last executing test programs: 20.679669196s ago: executing program 1 (id=589): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newtfilter={0x43c, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x5, 0x10}, {0x3, 0x8}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x11, 0xc, 0x8, 0x8, 0x40, 0x1, 0x10000, 0x9, 0x1000, 0x1, 0x0, 0x8, 0x4a, 0x8, 0x7fff, 0xbc, 0x7ff, 0x1, 0x6, 0x3, 0x4, 0x4, 0x9, 0x10001, 0x9, 0xffff, 0x2, 0x5, 0xa, 0xb, 0x6, 0x8000, 0x8, 0x1, 0x400, 0x3, 0xe2c, 0x5, 0x3, 0x8, 0x2, 0xb8, 0x738ed1a0, 0x200, 0xfff, 0x9, 0x47f3, 0xfff, 0x7226, 0xff, 0xffff, 0x1, 0x0, 0x59ae, 0x1, 0xff, 0x9, 0x4, 0x7ff, 0x6, 0x7, 0x101, 0x1, 0x2, 0x9, 0x7, 0x4, 0x9, 0x6, 0x1, 0xfffffffe, 0x4, 0x100, 0x2, 0x9, 0x0, 0x6, 0x800, 0xfffffffe, 0x4, 0x6, 0x6f0, 0x4, 0x1800, 0x6, 0x8, 0x3, 0x4, 0x0, 0x10, 0x2, 0x7ff, 0x2, 0xfffffff7, 0x0, 0x800, 0x1, 0x1000, 0x5343, 0x4, 0x7f, 0x46, 0xbe6, 0x9, 0x200, 0x7, 0x6f, 0x8, 0xffff, 0x5, 0x0, 0x9, 0x3, 0x80000000, 0x1, 0x33, 0x2, 0x0, 0x5, 0x9, 0x562, 0x3, 0xfffffff9, 0x2, 0x3, 0xfffffff9, 0x2, 0x0, 0xfaf8, 0xffff, 0x8000, 0x400, 0x8, 0x4, 0x6, 0x3, 0x9, 0x122, 0x339, 0x8, 0x4, 0xe71, 0x0, 0x387, 0x8, 0x2dddecfc, 0x9, 0xf, 0x200ffff, 0x1, 0x8, 0x2, 0x81, 0x3, 0xc4, 0x1ff, 0x2, 0x4, 0x2, 0x8, 0x5, 0x4, 0xffff9c05, 0x1, 0x8, 0x460b, 0x0, 0x0, 0x1, 0x2, 0x5, 0x0, 0x8, 0x7, 0x37f, 0x10000, 0x0, 0x6, 0x1, 0x4ef, 0x5, 0xfe2, 0x4, 0x9, 0x401, 0x3, 0x8, 0x5, 0x101, 0x7, 0x1000, 0x1000, 0x9, 0x6, 0x3, 0x40, 0x1, 0x7fffffff, 0x6, 0x81, 0x7b, 0x98, 0x2, 0x10, 0x3ff, 0x7fb4edab, 0x200, 0xfffff801, 0x8, 0xa, 0x9, 0x69cfec07, 0x102, 0xfffffff9, 0x8001, 0x3, 0x9, 0xc4aa, 0x1, 0xaa, 0x2, 0xfffff346, 0x4, 0x5, 0x200, 0x0, 0x2f0, 0xfffffff8, 0x48000, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x1, 0x5, 0x5, 0x0, 0x9, 0x0, 0x44f, 0x6, 0x7fff, 0x3, 0x4, 0x4, 0x1, 0x1, 0x5, 0x3, 0x5, 0x122, 0x7, 0x8, 0x9, 0x6]}]}]}}]}, 0x43c}}, 0x4000000) recvfrom$inet_nvme(r2, &(0x7f0000000480)=""/135, 0x87, 0x2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}, 0x8}], 0x1, 0x2, 0x0) dup(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0xfffffffe, 0x0, 0x7d, 0x1, 0x5, 0x8, 0x3, 0x3, 0x4, [0x55f, 0x7ff2, 0x800, 0x16, 0x9, 0x4, 0x9, 0x40000000]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2, 0x2}}, "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", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18.818948879s ago: executing program 1 (id=592): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x48}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.658322405s ago: executing program 1 (id=595): r0 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x2, 0x400) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x8000000) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0xfcfd, 0x41a}]) add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$vbi(0x0, 0x1, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x4, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) close(r3) syz_emit_ethernet(0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) 17.736458996s ago: executing program 1 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) 17.438033445s ago: executing program 1 (id=603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, 0x0) r1 = socket(0x1d, 0x802, 0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c00), 0x1, 0x10122, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000780)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x10, 0x1e, 0x105, &(0x7f00000000c0)}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000640)="960c105b604115a95c362b5751d2027baba13bea0d09c47ba9442893e89d7fd5cbe76b96c077ec2d39cfbf673abf6ba706d9f177d426754049eec592e66cd56b873b2213a9ec9def7282ebf338fe5b243cb77cd94238e8e06c41418840ea61b73f33f8389f3f127c7d5cffd1b59ac4ca10f00bed67912a6149994e18e58f2dc1d2bd7d272af47b7aafc58ce16794dd8dad526cb8b4c67d6112670e45a0825fc2f5f61854a29c97f6bcf886cedbd111e98935cfe599e40c451b272f9b0909c8ec81b154a5b04498ef09147095710b62e41c6687f4fe3c53e2be9502f1c2a3656f6b93bee7779fbdffe77bd659e011eb310ed1d6f163ada33c26b750d8b269f431") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) 16.023634594s ago: executing program 1 (id=609): openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x400}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 15.801724076s ago: executing program 32 (id=609): openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x400}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 8.385590665s ago: executing program 0 (id=635): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) syz_open_dev$usbmon(0x0, 0x6a2, 0x20000) close(0x3) 8.329613781s ago: executing program 0 (id=636): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newtfilter={0x43c, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x5, 0x10}, {0x3, 0x8}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x11, 0xc, 0x8, 0x8, 0x40, 0x1, 0x10000, 0x9, 0x1000, 0x1, 0x0, 0x8, 0x4a, 0x8, 0x7fff, 0xbc, 0x7ff, 0x1, 0x6, 0x3, 0x4, 0x4, 0x9, 0x10001, 0x9, 0xffff, 0x2, 0x5, 0xa, 0xb, 0x6, 0x8000, 0x8, 0x1, 0x400, 0x3, 0xe2c, 0x5, 0x3, 0x8, 0x2, 0xb8, 0x738ed1a0, 0x200, 0xfff, 0x9, 0x47f3, 0xfff, 0x7226, 0xff, 0xffff, 0x1, 0x0, 0x59ae, 0x1, 0xff, 0x9, 0x4, 0x7ff, 0x6, 0x7, 0x101, 0x1, 0x2, 0x9, 0x7, 0x4, 0x9, 0x6, 0x1, 0xfffffffe, 0x4, 0x100, 0x2, 0x9, 0x0, 0x6, 0x800, 0xfffffffe, 0x4, 0x6, 0x6f0, 0x4, 0x1800, 0x6, 0x8, 0x3, 0x4, 0x0, 0x10, 0x2, 0x7ff, 0x2, 0xfffffff7, 0x0, 0x800, 0x1, 0x1000, 0x5343, 0x4, 0x7f, 0x46, 0xbe6, 0x9, 0x200, 0x7, 0x6f, 0x8, 0xffff, 0x5, 0x0, 0x9, 0x3, 0x80000000, 0x1, 0x33, 0x2, 0x0, 0x5, 0x9, 0x562, 0x3, 0xfffffff9, 0x2, 0x3, 0xfffffff9, 0x2, 0x0, 0xfaf8, 0xffff, 0x8000, 0x400, 0x8, 0x4, 0x6, 0x3, 0x9, 0x122, 0x339, 0x8, 0x4, 0xe71, 0x0, 0x387, 0x8, 0x2dddecfc, 0x9, 0xf, 0x200ffff, 0x1, 0x8, 0x2, 0x81, 0x3, 0xc4, 0x1ff, 0x2, 0x4, 0x2, 0x8, 0x5, 0x4, 0xffff9c05, 0x1, 0x8, 0x460b, 0x0, 0x0, 0x1, 0x2, 0x5, 0x0, 0x8, 0x7, 0x37f, 0x10000, 0x0, 0x6, 0x1, 0x4ef, 0x5, 0xfe2, 0x4, 0x9, 0x401, 0x3, 0x8, 0x5, 0x101, 0x7, 0x1000, 0x1000, 0x9, 0x6, 0x3, 0x40, 0x1, 0x7fffffff, 0x6, 0x81, 0x7b, 0x98, 0x2, 0x10, 0x3ff, 0x7fb4edab, 0x200, 0xfffff801, 0x8, 0xa, 0x9, 0x69cfec07, 0x102, 0xfffffff9, 0x8001, 0x3, 0x9, 0xc4aa, 0x1, 0xaa, 0x2, 0xfffff346, 0x4, 0x5, 0x200, 0x0, 0x2f0, 0xfffffff8, 0x48000, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x1, 0x5, 0x5, 0x0, 0x9, 0x0, 0x44f, 0x6, 0x7fff, 0x3, 0x4, 0x4, 0x1, 0x1, 0x5, 0x3, 0x5, 0x122, 0x7, 0x8, 0x9, 0x6]}]}]}}]}, 0x43c}}, 0x4000000) recvfrom$inet_nvme(r2, &(0x7f0000000480)=""/135, 0x87, 0x2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}, 0x8}], 0x1, 0x2, 0x0) dup(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0xfffffffe, 0x0, 0x7d, 0x1, 0x5, 0x8, 0x3, 0x3, 0x4, [0x55f, 0x7ff2, 0x800, 0x16, 0x9, 0x4, 0x9, 0x40000000]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.844177898s ago: executing program 0 (id=639): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2, 0x2}}, "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", "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"}) 7.643840288s ago: executing program 0 (id=641): socket(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0x0, 0x0) 7.381728094s ago: executing program 4 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060084"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.003717861s ago: executing program 4 (id=644): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) memfd_create(0x0, 0x7) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x8049]}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19d", 0xf}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) read(r1, &(0x7f0000000380)=""/41, 0x18) bind$vsock_stream(r0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r0, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.071440912s ago: executing program 3 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x802}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 5.555650023s ago: executing program 2 (id=647): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x10004, &(0x7f0000000500)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 5.050511423s ago: executing program 3 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @random="c056c29ff068", @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x31, 0x30, 0x67, 0x0, 0x6, 0x1, 0x0, @empty, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x1, 0x16, 0x3, 0x64, 0x101, 0xf, 0x44, 0xa, @broadcast, @remote}}}}}}}, 0x4a) 5.049451533s ago: executing program 4 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) write$dsp(0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000009000000000000000010000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b719000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000065f21e794cb99500"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='signal_deliver\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 4.951933202s ago: executing program 2 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.596080868s ago: executing program 3 (id=651): add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "cf724f6098d4fd1b2fa8c8a4606b88b3dd00b0a752886475180ca19088e4b8e0de479404af3191c1ea0a193d507efdc71e9f8f245c667a28aa5671d424dedae7", 0x1c}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100), 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) syz_open_procfs(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f00000001c0)=""/201, 0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.721354624s ago: executing program 4 (id=652): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) 3.575883098s ago: executing program 0 (id=653): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_pidfd_open(r0, 0x0) process_mrelease(r3, 0x0) 3.438808362s ago: executing program 2 (id=654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x3, 0xff) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000200)={[{@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3e, 0x517, &(0x7f00000013c0)="$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") fsmount(0xffffffffffffffff, 0x0, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000040)={&(0x7f0000000200)=[0x1, 0x297, 0x5, 0x1, 0x2, 0x2, 0x2, 0x1, 0x20000, 0x8, 0x42, 0xfffffff3, 0x8001, 0x7, 0x1000, 0x1, 0x71, 0x4, 0x4, 0x3, 0x0, 0x9, 0x7, 0x9, 0x1, 0x9, 0x6, 0x10000, 0x3, 0x400, 0x4, 0x8, 0x4, 0x0, 0xa, 0x0, 0x6, 0x5, 0x5, 0x5, 0x2, 0x6, 0x0, 0x9, 0x7118df42, 0x1, 0x7eaa, 0x101, 0x5, 0x0, 0xf6, 0x8, 0x5, 0x80000001, 0x3, 0x1, 0x0, 0x6, 0x0, 0xfffffff8, 0xf, 0x0, 0x8cb, 0xfffffff8, 0xc, 0x7fff, 0x1, 0x100, 0x5, 0x2, 0x15bc146c, 0xffffffff, 0x5, 0x9, 0xff, 0x10001, 0x2, 0x10001, 0x6, 0x6, 0x10, 0xa0, 0x0, 0x7, 0xba8, 0x4, 0x7, 0x1, 0x9, 0xb, 0x4, 0xb, 0x6, 0x3, 0x4, 0xfffffff7, 0x5, 0x2, 0xfffffffd, 0x8e4, 0x1e69, 0x1, 0x6, 0x6, 0x3, 0x2, 0x278, 0x8, 0x3, 0x76e, 0x9, 0x10001, 0x805, 0x2a, 0x2, 0x2, 0x3, 0x7fffffff, 0x1, 0x1, 0x8, 0xd, 0xf26a, 0x7, 0xbb1, 0x1, 0x5, 0x10, 0x9, 0x1, 0x200, 0x6, 0x401, 0x4, 0x5, 0x2, 0xd2, 0x2, 0x1, 0x9, 0x3, 0x7, 0x9, 0x7, 0x0, 0xfffff001, 0xfffffffc, 0x7, 0x48e, 0x7, 0x3, 0x3, 0x7fffffff, 0x80000000, 0x1, 0xb05, 0x1, 0x9, 0xffff, 0x8, 0x4, 0x833, 0x7, 0x8, 0x3, 0x6239, 0x1000, 0xb0c5, 0x31, 0x3, 0x0, 0x3, 0xf, 0x6, 0x3, 0x326, 0x2, 0xf65, 0x4, 0x9, 0x101, 0x8001, 0x0, 0x6, 0x6, 0x9, 0x400, 0x1, 0xb2, 0x0, 0x2, 0x9, 0x3, 0x1d34c96c, 0x800, 0xec, 0xcab0, 0x10, 0x4, 0x7, 0x1, 0x0, 0x2, 0x1, 0x2, 0x1, 0x9, 0x6, 0x9, 0x6, 0x7, 0x8166, 0x6, 0x8, 0x5, 0x1, 0x9, 0x0, 0x7ff800, 0x3, 0x7, 0x1, 0x6, 0x6, 0x6, 0x400, 0x5, 0x9, 0x7, 0xc, 0xd, 0x9c36, 0xff, 0x7, 0x2, 0x3, 0xf5, 0x1, 0x8, 0x0, 0x8000, 0x7, 0x0, 0x2, 0x1, 0x2, 0x8, 0x3, 0x1, 0xb, 0x8, 0x7, 0x7, 0x1, 0x0, 0x1, 0x26b1, 0x7fff, 0x1, 0x9, 0x6, 0x6, 0x7ff, 0x0, 0x6, 0x3, 0x3ff, 0x5, 0x9, 0x968, 0x7, 0x10000, 0x7, 0x246, 0x3, 0x1, 0x8, 0x2, 0xfff, 0x0, 0x3c, 0xfffffff7, 0x4, 0x10, 0x3d4f, 0x6, 0x7, 0x4, 0x5, 0x1, 0x7, 0x2, 0x7, 0x0, 0x4, 0x9, 0xf2, 0x1, 0x800, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x7, 0xffffbae4, 0xff, 0xffff, 0x7, 0x44a, 0xe, 0x7fff, 0x400, 0x5a, 0x8, 0x9, 0xf3b, 0x8d, 0x1000, 0x9, 0x5, 0xffffffff, 0x10001, 0x2, 0x7, 0x8, 0x2, 0x7f, 0x2, 0x10001, 0x9, 0x81, 0x82ea, 0x7, 0x347, 0x0, 0x6, 0xffffe93d, 0x0, 0x1, 0x1, 0x100, 0x400, 0x8, 0xf6, 0xffffffff, 0x1, 0x9, 0x4, 0x3, 0x8, 0x9, 0x7, 0x0, 0x7f, 0x5, 0xff, 0xe5f, 0x37e9252e, 0xfff, 0x7, 0x6, 0x400, 0x747, 0xfffff2d8, 0x5, 0xffffffff, 0xf, 0x74de, 0x1, 0xdc, 0xfff, 0x80, 0x7f, 0x8, 0x9, 0x31a9, 0xc4, 0x80000001, 0x80000001, 0xa6, 0x1, 0xf, 0x19, 0x3, 0x3, 0x2, 0x0, 0x6, 0x9, 0x3, 0x3, 0x5b, 0x0, 0x2, 0x0, 0x4e, 0x0, 0x80000001, 0x3, 0x1a3, 0x4, 0x100, 0x0, 0x8, 0xa, 0x3, 0xfffffff7, 0x2, 0x6, 0x5, 0x2, 0xe, 0x3, 0x8, 0x10000, 0x18baace1, 0x6, 0xff, 0x5, 0x90000000, 0x80000000, 0x7f, 0x0, 0xffffffff, 0xffff0001, 0xfffffff7, 0x80, 0x7, 0x6, 0x7ff, 0xffffff4a, 0x0, 0x1, 0x6, 0x7fff, 0x2670, 0x7, 0x44, 0x7, 0x0, 0x8, 0x2, 0x0, 0x5, 0x2, 0x1, 0xd, 0x140, 0x9, 0x1, 0x4, 0x2, 0x5, 0xd, 0x9, 0x8, 0xa, 0x70000, 0x80, 0xff, 0xfffffff7, 0x2, 0x7, 0x200, 0x33, 0xe, 0x101, 0xffff, 0x29, 0xb226, 0xffff0001, 0x7ff, 0x7, 0x4, 0x8, 0x800, 0xf292, 0x2, 0x474, 0x2, 0x2, 0x6, 0xdcd, 0x8, 0x7, 0x4, 0x1, 0xb2c0, 0x1, 0x9, 0x7, 0x3ff, 0x4, 0x7, 0x6, 0x1, 0xa7, 0x70c, 0x1, 0x8, 0x7f, 0x6, 0x6, 0x3, 0x2, 0x4, 0x5, 0x6, 0x7, 0x27400000, 0x10, 0x7, 0xa1, 0x3, 0xe, 0x80, 0x2d1, 0x7, 0xfffffff8, 0x5, 0xde, 0x64, 0x4, 0x0, 0x9, 0x1, 0x8, 0x3, 0x80, 0x7, 0x5, 0x7fffffff, 0x8, 0x7f, 0x7, 0x0, 0x1, 0x2, 0x8, 0x447, 0x0, 0x5d08, 0x4, 0x401, 0x2, 0x97, 0x6, 0x401, 0x5, 0xa, 0x10000, 0xe, 0x0, 0x7, 0x101, 0x2, 0x1ff, 0x9, 0x6, 0x400, 0x5, 0x3ff, 0x10000, 0x7, 0xb, 0x1, 0xfffffffb, 0x27c0, 0x5, 0x10001, 0x7, 0x7, 0x6, 0x5, 0x1, 0x1, 0x1, 0xd, 0x3, 0x7fff, 0xbf3, 0x7fffffff, 0x401, 0x7, 0x4, 0x2, 0x9, 0x8, 0x80, 0x0, 0x1, 0x8, 0x3, 0x5, 0x7fff, 0x2, 0x5, 0xfffff000, 0x4, 0x4c, 0x7, 0xc, 0x8001, 0x1caf795d, 0x7, 0x5, 0x8, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x5cea, 0x987, 0x83fb, 0x715, 0x5, 0x7, 0x9, 0xffff, 0x8d, 0x1ff, 0x7fff, 0x1, 0x9, 0x2, 0x100, 0x48, 0x9, 0x6, 0x8, 0x4, 0x1, 0x7, 0x2d59, 0x1, 0x7, 0xfffffff7, 0x5, 0x5, 0x6, 0x7, 0x4, 0x5, 0x109, 0x7f, 0x7, 0x5, 0x10, 0x7, 0x2, 0xdbee, 0x6, 0x0, 0x1, 0xc, 0xffffffff, 0x1, 0xef12, 0x2, 0x7fff, 0x2b, 0x4, 0x2d0, 0x3, 0x9, 0x3ff, 0x9, 0x1000, 0x0, 0x1, 0x1c000000, 0x400, 0x80000001, 0xf, 0x9, 0x4, 0x4d9fa7bb, 0x1ff, 0x3629, 0x1, 0xf6, 0xffff, 0x68, 0x1, 0xffff, 0x7ff, 0x7, 0x4, 0x9, 0x6, 0x4, 0x1ff, 0x5, 0x0, 0x7, 0x5, 0x0, 0x80000000, 0x10001, 0x9, 0xffff0ce4, 0x4, 0x3, 0xc, 0x8, 0xa4, 0x7e30eceb, 0x2, 0x94, 0x0, 0x7, 0x5, 0x1, 0x9, 0x3, 0xffffffff, 0x1f3, 0x0, 0x7, 0x80000001, 0xd6, 0x7f, 0xfffffffd, 0xfe, 0x10001, 0x401, 0xb51, 0x3, 0x3, 0x2, 0x7a, 0xfffffffc, 0x9, 0x8, 0x66b6, 0x200, 0x7fffffff, 0x7b, 0x1, 0xf, 0x6, 0x4, 0x10000, 0x1, 0x4, 0x5, 0x4238, 0x7, 0x2, 0x80, 0xff, 0x3, 0x3, 0x7c9, 0x2, 0x0, 0xffff8000, 0x1, 0x40, 0x1, 0xfffffffd, 0xec0c, 0x4, 0x9, 0x4, 0x5, 0xffffffff, 0xe, 0x7fff, 0x401, 0x800, 0x4, 0x10001, 0x9b86, 0x3, 0x7fffffff, 0xa046, 0x5, 0x4, 0x3ff, 0xff, 0x7, 0x40, 0x2, 0x6, 0x5, 0xfffffff8, 0x2de, 0x1, 0x2, 0x6, 0xa, 0x3, 0x2, 0xffffff00, 0x2, 0x10001, 0x6, 0x4c9d, 0xf5ca, 0x7fffffff, 0xf5c, 0x2, 0x7, 0xe, 0x0, 0x2, 0x9, 0x0, 0x2, 0x9, 0x3, 0x56, 0x9, 