last executing test programs: 7m40.081479854s ago: executing program 0 (id=109): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000030018400000feffffff480000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) 7m36.244400487s ago: executing program 0 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2d, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x2000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000080000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = socket(0x2, 0x3, 0xff) shutdown(r5, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40a0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000000), 0x2, &(0x7f0000000380)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) 7m34.715464967s ago: executing program 0 (id=118): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000100)={0xcbe, 0x6, 0x1, 0xf3d, 0x10, 0x1}) socket$inet6(0xa, 0x3, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) 7m31.256941265s ago: executing program 0 (id=124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x0, @mcast2, 0x8558}}, 0x0, 0x0, 0x6, 0x0, "39bcf5aba7f959ddcdc8da1b2b41a983ef92a3a5d4ef67a6e5aaa42e5f36f75694a26955afb25c6451572175a16395b9de4ea9879d10962a16a1b56803e7ebf5564c5054c4a398fd30f351751fa9f118"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 7m30.607767026s ago: executing program 0 (id=126): recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/11, 0xb}], 0x3, &(0x7f0000000200)=""/236, 0xec}, 0x100) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x5, 0x5, 0x2, 0x2}, {0x5, 0x6, 0x4, 0x3}]}) (async) r1 = syz_open_dev$vcsa(&(0x7f00000003c0), 0xe, 0x4000) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, &(0x7f0000000500)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) (async) getresuid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) (async) r9 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0) (async) read$FUSE(r3, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r15 = getegid() (async) r16 = eventfd(0x8) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000003440)={0x4, 0x3, {0x0}, {0xee00}, 0x5, 0x4}) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003480)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@remote}}, &(0x7f0000003580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fstat(r3, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000004ec0)={0x0, 0xffff, 0x0, 0x0, 0x0}) (async) r22 = geteuid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000004f40)='./file0\x00', &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r24 = getpgrp(0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000005000)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000005100)=0xe8) (async) r26 = getegid() sendmmsg$unix(r3, &(0x7f00000075c0)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)="3035adb81eb0bd160d7cc080814bf80383cd7e4e84d47eb30eab934b0257f164762eba4e02beb8f26b3e9ab029636542450f33692026f5f53bef3088b642141593321647c634e26ad9514142278d032a625b22bb04da22dd14903a3157721fa1cc5dfafbb5c0c2bb0b4743e14f96372a2648353e07df80b84cdb5d54c002410de84596e6074160f750f0a5f76b4f0ecb213041d7dbb7a46be15db928bc84632047e4966aa39a0dca16dbef7f5d", 0xad}, {&(0x7f00000006c0)="add60566ecb6a491dd620cb159ffbf78afdaafe35f1a3b7789da232bf3d4a4e0b5871f5605cd2d4526bed1c64417c2c2cf18fcb23d7e83e47717b8f0bbac5f6e40", 0x41}], 0x2, &(0x7f0000002c40)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x30, 0x1, 0x1, [r1, r9, r4, r1, r2, r2, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @rights={{0x30, 0x1, 0x1, [r3, r12, r0, r2, r1, r0, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r1, r0, r4]}}, @rights={{0x20, 0x1, 0x1, [r16, r2, r1, r3]}}], 0x150, 0x84010}}, {{&(0x7f0000002dc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000002e40)="37575dbe606a42181a24d55830d68e2e66a52f9d798e710d2ca06147cb3d7f4698d233267699b5787b5fa24ebd19d044bda1c986d0a5f72e63f00d993482ebe50931278e91c96f66f823d516d1eb8432d948a7ca1323183b584b5a88b0ed41fd837c6a4b7c0e2cda9c02ac7ad4a53c87985592cb95f2a6af2be7a82a2dc9b786ed0819ef951b33f3f908485ee35f46733aba32ab04173708e9b84529a08e12875004abef57dac8901eedef5732c14f8ad77589b85fb60878cecf6880b79028fd5941", 0xc2}, {&(0x7f0000002f40)="fdc066557fac2561821f6d3c1947f6e051744acd76602d8ebc73e573b8376e97fe51c05e25c3f31fa980511c0c62d815646123e1b659c16bdc691f0886c0d4625919b9b8d0826cb7a6c6eae27f3cf42803044fe33000c5d88e0d6070137c34046544159e0a026ef9253d3fbf47ace309d5b4f1f00539c57ab1ed75247228e8ddd57325738aaede5f789aaea7d9492341ce47f24b703b8e", 0x97}, {&(0x7f0000003000)="e3a01a3cb4104a74a02d895e6216e6c3c6d1fde8d3d25dc5a2310e59e8b12494a73293e2b2b4d36bff0560caf87db029cf5a90391a3be9d2c9460e2b8ad29a022f83e4661b44111d3604087eaf2ab8998ecce1efc50a7221323d2f66e21499ac74e7f4525dae51cbe2a4387bb0ec447aad49ca87b2f50c42ba0320170914e35864712dcf5c6f3147c1515b65c5ddb0ca31812fa7f00f3227", 0x98}, {&(0x7f00000030c0)="cfce00956b62a8bd2352acacc85739202bc25c650b48df7d63b8b9a6d185d4a300ad19054113d5de64d8a8b1146f69cddd6da186d7a04ea86c73a6440b1efe34d5ebec0934605c01770903ccbf195a0d79abdf8aed5304b7fda54af222624a25199821e73bd1060598a98d83e7611720c86b6496bafe89d0b8b5428157a1408ed12a9f962d", 0x85}, {&(0x7f0000003180)="235e6d87d6", 0x5}, {&(0x7f00000031c0)="5d170182695248fb1ab258ab01ceef12f9ff7b69953301811ecae4aa4fcbed1b24fc7656cddb782bae793e5d4d76815f912e9c6cb61d0b372c6bd3364dbd35e9a93a88512044c97ac0e74f5401f7c94d62a879a4ca68b563ba1ccd28ff3cc24b7efb695a57921fa4d8d374a73a317996840553ef381b352d1fffcad7c346f0b0dd0190502042d732768309b5249626a1a0e25285636589fb14fab57a0d260481c9613039727e2d1dd5452a1dfce2e6cafb6b2a146c4b5985160472f8056a43c228f4946c5a506cbfda8d6d65efa0d0b4cfe48849", 0xd4}, {&(0x7f00000032c0)="c48b5fff64acda33cc91d03fe7d21d5042f9c1ad92d3ca9118e6a1fa72f62b120605bc1b8796f6ab42fdca4fddd5eca445e82c342178c7463a9ad7c8eff78ec571e4f887cbd074599ef1597815173d0c4ba55f982b9d9b3c28a92c890f3a6ef6b4dfbec3b3fe7affe0c1a7156033871af40bfec998d87ecc8ed25b5f1df852d8ac2c74bbbb5306579446e059a27325f8ee7ef506a0f2454aeed650966b8adb7785c01de491dd3e3af745afbeed7e05fd25f22a71eb0a00765693f19a3cc508372a8f24d5d497c9cea2518d27cd32ad3011ad0907f83410461c", 0xd9}], 0x7, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, 0xee00}}}], 0x20, 0x40885}}, {{&(0x7f0000003600)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004880)=[{&(0x7f0000003680)="b642fc45c2172eeaaa2e1b9a72371241b3e71d43a4f533e3808cb4bc04940ec2440dc43eae6a22401b543e09d00a613e42bdcc8c3d5378869fd9da5229a6d3dec86f414ef35f8520bc8a43195194c149eed575a616b862a0556cdf616feb4da66347", 0x62}, {&(0x7f0000003700)="fffe7a32085f9ecb26e21b740a893d2990c560bfa93fea20911b43ba818f82f712df79d7cc", 0x25}, {&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="ffc77f503453bca25f996efd697e2b1d05f1c066fad73941fc9eb41f0278f8f3108ad0a0a036b1815f42e0cfe8e693a88580bea27f4b4cce72c170356d88f30949fd68b151f94a0e49dce87f8fcbdacf9880815a053da2da65bfe1e7e306f687a8044119695009d4a20ceaa825d71b6f458bf08fc49f62f478600a0e5398b5b8dc4103dca8638d50b8c883ceb0d6446d591a472088fab80e5658f1666d41", 0x9e}, {&(0x7f0000004800)="ad48bf0fd118d5f3e562e192f4039b2cb44da401c95cfab8b3b2b6f262f583f29292875d1ff236cded", 0x29}, {&(0x7f0000004840)="7d8b62fbe69e8ddaab3d6873b67ec61c4e9a2b468f6ac4f0e90af4310e9bc8494fc36f0fa108fc6566573cc74e1a5aaab5ee6392a15ad950", 0x38}], 0x6, &(0x7f0000004a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}], 0x20, 0x20004000}}, {{&(0x7f0000004a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000004b00)="65e8952ccaded732543d13fb1123a6f47f53f475b2d7e00194a0d5a7cf8aac0afd905e84d848916e771999e7289defa4906f19bf4eee58da35d09f31fcd1018ced62766165595e1137be07e7477fad5eb630ab176e8963a4cb43817bfd1c3dd6b4317a587a2452fde63bf1ed890931df9d0f2d20122aae20dba5d03f2811dd133e479b845cfffcde832c751bd31cf4517c3854403775a347", 