.902654][ T5779] veth0_macvtap: entered promiscuous mode [ 93.941692][ T5779] veth1_macvtap: entered promiscuous mode [ 93.961252][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.980864][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.002092][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.011855][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.029788][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.043911][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.057456][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.070099][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.081862][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.093207][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.106688][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.174647][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.189153][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.199462][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.209326][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.225379][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.247399][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.259022][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.269837][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.283014][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.303741][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.325740][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354467][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364252][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.376049][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.386968][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.407962][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.418869][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.429566][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.441240][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.453188][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.465584][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.480040][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.520069][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.531496][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.543711][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.555202][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.566077][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.579469][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.591800][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.611338][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.620309][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.654378][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.684787][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.698026][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.711940][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.844139][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.880542][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.953305][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.953352][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.085600][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.105228][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.180883][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.200416][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.339505][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.362533][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.406691][ T5851] syz.1.5[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.437533][ T5849] loop2: detected capacity change from 0 to 512 [ 95.450007][ T5849] EXT4-fs: Ignoring removed bh option [ 95.466712][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.475129][ T5851] loop1: detected capacity change from 0 to 256 [ 95.510826][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.535427][ T5849] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.576804][ T5849] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 95.628953][ T5849] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3: Corrupt directory, running e2fsck is recommended [ 95.662704][ T5849] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 95.673237][ T5849] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.3: corrupted in-inode xattr: e_name out of bounds [ 95.699913][ T5849] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 95.736793][ T5783] Bluetooth: hci2: command tx timeout [ 95.742513][ T5783] Bluetooth: hci3: command tx timeout [ 95.750402][ T51] Bluetooth: hci1: command tx timeout [ 95.756392][ T5781] Bluetooth: hci0: command tx timeout [ 95.789885][ T5849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.867158][ T5851] FAT-fs (loop1): Directory bread(block 64) failed [ 95.876714][ T5851] FAT-fs (loop1): Directory bread(block 65) failed [ 95.883536][ T5851] FAT-fs (loop1): Directory bread(block 66) failed [ 95.931075][ T5851] FAT-fs (loop1): Directory bread(block 67) failed [ 95.947386][ T5851] FAT-fs (loop1): Directory bread(block 68) failed [ 95.992849][ T5851] FAT-fs (loop1): Directory bread(block 69) failed [ 96.046450][ T5851] FAT-fs (loop1): Directory bread(block 70) failed [ 96.070746][ T5851] FAT-fs (loop1): Directory bread(block 71) failed [ 96.101366][ T5851] FAT-fs (loop1): Directory bread(block 72) failed [ 96.112958][ T5851] FAT-fs (loop1): Directory bread(block 73) failed [ 96.125674][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.139410][ T5856] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.327649][ T5857] loop3: detected capacity change from 0 to 512 [ 96.559519][ T5857] EXT4-fs: Ignoring removed bh option [ 96.709668][ T5857] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.836401][ T5857] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 96.933438][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.936952][ T5857] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended [ 97.017393][ T5857] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 97.047297][ T5857] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.4: corrupted in-inode xattr: e_name out of bounds [ 97.109273][ T5857] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 97.153689][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.189428][ T5866] loop0: detected capacity change from 0 to 256 [ 97.263398][ T5866] FAT-fs (loop0): bogus sectors per cluster 0 [ 97.294468][ T5866] FAT-fs (loop0): Can't find a valid FAT filesystem [ 97.500833][ T9] cfg80211: failed to load regulatory.db [ 97.537902][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.986844][ T1191] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.222290][ T1191] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.250133][ T1191] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.303363][ T1191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.330134][ T5887] loop2: detected capacity change from 0 to 128 [ 98.337585][ T1191] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 98.363801][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.399679][ T5887] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.461248][ T1191] usb 4-1: config 0 descriptor?? [ 98.478651][ T5887] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.959276][ T5889] loop2: detected capacity change from 0 to 512 [ 98.984606][ T1191] hid-multitouch 0003:0EEF:72C4.0001: unbalanced collection at end of report description [ 99.008765][ T5889] EXT4-fs: Ignoring removed bh option [ 99.031558][ T1191] hid-multitouch: probe of 0003:0EEF:72C4.0001 failed with error -22 [ 99.068876][ T5889] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.109831][ T5889] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 99.145336][ T5889] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.14: Corrupt directory, running e2fsck is recommended [ 99.225201][ T5777] usb 4-1: USB disconnect, device number 2 [ 99.229654][ T5889] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 99.259576][ T5889] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.14: corrupted in-inode xattr: e_name out of bounds [ 99.313659][ T5889] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.14: couldn't read orphan inode 15 (err -117) [ 99.377877][ T5889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.604942][ T5896] loop0: detected capacity change from 0 to 512 [ 99.648295][ T5896] EXT4-fs: Ignoring removed bh option [ 99.713395][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.821852][ T5896] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.854481][ T5896] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 99.886500][ T5896] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.17: Corrupt directory, running e2fsck is recommended [ 99.993029][ T5896] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 100.047286][ T5896] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.17: corrupted in-inode xattr: e_name out of bounds [ 100.187898][ T5896] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.17: couldn't read orphan inode 15 (err -117) [ 100.359570][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.562519][ T5904] loop2: detected capacity change from 0 to 256 [ 100.672999][ T5904] exfat: Deprecated parameter 'utf8' [ 100.874209][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.910901][ T5904] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 101.535722][ T5915] loop1: detected capacity change from 0 to 512 [ 101.563823][ T5915] ext4: Unknown parameter 'fsuuid' [ 102.646140][ C0] sched: RT throttling activated [ 102.874848][ T5925] loop2: detected capacity change from 0 to 512 [ 102.974212][ T5925] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.25: inode has both inline data and extents flags [ 103.015222][ T5925] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.25: couldn't read orphan inode 15 (err -117) [ 103.082545][ T5927] loop0: detected capacity change from 0 to 512 [ 103.090441][ T5927] ======================================================= [ 103.090441][ T5927] WARNING: The mand mount option has been deprecated and [ 103.090441][ T5927] and is ignored by this kernel. Remove the mand [ 103.090441][ T5927] option from the mount to silence this warning. [ 103.090441][ T5927] ======================================================= [ 103.193411][ T5927] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.242670][ T5925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.813559][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.208643][ T5937] loop3: detected capacity change from 0 to 512 [ 105.567568][ T5937] EXT4-fs: Ignoring removed bh option [ 105.841707][ T5937] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.866720][ T5937] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 105.948247][ T5937] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.29: Corrupt directory, running e2fsck is recommended [ 106.107628][ T5937] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 106.135766][ T5937] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.29: corrupted in-inode xattr: e_name out of bounds [ 106.274500][ T5937] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.29: couldn't read orphan inode 15 (err -117) [ 106.318793][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.530354][ T5953] loop1: detected capacity change from 0 to 512 [ 106.581956][ T5953] EXT4-fs: Ignoring removed bh option [ 106.628248][ T5953] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.660451][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.675123][ T5953] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 106.724752][ T5953] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.32: Corrupt directory, running e2fsck is recommended [ 106.749831][ T5953] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 106.776586][ T5953] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.32: corrupted in-inode xattr: e_name out of bounds [ 106.826036][ T5953] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.32: couldn't read orphan inode 15 (err -117) [ 106.854182][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.944539][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.257112][ T5960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.775796][ T5964] loop1: detected capacity change from 0 to 512 [ 107.793252][ T5964] ext4: Unknown parameter 'fsuuid' [ 109.679587][ T5784] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.992566][ T5967] loop2: detected capacity change from 0 to 512 [ 110.217332][ T5967] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.36: inode has both inline data and extents flags [ 110.305786][ T5967] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.36: couldn't read orphan inode 15 (err -117) [ 110.394466][ T5967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.678896][ T5975] futex_wake_op: syz.3.38 tries to shift op by 144; fix this program [ 113.014509][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.024456][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.833377][ T5996] loop1: detected capacity change from 0 to 512 [ 113.872670][ T5996] EXT4-fs: Ignoring removed bh option [ 113.950854][ T5996] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 114.003982][ T5996] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 114.036676][ T5996] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.43: Corrupt directory, running e2fsck is recommended [ 114.083623][ T5996] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 114.111660][ T5996] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.43: corrupted in-inode xattr: e_name out of bounds [ 114.161276][ T5996] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.43: couldn't read orphan inode 15 (err -117) [ 114.180140][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.194228][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.371999][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.546537][ T1323] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 114.591602][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.706944][ T6005] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.726985][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.794458][ T28] audit: type=1326 audit(1787178825.663:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 114.874342][ T28] audit: type=1326 audit(1787178825.703:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 114.927385][ T28] audit: type=1326 audit(1787178825.703:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 114.987944][ T28] audit: type=1326 audit(1787178825.703:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 115.055520][ T28] audit: type=1326 audit(1787178825.703:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 115.117378][ T28] audit: type=1326 audit(1787178825.713:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 115.174915][ T28] audit: type=1326 audit(1787178825.713:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 115.237089][ T28] audit: type=1326 audit(1787178825.713:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 115.308446][ T28] audit: type=1326 audit(1787178825.713:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 115.336973][ T28] audit: type=1326 audit(1787178825.713:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 115.842291][ T6015] loop2: detected capacity change from 0 to 512 [ 115.856555][ T6015] ext4: Unknown parameter 'fsuuid' [ 116.612738][ T6012] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure [ 118.510796][ T5987] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.520160][ T5987] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.529471][ T5987] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.539544][ T5987] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.876106][ T5987] syz.3.41 (5987) used greatest stack depth: 19976 bytes left [ 119.295711][ T6038] netlink: 96 bytes leftover after parsing attributes in process `syz.2.53'. [ 121.505610][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 121.505630][ T28] audit: type=1326 audit(1787178832.363:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 121.656478][ T28] audit: type=1326 audit(1787178832.373:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 121.742072][ T28] audit: type=1326 audit(1787178832.373:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 121.841992][ T28] audit: type=1326 audit(1787178832.373:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 121.919229][ T28] audit: type=1326 audit(1787178832.413:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 122.049077][ T28] audit: type=1326 audit(1787178832.413:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 122.139307][ T28] audit: type=1326 audit(1787178832.413:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 122.172691][ T28] audit: type=1326 audit(1787178832.413:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 122.215790][ T28] audit: type=1326 audit(1787178832.413:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 122.249190][ T28] audit: type=1326 audit(1787178832.413:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.57" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61fb9e0d9 code=0x7ffc0000 [ 123.875818][ T6074] loop1: detected capacity change from 0 to 512 [ 123.889696][ T6074] ext4: Unknown parameter 'fsuuid' [ 124.144245][ T6021] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 124.636026][ T6021] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.653545][ T6021] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 124.694033][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.742319][ T6021] usb 3-1: config 0 descriptor?? [ 124.960194][ T6057] loop0: detected capacity change from 0 to 40427 [ 125.012016][ T6057] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 125.067811][ T6057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.151119][ T6057] F2FS-fs (loop0): invalid crc value [ 125.198997][ T6057] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 125.211924][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x1 [ 125.251203][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x5 [ 125.280822][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x6 [ 125.312992][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 125.347834][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 125.377663][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 125.424344][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 125.457993][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 125.495334][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 125.537142][ T6021] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 125.563410][ T6083] netlink: 96 bytes leftover after parsing attributes in process `syz.0.64'. [ 125.600349][ T6021] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71 [ 125.988717][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 126.084277][ T6021] usb 3-1: USB disconnect, device number 2 [ 126.654896][ T6089] loop1: detected capacity change from 0 to 16 [ 126.784479][ T6089] erofs: (device loop1): mounted with root inode @ nid 36. [ 127.282245][ T6094] loop2: detected capacity change from 0 to 128 [ 127.410100][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 127.410115][ T28] audit: type=1326 audit(1787178838.253:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 127.510889][ T6094] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.619044][ T6094] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.654026][ T28] audit: type=1326 audit(1787178838.253:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 127.773199][ T28] audit: type=1326 audit(1787178838.263:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 127.853660][ T28] audit: type=1326 audit(1787178838.263:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 127.908320][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.942562][ T28] audit: type=1326 audit(1787178838.283:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 128.025617][ T28] audit: type=1326 audit(1787178838.283:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 128.098451][ T28] audit: type=1326 audit(1787178838.283:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 128.154385][ T28] audit: type=1326 audit(1787178838.283:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 128.286302][ T28] audit: type=1326 audit(1787178838.283:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 128.377534][ T28] audit: type=1326 audit(1787178838.283:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 128.406415][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.799112][ T6118] loop0: detected capacity change from 0 to 512 [ 128.812550][ T6118] ext4: Unknown parameter 'fsuuid' [ 128.905617][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 129.146861][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 129.394850][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.432690][ T23] usb 3-1: Product: syz [ 129.469325][ T23] usb 3-1: Manufacturer: syz [ 129.484449][ T23] usb 3-1: SerialNumber: syz [ 129.528633][ T6106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.773107][ T6122] netlink: 96 bytes leftover after parsing attributes in process `syz.1.77'. [ 130.933090][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 130.940556][ T23] usb 3-1: MIDIStreaming interface descriptor not found [ 131.477182][ T23] usb 3-1: USB disconnect, device number 3 [ 131.767773][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.808665][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.836047][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.876202][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.906204][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.950789][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.986334][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.002278][ T6125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.014024][ T6125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.148153][ T6125] Zero length message leads to an empty skb [ 132.974011][ T6138] loop0: detected capacity change from 0 to 40427 [ 132.990514][ T6138] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.001338][ T6138] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.026831][ T6138] F2FS-fs (loop0): invalid crc value [ 133.071248][ T6138] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.202928][ T6138] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.210593][ T6138] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.279495][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 133.279513][ T28] audit: type=1800 audit(1787178844.153:178): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.82" name="file0" dev="loop0" ino=455 res=0 errno=0 [ 133.345187][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.355451][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.646981][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 134.725955][ T12] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 134.764452][ T12] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 134.922925][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 135.058523][ T6161] loop2: detected capacity change from 0 to 512 [ 135.072472][ T6161] ext4: Unknown parameter 'fsuuid' [ 137.804029][ T28] audit: type=1326 audit(1787178848.673:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 137.894936][ T28] audit: type=1326 audit(1787178848.673:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 137.962575][ T6180] loop3: detected capacity change from 0 to 256 [ 137.976887][ T6180] exfat: Deprecated parameter 'namecase' [ 137.982976][ T28] audit: type=1326 audit(1787178848.723:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 137.985258][ T6180] exfat: Deprecated parameter 'namecase' [ 138.036198][ T28] audit: type=1326 audit(1787178848.753:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 138.085198][ T6180] exfat: Deprecated parameter 'utf8' [ 138.124519][ T28] audit: type=1326 audit(1787178848.753:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 138.179675][ T6180] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 138.253076][ T28] audit: type=1326 audit(1787178848.753:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 138.316304][ T28] audit: type=1326 audit(1787178848.753:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 138.368594][ T28] audit: type=1326 audit(1787178848.753:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 138.454817][ T6182] loop0: detected capacity change from 0 to 512 [ 138.517856][ T6182] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 138.919143][ T28] audit: type=1326 audit(1787178848.753:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 139.155341][ T28] audit: type=1326 audit(1787178848.753:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 139.307565][ T28] audit: type=1326 audit(1787178848.753:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 139.380424][ T6187] loop1: detected capacity change from 0 to 512 [ 139.415138][ T6187] EXT4-fs: Ignoring removed i_version option [ 139.461730][ T28] audit: type=1326 audit(1787178848.753:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 139.506994][ T6187] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.528429][ T6188] loop3: detected capacity change from 0 to 128 [ 139.635754][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.652942][ T28] audit: type=1326 audit(1787178848.753:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 139.687892][ T6188] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.806358][ T6188] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.842861][ T28] audit: type=1326 audit(1787178848.763:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 140.063175][ T28] audit: type=1326 audit(1787178848.763:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 140.167285][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.211988][ T28] audit: type=1326 audit(1787178848.763:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.93" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 140.359453][ T6195] loop2: detected capacity change from 0 to 512 [ 140.394747][ T6195] EXT4-fs: Ignoring removed bh option [ 140.488397][ T6195] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 140.523877][ T6195] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 140.589549][ T6195] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.98: Corrupt directory, running e2fsck is recommended [ 140.649731][ T6195] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 140.683823][ T1323] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 140.710699][ T6195] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.98: corrupted in-inode xattr: e_name out of bounds [ 140.778166][ T6195] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.98: couldn't read orphan inode 15 (err -117) [ 140.844679][ T6195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.976185][ T6200] loop1: detected capacity change from 0 to 512 [ 140.989422][ T6200] ext4: Unknown parameter 'fsuuid' [ 142.917577][ T6205] futex_wake_op: syz.0.100 tries to shift op by 144; fix this program [ 143.313336][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.411679][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 143.411705][ T28] audit: type=1326 audit(1787178854.273:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.454860][ T28] audit: type=1326 audit(1787178854.273:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.487428][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.566405][ T28] audit: type=1326 audit(1787178854.273:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.605074][ T6214] loop2: detected capacity change from 0 to 512 [ 143.611709][ T28] audit: type=1326 audit(1787178854.273:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.658098][ T6214] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.102: invalid block [ 143.675870][ T28] audit: type=1326 audit(1787178854.273:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.699930][ T28] audit: type=1326 audit(1787178854.273:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.713561][ T6214] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.102: invalid indirect mapped block 4294967295 (level 1) [ 143.725027][ T28] audit: type=1326 audit(1787178854.273:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.725089][ T28] audit: type=1326 audit(1787178854.273:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.725136][ T28] audit: type=1326 audit(1787178854.273:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.812087][ T28] audit: type=1326 audit(1787178854.273:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 143.849288][ T6214] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.102: invalid indirect mapped block 4294967295 (level 1) [ 143.889616][ T6214] EXT4-fs (loop2): 2 truncates cleaned up [ 143.923932][ T6214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.002196][ T6214] overlayfs: conflicting lowerdir path [ 144.073960][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.806343][ T6235] loop0: detected capacity change from 0 to 512 [ 145.819853][ T6235] ext4: Unknown parameter 'fsuuid' [ 146.717114][ T6238] loop1: detected capacity change from 0 to 512 [ 146.751966][ T6238] EXT4-fs: Ignoring removed bh option [ 146.823570][ T6238] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 146.895107][ T6238] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 146.926639][ T6238] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.110: Corrupt directory, running e2fsck is recommended [ 146.976925][ T6238] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 147.011806][ T6238] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.110: corrupted in-inode xattr: e_name out of bounds [ 147.074835][ T6238] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.110: couldn't read orphan inode 15 (err -117) [ 147.127087][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.371365][ T6242] loop3: detected capacity change from 0 to 256 [ 147.428453][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.449211][ T6242] exfat: Deprecated parameter 'namecase' [ 147.454990][ T6242] exfat: Deprecated parameter 'namecase' [ 147.527169][ T6242] exfat: Deprecated parameter 'utf8' [ 147.580285][ T6242] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 148.179377][ T6251] loop3: detected capacity change from 0 to 256 [ 148.271800][ T6251] exFAT-fs (loop3): error, The cluster chain has a loop [ 148.307404][ T6251] exFAT-fs (loop3): failed to count the number of clusters in root [ 148.330003][ T6251] exFAT-fs (loop3): failed to recognize exfat type [ 148.962122][ T6260] loop3: detected capacity change from 0 to 512 [ 149.013874][ T6260] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 150.551069][ T6256] loop0: detected capacity change from 0 to 40427 [ 150.623337][ T6256] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 150.753518][ T6264] loop2: detected capacity change from 0 to 512 [ 150.803071][ T6264] EXT4-fs: Ignoring removed bh option [ 150.932283][ T6264] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 150.981090][ T6264] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 150.991429][ T6264] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.121: Corrupt directory, running e2fsck is recommended [ 151.021005][ T2952] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 151.051054][ T6264] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 151.118331][ T6264] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.121: corrupted in-inode xattr: e_name out of bounds [ 151.201584][ T6264] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.121: couldn't read orphan inode 15 (err -117) [ 151.231843][ T6268] support for the xor transformation has been removed. [ 151.240862][ T6264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.459680][ T6266] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 151.709813][ T6273] loop0: detected capacity change from 0 to 512 [ 151.723473][ T6273] ext4: Unknown parameter 'fsuuid' [ 153.338246][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.015436][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 154.015452][ T28] audit: type=1326 audit(1787178864.883:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.121916][ T28] audit: type=1326 audit(1787178864.923:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.187595][ T28] audit: type=1326 audit(1787178864.923:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.264239][ T28] audit: type=1326 audit(1787178864.923:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.325619][ T28] audit: type=1326 audit(1787178864.923:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.350469][ T28] audit: type=1326 audit(1787178864.923:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.385398][ T28] audit: type=1326 audit(1787178864.923:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.424462][ T28] audit: type=1326 audit(1787178864.923:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.483951][ T28] audit: type=1326 audit(1787178864.923:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 154.513753][ T28] audit: type=1326 audit(1787178864.923:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 155.259467][ T6310] loop0: detected capacity change from 0 to 512 [ 155.332066][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.136: inode has both inline data and extents flags [ 155.353500][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.136: couldn't read orphan inode 15 (err -117) [ 155.367598][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.693792][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.519535][ T6319] loop0: detected capacity change from 0 to 1024 [ 156.550074][ T6319] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 156.590037][ T6319] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 156.613467][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.814078][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.078702][ T6329] loop3: detected capacity change from 0 to 1024 [ 158.116465][ T6329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.289731][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.571039][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.459738][ T6345] loop3: detected capacity change from 0 to 512 [ 159.526406][ T6345] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.143: corrupted in-inode xattr: invalid ea_ino [ 159.561030][ T6345] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.143: couldn't read orphan inode 15 (err -117) [ 159.580072][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.351438][ T6361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.404561][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.566333][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.758330][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 164.788511][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 164.831876][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 164.851976][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.892769][ T8] usb 2-1: config 0 descriptor?? [ 165.255747][ T6400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.361772][ T8] wacom 0003:056A:0319.0003: unknown main item tag 0x0 [ 165.376291][ T8] wacom 0003:056A:0319.0003: unknown main item tag 0x0 [ 165.384720][ T8] wacom 0003:056A:0319.0003: unbalanced collection at end of report description [ 165.399568][ T8] wacom 0003:056A:0319.0003: parse failed [ 165.405663][ T8] wacom: probe of 0003:056A:0319.0003 failed with error -22 [ 165.567133][ T9] usb 2-1: USB disconnect, device number 2 [ 165.613086][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 165.613102][ T28] audit: type=1326 audit(1787178876.483:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.677126][ T28] audit: type=1326 audit(1787178876.483:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.701291][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.715861][ T28] audit: type=1326 audit(1787178876.523:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.739895][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.751007][ T28] audit: type=1326 audit(1787178876.523:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.775792][ T28] audit: type=1326 audit(1787178876.523:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.879029][ T28] audit: type=1326 audit(1787178876.523:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.930616][ T28] audit: type=1326 audit(1787178876.523:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.954581][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.972711][ T28] audit: type=1326 audit(1787178876.523:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 165.997335][ T28] audit: type=1326 audit(1787178876.523:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 166.021281][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.066600][ T28] audit: type=1326 audit(1787178876.523:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 166.090867][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.814180][ T6418] loop2: detected capacity change from 0 to 512 [ 166.912484][ T6418] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 166.923986][ T6421] futex_wake_op: syz.3.167 tries to shift op by 144; fix this program [ 167.818674][ T6424] overlayfs: failed to resolve './file1/file0': -13 [ 168.152805][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 168.189910][ T6432] vlan0: entered promiscuous mode [ 168.208673][ T6432] ifb0: entered promiscuous mode [ 168.509309][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.518119][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.534937][ T6433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.090836][ T6445] futex_wake_op: syz.0.176 tries to shift op by 144; fix this program [ 172.317400][ T6472] loop3: detected capacity change from 0 to 1024 [ 172.331460][ T6472] EXT4-fs: Ignoring removed orlov option [ 172.397636][ T6472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.514603][ T6477] netlink: 96 bytes leftover after parsing attributes in process `syz.0.187'. [ 172.572353][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 172.994094][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.764010][ T6490] futex_wake_op: syz.3.190 tries to shift op by 144; fix this program [ 174.694837][ T28] kauditd_printk_skb: 827 callbacks suppressed [ 174.694854][ T28] audit: type=1326 audit(1787178885.563:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.191" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 174.773066][ T28] audit: type=1326 audit(1787178885.563:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.191" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 174.798205][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.826277][ T28] audit: type=1326 audit(1787178885.573:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.191" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe596d9e0d9 code=0x7ffc0000 [ 174.852215][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.636327][ T28] audit: type=1326 audit(1787178888.503:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.191" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7fc00000 [ 177.791999][ T28] audit: type=1326 