0x5, 0x7, 0x3ff, 0x4, 0xf7, 0x28, 0xfffffff9, 0x2, 0xff, 0x7205, 0x2, 0x3, 0x6, 0x2, 0x9, 0x8, 0x7, 0x7, 0xb0f6, 0x7ff, 0x2, 0x9, 0x800, 0x0, 0x4, 0x4, 0x0, 0x4, 0x6, 0x40, 0xfffffff8, 0xa2, 0x0, 0xa66, 0x4, 0xfffffffd, 0x6, 0x9, 0x8, 0x4e, 0x3, 0x0, 0xfffffff8, 0x3, 0x8001, 0x3, 0x542, 0xb20, 0x3, 0xcd3, 0x9, 0x5, 0x4, 0x3, 0x80000000, 0x1, 0x7f, 0x10001, 0x7, 0x7f, 0x20000000, 0x1, 0x5, 0x42ec, 0x5cbf, 0x9, 0x6, 0x4ea, 0x10001, 0x4b3e, 0x10, 0x55, 0x4, 0x2, 0x0, 0x5, 0x0, 0x1, 0x1, 0xff, 0x8000, 0xfffffffc, 0x8, 0x0, 0x0, 0x6, 0x1, 0x2ed1, 0x3, 0x4, 0x6, 0x2, 0x8a, 0x0, 0x3, 0x2, 0x401, 0x0, 0x6, 0x0, 0x80000001, 0xa, 0x5, 0xba41, 0xe, 0x7, 0xa0, 0x7, 0x50e, 0x200, 0x2, 0x4, 0x0, 0x2, 0x401, 0xffff, 0x373d, 0x80000000, 0x1, 0x100, 0x8, 0x10000, 0x80000000, 0x2, 0x3ff, 0x6, 0x2, 0x3, 0x6, 0x5, 0x4, 0x6, 0x10001, 0x3, 0xce1, 0x200, 0x7, 0xa, 0x1, 0xd0, 0x40, 0x3, 0x7, 0x10000, 0x913, 0x4000, 0x1, 0x3, 0x7f, 0x1bf, 0x7, 0x0, 0xdbd, 0x7f, 0x8, 0x7cd4, 0x4, 0x936, 0x1, 0x3, 0x4, 0x3, 0xfffffffb, 0x7, 0x7, 0x5, 0x3, 0x8, 0x400, 0xa, 0x1, 0x7, 0xce, 0x0, 0x9, 0x8000, 0x7, 0xffffff82, 0x65e, 0x5d, 0x42, 0xfffffff8, 0xfffffff8, 0x8526, 0x10, 0x0, 0x7, 0xfffffffe, 0x3c59, 0x8, 0x1, 0x401, 0x6, 0xf, 0x6, 0x7, 0x7f, 0x1000, 0x7, 0x5, 0x7, 0x0, 0xffff, 0x2676, 0x3, 0xff, 0x0, 0x2], 0x1, 0x400, 0x8}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x20, r7, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)={0x20, r8, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc, 0x18}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4884}, 0xc001) 3.432061512s ago: executing program 3 (id=655): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x2a, 0x100) ioctl$RTC_UIE_ON(r0, 0x7003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xfffb, 0x4, 0x7, 0x8, 0x61134d30, 0xdf9, 0x6, 0x6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(&(0x7f0000000100)='./file0\x00') socket$kcm(0x29, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x501, 0x2, 0x2}, 0x18, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25010000001400048005000300010000000500030001000001080002000100"], 0x30}}, 0x20004010) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000001c0)) 1.437013678s ago: executing program 2 (id=656): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x48090) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001180)={0x10, 0xfffffff5, 0x3}, 0x10) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40000) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r5, &(0x7f0000000100)=""/107, 0x6b) write$nci(r5, &(0x7f0000000100)=ANY=[], 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.347743777s ago: executing program 3 (id=657): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) 1.32227124s ago: executing program 4 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x802}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1.268167195s ago: executing program 3 (id=659): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0xfd, 0x1}, 0x10) 420.297868ms ago: executing program 2 (id=660): socket$inet6(0xa, 0x2, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x32, &(0x7f0000006c00)=0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r3, 0xffffffffffffffff, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) read(r4, &(0x7f00000003c0)=""/163, 0xa3) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0x1b) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) ioctl$TCXONC(r5, 0x540a, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r0, r6, 0x0, 0x7ffff004) 213.107709ms ago: executing program 0 (id=661): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000004000004e4e4a62605ca500fccb60d1cd0fea03d68bb54c34b9afd69906af4fa5132722995a1f96afdc764dcbba1df6cfa4bd58c04632b4be670b6ccf59bc6c8497a926b1ba0fb88986a4e0c9d65541d50be31d814818a6a28351cbaa7b0b465e0ff8e929783bd22b7ba2b09acc23fb22df24c6fcf4e6cebed7ecae80b3f7c8772642e3856a1e0895983fcf9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 197.42019ms ago: executing program 4 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) write$dsp(0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000009000000000000000010000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b719000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000065f21e794cb99500"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='signal_deliver\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 0s ago: executing program 2 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000900)="65f30fa7e066b94209000066b81286694866ba000000000f30baa100ec65a00000660f3881433f640f07b801088ed8baf80c66b834ff178166efbafe0cb000eeb8000002c0640f01cf", 0x49}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): o_hsr: link becomes ready [ 73.326849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.347689][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.358478][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.383813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.392031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.401761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.410707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.419516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.429217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.436981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.444920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.454135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.462853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.471560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.480014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.488729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.497597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.514044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.525449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.537916][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.555476][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.574193][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.592459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.616115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.668692][ T4184] device veth0_vlan entered promiscuous mode [ 73.696395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.705975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.723757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.751313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.762130][ T4184] device veth1_vlan entered promiscuous mode [ 73.856329][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.878287][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.890730][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.898385][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.915159][ T4184] device veth0_macvtap entered promiscuous mode [ 73.929645][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.939021][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.950561][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.970306][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.007363][ T4184] device veth1_macvtap entered promiscuous mode [ 74.075259][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.086886][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.101805][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.133874][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.147722][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.156214][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.164648][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.173801][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.181666][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.190523][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.199258][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.208039][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.216649][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.225405][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.237113][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.248475][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258821][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.267895][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.276938][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.296689][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.306455][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.318718][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.330697][ T4190] device veth0_vlan entered promiscuous mode [ 74.343836][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.379426][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.391062][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.405898][ T4190] device veth1_vlan entered promiscuous mode [ 74.425707][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.465250][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.482610][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.514361][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.523162][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.537722][ T4195] device veth0_vlan entered promiscuous mode [ 74.559589][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.569285][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.588297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.598131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.610581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.621760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.637887][ T4195] device veth1_vlan entered promiscuous mode [ 74.665376][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.681301][ T4190] device veth0_macvtap entered promiscuous mode [ 74.695459][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.708728][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.717945][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.726744][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.735434][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.744014][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.753008][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.762090][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.772951][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.788355][ T4190] device veth1_macvtap entered promiscuous mode [ 74.815566][ T4183] device veth0_vlan entered promiscuous mode [ 74.839351][ T4185] device veth0_vlan entered promiscuous mode [ 74.851494][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.865438][ T4183] device veth1_vlan entered promiscuous mode [ 74.869908][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.882776][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.894349][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.902555][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.912416][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.921678][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.932041][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.941786][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.950822][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.958988][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.970998][ T4195] device veth0_macvtap entered promiscuous mode [ 74.986198][ T4195] device veth1_macvtap entered promiscuous mode [ 75.007286][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.020355][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 75.022283][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.032245][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 75.042275][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.070164][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 75.077471][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 75.096721][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.104631][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 75.107822][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.119420][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.130668][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.139577][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.151219][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.162763][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.174838][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.187858][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.199649][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.211105][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.221961][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.233912][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.254937][ T4185] device veth1_vlan entered promiscuous mode [ 75.265736][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.280376][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.303918][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.315608][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.319645][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.348873][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.366671][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.382542][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.395746][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.407063][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.423670][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.443152][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.455851][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.471882][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.489062][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.544717][ T4185] device veth0_macvtap entered promiscuous mode [ 75.574789][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.584847][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.596147][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.606385][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.616490][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.625897][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.635022][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.708935][ T4183] device veth0_macvtap entered promiscuous mode [ 75.861769][ T4183] device veth1_macvtap entered promiscuous mode [ 76.053235][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.110884][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.214907][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.226741][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.236890][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.247864][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.259662][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.271613][ T4185] device veth1_macvtap entered promiscuous mode [ 