0x98}, {&(0x7f0000004bc0)="4eb6471822eb16a8efc09e34a187fb607b67fd74fb51e223e97abf9531150799d2adfef29192c38dbaaf94f9ec16c0f7abbf84d03b7893203aef24f4f03722644aec533057f4f23af0e8970b6b9f7a6995b82cc80ef03eb7c911b9fe7c39f564327b1b79b1673bc6c3b9eac0e767fd5ff69029524c3664af157cff3194", 0x7d}, {&(0x7f0000004c40)="82f87ba1d1118444b5dcacaf1943903f89c7d202a4fd0d1a2e25797e42f0d75b79b61084824c15efd862ce39a4a8a8920f666a5af4963760de12b752a820819aef66d64a882e4eb12d7174c6067f30026263e022345e5d36bb71e3755cd28848db95aee14c4ee29a1db0d6c911145406da4d7ca992cb1b889e6004638a2f3cf5f8ea84f339bfd5539b60bf6f5c56a9886eb5238910ef14c4f0aecf6f4d777ae1c35cfaf278967e97708d7b89f22ccdba4c889f61e815855520410db3ec22e4adb400f7015c9d7479bec8cacf3258aad9e21108a2ca823b", 0xd7}, {&(0x7f0000004d40)="d8811660d088055e017b8c7effe0c0c5762056b801447e8d26d16815fadc209c0ac6eed2aca7d049bb6bd2dcea87d0ec371bf61a082dc883d9cfb7b8b6332f04b16df17d310a5f98ab40debbc3d26ebbb2cc31b3eb676b1583409781b7a7e88ecaf9513818159f641602c0dc2c632bbceaeaa7e6347cac120ccbc9db23c4630451755aa754d8d2ed0feb20c4bce20e030252ec756b707079845271bc68a2e90c08b1fee2b38502ac4e0996f5427ceef8bf159a48", 0xb4}, {&(0x7f0000004e00)="7897e2a9696becc124c4633a9fd725868bf3fa3d416a6d3e1501cd558969676acc8ed98f87c39fa99b3b9c6597fc0ce35d65b29f2fb00ab11f3eec37", 0x3c}], 0x5, &(0x7f0000005940)=[@cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r4, r1, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r4, r2, r0]}}], 0xf8, 0x4000}}, {{&(0x7f0000005a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005e80)=[{&(0x7f0000005ac0)="6422be7fb3ff2b995bf448267eddf4ed25c507ed3830fe3252594710e6076b96ab0a59f64aa2af67176b993c840df668576134883e24ad5d2e1746e598c78886394ef86b97938150dc527ca5e8eaf645774ae4ce6fac004da6ba54b4f82e2b3dfa", 0x61}, {&(0x7f0000005b40)="89572e94cfceb196e571bc13280370c81fcd3180dd7a90f24e6a998f3996de8bfb34bd7e9db0ac4572374273279851ceeb157c8629e27476d30b4f41bd826c1f9790140bed5831642f643ea084a7689dedc137a6472acb1d1052984a0a82e86d977340a9b2d9d3dc663ff171d0a2aef17b8510e330dbdf09c05beb5e5037c585d257eaafadb1736de4d10efbfcc2447f977df433", 0x94}, {&(0x7f0000005c00)="a09cb2c2dd4f4da7d30a860d8fef5852e77556f7828b8d4e4b60de2a6ddd446f51383f29e5f0f8c2d45cd91859b2ae027d6d38db5c142bc2bd22ec573c1cae6276eb4e655dbc715819ee3b4924520e3f98fe171aa2a2ee7fbc158b399d17ec708910cfb1b9d1d80415ece238e37560e85adb104c0fc489df6967d1d28f671d8012e57d8062dc", 0x86}, {&(0x7f0000005cc0)="edab0f11abccf84f4e0b210eb7ed75bbda1c0d5d8e511b65305916e218164c3afcca01840eac27b739a5f076c2bb8a0ca643d218c333048a0ba3282b0d8cea096c42e1c74d9292023af379225dcca2f965b20b9ee09da4b64708797ad87eca078cf3abef05bb397fe792a0e978ff12edf7f4383a2f12ff232782a9685a03bac2394fcc5fe965fda114aa44ace3137baf27f21422ff9120bbb3619ba6363fc769ee05fa037f907c62d5", 0xa9}, {&(0x7f0000005d80)="d0e743552062eb8e30bbfbd77f85d737eef39290a8a4b04ed684317b3848ccbebb12e7ed72ccf736651721bf96f1787ec5606d32bc412494926012ee6705bcd77ed8c53c45eb158b3dbd70cf6147a7f8191d80290b1739eafb015a0520dbe5d7c31167a5ce9a093d28f1b19116d6915a5daf590d4e5b6de9b00bf6044f269f8d2cfde5bce6fc17a83e626120e565e2ea21834f1363d4d7a1e775caeafcc7b7502e7d5409d69dc3bf41dd85e06cd383b2b93c589e2d2331a84f8ce216ee8a7ca0122a4cb61d097ad5d17a310d8b36d35e6ce41f", 0xd3}], 0x5, &(0x7f0000006180)=[@rights={{0x20, 0x1, 0x1, [r2, r4, r4, r3]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x4881}}, {{&(0x7f0000006240)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000007540)=[{&(0x7f00000062c0)="1fe08c0927bc3c313274a77300ecb7e435643fbf6887af677c29932e952742b5e5ae6e8c3a2dd3eb8de23aa02ef732bb3a80bff96bf21370046c94b75f6449801e8e8882f9316bb27bad9519f6f1c5ed5024c45997ec81d1b19130bafacc0dea653843a61bb8bd016dcf521ad2c4e6c52e067d649f8ab68f741fabea13ecbd369aeeefe617df81ce5eaa02131d83640ae54541aa3fc7506252f6dbd7b4f5", 0x9e}, {&(0x7f0000006380)="fbc2f880fe397771a7092f86120ee587a15b77b073b2f8b134aa43d37d9bd30be92e9255648776f064bb941396cd8402ec74823517b964df7492afb66d8347c6b12adacad9b08e1f43f3b531099c22d74e23726d2720a121af3e95b60f28afbc1c8ce5e90ffc0c91d85f492a6e58bdb3aa1d497af61e83d82a8ec5f42af7ce1d206040196da88b4d54eca5963af5ddbe22d7603ecc44a97de83feaf93b468e282431cbef6f413a0f9199929d1c4b4598c7ccebe31a17d09466ce18690a549ac5f10b392481e9488801c0ad0f04a3aaae2579212bfb2491842088", 0xda}, {&(0x7f0000006480)="f209f7d7550a46b678400c1432d537c909c7b06fbf6918246ab8a2bc16e632c801700b0bd7a3216d4fb68580069e785b791e70ee85787c8ef2e66cc0d6d4af993575824e9c2fe6376e58cc1d7e8f75166c99bc36c88d2b92224800046e51012943d8959b2d17ac15c047e4b36ec422e07b2020593587fe9707aab43b4f569c247c1b7ebddedb71043dae1525bb514184200f5ebef58e97343c8cf73fa89ff64c85b6017be45d8458fd5b27944d6ba097415b2273b8beb860c02dc3ef9e08cfeb1a0d9c1a6e3feaee747523b2321c5768d4ce88adfa5260f644431a80f7cba56fba6a2525d0f3a71f4b4a453cdacf0420ee8aff04b173c1d3e965721c3055d552ba88591db2b44efee7b273bfc1b786a52c2c8ab6d0c1fc5a267dada0cc913a804a285539f1b99b83d7e66538d60cd8f7b55195cf656f8fa23f0047b53b016b8546df56b495a030399060b5bfdaa998965f647cffb23cb99cc7e2777707917b324d0687ab1de06cad6180f202188cd46634291dd7466ddefc78123ebf8a22b9cf59561ce252b685380f7951be6ad569aa0904bdda358e4f24fdefe3bf698ecedd572cf98c504bf31eaa2df1b2d4bb36c3d087a376fe19743dbcddcfb94404d824de080d4d4d829768eee071b7a5cf126c0df25cc08cdb660b9096246147e82c801791ea1492e3615c02d51b7ac92239fd2d6e15436f4ae9c6a32374d401cefafcef0caa5f45cae1695e36ba5fc1c68fcb2f79aa307df18092a8659bb3aabaf3cd345451bc81c0313e94360e463369ae85c6e2f02124d5d3b3546c4c34513f172c927a43a00889f078ebc80208634b060e30f405d0d5c19c54ca15803d4e4d1a8aa0563bd209f9f232ddd3f7a94d3e5b85f9fd7647153504d765043d08e94a55d5d73f35f57a67da2eb2fd93455e027e32eeca45a15ace44781e7c3928921a6e9f1f8b535a0a1cc6bd7cc90c624edea43b761363c1197cde1566ab326003d5e4799b6622d08daa2f3485a1903d7d67e45345fe6242d44c1a9e13a31bc00e41f38e888cb03a9bfedfa4baa5bbdfb3896c4d8f764fe0a32a179ee9f915c31abf6ebeb42fe9faa0f3a3e721cbb8c23fa2653b581280631dfe2ba1972225586891b1aad9cc93196f67dff507cb17cdcf0223c79bbc014b0ee1b77581afb60511d8d968efec08c015cbf41efd9aa82703566005b7917ff414ca5dd9de5de5325d399ec0978a11b78424bf84073ed541f4d5f346b72b0c0c93055319af8a74c33b87bea5ae4f366800b1b9dcbdcb3c1415c1420a276c0f9a6409091a2ffab3cf46c988c412447eda418a08d5d9d33b14d12bb1ce039c8a0596c3b98d9ff44113f4c911f241febf80a186293f9659ad4aecd83c18a3b93e683d6ca6a847c4611a5f37363eaa61e1b4f85a8429186561869677ebfd934567e5c8eb22dd949e64256d8166c4798802a02c9648c2ccdaace97f50833f4657a5e713153160c4f184fcc618c64443655fcde6b566198109d9cb287afdbf9c358c20f4d673708b2b2d5fb6fc823b5886d1942f703dba4b9d297f274bd507d7042f770aff929842716ea9f6fe52501262f0c4bff533bc0f99bca7f8ed04ce3a42ba8fa805b768e9a3f180fce7a2279a08e78ecdc443e84fbed1a72ce90c84889e705b3dd3640e480aff8d532ceed4846a0d17245582f4e33102161b4dd8b9b91715539bdedfd3eb59118a61ebb551243e6e94ff89f69661969e8e524f4f0bf0b845d5b6a65d8f43d462979442ad1358d8afb8d0189a58a6da09bf1cde6a2408ef023c833dd3a3a6518ef3a105160b88e69f71028ea89fa6a000b20412bcddd8dc4a1c1c0aabaf6dfe3ab0bf63ca1fa669283392434ab601542f0263ab6b0c43a5a8341900547abd9dcae80c1b09864c4c70281ed47b2d15470be0e8234912b1a86774be470e27b46061433e960a8a36c0fed06aaee7b463fa34ad4c5b39ab6292c50ec2ea97cade35f22438aa97de9acd5b2af788fabe340170c1821faf3ee49c54f570843ac59805c4e3800652fc70905e862732f161a8f13103e3b432a566035f21e2822f6051c863604fb90d6f43cbce9a775b62e712c09b065f55326d7c314b029953a2a621d559da1611f5fd5a272046866f821a5a7fe87858d74cd580677314c2d933c95359aa5089a5a27c6986ca44c68c13ac76e2655f1f52d31aa713ec3635bb1c4793e8b4f47c1504fedb985deba2464a42091b492788fb7c6dd8e4d165a038ec917a636e8f3a9ae9166d245aa08e9e2a6cdf1e23605ff8189ccbb432391341b10fcc7a6c78624fe7c39ab348940a070adb016049e094c2d651e1dca812e59b0eaba6e8f7fbc5139f7d10c260acc3290418d3b8011a9e366a341326ed4f006af885ea616027bd045a07c4b5318465ae3e8562c284ec2f560d2900a0086986b9ca34d3169b27013604450757c81e17153e3ff90d6f5c4d548747b1fe5a779f2fc44b8a034098ee027dcd7564c018c6dd3bf165f37d86c422967e9bcb825e19eb7ecb255a0d3ca547abd1408d7f976944ce16fa5570