audit(1787178888.503:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.191" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe596d9e0d9 code=0x7fc00000 [ 178.629357][ T6512] tmpfs: Cannot retroactively limit inodes [ 179.449899][ T6520] futex_wake_op: syz.3.200 tries to shift op by 144; fix this program [ 181.438976][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.446997][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.750968][ T28] audit: type=1326 audit(1787178892.603:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 181.806031][ T28] audit: type=1326 audit(1787178892.603:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 182.592069][ T28] audit: type=1326 audit(1787178892.603:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6e2d59e0d9 code=0x7ffc0000 [ 183.720394][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.785754][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.466359][ T6522] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.475332][ T6522] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.486393][ T6522] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.495375][ T6522] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.666167][ T28] audit: type=1326 audit(1787178895.533:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7fc00000 [ 184.761956][ T28] audit: type=1326 audit(1787178895.533:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d59e0d9 code=0x7fc00000 [ 185.579385][ T6558] loop1: detected capacity change from 0 to 512 [ 187.350082][ T6558] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 189.083404][ T6564] loop3: detected capacity change from 0 to 512 [ 189.125446][ T6564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 189.191311][ T6564] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.323587][ T6564] EXT4-fs (loop3): 1 truncate cleaned up [ 189.333930][ T6564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.622649][ T3449] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 189.647750][ T5774] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 190.087748][ T6571] loop0: detected capacity change from 0 to 512 [ 190.338925][ T6571] EXT4-fs: Ignoring removed orlov option [ 190.358808][ T6571] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.430674][ T6571] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 190.902178][ T28] audit: type=1326 audit(1787178901.773:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.0.215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 190.995174][ T28] audit: type=1326 audit(1787178901.803:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.0.215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 191.748074][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.292997][ T6592] loop1: detected capacity change from 0 to 512 [ 193.864457][ T28] audit: type=1326 audit(1787178904.713:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.0.215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7fc00000 [ 193.962628][ T6592] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 194.346313][ T28] audit: type=1326 audit(1787178904.713:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.0.215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7fc00000 [ 194.794398][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.801078][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.728782][ T1081] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 196.534759][ T6600] syzkaller0: entered promiscuous mode [ 196.578155][ T6600] syzkaller0: entered allmulticast mode [ 196.753477][ T6606] loop0: detected capacity change from 0 to 16 [ 196.836763][ T6606] erofs: (device loop0): mounted with root inode @ nid 36. [ 196.945719][ T6606] syz.0.225: attempt to access beyond end of device [ 196.945719][ T6606] loop0: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 197.635587][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.651388][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.660740][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.672043][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.680794][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.689161][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.823397][ T6604] loop1: detected capacity change from 0 to 40427 [ 197.836360][ T28] audit: type=1326 audit(1787178908.673:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 197.878562][ T6604] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 197.941926][ T28] audit: type=1326 audit(1787178908.673:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 197.962017][ T6604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 197.986194][ T6604] F2FS-fs (loop1): Image doesn't support compression [ 197.992989][ T6604] F2FS-fs (loop1): Image doesn't support compression [ 197.996614][ T28] audit: type=1326 audit(1787178908.673:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8dd719e0d9 code=0x7ffc0000 [ 198.040370][ T6604] F2FS-fs (loop1): invalid crc value [ 198.420118][ T6604] F2FS-fs (loop1): Start checkpoint disabled! [ 198.487134][ T6604] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 198.494269][ T6604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 198.564770][ T6604] syz.1.224: attempt to access beyond end of device [ 198.564770][ T6604] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 198.595158][ T6604] syz.1.224: attempt to access beyond end of device [ 198.595158][ T6604] loop1: rw=0, sector=77952, nr_sectors = 8 limit=40427 [ 198.655179][ T2937] kworker/u4:8: attempt to access beyond end of device [ 198.655179][ T2937] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.685014][ T2937] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 199.089554][ T1323] hsr_slave_0: left promiscuous mode [ 199.100790][ T1323] hsr_slave_1: left promiscuous mode [ 199.108220][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.137670][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.162591][ T1323] bridge_slave_1: left allmulticast mode [ 199.179775][ T1323] bridge_slave_1: left promiscuous mode [ 199.202517][ T1323] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.232108][ T1323] bridge_slave_0: left allmulticast mode [ 199.246286][ T1323] bridge_slave_0: left promiscuous mode [ 199.256605][ T1323] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.977962][ T5783] Bluetooth: hci0: command tx timeout [ 200.358643][ T1323] team0 (unregistering): Port device team_slave_1 removed [ 200.465893][ T1323] team0 (unregistering): Port device team_slave_0 removed [ 200.572952][ T1323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.634954][ T28] audit: type=1326 audit(1787178911.503:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7fc00000 [ 200.661932][ T1323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.691673][ T28] audit: type=1326 audit(1787178911.503:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd719e0d9 code=0x7fc00000 [ 202.064426][ T5783] Bluetooth: hci0: command tx timeout [ 202.329096][ T1323] bond0 (unregistering): Released all slaves [ 202.498857][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 202.524392][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 202.591893][ T6648] bridge_slave_1 (unregistering): left allmulticast mode [ 202.599465][ T6648] bridge_slave_1 (unregistering): left promiscuous mode [ 202.607477][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.946392][ T6654] netlink: 96 bytes leftover after parsing attributes in process `syz.2.233'. [ 204.334818][ T5783] Bluetooth: hci0: command tx timeout [ 204.923723][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.956516][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.982122][ T6613] bridge_slave_0: entered allmulticast mode [ 205.002760][ T6613] bridge_slave_0: entered promiscuous mode [ 205.256773][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.296286][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.304965][ T6613] bridge_slave_1: entered allmulticast mode [ 205.346589][ T6613] bridge_slave_1: entered promiscuous mode [ 205.408845][ T6669] loop0: detected capacity change from 0 to 512 [ 205.422196][ T6669] ext4: Unknown parameter 'fsuuid' [ 206.376325][ T51] Bluetooth: hci0: command tx timeout [ 207.122814][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.369383][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.629690][ T6613] team0: Port device team_slave_0 added [ 207.701466][ T6613] team0: Port device team_slave_1 added [ 207.879503][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.912644][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.003102][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.078136][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.114906][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.243894][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.439373][ T6613] hsr_slave_0: entered promiscuous mode [ 208.486628][ T6613] hsr_slave_1: entered promiscuous mode [ 208.506536][ T6613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.514454][ T6613] Cannot create hsr debugfs directory [ 209.084984][ T6690] loop2: detected capacity change from 0 to 512 [ 209.142076][ T6690] ext4: Unknown parameter 'fsmagic' [ 209.230795][ T6613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.283128][ T6613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.317035][ T6613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.357697][ T6613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.402308][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.511360][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.522435][ T6703] loop2: detected capacity change from 0 to 256 [ 210.571473][ T6703] exfat: Deprecated parameter 'namecase' [ 210.584053][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.591329][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.626246][ T6703] exfat: Deprecated parameter 'namecase' [ 210.668895][ T6706] netlink: 96 bytes leftover after parsing attributes in process `syz.1.242'. [ 210.778077][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.785406][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.965849][ T6703] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 212.624093][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 212.630557][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 212.640587][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 213.744770][ T6727] loop2: detected capacity change from 0 to 512 [ 213.757947][ T6727] ext4: Unknown parameter 'fsuuid' [ 214.979162][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.264928][ T6738] loop0: detected capacity change from 0 to 256 [ 215.712898][ T6129] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.119257][ T5818] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 216.207804][ T6613] veth0_vlan: entered promiscuous mode [ 216.246771][ T6613] veth1_vlan: entered promiscuous mode [ 217.156231][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 217.223517][ T5818] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 217.232060][ T5818] usb 3-1: config 0 has no interface number 0 [ 217.243064][ T5818] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 217.253714][ T6613] veth0_macvtap: entered promiscuous mode [ 217.277412][ T5818] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 217.298918][ T6613] veth1_macvtap: entered promiscuous mode [ 217.310995][ T5818] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 217.331114][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.348475][ T5818] usb 3-1: Product: syz [ 217.371444][ T5818] usb 3-1: Manufacturer: syz [ 217.386253][ T5818] usb 3-1: SerialNumber: syz [ 217.400863][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.405363][ T5818] usb 3-1: config 0 descriptor?? [ 217.437600][ T6747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.442475][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.455293][ T6747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.479233][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.510599][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.538444][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.564361][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.608425][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.636247][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.656579][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.686930][ T6747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.694563][ T6747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.706693][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.750402][ T6613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.796269][ T6613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.825711][ T6613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.852590][ T6613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.989558][ T5818] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 218.104481][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.122215][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.283464][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.365036][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.763186][ T6800] loop2: detected capacity change from 0 to 512 [ 220.770948][ T6800] ext4: Unknown parameter 'fsuuid' [ 220.891486][ T5818] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 221.871543][ T5818] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 221.884091][ T5818] asix: probe of 3-1:0.34 failed with error -71 [ 222.715736][ T5818] usb 3-1: USB disconnect, device number 4 [ 223.296521][ T5844] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 223.481663][ T5844] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.502762][ T5844] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 223.527059][ T5844] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.569665][ T5844] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 223.606146][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.634626][ T5844] usb 1-1: Product: syz [ 223.651650][ T5844] usb 1-1: Manufacturer: syz [ 223.667126][ T5844] usb 1-1: SerialNumber: syz [ 223.690191][ T6819] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.717304][ T5844] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 223.736485][ T5844] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 223.766233][ T5844] usbserial_generic 1-1:1.0: generic converter detected [ 223.794050][ T5844] usb 1-1: generic converter now attached to ttyUSB0 [ 224.186931][ T6542] usb 1-1: USB disconnect, device number 2 [ 224.226975][ T6542] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 224.260909][ T6542] usbserial_generic 1-1:1.0: device disconnected [ 225.230103][ T6840] loop0: detected capacity change from 0 to 256 [ 225.358048][ T6840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 225.411245][ T6843] loop2: detected capacity change from 0 to 256 [ 225.435640][ T6843] exfat: Deprecated parameter 'utf8' [ 225.478652][ T6843] exfat: Deprecated parameter 'utf8' [ 225.484126][ T6843] exfat: Deprecated parameter 'namecase' [ 225.510474][ T6843] exfat: Deprecated parameter 'namecase' [ 225.581223][ T6843] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 225.894857][ T6851] loop2: detected capacity change from 0 to 512 [ 225.938590][ T6851] EXT4-fs: Ignoring removed i_version option [ 225.944680][ T6851] EXT4-fs: Ignoring removed bh option [ 226.072490][ T6851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.149761][ T6851] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.333965][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.158814][ T6881] loop0: detected capacity change from 0 to 1024 [ 230.192503][ T6881] EXT4-fs: Ignoring removed orlov option [ 230.283621][ T6881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.462049][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.469919][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.696764][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.901510][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.931740][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.777468][ T6867] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.787234][ T6867] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.796325][ T6867] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.805432][ T6867] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.854873][ T6870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.659886][ T6938] loop0: detected capacity change from 0 to 128 [ 235.757813][ T6938] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.776245][ T6938] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.710980][ T6952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.347347][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.681985][ T6967] loop0: detected capacity change from 0 to 2048 [ 238.763439][ T6967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.959699][ T6967] EXT4-fs error (device loop0): ext4_ext_precache:657: inode #2: comm syz.0.284: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 239.129870][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.646544][ T6547] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 239.856164][ T6547] usb 1-1: Using ep0 maxpacket: 16 [ 239.869502][ T6547] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.903656][ T6547] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.933821][ T6547] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 239.945803][ T6547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.964473][ T6547] usb 1-1: SerialNumber: syz [ 239.994081][ T6547] usb 1-1: 0:2 : does not exist [ 240.835721][ T6547] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 240.914183][ T6547] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 240.947372][ T6547] usb 1-1: USB disconnect, device number 3 [ 240.988009][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 241.379149][ T7000] loop1: detected capacity change from 0 to 512 [ 241.456458][ T7000] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 243.500403][ T7005] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 243.513757][ T28] audit: type=1800 audit(1787178954.373:1206): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.293" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 243.563693][ T7005] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 243.590230][ T7005] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 243.658497][ T7005] syz.0.293 (7005) used greatest stack depth: 17896 bytes left [ 243.749519][ T3449] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 244.947925][ T7025] 9pnet_fd: p9_fd_create_unix (7025): problem connecting socket: ./file0: -111 [ 246.702253][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.721674][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.809420][ T7040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.974658][ T7042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.001803][ T7042] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 248.102931][ T7059] loop0: detected capacity change from 0 to 512 [ 248.112164][ T7059] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 249.336388][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 249.829452][ T42] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 249.873298][ T7042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.912980][ T7042] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.957843][ T7042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.964871][ T7042] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 250.027986][ T7042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.034095][ T7042] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 