76.292164][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302480][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.312277][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.321906][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.332883][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.342266][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.351062][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.359938][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.370880][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.382920][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.393139][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.403754][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.414081][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.425162][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.437277][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.469027][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.478606][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.503471][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.515167][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.525416][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.534363][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.579492][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.599337][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.609580][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.621407][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.638072][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.649462][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.662282][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.673573][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.685961][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.742450][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.760597][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.790606][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.849226][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.866829][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.878558][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.914469][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.928830][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.947634][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.958837][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.977486][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.026368][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.035311][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.047019][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.058905][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.075429][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.085682][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.101626][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 77.109459][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 77.121830][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 77.128854][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 77.205258][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 77.245871][ T4309] sctp: failed to load transform for md5: -2 [ 77.583554][ T373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.616374][ T373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.698165][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.717197][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.795842][ T373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.820676][ T373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.823786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.838910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.848067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.929922][ T4321] process 'syz.1.7' launched '/dev/fd/6' with NULL argv: empty string added [ 78.202583][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.221480][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.242901][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.277581][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.313359][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.346430][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.501766][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.536883][ T4325] loop1: detected capacity change from 0 to 8 [ 78.544432][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.562882][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.663146][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.729416][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.744132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.763256][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.773653][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.785568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.848666][ T4332] loop2: detected capacity change from 0 to 64 [ 78.849254][ T4331] loop3: detected capacity change from 0 to 1024 [ 78.978663][ T26] audit: type=1800 audit(1761130478.495:2): pid=4325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 79.004299][ T4331] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 79.030204][ T4331] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.178690][ T4330] loop4: detected capacity change from 0 to 4096 [ 79.217667][ T4331] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 79.249924][ T4331] System zones: 0-1, 3-36 [ 79.268621][ T4330] ======================================================= [ 79.268621][ T4330] WARNING: The mand mount option has been deprecated and [ 79.268621][ T4330] and is ignored by this kernel. Remove the mand [ 79.268621][ T4330] option from the mount to silence this warning. [ 79.268621][ T4330] ======================================================= [ 79.426032][ T4330] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 79.550705][ T4331] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 79.998642][ T4330] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 80.048295][ T4325] syz.1.8 (4325) used greatest stack depth: 20816 bytes left [ 80.600899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 80.697366][ T4345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.822443][ T4345] bond0: (slave rose0): Enslaving as an active interface with an up link [ 80.872442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.100854][ C1] llc_conn_state_process: llc_conn_service failed [ 82.047338][ T4370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 82.094672][ T4371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.550713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 82.560849][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 82.750977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.058188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.979798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.988941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 84.060017][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 84.069223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 84.078548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 84.647464][ T4406] tipc: Started in network mode [ 84.655516][ T4406] tipc: Node identity be42ee113732, cluster identity 4711 [ 84.667344][ T4406] tipc: Enabled bearer , priority 0 [ 85.152659][ T4414] device syzkaller0 entered promiscuous mode [ 85.396605][ T4406] tipc: Resetting bearer [ 85.412134][ T4398] tipc: Resetting bearer [ 85.453462][ T4418] loop3: detected capacity change from 0 to 256 [ 85.462090][ T4398] tipc: Disabling bearer [ 86.499399][ T4438] loop3: detected capacity change from 0 to 128 [ 86.586212][ T4438] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 86.876004][ T21] cfg80211: failed to load regulatory.db [ 87.633589][ T4438] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.683999][ T4447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.731669][ T4438] ext2 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.201705][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 88.628527][ T4459] loop2: detected capacity change from 0 to 4096 [ 90.329698][ C0] sched: RT throttling activated [ 90.351633][ T4466] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.489504][ T26] audit: type=1800 audit(1761130489.925:3): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 90.574167][ T4459] netlink: 220 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.089255][ T26] audit: type=1800 audit(1761130490.255:4): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 91.791553][ T4486] tipc: Enabled bearer , priority 0 [ 91.808101][ T4486] device syzkaller0 entered promiscuous mode [ 91.845030][ T4486] tipc: Resetting bearer [ 91.879557][ T4485] tipc: Resetting bearer [ 92.231238][ T4485] tipc: Disabling bearer [ 92.272041][ T4492] loop3: detected capacity change from 0 to 128 [ 92.358225][ T4492] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 92.533179][ T4492] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.960071][ T4504] netlink: 64 bytes leftover after parsing attributes in process `syz.1.44'. [ 92.976291][ T4492] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.051572][ T4521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.313936][ T4528] loop4: detected capacity change from 0 to 128 [ 94.895819][ T4528] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.968134][ T4536] comedi comedi0: Minor 3 could not be opened [ 95.105103][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.239925][ T4528] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.640235][ T4544] tipc: Started in network mode [ 95.645597][ T4544] tipc: Node identity 7eebe70819fe, cluster identity 4711 [ 95.670041][ T4544] tipc: Enabled bearer , priority 0 [ 96.496250][ T4544] tipc: Resetting bearer [ 96.644568][ T4546] device syzkaller0 entered promiscuous mode [ 96.660701][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 96.663034][ T4553] loop2: detected capacity change from 0 to 128 [ 96.676202][ T4543] tipc: Resetting bearer [ 96.762161][ T4543] tipc: Disabling bearer [ 96.892121][ T4553] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 96.953706][ T4559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.57'. [ 97.192812][ T4553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.222268][ T4561] loop4: detected capacity change from 0 to 16 [ 97.234730][ T4553] ext2 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.096414][ T4561] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.321954][ T4576] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 5 for nid 36, please upgrade kernel [ 98.334757][ T4576] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 98.343919][ T4576] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 98.874220][ T4578] loop0: detected capacity change from 0 to 16 [ 99.076735][ T4584] loop2: detected capacity change from 0 to 512 [ 100.292252][ T4578] erofs: (device loop0): mounted with root inode @ nid 36. [ 100.603899][ T4580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.774817][ T4584] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 101.878131][ T4584] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.946683][ T4584] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 101.983358][ T4584] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 102.207142][ T4592] comedi comedi0: Minor 3 could not be opened [ 102.310829][ T2288] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.719798][ T2288] usb 2-1: Using ep0 maxpacket: 32 [ 102.891224][ T2288] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 102.941458][ T2288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.277699][ T2288] usb 2-1: config 0 descriptor?? [ 103.625756][ T2288] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 103.946836][ T2288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.043954][ T4609] loop0: detected capacity change from 0 to 16 [ 104.076696][ T2288] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 104.118391][ T4608] tipc: Enabled bearer , priority 0 [ 104.132479][ T2288] usb 2-1: media controller created [ 104.203406][ T4608] device syzkaller0 entered promiscuous mode [ 104.225065][ T4609] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.419442][ T4613] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 5 for nid 36, please upgrade kernel [ 104.432449][ T4613] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 104.441517][ T4613] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 104.872373][ T4606] tipc: Resetting bearer [ 104.975830][ T2288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.987204][ T4606] tipc: Disabling bearer [ 105.100057][ T2288] az6027: usb out operation failed. (-71) [ 105.123448][ T2288] az6027: usb out operation failed. (-71) [ 105.129505][ T2288] stb0899_attach: Driver disabled by Kconfig [ 105.193341][ T2288] az6027: no front-end attached [ 105.193341][ T2288] [ 105.239889][ T2288] az6027: usb out operation failed. (-71) [ 105.258416][ T2288] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 105.314294][ T2288] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 105.610169][ T2288] dvb-usb: schedule remote query interval to 400 msecs. [ 105.718602][ T2288] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 106.311809][ T2288] usb 2-1: USB disconnect, device number 2 [ 106.581758][ T2288] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 107.026261][ T4639] device syzkaller0 entered promiscuous mode [ 107.478515][ T4646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.856030][ T4668] tipc: Started in network mode [ 109.878722][ T4668] tipc: Node identity 76ab92b58a55, cluster identity 4711 [ 109.896648][ T4668] tipc: Enabled bearer , priority 0 [ 109.944338][ T4671] device syzkaller0 entered promiscuous mode [ 110.051170][ T4668] tipc: Resetting bearer [ 110.951445][ T4254] tipc: Node number set to 4244542133 [ 110.975202][ T4667] tipc: Resetting bearer [ 111.006087][ T4667] tipc: Disabling bearer [ 111.023255][ T4679] netlink: 64 bytes leftover after parsing attributes in process `syz.4.88'. [ 111.098113][ T4684] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 111.336293][ T4690] loop4: detected capacity change from 0 to 128 [ 111.690359][ T4690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 112.057546][ T4690] System zones: 1-3, 19-19, 35-36 [ 112.173001][ T4690] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000000c,debug,,errors=continue. Quota mode: none. [ 112.210091][ T4690] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.258000][ T4697] netlink: 'syz.0.93': attribute type 6 has an invalid length. [ 114.700015][ T1110] Bluetooth: hci2: command 0x0406 tx timeout [ 114.728560][ T4724] loop2: detected capacity change from 0 to 512 [ 115.141978][ T4732] tipc: Enabled bearer , priority 0 [ 115.145911][ T4724] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 115.151140][ T4732] device syzkaller0 entered promiscuous mode [ 115.177611][ T4732] Zero length message leads to an empty skb [ 115.195437][ T4724] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.211256][ T4732] tipc: Resetting bearer [ 115.247332][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 115.694870][ T4731] tipc: Resetting bearer [ 116.005901][ T4731] tipc: Disabling bearer [ 116.156398][ T4743] loop1: detected capacity change from 0 to 8 [ 116.181986][ T4743] SQUASHFS error: xz decompression failed, data probably