c59d625f5c937fda6522a65ffe06886cc74bd4a4f75816a7ebbf2c517ddd31760744cc21f4b6216d139100d58d166bb2de69360fd445889da17e3a91926c84228b6da4bff1056f60ddde6141d0be6d12c4657603a1836b2534c7bbe058b0cc2c708b1f2cc09fe4d0659eb6b677d93b1109445ee17dba09103a562f521000d5ea5aa6311fe323b8f67aad17a3c1b59da00d36a7bcb781834e0c237b980ecdf642494a07160cb02c2aefcb74d5f3e6c306c38339e044eaff7072176d6e2e2e08c4e7833be167d8cd658a09aee01d75eb32a707e53221150d2952ff9aedf94dfbc4c2b89d406169ca59309d00a2d4f629d6fd8c161e060ff952a9900b4c26bc565ef0f0d7ec11d59faf611999a420de5eb6c07eabd1a227621952c1848d71bea18ecc1d7d412129a418413f61d27352370c8c1839c97c1bd767f383141b300dfee30bb5b50c8f3bb89c5f7bb104e4ec16d4ac3110202878cfb3276af10eb8b223cd31173990abb570a15befe402744065c1a9868f1d0858fdd073ace8f8bf9323629a04c0ccba618c6fb07342c1cd736f6425f58f478c077e598518d88483e0d9fe00054f44886bb4bc624dd58b6488396ea49932cab1bff9c034f6d54fd65430a49a85598ac1209312560e2619141626038afa23b9f229387a29b40dc7b4d57605d0de72194648025c29bcf81fd85aad2282c713a505179a4ebfdfdc8604967b16055399401fa71763d8625b40203d587e5f27f51df4699dbec77758d89e2e4ebb041405f383a182d9b98185d01875ff3a7ccf9a4ab785e9bcdf1e7a533766d0bdd0afaeb764479d3581df01e0408b1a3a885261864c1dba5006a449c7ff3a5ddb710e906cb4a85235d5cdc9f014401feb1906bb31e9c15c5c61874161e0a6b76c0575a784d42ac511627382760e2b4601cbd114951142fe2dedeb05d52d5196fbd2c9b4814dfb685c37e75aa942f1f39e647609f0c7f491e9841d2e2d3b30b5aaf9c3c6f26a96905e5febad4d29126539e8f966d745ca31ce6986613619e90180a9bc1a06ddaa20b3274157cf7d5276833c789a2a9bca960e80a55506edce9df76d8ade1f5532418a1a33b4cf6cc89d3e993f33dd2b1f188a7b45d08a6e29023f019b095cf5c2ce28c77657754d8960f6c3e947270890cad4d9536f7e1d133ac2f21a0ffcb482de1959e0c04f4a613dcd4ae7ceb5c65e9a47c68d2b289d97e90b2a603f735bebcc1b6a9f4869a65df11d5a1ce0339416c1a5f65a5b3baeb6cfec089748dc5a8dda9d9bc35ab5b418b244853f3f24a0ac92b994768fb3830d0e52b681dda4d0cadf5ea99eefe9c24326422ce2eadcfa1daf8fc629f5135c66bf25b59d07b4a63896ecd86920a36da1f15e3189e1cf4a6766030b47e46de14c75ff3da9c52138d139e141ac472eaa894e27753904a60e5b03a6cc00c5dbaf575176898bbc23954f87f85c5530b98f263d41909f5490df4ff27681f0838b239c6c38c4f3caf5febe316f98a15fe4a1952c8c3a2454fb862e3cf8dcd53d0c4bc38f30d435038d6f0bedf491d17348d9ca36bd8a05bf15134fd19ef83566c5e6c5774221e427ed5cdec172a921cd4c65f5164933207d33dcf9aa9392c277e797f519f5325f0f64d416f07b267c2a74b0aef04bbba3e20061434ab9bb1616911b85d682f333f6a46b3ee113989656d03e9e4797a4180829c18b1be502f366ee241f1f9751bd4e9f844d52855d8f190a537b51d82c71cff1760294f7741aca0149250df7d4d90eb6f91078c8768dbef398274e40d1523ed76337ff27cd46817580408420f02abb52a276b73b8d26a908cca3f5b5ed927c831727380c168b826cea44d137045791be266fae51612e3eac9e89d655312bca0fbf2f8d9bf5fad878cea215d649542b32a5a7e2643934a4bb5ec147cba86f5f9e57051a6e99e6d8601776c2a3476824154755d9ecd2ad05d38e8304118255c2530c75683db87aab3c75673517e43c7c73f6ab217109ea37c570f8ebdcde798718f59febc9cf95fb4788eb70e266ca9f9783405da4997c6560f35853206ac1e9bd020585a8a1c4bff36727aa72f8e48b63158da785854b5d0d4c153c79b431f0e2b546f249dfb9cbc8c123675970744e297f51a02fbacecf7f19fc69933613fdaf628bca0d3f06404100a77904c2aef60fa24395a8c6bc3043b9a683b102db06b56f51067d648339056e8cc9ab53f54622bcad131175362ef00ddca303c1e626dc268d72b999459c1ff9138914fff74c03e1f911ce473d2882021cc98b104efb398da94dae64ff0f5412af38d0576492f5eedffe76c3ca9f678754b853439cf803643acb5adc55392870fabbc9054d4ac0113ee401de175f4cd1a2f4703c393703a233a3fd4747f682880029bf12e207f623e2937c9b43ddd512bea8fae825e0b3e654df56da00424b266a9b740491af469cc4782fc96e1124e97d71de927518675dbf213a47fd32f502660a6fd9c496c5f9a6c218c6092d7c76b16f22fc5275b06dc90a5c46d15feb04f07f5dc62db769ed449f62a496d67fe0483f1e1ccad7b79bbd29989c2dab5563d93ed56e517a8b02c1d6640d7e8e8d80c065f51d22e6bd2550a4882c403878161bd377dcd09c1fed9f56e9475739354647545a663dcfb03ae021de15c8b3a9c3863dbab5cba09daf44e4dbd50d07dcf807652662d4e8a91c27eb150146378aab598cbdaad55b1f72128b2d891a02d8b14650edf4d05d0af09fd9dafbb7902defe7793ec5676cdcaa8497dc32eb025544cfccd12f71815ffc3d502d6273a4f54cd562ef630c3b2708c040b104dfd4d0cf2b7c1ec9c7e5bcbb040130a975ab868c1e95561a0fe90e127e312b247fc2a3eded42e9e860dc8b64e46f92aec151b667e794d5ed9ce9f8f1ca6ea4d9ab3252445710e91fafebba6f73ec4027638a3ea78bba3702a82eec454242aee3f93af86aa053f2065f3330d2f50ab51dd9464fb1e819d56a6b4c660ec6805f56fcbf51747fae098bda7fffabb7ad96ef879939ddc04c16085d4d71f3d089e79b460c6c4f47383f95bc810fefb6c2495f0f137669c1b3b81ba9f6a4563038604b303745664e5c4da3d0b281ade5cc2572263afbeb3a5a4fe541d33e03016d20172439924ab973898cc0a0f986f833fcdc424015057ca02436c1676f3efbb414f802db2c490428a58b5c10a062d31b1d063e0744cb8bf4816b1387f7fb9f05e04709c27c29818ed19051128c41", 0x1000}, {&(0x7f0000007480)="721b024aa416ad54ccef57006df8610ad58c9764750fe27dface4fd04dd02048a51bf658bde0cc157bcef5877fe7a3b6af388873bc18694dad1a0f8bab667c8aab16ee3d5e750f2cb79c242cd6950dd0bf4b55bd01200b1627df1bb9301922c630b6e7c441f4dc753643436d444a1a512cc6077a811cdf69", 0x78}, {&(0x7f0000007500)="e82e1c692514479b6f458d1ca790104884d0c51a", 0x14}], 0x5, 0x0, 0x0, 0x14844}}], 0x6, 0x4000000) 7m29.978793991s ago: executing program 0 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8c0000000001050500000000000000000300ff01fcffffff0000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e0001000000000000000000000000000000000000bab5d453b8e7c945d06e68dea1b77949f01adc953e70596637f599cbc1a21019093defdd15956fac7e2ec0443c9f1da0fcc0dfb99e388020175dc6c72f696bf541e32ab2d6b487ee9f6b87aab4c14478bdffc638b619b9fb41d6b66c44753f8d02e0572ba85f87f2be"], 0x8c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r5, 0x0, 0x0) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) semget(0x2, 0x3, 0x8) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) prctl$PR_SET_SECCOMP(0x41555856, 0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0}) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xe8, 0x2d, 0xb, 0xfffffffd, 0x25dfdbfc, {0x7}, [@generic="7a45a6a410cf515f5babb48d4da5aa57e319a907d3a581910685c3748de5e6b98fd3b60f762f686bf0c58b1f8dd7095ce88de155f6403009d5433e5bd78c273a70fe7b544519b63ac55453e1230bc53c564ed7351cfae8130d2566c96600ae1f6babecf3922d38badd66dd8ba4f13447174bd17fe73538f71479e05ef8f2f1031488773d4d0cc37624d6441ff83a102557bcdd06586781ef803716b8e16efe87fd2d69c09edfbf2019f3304ffbbbd3fa1fd1617fcb79e60d34aee1d6b2095a7331f0a19f04ee0fb5b0", @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x78}]}]}, 0xe8}}, 0x8000) 7m14.654983028s ago: executing program 32 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8c0000000001050500000000000000000300ff01fcffffff0000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e0001000000000000000000000000000000000000bab5d453b8e7c945d06e68dea1b77949f01adc953e70596637f599cbc1a21019093defdd15956fac7e2ec0443c9f1da0fcc0dfb99e388020175dc6c72f696bf541e32ab2d6b487ee9f6b87aab4c14478bdffc638b619b9fb41d6b66c44753f8d02e0572ba85f87f2be"], 0x8c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r5, 0x0, 0x0) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) semget(0x2, 0x3, 0x8) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200010}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) prctl$PR_SET_SECCOMP(0x41555856, 0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0}) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xe8, 0x2d, 0xb, 0xfffffffd, 0x25dfdbfc, {0x7}, [@generic="7a45a6a410cf515f5babb48d4da5aa57e319a907d3a581910685c3748de5e6b98fd3b60f762f686bf0c58b1f8dd7095ce88de155f6403009d5433e5bd78c273a70fe7b544519b63ac55453e1230bc53c564ed7351cfae8130d2566c96600ae1f6babecf3922d38badd66dd8ba4f13447174bd17fe73538f71479e05ef8f2f1031488773d4d0cc37624d6441ff83a102557bcdd06586781ef803716b8e16efe87fd2d69c09edfbf2019f3304ffbbbd3fa1fd1617fcb79e60d34aee1d6b2095a7331f0a19f04ee0fb5b0", @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x78}]}]}, 0xe8}}, 0x8000) 6m31.24883281s ago: executing program 4 (id=237): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="130000004e007f049e3ab018a75ab611b87647", 0x13}], 0x1}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2f00) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x94) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x4000c01, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000440)={0x3c0, 0x240, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x6, 0x3, 0x53, 0x202, 0x1, 0xc}) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) syz_io_uring_setup(0x54a9, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, ')D', 0x3a, 'ethtool\x00', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x46, 0x46, 0x50, 0x50]}, 0x37) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) sendmmsg$inet(r4, 0x0, 0x0, 0x4) syz_emit_ethernet(0x1e7, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 6m29.828990255s ago: executing program 4 (id=245): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) ppoll(0x0, 0x4a, &(0x7f0000002d00)={0x0, 0x3938700}, &(0x7f0000000340)={[0x110200004]}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x92, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@mcast2, 0x27, 0x20, 0x10}]}, 0x40}}, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000180)="ac3a143c99b3a58951b08245d7f56b0fe6f1bf2866f1d2aa", 0x0, 0x18) 6m25.577937258s ago: executing program 4 (id=259): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000700)=[{0x1d, '\x00', @st={0x4, [{0x3, @uvalue=0x6}, {0x1, @uvalue=0x6}, {0x1, @svalue=0xc8b4}, {0x3, @svalue}]}, 0xffff2e8d}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x10, 0x4}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0f438b4}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pwrite64(r3, &(0x7f00000002c0), 0x0, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x365242) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'syzkaller\x00'}, {0x20, '/,.&*}'}, {0x20, '\xbe^(!}!-!'}, {0x20, '('}, {0x20, 'callforwarding\x00'}, {0x20, '^}:(^^\\\x8e'}], 0xa, "367112ca73b09fb2cb"}, 0x4a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r7}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000480)) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048010}, 0x24000010) 6m24.752101051s ago: executing program 4 (id=262): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000480, &(0x7f0000000280)={[{@oldalloc}, {@i_version}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@usrjquota}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x576, &(0x7f0000005ac0)="$eJzs3U9rHGUYAPBnNpv+16ZQinqQQA9WajdN4p8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4gfw7rH4BfwUBS0UKUEPXiKzmU23STbZJluTOr8fTPK+M7P7zjszz7vP7OyyARTWcPanFPFqRHyTRBzuWFaOfOHw8nqLj29MZFMSS0uf/ZlEks9rr5/k/w/mlVci4tevIk6W1rbbmF+YrtZq6WxeH2nOXB1pzC+cujxTnUqn0itj4+Nn3hkfe/+9d/vW1zcv/P39p/c/OvP18cXvfn545G4S5+JQvqyzH9twq7MyHMP5PhmMc6tWHO1DY7tJstMbwJYM5HE+GNkYcDgG8qgH/v9uRsQSUFCJ+IeCaucB7Wv7Pl0HvzAefbh8AbS2/+Xl90ZiX+va6MBi8tSVUXa9O9SH9rM2fvnj3t1sik3eh7jZh/YA2m7djojT5fLa8S/Jx7+tO91683hjq9so2usP7KT7Wf7z1nr5T2kl/4l18p+D68TuVmwe/6WHy/9X30Hpjyz/+2Dd/Hdl6BoayGsvtXK+weTS5Vp6OiJejogTMbg3q290P+fM4oOlbss6879sytpv54L5djws7336MZPVZnU7fe706HbEa0/y3yTWjP/7Wrnu6uOf7Y8LPbZxLL33erdlm/e/U/8z4KWfIt5Y9/g/uaOVbHx/cqR1Poy0z4q1/rpz7Ldu7T9b//svO/4HNu7/UNJ5v7bR81OvnLU/7vsn7bbSVs//PcnnrfKefN71arM5OxqxJ/lk7fyxJ49t19vrZ/0/cXzj8W+9839/RHzR4464c/RO11V3w/GffKbj/+yFBx9/+UO39ns7/m+3SifyOb2Mf71u4Hb2HQAAAAAAAOw2pYg4FEmpslIulSqV5c93HI0DpVq90Tx5qT53ZTJa35UdisFS+0734Y7PQ4zmn4dt18dW1ccj4khEfDuwv1WvTNRrkzvdeQAAAAAAAAAAAAAAAAAAANglDnb5/n/m94Gd3jrgufOT31Bcm8Z/P37pCdiVvP5DcYl/KC7xD8Ul/qG4xD8Ul/iH4hL/UFziHwAAAAAAAAAAAAAAAAAAAAAAAAAAAPrqwvnz2bS0+PjGRFafvDY/N12/dmoybUxXZuYmKhP12auVqXp9qpZWJuozmz1frV6/OjoWc9dHmmmjOdKYX7g4U5+70rx4eaY6lV5MB/+TXgEAAAAAAAAAAAAAAAAAAMCLpTG/MF2t1dJZha6Fs/HUnKQcsTs2rMdCstlRPpufDFtqorzzHVR4DoUdHpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMO/AQAA//9KvzJU") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x43, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b"], 0x20) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf250c000000180001801400020069705f7674693000000000000000000018000380140003800c000180080001000700000004000180"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x23, &(0x7f00000000c0)='\v', 0x1) syz_clone(0x808000, &(0x7f00000000c0)="7383ecc17b200ebc45a2659466e16ddf10c226cbe3a8ffe68209f9982c53058f9329e54f35b5b2650b6f3f0bf5e73ba27f82c86aa6ee42965c3d6208203479a78b2769023da8052d78c05718e4f67a67264c6b7dfff8b4cda13dc3703e5b10678e17cc64f0a63952766bdd7e2e8651dec7b65838b17fee631994f21279ffce952f42f10590ee9654442197cc6d30535bd5ea90d812038558d8c300780dde785d551411f95c7ac9c0f1f6eed79e747707a4e103e57eafbba4f1d2b01bd8fa5d2d812a5c32", 0xc4, &(0x7f00000001c0), &(0x7f0000000200), 0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000006c0)={0x0, 0x18, '\x00', 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0]}) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x400, 0x0, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0xa0ffa, 0x0, 0x7, 0x2, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0xecd0, 0x10, 0x3fffe, 0x8, 0x7, 0x746f, 0x4, 0x5, 0x408, 0x4, 0x0, 0x7ffd]}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000000)) 6m23.093206368s ago: executing program 4 (id=264): mkdir(&(0x7f0000000140)='./file0\x00', 0x84) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x80, 0x0) 6m15.931308442s ago: executing program 4 (id=277): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5509, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x2000, 0x3ffffff, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 6m15.196057891s ago: executing program 33 (id=277): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5509, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x2000, 0x3ffffff, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 1m31.661282689s ago: executing program 1 (id=862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f00000000c0)="e300806700080000008717bd88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.504017723s ago: executing program 1 (id=863): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40800, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1b, &(0x7f0000001400)=""/223}, 0x94) 1m31.059367023s ago: executing program 1 (id=865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000020000000850000005000000095"], &(0x7f0000000380)='GPL\x00', 0x1}, 0x94) 1m30.901072497s ago: executing program 1 (id=867): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m30.107981103s ago: executing program 1 (id=872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x400, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0xa, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @loopback, 0x1000}, 0x1c, 0x0}}], 0x1, 0x14) 1m26.79705016s ago: executing program 1 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) iopl(0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1m26.381135633s ago: executing program 34 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) iopl(0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 12.71555599s ago: executing program 3 (id=1036): bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1e, 0x8, 0xfffffc01, 0x400, 0x505d, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) 12.557394683s ago: executing program 3 (id=1037): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 12.128144013s ago: executing program 2 (id=1039): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x14, 0x19, 0xb01, 0x70bd2d, 0x1, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000800) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xad, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 8.971875878s ago: executing program 2 (id=1040): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x1537, &(0x7f0000001ec0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa06020, 