250.070959][ T7042] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.419252][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 251.900034][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 251.976181][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 252.057229][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.313685][ T7104] futex_wake_op: syz.4.310 tries to shift op by 144; fix this program [ 253.237297][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.245334][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.988760][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 254.056482][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 254.146246][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.034243][ T7091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.051065][ T7091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.641649][ T7091] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.652660][ T7091] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.661811][ T7091] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.670818][ T7091] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.060099][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.068752][ T7112] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.126847][ T7112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.249591][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.256562][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.262749][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.251937][ T7128] loop2: detected capacity change from 0 to 512 [ 257.260463][ T7128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.348481][ T7128] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 257.376367][ T7128] EXT4-fs (loop2): 1 truncate cleaned up [ 257.383487][ T7128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.865749][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.340662][ T7136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.356363][ T7136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.379584][ T7136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.407760][ T7136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.809687][ T7163] 9pnet: Could not find request transport: fd0x0000000000000003 [ 259.230616][ T7181] loop2: detected capacity change from 0 to 128 [ 259.323422][ T7184] futex_wake_op: syz.0.321 tries to shift op by 144; fix this program [ 259.731449][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 260.378976][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 260.446826][ T7181] FAT-fs (loop2): Directory bread(block 162) failed [ 260.453550][ T7181] FAT-fs (loop2): Directory bread(block 163) failed [ 260.461993][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 260.469207][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 260.502265][ T7185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.610373][ T7181] FAT-fs (loop2): Directory bread(block 164) failed [ 260.665213][ T7181] FAT-fs (loop2): Directory bread(block 165) failed [ 260.719560][ T7181] FAT-fs (loop2): Directory bread(block 166) failed [ 260.769387][ T7181] FAT-fs (loop2): Directory bread(block 167) failed [ 260.806321][ T7181] FAT-fs (loop2): Directory bread(block 168) failed [ 260.813043][ T7181] FAT-fs (loop2): Directory bread(block 169) failed [ 260.936441][ T7181] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.054690][ T7181] FAT-fs (loop2): Directory bread(block 162) failed [ 261.150802][ T7181] FAT-fs (loop2): Directory bread(block 163) failed [ 261.218014][ T7181] syz.2.323: attempt to access beyond end of device [ 261.218014][ T7181] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 261.271845][ T7181] syz.2.323: attempt to access beyond end of device [ 261.271845][ T7181] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 262.540726][ T7216] 9pnet: Could not find request transport: fd0x0000000000000003 [ 262.739519][ T7223] netlink: 96 bytes leftover after parsing attributes in process `syz.1.331'. [ 264.528645][ T7234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.988932][ T7262] loop4: detected capacity change from 0 to 512 [ 267.019265][ T7262] EXT4-fs: Ignoring removed nobh option [ 267.072200][ T7262] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 267.175054][ T7262] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 267.362525][ T7262] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 267.646441][ T7262] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 267.864108][ T7262] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 267.905729][ T7262] EXT4-fs (loop4): failed to initialize system zone (-117) [ 267.964238][ T7262] EXT4-fs (loop4): mount failed [ 268.595217][ T7282] loop4: detected capacity change from 0 to 16 [ 268.757119][ T7282] erofs: (device loop4): mounted with root inode @ nid 36. [ 268.957872][ T7282] netlink: 260 bytes leftover after parsing attributes in process `syz.4.337'. [ 268.969968][ T7282] netlink: 68 bytes leftover after parsing attributes in process `syz.4.337'. [ 268.979405][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.337'. [ 270.485830][ T7298] netlink: 96 bytes leftover after parsing attributes in process `syz.2.343'. [ 270.855128][ T6547] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 271.169029][ T6547] usb 1-1: Using ep0 maxpacket: 32 [ 271.466161][ T6547] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 271.497760][ T6547] usb 1-1: config 0 has no interface number 0 [ 271.589480][ T6547] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 271.664605][ T6547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.736338][ T6547] usb 1-1: Product: syz [ 271.740592][ T6547] usb 1-1: Manufacturer: syz [ 271.816269][ T6547] usb 1-1: SerialNumber: syz [ 271.867394][ T6547] usb 1-1: config 0 descriptor?? [ 271.918242][ T6547] smsc95xx v2.0.0 [ 272.511709][ T7314] futex_wake_op: syz.1.334 tries to shift op by 144; fix this program [ 272.811996][ T6547] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 272.869152][ T6547] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 274.669180][ T6547] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 274.706363][ T6547] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 274.729041][ T6547] usb 1-1: USB disconnect, device number 4 [ 275.090113][ T7344] loop0: detected capacity change from 0 to 128 [ 275.140301][ T7344] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 276.312625][ T7344] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 276.645291][ T7344] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.351: Block bitmap for bg 0 marked uninitialized [ 276.753127][ T7356] loop4: detected capacity change from 0 to 256 [ 276.868161][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.191632][ T7393] loop1: detected capacity change from 0 to 512 [ 281.456492][ T7393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.555296][ T7393] EXT4-fs (loop1): 1 truncate cleaned up [ 281.595413][ T7393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.763569][ T7398] loop0: detected capacity change from 0 to 256 [ 281.860732][ T7398] FAT-fs (loop0): Directory bread(block 64) failed [ 281.881744][ T7398] FAT-fs (loop0): Directory bread(block 65) failed [ 281.891847][ T7398] FAT-fs (loop0): Directory bread(block 66) failed [ 281.906230][ T7398] FAT-fs (loop0): Directory bread(block 67) failed [ 281.923227][ T7398] FAT-fs (loop0): Directory bread(block 68) failed [ 281.931546][ T7398] FAT-fs (loop0): Directory bread(block 69) failed [ 281.946618][ T7398] FAT-fs (loop0): Directory bread(block 70) failed [ 281.953227][ T7398] FAT-fs (loop0): Directory bread(block 71) failed [ 281.964510][ T7398] FAT-fs (loop0): Directory bread(block 72) failed [ 281.976141][ T7398] FAT-fs (loop0): Directory bread(block 73) failed [ 282.055592][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.768561][ T7406] 9pnet: p9_errstr2errno: server reported unknown error [ 282.873380][ T7390] loop4: detected capacity change from 0 to 40427 [ 282.921217][ T7390] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 282.986285][ T7390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 283.141003][ T7390] F2FS-fs (loop4): Found nat_bits in checkpoint [ 284.028375][ T7390] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 284.130869][ T7390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 286.075290][ T5988] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 286.286231][ T5988] usb 2-1: Using ep0 maxpacket: 32 [ 286.395614][ T5988] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.560543][ T5988] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.820808][ T5988] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.887046][ T5988] usb 2-1: New USB device found, idVendor=2357, idProduct=0601, bcdDevice=3f.ae [ 286.907100][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.915331][ T5988] usb 2-1: Product: syz [ 286.926157][ T5988] usb 2-1: Manufacturer: syz [ 286.930845][ T5988] usb 2-1: SerialNumber: syz [ 286.938044][ T5988] r8152-cfgselector 2-1: config 0 descriptor?? [ 287.865933][ T7427] loop0: detected capacity change from 0 to 40427 [ 287.917457][ T7427] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 287.965138][ T7427] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 288.031062][ T7427] F2FS-fs (loop0): invalid crc value [ 288.044217][ T7427] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 288.098485][ T7427] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 289.728187][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.740775][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.751036][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.769354][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.784828][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.793114][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.048190][ T5988] r8152-cfgselector 2-1: Unknown version 0x0000 [ 291.088425][ T5988] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 292.995938][ T5791] Bluetooth: hci4: command tx timeout [ 293.501406][ T7454] chnl_net:caif_netlink_parms(): no params data found [ 294.812675][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.820266][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.829137][ T7454] bridge_slave_0: entered allmulticast mode [ 294.844530][ T7454] bridge_slave_0: entered promiscuous mode [ 294.881917][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.906242][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.929980][ T7454] bridge_slave_1: entered allmulticast mode [ 294.953605][ T7454] bridge_slave_1: entered promiscuous mode [ 295.016781][ T5791] Bluetooth: hci4: command tx timeout [ 295.079327][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.090369][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.302948][ T7454] team0: Port device team_slave_0 added [ 295.320982][ T7454] team0: Port device team_slave_1 added [ 295.496954][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.504078][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.530293][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.575945][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.631721][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.642559][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.703037][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.849835][ T7509] loop0: detected capacity change from 0 to 256 [ 296.020904][ T7454] hsr_slave_0: entered promiscuous mode [ 296.046718][ T7454] hsr_slave_1: entered promiscuous mode [ 296.066388][ T7454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.074237][ T7454] Cannot create hsr debugfs directory [ 297.177201][ T5791] Bluetooth: hci4: command tx timeout [ 298.682578][ T7530] ------------[ cut here ]------------ [ 298.688785][ T7530] skb_assert_len [ 298.717645][ T7530] WARNING: CPU: 0 PID: 7530 at include/linux/skbuff.h:2597 __dev_queue_xmit+0x1ec3/0x3630 [ 298.727795][ T7530] Modules linked in: [ 298.731799][ T7530] CPU: 0 PID: 7530 Comm: syz.4.402 Not tainted syzkaller #0 [ 298.739410][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.749991][ T7530] RIP: 0010:__dev_queue_xmit+0x1ec3/0x3630 [ 298.756109][ T7530] Code: df 4c 8b 6c 24 28 e9 10 e7 ff ff e8 17 30 04 f9 c6 05 da c2 f3 05 01 48 c7 c7 20 69 c4 8b 48 c7 c6 17 ab 9f 8c e8 bd fc cd f8 <0f> 0b 80 3d bf c2 f3 05 01 0f 84 0f e3 ff ff e8 e9 2f 04 f9 c6 05 [ 298.776687][ T7530] RSP: 0000:ffffc900038d7640 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 298.782852][ T7530] RAX: 66f9150da4c3fc00 RBX: ffff88802fd8d6b0 RCX: 0000000000080000 [ 298.790996][ T7530] RDX: ffffc9000c9f1000 RSI: 0000000000005274 RDI: 0000000000005275 [ 298.799641][ T7530] RBP: ffffc900038d7890 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 298.808164][ T7530] R10: dffffc0000000000 R11: ffffed10171c518b R12: 1ffff11005fb1aca [ 298.816651][ T7530] R13: 1ffff9200071aee8 R14: 0000000000000000 R15: dffffc0000000000 [ 298.824703][ T7530] FS: 00007efeea7aa6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 298.834318][ T7530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.841479][ T7530] CR2: 00007fe5da846010 CR3: 000000007a804000 CR4: 00000000003506f0 [ 298.849596][ T7530] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 298.857739][ T7530] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 298.865785][ T7530] Call Trace: [ 298.869222][ T7530] [ 298.872210][ T7530] ? alloc_skb_with_frags+0x6f5/0x7a0 [ 298.877773][ T7530] ? skb_set_owner_w+0x232/0x380 [ 298.882816][ T7530] ? netdev_core_pick_tx+0x370/0x370 [ 298.888266][ T7530] ? packet_parse_headers+0x7bd/0xad0 [ 298.893729][ T7530] ? packet_parse_headers+0x83e/0xad0 [ 298.899418][ T7530] ? sock_kzfree_s+0x50/0x50 [ 298.904192][ T7530] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 298.910005][ T7530] ? packet_xmit+0x66/0x340 [ 298.914608][ T7530] packet_sendmsg+0x2015/0x49a0 [ 298.919665][ T7530] ? packet_getsockopt+0xad0/0xad0 [ 298.924854][ T7530] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 298.931428][ T7530] ? apparmor_socket_sendmsg+0x8e/0x330 [ 298.937201][ T7530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.942653][ T7530] ? security_socket_sendmsg+0x80/0xa0 [ 298.948354][ T7530] sock_write_iter+0x2dc/0x420 [ 298.953213][ T7530] ? sock_read_iter+0x3f0/0x3f0 [ 298.958226][ T7530] ? common_file_perm+0x198/0x1f0 [ 298.963340][ T7530] vfs_write+0x474/0x9a0 [ 298.967720][ T7530] ? file_end_write+0x250/0x250 [ 298.972749][ T7530] ? __fget_files+0x3fc/0x460 [ 298.977617][ T7530] ? __fdget_pos+0x1d8/0x330 [ 298.982317][ T7530] ? ksys_write+0x74/0x260 [ 298.986900][ T7530] ksys_write+0x151/0x260 [ 298.991399][ T7530] ? __ia32_sys_read+0x90/0x90 [ 298.996316][ T7530] ? lockdep_hardirqs_on+0x98/0x150 [ 299.001619][ T7530] do_syscall_64+0x55/0xb0 [ 299.006171][ T7530] ? clear_bhb_loop+0x40/0x90 [ 299.011094][ T7530] ? clear_bhb_loop+0x40/0x90 [ 299.015935][ T7530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.022157][ T7530] RIP: 0033:0x7efee999e0d9 [ 299.028498][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.048440][ T7530] RSP: 002b:00007efeea7aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.057168][ T7530] RAX: ffffffffffffffda RBX: 00007efee9c25fa0 RCX: 00007efee999e0d9 [ 299.065208][ T7530] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 299.073327][ T7530] RBP: 00007efee9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 299.081452][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.089591][ T7530] R13: 00007efee9c26038 R14: 00007efee9c25fa0 R15: 00007ffc2b64f028 [ 299.097795][ T7530] [ 299.100873][ T7530] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.108332][ T7530] CPU: 0 PID: 7530 Comm: syz.4.402 Not tainted syzkaller #0 [ 299.115657][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.125913][ T7530] Call Trace: [ 299.129218][ T7530] [ 299.132174][ T7530] dump_stack_lvl+0x18c/0x250 [ 299.141361][ T7530] ? show_regs_print_info+0x20/0x20 [ 299.146918][ T7530] ? load_image+0x420/0x420 [ 299.151481][ T7530] panic+0x2ca/0x720 [ 299.155455][ T7530] ? bpf_jit_dump+0xd0/0xd0 [ 299.160041][ T7530] __warn+0x2e0/0x470 [ 299.164095][ T7530] ? __dev_queue_xmit+0x1ec3/0x3630 [ 299.169382][ T7530] ? __dev_queue_xmit+0x1ec3/0x3630 [ 299.174805][ T7530] report_bug+0x2be/0x4f0 [ 299.179200][ T7530] ? __dev_queue_xmit+0x1ec3/0x3630 [ 299.184486][ T7530] ? __dev_queue_xmit+0x1ec3/0x3630 [ 299.190618][ T7530] ? __dev_queue_xmit+0x1ec5/0x3630 [ 299.195871][ T7530] handle_bug+0xcf/0x120 [ 299.200197][ T7530] exc_invalid_op+0x1a/0x50 [ 299.204745][ T7530] asm_exc_invalid_op+0x1a/0x20 [ 299.209759][ T7530] RIP: 0010:__dev_queue_xmit+0x1ec3/0x3630 [ 299.215712][ T7530] Code: df 4c 8b 6c 24 28 e9 10 e7 ff ff e8 17 30 04 f9 c6 05 da c2 f3 05 01 48 c7 c7 20 69 c4 8b 48 c7 c6 17 ab 9f 8c e8 bd fc cd f8 <0f> 0b 80 3d bf c2 f3 05 01 0f 84 0f e3 ff ff e8 e9 2f 04 f9 c6 05 [ 299.235454][ T7530] RSP: 0000:ffffc900038d7640 EFLAGS: 00010246 [ 299.241572][ T7530] RAX: 66f9150da4c3fc00 RBX: ffff88802fd8d6b0 RCX: 0000000000080000 [ 299.249582][ T7530] RDX: ffffc9000c9f1000 RSI: 0000000000005274 RDI: 0000000000005275 [ 299.257588][ T7530] RBP: ffffc900038d7890 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 299.265610][ T7530] R10: dffffc0000000000 R11: ffffed10171c518b R12: 1ffff11005fb1aca [ 299.273636][ T7530] R13: 1ffff9200071aee8 R14: 0000000000000000 R15: dffffc0000000000 [ 299.281669][ T7530] ? alloc_skb_with_frags+0x6f5/0x7a0 [ 299.287115][ T7530] ? skb_set_owner_w+0x232/0x380 [ 299.292108][ T7530] ? netdev_core_pick_tx+0x370/0x370 [ 299.297524][ T7530] ? packet_parse_headers+0x7bd/0xad0 [ 299.302935][ T7530] ? packet_parse_headers+0x83e/0xad0 [ 299.309149][ T7530] ? sock_kzfree_s+0x50/0x50 [ 299.313805][ T7530] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 299.319407][ T7530] ? packet_xmit+0x66/0x340 [ 299.323952][ T7530] packet_sendmsg+0x2015/0x49a0 [ 299.328900][ T7530] ? packet_getsockopt+0xad0/0xad0 [ 299.334147][ T7530] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 299.340607][ T7530] ? apparmor_socket_sendmsg+0x8e/0x330 [ 299.346204][ T7530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 299.351524][ T7530] ? security_socket_sendmsg+0x80/0xa0 [ 299.357026][ T7530] sock_write_iter+0x2dc/0x420 [ 299.362202][ T7530] ? sock_read_iter+0x3f0/0x3f0 [ 299.367118][ T7530] ? common_file_perm+0x198/0x1f0 [ 299.372343][ T7530] vfs_write+0x474/0x9a0 [ 299.376811][ T7530] ? file_end_write+0x250/0x250 [ 299.381719][ T7530] ? __fget_files+0x3fc/0x460 [ 299.386535][ T7530] ? __fdget_pos+0x1d8/0x330 [ 299.391165][ T7530] ? ksys_write+0x74/0x260 [ 299.395707][ T7530] ksys_write+0x151/0x260 [ 299.400128][ T7530] ? __ia32_sys_read+0x90/0x90 [ 299.404976][ T7530] ? lockdep_hardirqs_on+0x98/0x150 [ 299.410362][ T7530] do_syscall_64+0x55/0xb0 [ 299.414832][ T7530] ? clear_bhb_loop+0x40/0x90 [ 299.419563][ T7530] ? clear_bhb_loop+0x40/0x90 [ 299.424307][ T7530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.430262][ T7530] RIP: 0033:0x7efee999e0d9 [ 299.434733][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.454570][ T7530] RSP: 002b:00007efeea7aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.463403][ T7530] RAX: ffffffffffffffda RBX: 00007efee9c25fa0 RCX: 00007efee999e0d9 [ 299.471437][ T7530] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 299.479487][ T7530] RBP: 00007efee9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 299.487592][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.495703][ T7530] R13: 00007efee9c26038 R14: 00007efee9c25fa0 R15: 00007ffc2b64f028 [ 299.503722][ T7530] [ 299.507470][ T7530] Kernel Offset: disabled [ 299.511964][ T7530] Rebooting in 86400 seconds..