corrupt [ 116.190211][ T4743] SQUASHFS error: Failed to read block 0x108: -5 [ 116.196696][ T4743] SQUASHFS error: Unable to read metadata cache entry [106] [ 116.204181][ T4743] SQUASHFS error: Unable to read inode 0x11f [ 116.434907][ T4746] loop4: detected capacity change from 0 to 512 [ 117.138726][ T4746] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.106: bg 0: block 248: padding at end of block bitmap is not set [ 118.221531][ T4746] Quota error (device loop4): write_blk: dquota write failed [ 118.320186][ T4746] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 118.402127][ T4746] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.106: Failed to acquire dquot type 1 [ 118.762540][ T4746] EXT4-fs (loop4): 1 truncate cleaned up [ 118.885651][ T4746] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.170035][ T4746] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.082459][ T4784] tipc: Enabled bearer , priority 0 [ 120.094898][ T4784] device syzkaller0 entered promiscuous mode [ 120.122057][ T4784] tipc: Resetting bearer [ 120.137573][ T4783] tipc: Resetting bearer [ 120.322863][ T4783] tipc: Disabling bearer [ 122.600630][ T4804] loop1: detected capacity change from 0 to 8192 [ 123.304256][ T4817] loop3: detected capacity change from 0 to 4096 [ 123.536457][ T4829] loop0: detected capacity change from 0 to 512 [ 123.696801][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 123.787072][ T4829] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000040000,minixdf,,errors=continue. Quota mode: writeback. [ 123.800284][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 123.824876][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 123.843157][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 123.870047][ T4829] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.930797][ T4183] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 123.932558][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 123.951055][ T4183] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 124.222215][ T26] audit: type=1800 audit(1761130523.745:5): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.130" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 124.346768][ T4843] tipc: Enabled bearer , priority 0 [ 124.367495][ T4843] device syzkaller0 entered promiscuous mode [ 124.459985][ T26] audit: type=1326 audit(1761130523.905:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 124.462181][ T4841] tipc: Started in network mode [ 124.489800][ T4841] tipc: Node identity 62226b5e9561, cluster identity 4711 [ 124.506261][ T4841] tipc: Enabled bearer , priority 0 [ 124.553923][ T26] audit: type=1326 audit(1761130523.905:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 124.616364][ T4846] tipc: Resetting bearer [ 124.659170][ T4847] device syzkaller0 entered promiscuous mode [ 124.722038][ T26] audit: type=1326 audit(1761130523.905:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 124.756967][ T4842] tipc: Resetting bearer [ 124.923446][ T26] audit: type=1326 audit(1761130523.905:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 124.991322][ T4842] tipc: Disabling bearer [ 125.583489][ T4741] tipc: Node number set to 4148390750 [ 125.598381][ T26] audit: type=1326 audit(1761130523.905:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 125.828406][ T4847] tipc: Resetting bearer [ 125.939138][ T4840] tipc: Resetting bearer [ 126.136307][ T26] audit: type=1326 audit(1761130523.905:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 126.162801][ T4840] tipc: Disabling bearer [ 126.608321][ T4916] netlink: 64 bytes leftover after parsing attributes in process `syz.3.136'. [ 126.640343][ T26] audit: type=1326 audit(1761130523.905:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 127.272055][ T26] audit: type=1326 audit(1761130523.905:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 127.435737][ T26] audit: type=1326 audit(1761130523.905:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 128.141303][ T4934] loop0: detected capacity change from 0 to 1024 [ 128.479743][ T4934] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 129.708723][ T4934] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 129.964663][ T4934] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.598267][ T4974] tipc: Started in network mode [ 131.655255][ T4974] tipc: Node identity aafc2efe72c6, cluster identity 4711 [ 131.694549][ T4974] tipc: Enabled bearer , priority 0 [ 131.750249][ T4975] device syzkaller0 entered promiscuous mode [ 131.830617][ T4981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.152'. [ 131.859325][ T4974] tipc: Resetting bearer [ 131.879525][ T4971] tipc: Resetting bearer [ 131.902455][ T4971] tipc: Disabling bearer [ 132.962185][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968668][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.923986][ T5019] loop0: detected capacity change from 0 to 128 [ 135.982591][ T5019] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 136.091006][ T5019] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.109888][ T5019] ext2 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.531989][ T5031] loop3: detected capacity change from 0 to 4096 [ 136.647783][ T5031] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 136.726968][ T5031] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 136.770898][ T5031] ntfs3: loop3: mft corrupted [ 136.787767][ T5031] ntfs3: loop3: Failed to load $Extend. [ 136.824651][ T5007] loop1: detected capacity change from 0 to 32768 [ 136.846364][ T5034] tipc: Enabled bearer , priority 0 [ 136.901949][ T5034] device syzkaller0 entered promiscuous mode [ 137.028868][ T5034] tipc: Resetting bearer [ 137.088025][ T5033] tipc: Resetting bearer [ 137.149191][ T5033] tipc: Disabling bearer [ 137.598173][ T5044] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'. [ 138.593792][ T5050] loop0: detected capacity change from 0 to 128 [ 138.739695][ T5053] comedi comedi0: Minor 3 could not be opened [ 139.040073][ T5050] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 139.092021][ T5050] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.129973][ T5050] ext2 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.289316][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 145.008986][ T5101] loop0: detected capacity change from 0 to 128 [ 145.040388][ T5101] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 145.102133][ T5101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.122615][ T5101] ext2 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.390033][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 145.390050][ T26] audit: type=1326 audit(1761130544.905:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 145.485781][ T26] audit: type=1326 audit(1761130544.915:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 145.565871][ T26] audit: type=1326 audit(1761130544.915:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 145.817599][ T26] audit: type=1326 audit(1761130544.915:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 145.858862][ T26] audit: type=1326 audit(1761130544.965:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 146.060495][ T26] audit: type=1326 audit(1761130544.965:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 146.385155][ T26] audit: type=1326 audit(1761130544.995:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 146.407985][ T26] audit: type=1326 audit(1761130544.995:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 146.448015][ T26] audit: type=1326 audit(1761130544.995:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 146.568448][ T5159] loop4: detected capacity change from 0 to 1024 [ 146.975147][ T5159] EXT4-fs (loop4): Ignoring removed oldalloc option [ 147.047056][ T5159] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.193998][ T26] audit: type=1326 audit(1761130544.995:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5104 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 147.460494][ T5159] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 147.467087][ T5159] EXT4-fs (loop4): mount failed [ 148.030753][ T5179] loop3: detected capacity change from 0 to 2048 [ 148.154696][ T5183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.195'. [ 148.387004][ T5163] loop0: detected capacity change from 0 to 32768 [ 149.887687][ T5185] loop3: detected capacity change from 0 to 32768 [ 150.165641][ T5185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.197 (5185) [ 151.091442][ T5185] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 151.106636][ T5185] BTRFS info (device loop3): metadata ratio 2 [ 151.116159][ T5185] BTRFS info (device loop3): allowing degraded mounts [ 151.130584][ T5185] BTRFS info (device loop3): force zlib compression, level 3 [ 151.138887][ T5185] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.147934][ T5196] loop0: detected capacity change from 0 to 128 [ 151.150115][ T5185] BTRFS info (device loop3): use zstd compression, level 3 [ 151.169173][ T5185] BTRFS info (device loop3): force clearing of disk cache [ 151.213617][ T5185] BTRFS info (device loop3): allowing degraded mounts [ 151.235138][ T5196] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 151.279740][ T5185] BTRFS info (device loop3): max_inline at 0 [ 151.285917][ T5185] BTRFS info (device loop3): using free space tree [ 151.299780][ T5185] BTRFS info (device loop3): has skinny extents [ 151.340637][ T5196] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.370215][ T5196] ext2 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.402965][ T5208] loop2: detected capacity change from 0 to 128 [ 151.411713][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 151.411728][ T26] audit: type=1326 audit(1761130550.935:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 151.578061][ T26] audit: type=1326 audit(1761130550.935:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 151.686450][ T26] audit: type=1326 audit(1761130550.935:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 151.705535][ T5208] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 151.711516][ T26] audit: type=1326 audit(1761130550.935:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 151.817349][ T5185] BTRFS error (device loop3): open_ctree failed: -12 [ 151.959071][ T5208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.003972][ T5208] ext2 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.193145][ T26] audit: type=1326 audit(1761130550.935:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 152.218655][ T26] audit: type=1326 audit(1761130550.935:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 152.245523][ T5235] tipc: Enabled bearer , priority 0 [ 152.408074][ T5235] device syzkaller0 entered promiscuous mode [ 152.429837][ T26] audit: type=1326 audit(1761130550.935:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 152.706998][ T5235] tipc: Resetting bearer [ 152.803933][ T26] audit: type=1326 audit(1761130550.935:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 152.873890][ T5234] tipc: Resetting bearer [ 153.093695][ T26] audit: type=1326 audit(1761130550.935:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 153.119822][ T5234] tipc: Disabling bearer [ 153.534946][ T26] audit: type=1326 audit(1761130550.935:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d20b5fc9 code=0x7ffc0000 [ 153.734529][ T4198] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4198) [ 156.281471][ T5338] loop4: detected capacity change from 0 to 128 [ 156.330188][ T5340] loop0: detected capacity change from 0 to 128 [ 156.408604][ T5340] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 156.460770][ T5338] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 157.424621][ T5340] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.436194][ T5338] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.440177][ T5340] ext2 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.460188][ T5338] ext2 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.037447][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 159.037459][ T26] audit: type=1326 audit(1761130558.555:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.2.222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1d353efc9 code=0x0 [ 159.172063][ T5361] tipc: Enabled bearer , priority 0 [ 159.216932][ T5361] device syzkaller0 entered promiscuous mode [ 159.343760][ T5361] tipc: Resetting bearer [ 159.364749][ T5360] tipc: Resetting bearer [ 159.417859][ T5360] tipc: Disabling bearer [ 159.613790][ T5353] loop1: detected capacity change from 0 to 32768 [ 159.695284][ T5353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.220 (5353) [ 159.797534][ T5353] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 159.824223][ T5366] loop4: detected capacity change from 0 to 256 [ 159.839923][ T5353] BTRFS info (device loop1): using free space tree [ 159.879810][ T5353] BTRFS info (device loop1): has skinny extents [ 160.420235][ T5371] loop2: detected capacity change from 0 to 65536 [ 160.505659][ T5366] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ffa7, chksum : 0x33f41936, utbl_chksum : 0xe619d30d) [ 160.534195][ T5353] BTRFS info (device loop1): enabling ssd optimizations [ 160.585569][ T5371] XFS (loop2): Mounting V5 Filesystem [ 160.742987][ T5371] XFS (loop2): Ending clean mount [ 162.770533][ T5410] syz.4.227[5410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.770645][ T5410] syz.4.227[5410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.404973][ T5410] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.227'. [ 163.752419][ T4190] XFS (loop2): Unmounting Filesystem [ 164.940094][ T5414] loop4: detected capacity change from 0 to 128 [ 165.122222][ T5414] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 165.275853][ T5414] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.296851][ T5414] ext2 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.443183][ T5422] loop3: detected capacity change from 0 to 1024 [ 168.118663][ T5444] loop1: detected capacity change from 0 to 8 [ 168.190930][ T5444] SQUASHFS error: xz decompression failed, data probably corrupt [ 168.199203][ T5444] SQUASHFS error: Failed to read block 0x108: -5 [ 168.206964][ T5444] SQUASHFS error: Unable to read metadata cache entry [106] [ 168.214442][ T5444] SQUASHFS error: Unable to read inode 0x11f [ 168.333565][ T5454] comedi comedi0: Minor 3 could not be opened [ 170.892789][ T26] audit: type=1326 audit(1761130570.415:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 170.986563][ T26] audit: type=1326 audit(1761130570.415:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 171.037674][ T5474] loop2: detected capacity change from 0 to 128 [ 171.089983][ T5474] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 171.151081][ T26] audit: type=1326 audit(1761130570.415:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 171.291976][ T5474] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.490018][ T5474] ext2 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.601502][ T26] audit: type=1326 audit(1761130570.415:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 171.745354][ T26] audit: type=1326 audit(1761130570.505:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 172.028702][ T26] audit: type=1326 audit(1761130570.505:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 172.376219][ T26] audit: type=1326 audit(1761130570.505:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 172.859780][ T26] audit: type=1326 audit(1761130570.505:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 172.923067][ T26] audit: type=1326 audit(1761130570.505:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 173.189891][ T26] audit: type=1326 audit(1761130570.505:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e25ddfc9 code=0x7ffc0000 [ 173.619924][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 174.295770][ T5510] loop3: detected capacity change from 0 to 32768 [ 174.431797][ T5531] loop0: detected capacity change from 0 to 8 [ 174.487749][ T5531] SQUASHFS error: xz decompression failed, data probably corrupt [ 174.495839][ T5531] SQUASHFS error: Failed to read block 0x108: -5 [ 174.502771][ T5531] SQUASHFS error: Unable to read metadata cache entry [106] [ 174.510166][ T5531] SQUASHFS error: Unable to read inode 0x11f [ 174.559795][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 174.671218][ T5533] loop0: detected capacity change from 0 to 128 [ 174.800242][ T4320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.821294][ T5537] comedi comedi0: Minor 3 could not be opened [ 174.960155][ T5533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.009853][ T4320] usb 3-1: config 64 has an invalid interface number: 208 but max is 0 [ 175.029311][ T4320] usb 3-1: config 64 has no interface number 0 [ 175.042141][ T5533] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.049866][ T4320] usb 3-1: config 64 interface 208 has no altsetting 0 [ 175.680114][ T4320] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0122, bcdDevice=69.24 [ 176.689793][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.698130][ T4320] usb 3-1: Product: syz [ 176.702872][ T4320] usb 3-1: Manufacturer: syz [ 176.708018][ T4320] usb 3-1: SerialNumber: syz [ 176.779874][ T4320] usb 3-1: can't set config #64, error -71 [ 176.811525][ T4320] usb 3-1: USB disconnect, device number 2 [ 177.089553][ T5554] loop2: detected capacity change from 0 to 512 [ 177.104226][ T5555] loop3: detected capacity change from 0 to 256 [ 177.305432][ T5557] loop4: detected capacity change from 0 to 512 [ 178.856070][ T5554] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.865651][ T5557] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 178.875498][ T5557] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.885341][ T5557] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 178.895396][ T5557] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 179.338953][ T5555] FAT-fs (loop3): Directory bread(block 64) failed [ 179.359081][ T5554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.424847][ T5555] FAT-fs (loop3): Directory bread(block 65) failed [ 179.432158][ T5555] FAT-fs (loop3): Directory bread(block 66) failed [ 179.465186][ T5555] FAT-fs (loop3): Directory bread(block 67) failed [ 179.514122][ T5555] FAT-fs (loop3): Directory bread(block 68) failed [ 179.562469][ T5555] FAT-fs (loop3): Directory bread(block 69) failed [ 179.609932][ T5555] FAT-fs (loop3): Directory bread(block 70) failed [ 179.729898][ T5555] FAT-fs (loop3): Directory bread(block 71) failed [ 179.736842][ T5555] FAT-fs (loop3): Directory bread(block 72) failed [ 179.801184][ T5555] FAT-fs (loop3): Directory bread(block 73) failed [ 179.844864][ T5567] loop0: detected capacity change from 0 to 1024 [ 179.931591][ T5567] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 179.950548][ T5567] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.018333][ T5567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 180.146587][ T5567] System zones: 0-1, 3-36 [ 180.213904][ T5567] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 180.294393][ T5571] loop2: detected capacity change from 0 to 4096 [ 180.436283][ T5585] comedi comedi0: Minor 3 could not be opened [ 180.665048][ T5571] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.735447][ T5562] loop1: detected capacity change from 0 to 32768 [ 182.280059][ T5562] JBD2: recovery failed [ 182.299848][ T5562] (syz.1.258,5562,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 182.310175][ T5562] (syz.1.258,5562,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 182.381217][ T5562] (syz.1.258,5562,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 182.429814][ T5562] (syz.1.258,5562,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 182.571227][ T5562] (syz.1.258,5562,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 182.779114][ T5609] loop2: detected capacity change from 0 to 512 [ 185.805389][ T5609] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 185.817037][ T5609] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.826749][ T5609] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 185.836650][ T5609] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 186.212992][ T5617] loop4: detected capacity change from 0 to 512 [ 186.252095][ T5617] EXT4-fs (loop4): Ignoring removed bh option [ 187.004160][ T5617] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 187.068519][ T5617] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.447534][ T5639] loop0: detected capacity change from 0 to 1024 [ 187.482786][ T5644] loop2: detected capacity change from 0 to 16 [ 187.552971][ T5636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.566203][ T5644] erofs: (device loop2): mounted with root inode @ nid 36. [ 187.667534][ T5646] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 5 for nid 36, please upgrade kernel [ 187.680154][ T5646] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 187.688595][ T5646] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 188.992326][ T4911] hfsplus: b-tree write err: -5, ino 4 [ 189.085972][ T5656] loop2: detected capacity change from 0 to 1024 [ 189.195224][ T5656] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 189.224698][ T5656] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.290484][ T5656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 189.299082][ T5656] System zones: 0-1, 3-36 [ 189.335704][ T5656] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 189.436423][ T5662] loop4: detected capacity change from 0 to 512 [ 189.525223][ T5662] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 189.535271][ T5662] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.544620][ T5662] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 189.554896][ T5662] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 190.533054][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 191.506004][ T13] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.517697][ T13] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.567733][ T13] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.629140][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.692572][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 191.701213][ T1110] Bluetooth: hci0: command 0x0406 tx timeout [ 191.712001][ T5661] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.744258][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 191.941888][ T5696] loop4: detected capacity change from 0 to 64 [ 191.972663][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 191.979139][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 192.155129][ T5661] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 192.176222][ T4318] usb 1-1: USB disconnect, device number 2 [ 192.863218][ T4643] udevd[4643]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.784226][ T5709] loop2: detected capacity change from 0 to 1024 [ 193.846144][ T5709] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 193.873651][ T5709] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.958908][ T5709] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 194.157770][ T5709] System zones: 0-1, 3-36 [ 194.193044][ T5709] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 194.753404][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.759801][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.463537][ T4318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 196.047601][ T5740] comedi comedi0: Minor 3 could not be opened [ 196.546005][ T5742] loop1: detected capacity change from 0 to 512 [ 196.578444][ T5719] loop0: detected capacity change from 0 to 32768 [ 196.629966][ T4318] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 196.634682][ T5719] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.303 (5719) [ 196.656666][ T5742] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 196.696421][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.703869][ T5742] EXT4-fs (loop1): orphan cleanup on readonly fs [ 196.732969][ T5742] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 196.776375][ T4318] usb 4-1: Product: syz [ 196.858356][ T4318] usb 4-1: Manufacturer: syz [ 196.874413][ T4318] usb 4-1: SerialNumber: syz [ 196.880068][ T5742] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.309: couldn't read orphan inode 13 (err -117) [ 196.911879][ T4318] usb 4-1: config 0 descriptor?? [ 196.924411][ T5719] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 196.924796][ T5742] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 196.950112][ T5719] BTRFS info (device loop0): setting nodatacow, compression disabled [ 196.983059][ T4318] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 196.995635][ T5749] loop4: detected capacity change from 0 to 4096 [ 197.035245][ T5749] EXT4-fs (loop4): Test dummy encryption mode enabled [ 197.045881][ T5719] BTRFS info (device loop0): force clearing of disk cache [ 197.073689][ T5742] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 197.100476][ T5749] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 197.109017][ T5719] BTRFS info (device loop0): enabling ssd optimizations [ 197.132912][ T5749] System zones: 0-5 [ 197.138832][ T5719] BTRFS info (device loop0): using spread ssd allocation scheme [ 197.150685][ T5742] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 197.172660][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 197.220600][ T5719] BTRFS info (device loop0): turning off barriers [ 197.227406][ T5719] BTRFS info (device loop0): disabling free space tree [ 197.235157][ T5719] BTRFS info (device loop0): not using ssd optimizations [ 197.242632][ T5719] BTRFS info (device loop0): not using spread ssd allocation scheme [ 197.251088][ T5719] BTRFS info (device loop0): has skinny extents [ 197.316536][ T5742] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 197.370217][ T5742] ext4 filesystem being remounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.435815][ T4318] (null): failure reading functionality [ 197.466235][ T4318] i2c i2c-1: failure reading functionality [ 197.620543][ T4318] i2c i2c-1: connected i2c-tiny-usb device [ 197.792926][ T5749] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 198.017532][ T4318] usb 4-1: USB disconnect, device number 2 [ 198.221802][ T5719] BTRFS error (device loop0): open_ctree failed: -12 [ 198.278230][ T4744] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4744) [ 200.688233][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 200.688247][ T26] audit: type=1326 audit(1761130600.205:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 201.080827][ T26] audit: type=1326 audit(1761130600.215:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 201.114630][ T26] audit: type=1326 audit(1761130600.215:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 201.449486][ T5835] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.539576][ T26] audit: type=1326 audit(1761130600.215:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 201.565441][ T26] audit: type=1326 audit(1761130600.215:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 201.655034][ T5803] loop4: detected capacity change from 0 to 2048 [ 202.662983][ T5844] loop1: detected capacity change from 0 to 512 [ 202.708495][ T26] audit: type=1326 audit(1761130600.215:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 202.740383][ T26] audit: type=1326 audit(1761130600.215:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 202.913949][ T5803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.943548][ T26] audit: type=1326 audit(1761130600.215:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 202.974409][ T5803] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.002459][ T5844] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.323: casefold flag without casefold feature [ 203.115693][ T26] audit: type=1326 audit(1761130600.215:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 203.139054][ T26] audit: type=1326 audit(1761130600.215:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa03464afc9 code=0x7ffc0000 [ 203.235496][ T5844] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.323: couldn't read orphan inode 15 (err -117) [ 204.357043][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.830018][ T5865] loop4: detected capacity change from 0 to 1024 [ 206.573359][ T5865] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 206.660888][ T5865] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.688392][ T5869] loop0: detected capacity change from 0 to 128 [ 206.706898][ T5865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 206.718633][ T5865] System zones: 0-1, 3-36 [ 206.751617][ T5865] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 206.837299][ T5869] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 207.013904][ T5879] comedi comedi0: Minor 3 could not be opened [ 207.206211][ T5869] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.263681][ T5869] ext2 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.692117][ T5873] crypto_alloc_aead failed rc=-4 [ 208.538090][ T5944] ODEBUG: Out of memory. ODEBUG disabled [ 208.892591][ T5950] loop4: detected capacity change from 0 to 1024 [ 211.450408][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.340'. [ 211.991189][ T4259] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 212.170145][ T5965] loop0: detected capacity change from 0 to 128 [ 212.188783][ T4259] Bluetooth: hci1: Injecting HCI hardware error event [ 212.228128][ T4194] Bluetooth: hci1: hardware error 0x00 [ 212.249951][ T5965] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 212.382950][ T5976] loop4: detected capacity change from 0 to 128 [ 212.392540][ T5965] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.413914][ T5965] ext2 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.464755][ T5976] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 212.531880][ T5976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.543521][ T5976] ext2 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.048028][ T4197] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 216.736775][ T6039] loop0: detected capacity change from 0 to 8 [ 217.079124][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 217.079141][ T26] audit: type=1800 