0x0, 0x0, 0x0, 0x0) 7.436369435s ago: executing program 3 (id=1041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth1_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x9, 0x800, 0x5, 0x1, 0xf, 0x1, 0x40, 0x40, 0x5, 0x6, 0x9, 0x101, 0x3, 0x7, 0xad, 0x7, [0x7, 0xc]}}) 7.076766068s ago: executing program 3 (id=1042): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x500}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000280), 0x8) 7.012115807s ago: executing program 3 (id=1043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x54000, 0x2000, &(0x7f0000a58000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x5, &(0x7f00000000c0)=""/72) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x2) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.725129776s ago: executing program 2 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 5.084989596s ago: executing program 3 (id=1045): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 3.585286409s ago: executing program 2 (id=1046): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000001c0)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1878c2, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000000c0)="621a60b633f91f606d21d039f5b8", 0xe) statx(r0, &(0x7f0000000080)='./file1\x00', 0x800, 0x400, &(0x7f0000000500)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) 1.45214108s ago: executing program 2 (id=1047): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1048): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): oop1p31, 10) failed: No such file or directory [ 327.464121][ T6516] udevd[6516]: inotify_add_watch(7, /dev/loop1p29, 10) failed: No such file or directory [ 328.220601][ T6170] udevd[6170]: inotify_add_watch(7, /dev/loop1p51, 10) failed: No such file or directory [ 328.502129][ T7675] udevd[7675]: inotify_add_watch(7, /dev/loop1p33, 10) failed: No such file or directory [ 328.846507][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p37, 10) failed: No such file or directory [ 328.870753][ T7677] udevd[7677]: inotify_add_watch(7, /dev/loop1p45, 10) failed: No such file or directory [ 328.889312][ T6519] udevd[6519]: inotify_add_watch(7, /dev/loop1p47, 10) failed: No such file or directory [ 328.894478][ T6173] udevd[6173]: inotify_add_watch(7, /dev/loop1p41, 10) failed: No such file or directory [ 328.931978][ T7678] udevd[7678]: inotify_add_watch(7, /dev/loop1p43, 10) failed: No such file or directory [ 328.959323][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop1p49, 10) failed: No such file or directory [ 329.718173][ T5844] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 329.743502][ T1389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.858825][ T1389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.869623][ T5844] usb 2-1: config index 0 descriptor too short (expected 141, got 72) [ 329.911720][ T5844] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.911756][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.911779][ T5844] usb 2-1: Product: syz [ 329.911795][ T5844] usb 2-1: Manufacturer: syz [ 329.911810][ T5844] usb 2-1: SerialNumber: syz [ 329.976068][ T5844] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.130816][ T1389] bond0 (unregistering): Released all slaves [ 330.152599][ T7767] netlink: 152 bytes leftover after parsing attributes in process `syz.3.463'. [ 330.445167][ T32] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.920598][ T1389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.030279][ T1389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.077430][ T1389] bond0 (unregistering): Released all slaves [ 331.152999][ T7743] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 331.153024][ T7743] netlink: 'syz.2.456': attribute type 2 has an invalid length. [ 331.892055][ T32] usb 2-1: Service connection timeout for: 256 [ 331.892192][ T32] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 331.973416][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 332.247804][ T32] ath9k_htc: Failed to initialize the device [ 332.342326][ T5844] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 332.510430][ T5844] usb 3-1: no configurations [ 332.510452][ T5844] usb 3-1: can't read configurations, error -22 [ 332.720591][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.720609][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.720836][ T7518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.859279][ T5844] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 332.929382][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.929396][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.929419][ T7518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.028187][ T5844] usb 3-1: no configurations [ 333.028210][ T5844] usb 3-1: can't read configurations, error -22 [ 333.028738][ T5844] usb usb3-port1: attempt power cycle [ 333.130136][ T32] usb 2-1: ath9k_htc: USB layer deinitialized [ 333.248257][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.248825][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.249087][ T7537] bridge_slave_0: entered allmulticast mode [ 333.252403][ T7537] bridge_slave_0: entered promiscuous mode [ 333.293976][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.294679][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.294989][ T7537] bridge_slave_1: entered allmulticast mode [ 333.324611][ T7537] bridge_slave_1: entered promiscuous mode [ 333.457091][ T5844] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 333.499763][ T5844] usb 3-1: no configurations [ 333.499786][ T5844] usb 3-1: can't read configurations, error -22 [ 333.750000][ T5844] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 333.790107][ T5844] usb 3-1: no configurations [ 333.790130][ T5844] usb 3-1: can't read configurations, error -22 [ 333.793318][ T5844] usb usb3-port1: unable to enumerate USB device [ 333.990708][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 334.032303][ T7518] hsr_slave_0: entered promiscuous mode [ 334.034666][ T7518] hsr_slave_1: entered promiscuous mode [ 334.057333][ T7518] debugfs: 'hsr0' already exists in 'hsr' [ 334.057363][ T7518] Cannot create hsr debugfs directory [ 334.107823][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.257914][ T5745] usb 2-1: USB disconnect, device number 10 [ 334.397708][ T7803] loop1: detected capacity change from 0 to 128 [ 334.420327][ T1389] hsr_slave_0: left promiscuous mode [ 334.457894][ T1389] hsr_slave_1: left promiscuous mode [ 334.459035][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.498497][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.562258][ T7803] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 334.562298][ T7803] hpfs: filesystem error: improperly stopped [ 334.562315][ T7803] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 334.562331][ T7803] hpfs: You really don't want any checks? You are crazy... [ 334.562353][ T7803] hpfs: Code page index out of array [ 334.562363][ T7803] hpfs: code page support is disabled [ 334.672296][ T7803] hpfs: hpfs_map_4sectors(): unaligned read [ 334.672979][ T7803] hpfs: hpfs_map_4sectors(): unaligned read [ 334.672997][ T7803] hpfs: filesystem error: unable to find root dir [ 334.870998][ T7809] overlayfs: missing 'lowerdir' [ 334.977502][ T1389] hsr_slave_0: left promiscuous mode [ 335.720643][ T1389] hsr_slave_1: left promiscuous mode [ 335.963964][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.989253][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.266328][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 336.738306][ T1389] team0 (unregistering): Port device team_slave_1 removed [ 336.809804][ T1389] team0 (unregistering): Port device team_slave_0 