audit(1761130616.595:139): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 217.670313][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 217.849386][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'. [ 218.246614][ T6060] loop3: detected capacity change from 0 to 4096 [ 218.660830][ T6064] loop1: detected capacity change from 0 to 1024 [ 218.860123][ T13] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.947988][ T13] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.192951][ T6070] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.229775][ T26] audit: type=1800 audit(1761130618.745:140): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 219.352670][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 219.628435][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.540046][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.637246][ T6073] netlink: 220 bytes leftover after parsing attributes in process `syz.3.363'. [ 221.129971][ T13] usb 3-1: can't set config #27, error -71 [ 221.184535][ T26] audit: type=1800 audit(1761130620.705:141): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 221.250959][ T13] usb 3-1: USB disconnect, device number 3 [ 221.385396][ T6084] loop2: detected capacity change from 0 to 8 [ 222.333008][ T26] audit: type=1800 audit(1761130621.845:142): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.372" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 222.696792][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 222.719749][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 223.204815][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 223.699472][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 223.804366][ T6108] loop2: detected capacity change from 0 to 512 [ 223.863120][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.887637][ T6108] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 223.898153][ T6108] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.907472][ T6108] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 223.917357][ T6108] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 223.968453][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.340641][ T1107] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 224.386437][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.574127][ T1107] usb 2-1: Product: syz [ 224.579338][ T1107] usb 2-1: Manufacturer: syz [ 224.584031][ T1107] usb 2-1: SerialNumber: syz [ 224.614962][ T1107] usb 2-1: config 0 descriptor?? [ 225.353164][ T13] usb 5-1: string descriptor 0 read error: -71 [ 225.379818][ T13] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 225.412947][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.485639][ T5778] usb 2-1: USB disconnect, device number 3 [ 225.494686][ T13] usb 5-1: config 0 descriptor?? [ 225.539872][ T13] usb 5-1: can't set config #0, error -71 [ 225.598116][ T13] usb 5-1: USB disconnect, device number 2 [ 225.628538][ T6126] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 225.800555][ T6126] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 226.028353][ T6126] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 226.174604][ T6126] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 226.274636][ T6126] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 226.400112][ T6126] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 226.459548][ T6126] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 226.466647][ T6126] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 226.473837][ T6126] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 226.508853][ T6134] loop2: detected capacity change from 0 to 8 [ 226.529775][ T6126] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 226.549849][ T6126] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 226.574899][ T6126] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 226.584584][ T6126] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 226.602741][ T6126] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 226.609482][ T6126] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 226.629791][ T6126] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 226.636853][ T6126] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 226.714273][ T6126] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 226.728881][ T26] audit: type=1800 audit(1761130626.245:143): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.386" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 226.760006][ T6126] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 226.776714][ T6136] loop4: detected capacity change from 0 to 4096 [ 226.791579][ T6126] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 226.798512][ T6126] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 226.825434][ T6126] comedi comedi3: 8255: I/O port conflict (0x1c,4) [ 226.836781][ T6126] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 226.845057][ T6126] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 226.999179][ T6144] loop2: detected capacity change from 0 to 1024 [ 227.095369][ T6144] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.159168][ T26] audit: type=1326 audit(1761130626.675:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f306bf4dfc9 code=0x0 [ 227.215855][ T26] audit: type=1800 audit(1761130626.715:145): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.388" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 227.310249][ T4195] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 227.327229][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 227.518196][ T6154] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 228.503066][ T6154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 228.780145][ T6154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 228.780145][ T6154] [ 229.525291][ T6154] EXT4-fs (loop2): Total free blocks count 0 [ 229.533408][ T6154] EXT4-fs (loop2): Free/Dirty block details [ 229.701293][ T6154] EXT4-fs (loop2): free_blocks=68451041280 [ 229.714215][ T6176] tipc: Enabled bearer , priority 0 [ 229.721541][ T6154] EXT4-fs (loop2): dirty_blocks=64 [ 229.726947][ T6154] EXT4-fs (loop2): Block reservation details [ 229.744619][ T6176] device syzkaller0 entered promiscuous mode [ 230.462890][ T6154] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 230.725908][ T6171] tipc: Resetting bearer [ 230.745892][ T6188] loop1: detected capacity change from 0 to 8 [ 230.806136][ T6188] SQUASHFS error: xz decompression failed, data probably corrupt [ 230.814739][ T6188] SQUASHFS error: Failed to read block 0x108: -5 [ 230.821746][ T6188] SQUASHFS error: Unable to read metadata cache entry [106] [ 230.829247][ T6188] SQUASHFS error: Unable to read inode 0x11f [ 230.995398][ T6171] tipc: Disabling bearer [ 231.019325][ T4318] tipc: Node number set to 3627691774 [ 231.130635][ T4741] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 231.500342][ T4741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.526140][ T4741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.615118][ T4741] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.714605][ T4741] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.744559][ T4741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.799152][ T4741] usb 4-1: config 0 descriptor?? [ 232.305171][ T4741] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 233.091398][ T4741] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 233.137765][ T4741] usb 4-1: USB disconnect, device number 3 [ 234.157654][ T6215] fido_id[6215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 234.534512][ T6223] "syz.4.410" (6223) uses obsolete ecb(arc4) skcipher [ 238.613118][ T6270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 238.671393][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 243.280091][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 243.612957][ T6322] loop0: detected capacity change from 0 to 4096 [ 243.676277][ T6329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.695911][ T26] audit: type=1800 audit(1761130643.215:146): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.431" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 243.802558][ T6322] netlink: 220 bytes leftover after parsing attributes in process `syz.0.431'. [ 244.344306][ T6331] loop4: detected capacity change from 0 to 512 [ 244.521583][ T6331] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000040000,minixdf,,errors=continue. Quota mode: writeback. [ 244.567290][ T6331] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.612085][ T26] audit: type=1800 audit(1761130645.135:147): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.436" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 245.702331][ T6346] "syz.2.440" (6346) uses obsolete ecb(arc4) skcipher [ 246.005489][ T6334] loop1: detected capacity change from 0 to 32768 [ 247.274772][ T6369] block device autoloading is deprecated and will be removed. [ 247.345531][ T5229] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 247.746739][ T6379] loop3: detected capacity change from 0 to 1024 [ 247.870417][ T5229] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 247.972894][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.548352][ T5229] usb 2-1: config 0 descriptor?? [ 248.558391][ T6379] EXT4-fs (loop3): Ignoring removed oldalloc option [ 248.588155][ T6379] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.649885][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 248.745535][ T6379] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 248.772525][ T6379] EXT4-fs (loop3): mount failed [ 248.899808][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 249.733352][ T6393] loop3: detected capacity change from 0 to 1024 [ 249.819828][ T6393] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 249.819839][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.919885][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 249.943224][ T13] usb 5-1: can't read configurations, error -71 [ 249.951255][ T6393] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 249.989189][ T6393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.489916][ T4194] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 250.501499][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 250.509157][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.519397][ T4194] Workqueue: hci4 hci_rx_work [ 250.524130][ T4194] Call Trace: [ 250.527506][ T4194] [ 250.530534][ T4194] dump_stack_lvl+0x168/0x230 [ 250.535239][ T4194] ? show_regs_print_info+0x20/0x20 [ 250.540474][ T4194] ? load_image+0x3b0/0x3b0 [ 250.545181][ T4194] sysfs_create_dir_ns+0x252/0x280 [ 250.550337][ T4194] ? __lock_acquire+0x7c60/0x7c60 [ 250.555398][ T4194] ? sysfs_warn_dup+0xa0/0xa0 [ 250.560302][ T4194] ? le_conn_complete_evt+0xcbc/0x1590 [ 250.565812][ T4194] ? hci_event_packet+0xe05/0x12f0 [ 250.570969][ T4194] ? process_one_work+0x863/0x1000 [ 250.576292][ T4194] ? do_raw_spin_unlock+0x11d/0x230 [ 250.581833][ T4194] kobject_add_internal+0x662/0xd00 [ 250.587168][ T4194] kobject_add+0x152/0x210 [ 250.591630][ T4194] ? kobject_init+0x1d0/0x1d0 [ 250.596423][ T4194] ? klist_children_get+0x50/0x50 [ 250.601657][ T4194] ? get_device_parent+0x121/0x3f0 [ 250.606816][ T4194] device_add+0x483/0xfb0 [ 250.611190][ T4194] hci_conn_add_sysfs+0xd1/0x1e0 [ 250.616173][ T4194] le_conn_complete_evt+0xcbc/0x1590 [ 250.621628][ T4194] ? cs_le_create_conn+0x5e0/0x5e0 [ 250.626973][ T4194] ? __mutex_trylock_common+0x14f/0x250 [ 250.632551][ T4194] hci_le_meta_evt+0x289/0x3b80 [ 250.637416][ T4194] ? hci_event_packet+0x36d/0x12f0 [ 250.642536][ T4194] ? hci_event_packet+0x2e2/0x12f0 [ 250.647661][ T4194] ? __lock_acquire+0x7c60/0x7c60 [ 250.652814][ T4194] ? hci_remote_host_features_evt+0x280/0x280 [ 250.658993][ T4194] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 250.664652][ T4194] ? mark_lock+0x94/0x320 [ 250.669046][ T4194] ? mutex_unlock+0x10/0x10 [ 250.673674][ T4194] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 250.679853][ T4194] ? lock_chain_count+0x20/0x20 [ 250.685005][ T4194] ? __rwlock_init+0x140/0x140 [ 250.689869][ T4194] hci_event_packet+0xe05/0x12f0 [ 250.694825][ T4194] ? lockdep_hardirqs_on+0x94/0x140 [ 250.700035][ T4194] ? rcu_lock_release+0x20/0x20 [ 250.704902][ T4194] ? hci_send_to_monitor+0x9c/0x4a0 [ 250.710290][ T4194] hci_rx_work+0x255/0xa10 [ 250.714773][ T4194] process_one_work+0x863/0x1000 [ 250.719736][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 250.725373][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 250.730797][ T4194] ? _raw_spin_lock_irq+0xab/0xe0 [ 250.736111][ T4194] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 250.741498][ T4194] ? wq_worker_running+0x97/0x170 [ 250.746533][ T4194] worker_thread+0xaa8/0x12a0 [ 250.751238][ T4194] kthread+0x436/0x520 [ 250.755308][ T4194] ? rcu_lock_release+0x20/0x20 [ 250.760160][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 250.764854][ T4194] ret_from_fork+0x1f/0x30 [ 250.769278][ T4194] [ 250.774480][ T5778] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 250.785696][ T4194] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 250.799825][ T4194] Bluetooth: hci4: failed to register connection device [ 251.310296][ T5229] pegasus 2-1:0.0: setup Pegasus II specific registers [ 251.949903][ T5778] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.958678][ T5778] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.029442][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.154674][ T5778] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 252.310218][ T5229] pegasus 2-1:0.0: can't locate MII phy, using default [ 252.453641][ T5229] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, a2:d7:24:07:36:4b [ 252.939862][ T5778] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 253.350681][ T5229] usb 2-1: USB disconnect, device number 4 [ 253.365198][ T5778] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.389713][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.447390][ T5778] usb 1-1: Product: syz [ 253.473591][ T5778] usb 1-1: Manufacturer: syz [ 253.519850][ T5778] usb 1-1: can't set config #1, error -71 [ 253.530056][ T5778] usb 1-1: USB disconnect, device number 3 [ 255.823157][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.830211][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.200370][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 258.379933][ T1107] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.399674][ T1107] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.419870][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.430720][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 258.442903][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 258.520019][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 258.610620][ T1107] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.670925][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.800052][ T1107] usb 4-1: Product: syz [ 258.890027][ T1107] usb 4-1: Manufacturer: syz [ 258.940463][ T4320] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 259.019426][ T4320] usb 5-1: config 1 has no interface number 0 [ 259.205299][ T4320] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 259.249813][ T1107] usb 4-1: can't set config #1, error -71 [ 259.295336][ T1107] usb 4-1: USB disconnect, device number 4 [ 259.333267][ T4320] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 259.358756][ T6504] "syz.3.482" (6504) uses obsolete ecb(arc4) skcipher [ 259.376268][ T4320] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 260.249797][ T4320] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 260.306886][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.349712][ T4320] usb 5-1: Product: syz [ 260.354033][ T4320] usb 5-1: Manufacturer: syz [ 260.477249][ T4320] usb 5-1: can't set config #1, error -71 [ 260.530990][ T4320] usb 5-1: USB disconnect, device number 5 [ 260.725058][ T6514] syz.3.482 (6514) used greatest stack depth: 19872 bytes left [ 260.817606][ T6535] loop6: detected capacity change from 0 to 524287999 [ 260.920979][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 260.965183][ C1] blk_update_request: I/O error, dev loop6, sector 1456 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 260.979681][ C1] blk_update_request: I/O error, dev loop6, sector 2488 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 260.992024][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 261.013665][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.025463][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.033517][ C1] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.045643][ C1] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 261.835046][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 262.089944][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 262.520941][ T13] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 262.710698][ T4320] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 262.739841][ T13] usb 3-1: config 0 has no interface number 1 [ 263.313835][ T6559] "syz.4.500" (6559) uses obsolete ecb(arc4) skcipher [ 263.340208][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 263.351654][ T13] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 263.387500][ T13] usb 3-1: Product: syz [ 263.392510][ T13] usb 3-1: Manufacturer: syz [ 263.397220][ T13] usb 3-1: SerialNumber: syz [ 263.429704][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 263.450556][ T13] usb 3-1: config 0 descriptor?? [ 263.619747][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 263.674900][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 263.709839][ T13] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 263.728443][ T13] snd-usb-6fire: probe of 3-1:0.111 failed with error -71 [ 263.779497][ T13] usb 3-1: USB disconnect, device number 4 [ 263.810303][ T1107] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 263.832098][ T1107] usb 1-1: config 0 has no interface number 0 [ 264.010664][ T1107] usb 1-1: config 0 interface 230 has no altsetting 0 [ 264.049847][ T4320] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 264.059180][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.077833][ T4320] usb 4-1: Product: syz [ 264.083214][ T4320] usb 4-1: Manufacturer: syz [ 264.087945][ T4320] usb 4-1: SerialNumber: syz [ 264.180244][ T1107] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 264.242801][ T4320] usb 4-1: config 0 descriptor?? [ 264.295877][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.485426][ T1107] usb 1-1: Product: syz [ 264.590936][ T1107] usb 1-1: Manufacturer: syz [ 264.776633][ T1107] usb 1-1: SerialNumber: syz [ 264.839753][ T1107] usb 1-1: config 0 descriptor?? [ 264.851626][ T4320] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 264.883080][ T1107] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 264.937638][ T6578] netlink: 256 bytes leftover after parsing attributes in process `syz.4.506'. [ 264.959346][ T1107] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 265.005013][ T26] audit: type=1804 audit(1761130664.525:148): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.505" name="/newroot/108/file0" dev="fuse" ino=1 res=1 errno=0 [ 265.102769][ T6586] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 265.114445][ T6586] tipc: Enabled bearer , priority 10 [ 265.281195][ T4320] gspca_ov534_9: reg_w failed -71 [ 265.789703][ T4320] gspca_ov534_9: Unknown sensor 0000 [ 265.790142][ T4320] ov534_9: probe of 4-1:0.0 failed with error -22 [ 265.997763][ T4320] usb 4-1: USB disconnect, device number 5 [ 267.324706][ T1107] ums-usbat: probe of 1-1:0.230 failed with error 4 [ 267.362509][ T1107] usb 1-1: USB disconnect, device number 4 [ 268.491187][ T6627] loop0: detected capacity change from 0 to 1024 [ 268.579856][ T6627] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 268.662701][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 268.701482][ T6627] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 269.204538][ T6642] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 269.259452][ T6642] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 270.747366][ T6670] "syz.3.533" (6670) uses obsolete ecb(arc4) skcipher [ 271.636815][ T6687] loop2: detected capacity change from 0 to 128 [ 271.745497][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 271.803686][ T6687] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 271.881758][ T6687] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.909883][ T6687] ext2 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.009731][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 272.129985][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.151320][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.350286][ T1107] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.426488][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.527775][ T1107] usb 5-1: Product: syz [ 272.575136][ T1107] usb 5-1: Manufacturer: syz [ 272.637335][ T1107] usb 5-1: SerialNumber: syz [ 273.142853][ T1107] usb 5-1: 0:2 : does not exist [ 273.240869][ T1107] usb 5-1: USB disconnect, device number 6 [ 273.331014][ T6700] loop0: detected capacity change from 0 to 1024 [ 273.403880][ T6700] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 273.456082][ T6700] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 273.530637][ T4198] udevd[4198]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.649902][ T4320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 273.919882][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 274.040951][ T4320] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 274.091950][ T4320] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 274.225097][ T4320] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 274.530434][ T4320] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 274.572987][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.637224][ T4320] usb 2-1: Product: syz [ 274.659796][ T4320] usb 2-1: Manufacturer: syz [ 274.680485][ T4320] usb 2-1: SerialNumber: syz [ 276.166127][ T4320] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 276.179286][ T4320] imon 2-1:155.0: unable to initialize intf0, err -19 [ 276.187782][ T4320] imon:imon_probe: failed to initialize context! [ 276.195005][ T4320] imon 2-1:155.0: unable to register, err -19 [ 277.475345][ T13] usb 2-1: USB disconnect, device number 5 [ 277.811161][ T6743] loop4: detected capacity change from 0 to 1024 [ 277.899161][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 278.022922][ T6748] loop2: detected capacity change from 0 to 4096 [ 278.035364][ T6743] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 278.074299][ T6743] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 278.133421][ T6743] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 278.157324][ T6753] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.177931][ T26] audit: type=1800 audit(1761130677.695:149): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.552" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 278.437460][ T6748] netlink: 220 bytes leftover after parsing attributes in process `syz.2.552'. [ 278.832338][ T26] audit: type=1800 audit(1761130678.355:150): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.552" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 282.229879][ T5229] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.429541][ T6779] loop1: detected capacity change from 0 to 65536 [ 282.504302][ T5229] usb 5-1: Using ep0 maxpacket: 32 [ 282.547091][ T6779] XFS (loop1): Mounting V5 Filesystem [ 282.830084][ T5229] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 282.873573][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.930559][ T5229] usb 5-1: Product: syz [ 282.959973][ T5229] usb 5-1: Manufacturer: syz [ 282.992585][ T6801] loop2: detected capacity change from 0 to 1024 [ 283.000438][ T5229] usb 5-1: SerialNumber: syz [ 283.035725][ T6801] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 283.058773][ T5229] usb 5-1: config 0 descriptor?? [ 283.077219][ T6779] XFS (loop1): Ending clean mount [ 283.228492][ T6801] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 283.261829][ T5229] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 283.273868][ T6801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.818659][ T4184] XFS (loop1): Unmounting Filesystem [ 285.749937][ T5229] gspca_stk1135: reg_w 0x7 err -110 [ 285.757873][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 285.848684][ T5229] gspca_stk1135: Sensor write failed [ 285.867728][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 285.895249][ T5229] gspca_stk1135: Sensor write failed [ 285.924448][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 285.953584][ T5229] gspca_stk1135: Sensor read failed [ 285.969703][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 285.998428][ T5229] gspca_stk1135: Sensor read failed [ 286.009678][ T5229] gspca_stk1135: Detected sensor type unknown (0x0) [ 286.017198][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 286.049090][ T5229] gspca_stk1135: Sensor read failed [ 286.078480][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 286.269975][ T5229] gspca_stk1135: Sensor read failed [ 286.275840][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 286.282790][ T5229] gspca_stk1135: Sensor write failed [ 286.288227][ T5229] gspca_stk1135: serial bus timeout: status=0x00 [ 286.295643][ T5229] gspca_stk1135: Sensor write failed [ 286.301502][ T5229] stk1135: probe of 5-1:0.0 failed with error -110 [ 286.312824][ T5229] usb 5-1: USB disconnect, device number 7 [ 287.710496][ T6848] loop0: detected capacity change from 0 to 65536 [ 287.883722][ T6848] XFS (loop0): Mounting V5 Filesystem [ 288.401851][ T6861] loop3: detected capacity change from 0 to 1024 [ 288.428405][ T6848] XFS (loop0): Ending clean mount [ 289.068864][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 289.148216][ T6872] loop4: detected capacity change from 0 to 4096 [ 289.178566][ T4185] XFS (loop0): Unmounting Filesystem [ 289.198575][ T6861] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 289.345471][ T6861] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 289.444000][ T6877] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.519893][ T26] audit: type=1800 audit(1761130689.005:151): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 289.659348][ T26] audit: type=1800 audit(1761130689.175:152): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 291.780975][ T6894] "syz.1.589" (6894) uses obsolete ecb(arc4) skcipher [ 293.973806][ T6916] loop3: detected capacity change from 0 to 1024 [ 293.994133][ T6920] "syz.2.597" (6920) uses obsolete ecb(arc4) skcipher [ 294.386428][ T6916] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 294.640994][ T6916] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 295.359925][ T5229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 295.659971][ T5229] usb 1-1: Using ep0 maxpacket: 32 [ 295.699971][ T5227] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 295.812250][ T5229] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.009692][ T5229] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.050450][ T5229] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 296.121390][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.128616][ T5229] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 296.161446][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.215322][ T5229] usb 1-1: config 0 descriptor?? [ 296.229804][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.247388][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.279798][ T5227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.342514][ T5227] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.366583][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.409292][ T5227] usb 3-1: config 0 descriptor?? [ 296.500769][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.699495][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.014662][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.451120][ T5227] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 297.479867][ T5229] usb 1-1: string descriptor 0 read error: -71 [ 297.499786][ T5229] uclogic 0003:5543:004D.0002: failed retrieving string descriptor #200: -71 [ 297.508760][ T5229] uclogic 0003:5543:004D.0002: failed retrieving pen parameters: -71 [ 297.534945][ T5227] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 297.562862][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.659710][ T5229] uclogic 0003:5543:004D.0002: failed probing pen v2 parameters: -71 [ 297.667993][ T5229] uclogic 0003:5543:004D.0002: failed probing parameters: -71 [ 297.680429][ T5229] uclogic: probe of 0003:5543:004D.0002 failed with error -71 [ 297.715146][ T5229] usb 1-1: USB disconnect, device number 5 [ 298.604135][ T4259] usb 3-1: USB disconnect, device number 5 [ 298.678353][ T6981] loop4: detected capacity change from 0 to 1024 [ 298.746455][ T6981] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 298.898937][ T6981] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 298.939025][ T6988] comedi comedi0: comedi_bond: 3:0 3:15 3:19 3:20 3:21 attached, 120 channels from 5 devices [ 299.158101][ T9] tipc: Disabling bearer [ 299.191543][ T4741] Bluetooth: hci2: command 0x0409 tx timeout [ 299.248943][ T9] tipc: Left network mode [ 299.264037][ T6963] chnl_net:caif_netlink_parms(): no params data found [ 299.784471][ T7017] loop0: detected capacity change from 0 to 1024 [ 299.909770][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.919371][ T7017] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.938283][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.959327][ T26] audit: type=1800 audit(1761130699.475:153): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.620" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 300.011017][ T6963] device bridge_slave_0 entered promiscuous mode [ 300.030649][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.035688][ T7017] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 300.059473][ T7017] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 300.072105][ T7017] EXT4-fs (loop0): This should not happen!! Data will be lost [ 300.072105][ T7017] [ 300.082318][ T7017] EXT4-fs (loop0): Total free blocks count 0 [ 300.088639][ T7017] EXT4-fs (loop0): Free/Dirty block details [ 300.096846][ T7017] EXT4-fs (loop0): free_blocks=68451041280 [ 300.103407][ T7017] EXT4-fs (loop0): dirty_blocks=64 [ 300.108824][ T7017] EXT4-fs (loop0): Block reservation details [ 300.129995][ T7017] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 300.136145][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.170989][ T6963] device bridge_slave_1 entered promiscuous mode [ 300.295851][ T7033] syz.4.622 uses obsolete (PF_INET,SOCK_PACKET) [ 300.311612][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.373108][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.585117][ T6963] team0: Port device team_slave_0 added [ 300.668722][ T6963] team0: Port device team_slave_1 added [ 300.831359][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.838739][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.926318][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.956586][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.965976][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.009701][ T5229] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 301.019537][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.279789][ T5229] usb 5-1: Using ep0 maxpacket: 16 [ 301.298363][ T5778] Bluetooth: hci2: command 0x041b tx timeout [ 301.410421][ T5229] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 301.449924][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.596101][ T5229] usb 5-1: config 0 descriptor?? [ 301.795833][ T5229] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 301.990559][ T5229] usb 5-1: Detected FT232BM [ 302.050097][ T6963] device hsr_slave_0 entered promiscuous mode [ 302.080356][ T6963] device hsr_slave_1 entered promiscuous mode [ 302.081113][ T6963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.081231][ T6963] Cannot create hsr debugfs directory [ 302.199884][ T5229] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 302.230338][ T5229] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 302.286466][ T7056] loop3: detected capacity change from 0 to 1024 [ 302.313712][ T5229] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 302.357223][ T5229] usb 5-1: USB disconnect, device number 8 [ 302.387116][ T7056] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 302.408307][ T5229] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 302.451342][ T5229] ftdi_sio 5-1:0.0: device disconnected [ 302.490646][ T7056] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 302.705280][ T9] device hsr_slave_0 left promiscuous mode [ 302.732623][ T9] device hsr_slave_1 left promiscuous mode [ 302.773861][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.817244][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.871290][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.879101][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.919970][ T7072] "syz.4.629" (7072) uses obsolete ecb(arc4) skcipher [ 302.951195][ T9] device bridge_slave_1 left promiscuous mode [ 302.982062][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.069803][ T9] device bridge_slave_0 left promiscuous mode [ 303.122116][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.289745][ T9] device veth1_macvtap left promiscuous mode [ 303.310548][ T9] device veth0_macvtap left promiscuous mode [ 303.335147][ T9] device veth1_vlan left promiscuous mode [ 303.358182][ T9] device veth0_vlan left promiscuous mode [ 303.899716][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 304.035214][ T7101] "syz.0.636" (7101) uses obsolete ecb(arc4) skcipher [ 304.100740][ T9] team0 (unregistering): Port device team_slave_1 removed [ 304.115504][ T9] team0 (unregistering): Port device team_slave_0 removed [ 304.135866][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.171253][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.257167][ T9] bond0 (unregistering): Released all slaves [ 304.351465][ T7096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.359775][ T7096] IPv6: NLM_F_CREATE should be set when creating new route [ 304.367069][ T7096] IPv6: NLM_F_CREATE should be set when creating new route [ 304.374651][ T7096] IPv6: NLM_F_CREATE should be set when creating new route [ 304.475270][ T7105] loop4: detected capacity change from 0 to 1024 [ 304.532207][ T7105] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 304.610453][ T6963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.620819][ T7105] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 304.794707][ T6963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.896863][ T6963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.000662][ T6963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.821295][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.870584][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.901230][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.979790][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 306.114672][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.182589][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.231869][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.325282][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.332817][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.619100][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.856541][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.051417][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.059016][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.081342][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.096854][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.111924][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.134247][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.159920][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.168612][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.191619][ T6963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.372210][ T6963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.526488][ T7174] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 307.549745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.569003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.587036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.596537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.605724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.614435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.638721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.730313][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.738062][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.758794][ T7190] loop4: detected capacity change from 0 to 1024 [ 308.793734][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.938109][ T7190] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 309.162547][ T7206] loop2: detected capacity change from 0 to 512 [ 309.361503][ T7206] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 309.371275][ T7206] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 309.380874][ T7206] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 309.390940][ T7206] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 310.360324][ T7190] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 311.569513][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.628456][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.740069][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.777227][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.845012][ T6963] device veth0_vlan entered promiscuous mode [ 311.880979][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.897190][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.968929][ T6963] device veth1_vlan entered promiscuous mode [ 312.150470][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.187596][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.245059][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.284743][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.421650][ T6963] device veth0_macvtap entered promiscuous mode [ 312.452058][ T6963] device veth1_macvtap entered promiscuous mode [ 312.496227][ T7254] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 312.501315][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.525592][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.538516][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.545606][ T7254] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 312.554811][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.577836][ T5778] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 312.593828][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.606275][ T7259] ------------[ cut here ]------------ [ 312.612302][ T7259] WARNING: CPU: 1 PID: 7259 at arch/x86/kvm/x86.c:10370 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 312.614742][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.629402][ T7259] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 312.642177][ T6963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.642210][ T6963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.644819][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.698609][ T7259] CPU: 1 PID: 7259 Comm: syz.2.663 Not tainted syzkaller #0 [ 312.761897][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.810999][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.841117][ T7259] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 312.848373][ T7259] Code: e8 81 42 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 42 ad 00 e9 c8 ed ff ff e8 bc da 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 312.874880][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.909672][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 312.918490][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.929797][ T7259] RSP: 0018:ffffc900050c7c30 EFLAGS: 00010283 [ 312.935942][ T7259] RAX: ffffffff810eefd4 RBX: ffff88807d410000 RCX: 0000000000080000 [ 312.964638][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.042763][ T7259] RDX: ffffc9000fbd0000 RSI: 0000000000000af7 RDI: 0000000000000af8 [ 313.119660][ T7259] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad334e [ 313.128052][ T7259] R10: fffffbfff1ad334e R11: 1ffffffff1ad334d R12: ffff8880240fe001 [ 313.184076][ T7259] R13: 1ffff1100fa8201e R14: ffff88807d4100f0 R15: ffff8880240fe000 [ 313.225234][ T7259] FS: 00007fc1d17856c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 313.256704][ T7259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.306055][ T7259] CR2: 00007f0a5851e440 CR3: 000000007bd5c000 CR4: 00000000003526e0 [ 313.332438][ T7259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.371723][ T7259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.429055][ T7259] Call Trace: [ 313.449691][ T7259] [ 313.452783][ T7259] ? __lock_acquire+0x7c60/0x7c60 [ 313.489305][ T7259] kvm_vcpu_ioctl+0x887/0xb80 [ 313.494417][ T7259] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 313.500463][ T7259] ? bpf_lsm_file_ioctl+0x5/0x10 [ 313.505565][ T7259] ? security_file_ioctl+0x7c/0xa0 [ 313.510912][ T7259] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 313.516799][ T7259] __se_sys_ioctl+0xfa/0x170 [ 313.524120][ T7259] do_syscall_64+0x4c/0xa0 [ 313.528602][ T7259] ? clear_bhb_loop+0x30/0x80 [ 313.539737][ T7259] ? clear_bhb_loop+0x30/0x80 [ 313.544495][ T7259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.559644][ T7259] RIP: 0033:0x7fc1d353efc9 [ 313.564476][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.609752][ T7259] RSP: 002b:00007fc1d1785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.618246][ T7259] RAX: ffffffffffffffda RBX: 00007fc1d3796090 RCX: 00007fc1d353efc9 [ 313.649813][ T7259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 313.657876][ T7259] RBP: 00007fc1d35c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 313.697218][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.713780][ T7259] R13: 00007fc1d3796128 R14: 00007fc1d3796090 R15: 00007fff9704d5e8 [ 313.732281][ T7259] [ 313.735377][ T7259] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.743112][ T7259] CPU: 0 PID: 7259 Comm: syz.2.663 Not tainted syzkaller #0 [ 313.750619][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.760710][ T7259] Call Trace: [ 313.764129][ T7259] [ 313.767137][ T7259] dump_stack_lvl+0x168/0x230 [ 313.772122][ T7259] ? show_regs_print_info+0x20/0x20 [ 313.777540][ T7259] ? load_image+0x3b0/0x3b0 [ 313.782082][ T7259] panic+0x2c9/0x7f0 [ 313.786147][ T7259] ? bpf_jit_dump+0xd0/0xd0 [ 313.790801][ T7259] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 313.796807][ T7259] __warn+0x248/0x2b0 [ 313.801017][ T7259] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 313.807695][ T7259] report_bug+0x1b7/0x2e0 [ 313.812125][ T7259] handle_bug+0x3a/0x70 [ 313.816402][ T7259] exc_invalid_op+0x16/0x40 [ 313.821035][ T7259] asm_exc_invalid_op+0x16/0x20 [ 313.826011][ T7259] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 313.832635][ T7259] Code: e8 81 42 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 42 ad 00 e9 c8 ed ff ff e8 bc da 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 313.852658][ T7259] RSP: 0018:ffffc900050c7c30 EFLAGS: 00010283 [ 313.858757][ T7259] RAX: ffffffff810eefd4 RBX: ffff88807d410000 RCX: 0000000000080000 [ 313.866865][ T7259] RDX: ffffc9000fbd0000 RSI: 0000000000000af7 RDI: 0000000000000af8 [ 313.874856][ T7259] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad334e [ 313.883152][ T7259] R10: fffffbfff1ad334e R11: 1ffffffff1ad334d R12: ffff8880240fe001 [ 313.891158][ T7259] R13: 1ffff1100fa8201e R14: ffff88807d4100f0 R15: ffff8880240fe000 [ 313.899301][ T7259] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 313.905422][ T7259] ? __lock_acquire+0x7c60/0x7c60 [ 313.910505][ T7259] kvm_vcpu_ioctl+0x887/0xb80 [ 313.915217][ T7259] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 313.921008][ T7259] ? bpf_lsm_file_ioctl+0x5/0x10 [ 313.926523][ T7259] ? security_file_ioctl+0x7c/0xa0 [ 313.931825][ T7259] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 313.937763][ T7259] __se_sys_ioctl+0xfa/0x170 [ 313.942375][ T7259] do_syscall_64+0x4c/0xa0 [ 313.946801][ T7259] ? clear_bhb_loop+0x30/0x80 [ 313.951485][ T7259] ? clear_bhb_loop+0x30/0x80 [ 313.956281][ T7259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.962425][ T7259] RIP: 0033:0x7fc1d353efc9 [ 313.966883][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.986775][ T7259] RSP: 002b:00007fc1d1785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.995196][ T7259] RAX: ffffffffffffffda RBX: 00007fc1d3796090 RCX: 00007fc1d353efc9 [ 314.003350][ T7259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 314.011500][ T7259] RBP: 00007fc1d35c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.019667][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.028024][ T7259] R13: 00007fc1d3796128 R14: 00007fc1d3796090 R15: 00007fff9704d5e8 [ 314.036104][ T7259] [ 314.039504][ T7259] Kernel Offset: disabled [ 314.044186][ T7259] Rebooting in 86400 seconds..