removed [ 337.815097][ T1389] team0 (unregistering): Port device team_slave_1 removed [ 337.948196][ T1389] team0 (unregistering): Port device team_slave_0 removed [ 338.701829][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.734263][ T7821] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 339.320607][ T7537] team0: Port device team_slave_0 added [ 339.552294][ T7537] team0: Port device team_slave_1 added [ 339.755577][ T7846] bridge0: entered promiscuous mode [ 339.755619][ T7846] bridge0: entered allmulticast mode [ 339.903347][ T5745] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 340.102105][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 340.127058][ T5745] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.130431][ T5745] usb 2-1: config 5 has an invalid interface number: 68 but max is 0 [ 340.130514][ T5745] usb 2-1: config 5 has no interface number 0 [ 340.130607][ T5745] usb 2-1: config 5 interface 68 has no altsetting 0 [ 340.170241][ T5745] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice=53.c0 [ 340.170272][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.170293][ T5745] usb 2-1: Product: syz [ 340.170313][ T5745] usb 2-1: Manufacturer: syz [ 340.170324][ T5745] usb 2-1: SerialNumber: syz [ 340.537129][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.537151][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.537185][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.614826][ T7846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.484'. [ 340.770323][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.770344][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.770376][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.050226][ T5745] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.68/input/input7 [ 341.498941][ T4961] bcm5974 2-1:5.68: could not read from device [ 341.548339][ T7853] XFS (nullb0): Invalid superblock magic number [ 341.728372][ T5745] usb 2-1: USB disconnect, device number 11 [ 341.769873][ T4961] bcm5974 2-1:5.68: could not read from device [ 342.034748][ T7537] hsr_slave_0: entered promiscuous mode [ 342.061115][ T7537] hsr_slave_1: entered promiscuous mode [ 344.481312][ T7870] loop1: detected capacity change from 0 to 32768 [ 344.648995][ T7870] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 344.735056][ T7870] XFS (loop1): Ending clean mount [ 344.815903][ T7880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.491'. [ 344.815942][ T7880] netlink: 56 bytes leftover after parsing attributes in process `syz.3.491'. [ 345.005280][ T7894] sctp: [Deprecated]: syz.3.493 (pid 7894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.005280][ T7894] Use struct sctp_sack_info instead [ 345.188381][ T7896] loop2: detected capacity change from 0 to 512 [ 345.321220][ T7896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.321359][ T7896] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.567139][ T7903] fuse: fd is not a fuse device [ 345.640681][ T5618] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 347.105767][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.095976][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 348.228419][ T5738] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 348.382887][ T7924] loop2: detected capacity change from 0 to 512 [ 348.455711][ T5738] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 348.455743][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.455764][ T5738] usb 2-1: Product: syz [ 348.455781][ T5738] usb 2-1: Manufacturer: syz [ 348.455797][ T5738] usb 2-1: SerialNumber: syz [ 348.558467][ T7924] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.500: corrupted in-inode xattr: invalid ea_ino [ 348.558508][ T7924] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.560303][ T7924] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.500: couldn't read orphan inode 15 (err -117) [ 348.560389][ T7924] loop2: lost filesystem error report for type 5 error -117 [ 348.689308][ T7924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.740151][ T5738] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 348.805378][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 349.289839][ T7931] random: crng reseeded on system resumption [ 349.783475][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.019481][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 351.065718][ T5780] usb 2-1: USB disconnect, device number 12 [ 351.195520][ T10] ath9k_htc: Failed to initialize the device [ 351.209735][ T5780] usb 2-1: ath9k_htc: USB layer deinitialized [ 351.846994][ T7974] loop1: detected capacity change from 0 to 512 [ 351.992358][ T7974] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 352.008554][ T7974] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.507: iget: bad i_size value: 12154757448730 [ 352.008582][ T7974] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 352.009154][ T7974] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.507: couldn't read orphan inode 13 (err -117) [ 352.009179][ T7974] loop1: lost filesystem error report for type 5 error -117 [ 352.053080][ T7974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.351459][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.658545][ T7993] netlink: 44 bytes leftover after parsing attributes in process `syz.2.512'. [ 353.555118][ T8009] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 353.724905][ T8014] fuse: fd is not a fuse device [ 354.195861][ T7537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.290539][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.291812][ T7537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.364184][ T7998] FAULT_INJECTION: forcing a failure. [ 354.364184][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 354.364233][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.1.510 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 354.364259][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.364282][ T7998] Call Trace: [ 354.364296][ T7998] [ 354.364307][ T7998] dump_stack_lvl+0xe8/0x150 [ 354.364344][ T7998] should_fail_ex+0x46b/0x600 [ 354.364380][ T7998] _copy_to_user+0x31/0xb0 [ 354.364419][ T7998] simple_read_from_buffer+0xe1/0x170 [ 354.364456][ T7998] proc_fail_nth_read+0x1be/0x230 [ 354.364490][ T7998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.364524][ T7998] ? rw_verify_area+0x2ac/0x4e0 [ 354.364560][ T7998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.364593][ T7998] vfs_read+0x212/0xa80 [ 354.364637][ T7998] ? __pfx_vfs_read+0x10/0x10 [ 354.364675][ T7998] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 354.364713][ T7998] ? lockdep_hardirqs_on+0x7a/0x110 [ 354.364740][ T7998] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 354.364778][ T7998] ? mutex_lock_nested+0x152/0x1d0 [ 354.364815][ T7998] ? fdget_pos+0x252/0x320 [ 354.364856][ T7998] ksys_read+0x156/0x270 [ 354.364893][ T7998] ? __pfx_ksys_read+0x10/0x10 [ 354.364937][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.364963][ T7998] do_syscall_64+0x174/0x580 [ 354.364985][ T7998] ? trace_irq_disable+0x3b/0x140 [ 354.365014][ T7998] ? clear_bhb_loop+0x40/0x90 [ 354.365043][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.365067][ T7998] RIP: 0033:0x7ff69322d68e [ 354.365094][ T7998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.365114][ T7998] RSP: 002b:00007ff6914c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.365139][ T7998] RAX: ffffffffffffffda RBX: 00007ff6914c66c0 RCX: 00007ff69322d68e [ 354.365156][ T7998] RDX: 000000000000000f RSI: 00007ff6914c60a0 RDI: 0000000000000003 [ 354.365170][ T7998] RBP: 00007ff6914c6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.365185][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.365199][ T7998] R13: 00007ff6934e6038 R14: 00007ff6934e5fa0 R15: 00007ffed41a8ca8 [ 354.365236][ T7998] [ 354.758771][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.785406][ T7537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.875517][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.878588][ T7537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.972568][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 356.458266][ T8061] loop2: detected capacity change from 0 to 512 [ 356.656035][ T8061] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.523: corrupted in-inode xattr: invalid ea_ino [ 356.656085][ T8061] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 356.656707][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 356.656728][ C0] EXT4-fs (loop2): initial error at time 1780246717: ext4_iget_extra_inode:5128: inode 15 [ 356.656806][ C0] EXT4-fs (loop2): last error at time 1780246717: ext4_iget_extra_inode:5128: inode 15 [ 356.662152][ T8061] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.523: couldn't read orphan inode 15 (err -117) [ 356.662273][ T8061] loop2: lost filesystem error report for type 5 error -117 [ 356.759323][ T8061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.919572][ T7518] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 356.980171][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.982965][ T7518] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.083889][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.107195][ T7518] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.252860][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.281823][ T7518] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.318775][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.421685][ T8074] warning: `syz.3.527' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 357.567119][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.628841][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 357.628903][ T8082] net_ratelimit: 109 callbacks suppressed [ 357.628916][ T8082] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 357.672593][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.864254][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.964813][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.004532][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.223627][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.223960][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.485946][ T8051] loop1: detected capacity change from 0 to 40427 [ 358.600457][ T8051] F2FS-fs (loop1): Unable to read 2th superblock [ 358.724563][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.735887][ T8051] F2FS-fs (loop1): invalid crc value [ 358.744297][ T8051] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 359.092045][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.175522][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.175925][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.221876][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.222052][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.133824][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.304406][ T8118] loop2: detected capacity change from 0 to 2048 [ 363.305998][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.462363][ T8131] netlink: zone id is out of range [ 363.462381][ T8131] netlink: zone id is out of range [ 363.462439][ T8131] netlink: zone id is out of range [ 363.462449][ T8131] netlink: zone id is out of range [ 363.462480][ T8131] netlink: zone id is out of range [ 363.462489][ T8131] netlink: zone id is out of range [ 363.462498][ T8131] netlink: zone id is out of range [ 363.462508][ T8131] netlink: zone id is out of range [ 363.462517][ T8131] netlink: zone id is out of range [ 363.462526][ T8131] netlink: zone id is out of range [ 363.556240][ T8118] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.534: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 363.637340][ T8129] loop1: detected capacity change from 0 to 4096 [ 363.700425][ T8129] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 363.717990][ T8129] ntfs3(loop1): ino=2, mi_enum_attr [ 363.718030][ T8129] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 363.784768][ T8129] ntfs3(loop1): Failed to load $LogFile (-22). [ 363.827464][ T8118] EXT4-fs (loop2): Remounting filesystem read-only [ 364.274129][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.579733][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.820682][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 366.315744][ T7537] veth0_vlan: entered promiscuous mode [ 366.371417][ T7537] veth1_vlan: entered promiscuous mode [ 366.555600][ T8166] loop2: detected capacity change from 0 to 1024 [ 366.601499][ T8166] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 366.640012][ T8168] loop1: detected capacity change from 0 to 128 [ 366.943062][ T7537] veth0_macvtap: entered promiscuous mode [ 366.983031][ T7537] veth1_macvtap: entered promiscuous mode [ 367.054987][ T8168] affs: No valid root block on device loop1 [ 367.298576][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.359337][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.360977][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.362668][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.365718][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.481869][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.724343][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.178789][ T8187] program syz.1.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.451962][ T8193] loop1: detected capacity change from 0 to 8 [ 368.540791][ T8191] loop2: detected capacity change from 0 to 512 [ 368.736915][ T8191] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.548: corrupted in-inode xattr: invalid ea_ino [ 368.736952][ T8191] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 368.742253][ T8191] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.548: couldn't read orphan inode 15 (err -117) [ 368.742288][ T8191] loop2: lost filesystem error report for type 5 error -117 [ 368.795678][ T8191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.055821][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.119379][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.122559][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.125025][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.150995][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.487916][ T5611] Bluetooth: hci2: command tx timeout [ 370.103518][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.849512][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.029011][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 371.043667][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.060028][ T5844] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 371.060066][ T5844] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 371.060093][ T5844] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 371.060119][ T5844] usb 3-1: config 1 interface 0 has no altsetting 0 [ 371.139605][ T5844] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 371.139641][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.139664][ T5844] usb 3-1: Product: syz [ 371.139680][ T5844] usb 3-1: Manufacturer: syz [ 371.139696][ T5844] usb 3-1: SerialNumber: syz [ 371.220677][ T8217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 371.334640][ T5611] Bluetooth: hci5: command tx timeout [ 371.575314][ T8217] loop2: detected capacity change from 0 to 4096 [ 371.586953][ T5611] Bluetooth: hci2: command tx timeout [ 371.708117][ T8217] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 371.743007][ T8217] ntfs3(loop2): ino=8, mi_enum_attr [ 371.743113][ T8217] ntfs3(loop2): Failed to load $BadClus (-22). [ 372.142429][ T5844] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8 [ 372.168144][ T5844] usb 3-1: USB disconnect, device number 11 [ 372.209395][ T5844] usblp0: removed [ 372.285461][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 372.285479][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 372.285613][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 372.285624][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 372.354989][ T5611] Bluetooth: hci4: unexpected event 0x09 length: 4 > 3 [ 372.786086][ T8232] net_ratelimit: 228 callbacks suppressed [ 372.786118][ T8232] openvswitch: netlink: Message has 4 unknown bytes. [ 372.786201][ T8232] openvswitch: netlink: Actions may not be safe on all matching packets [ 372.830957][ T8233] netlink: zone id is out of range [ 372.830975][ T8233] netlink: zone id is out of range [ 372.831048][ T8233] netlink: zone id is out of range [ 372.831060][ T8233] netlink: zone id is out of range [ 372.831113][ T8233] netlink: zone id is out of range [ 372.831123][ T8233] netlink: zone id is out of range [ 372.831134][ T8233] netlink: zone id is out of range [ 372.831144][ T8233] netlink: zone id is out of range [ 372.883436][ T8232] loop1: detected capacity change from 0 to 4096 [ 373.045310][ T8232] ntfs3(loop1): failed to replay log file. Can't mount rw! [ 373.539911][ T5611] Bluetooth: hci5: command tx timeout [ 373.673369][ T5611] Bluetooth: hci2: command tx timeout [ 374.980169][ T8247] loop1: detected capacity change from 0 to 512 [ 375.198508][ T8247] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.559: corrupted in-inode xattr: invalid ea_ino [ 375.198551][ T8247] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.206676][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 375.206703][ C0] EXT4-fs (loop1): initial error at time 1780246735: ext4_iget_extra_inode:5128: inode 15 [ 375.206736][ C0] EXT4-fs (loop1): last error at time 1780246735: ext4_iget_extra_inode:5128: inode 15 [ 375.249146][ T8247] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.559: couldn't read orphan inode 15 (err -117) [ 375.249202][ T8247] loop1: lost filesystem error report for type 5 error -117 [ 375.265642][ T8247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.676154][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 376.193711][ T5611] Bluetooth: hci5: command tx timeout [ 376.193761][ T5611] Bluetooth: hci2: command tx timeout [ 376.277478][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.562'. [ 376.695680][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.980094][ T8263] loop1: detected capacity change from 0 to 16 [ 377.037501][ T8263] erofs (device loop1): mounted with root inode @ nid 36. [ 377.127299][ T8263] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 377.456790][ T5844] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 377.577052][ T5780] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 377.640400][ T5844] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 377.640436][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.640457][ T5844] usb 2-1: Product: syz [ 377.640473][ T5844] usb 2-1: Manufacturer: syz [ 377.640490][ T5844] usb 2-1: SerialNumber: syz [ 377.803713][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 377.803749][ T5780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.803791][ T5780] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 377.803814][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.823418][ T5780] usb 3-1: config 0 descriptor?? [ 378.208114][ T5623] Bluetooth: hci5: command tx timeout [ 378.452649][ T5844] net_ratelimit: 229 callbacks suppressed [ 378.452745][ T5844] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 378.452816][ T5844] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 378.454793][ T5844] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 378.454919][ T5844] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 379.068032][ T8285] loop2: detected capacity change from 0 to 256 [ 379.429066][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.429196][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.571781][ T8285] FAT-fs (loop2): Directory bread(block 64) failed [ 379.571822][ T8285] FAT-fs (loop2): Directory bread(block 65) failed [ 379.571922][ T8285] FAT-fs (loop2): Directory bread(block 66) failed [ 379.571943][ T8285] FAT-fs (loop2): Directory bread(block 67) failed [ 379.572090][ T8285] FAT-fs (loop2): Directory bread(block 68) failed [ 379.572123][ T8285] FAT-fs (loop2): Directory bread(block 69) failed [ 379.572205][ T8285] FAT-fs (loop2): Directory bread(block 70) failed [ 379.572227][ T8285] FAT-fs (loop2): Directory bread(block 71) failed [ 379.572311][ T8285] FAT-fs (loop2): Directory bread(block 72) failed [ 379.572332][ T8285] FAT-fs (loop2): Directory bread(block 73) failed [ 379.692299][ T5844] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 379.710738][ T5780] hid_parser_main: 28 callbacks suppressed [ 379.710765][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710799][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710827][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710855][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710882][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710910][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710938][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710967][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.710995][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.711023][ T5780] megaworld 0003:07B5:0312.0002: unknown main item tag 0x0 [ 379.906379][ T5780] megaworld 0003:07B5:0312.0002: hidraw0: USB HID v0.01 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 379.906420][ T5780] megaworld 0003:07B5:0312.0002: no inputs found [ 380.232399][ T5844] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 380.317795][ T5844] usb 2-1: USB disconnect, device number 13 [ 380.415999][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 382.800831][ T8296] loop1: detected capacity change from 0 to 512 [ 382.994247][ T5844] usb 3-1: USB disconnect, device number 12 [ 383.004638][ T8296] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.571: corrupted in-inode xattr: invalid ea_ino [ 383.004677][ T8296] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 383.006786][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 383.006818][ C1] EXT4-fs (loop1): initial error at time 1780246743: ext4_iget_extra_inode:5128: inode 15 [ 383.006843][ C1] EXT4-fs (loop1): last error at time 1780246743: ext4_iget_extra_inode:5128: inode 15 [ 383.007939][ T8296] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.571: couldn't read orphan inode 15 (err -117) [ 383.007968][ T8296] loop1: lost filesystem error report for type 5 error -117 [ 383.181616][ T8296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.751439][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.070706][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.071061][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.071415][ T8171] bridge_slave_0: entered allmulticast mode [ 384.075288][ T8171] bridge_slave_0: entered promiscuous mode [ 384.188362][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.188721][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.189092][ T8171] bridge_slave_1: entered allmulticast mode [ 384.237036][ T8171] bridge_slave_1: entered promiscuous mode [ 384.315955][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 384.316030][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 385.402825][ T167] bridge_slave_1: left allmulticast mode [ 385.402861][ T167] bridge_slave_1: left promiscuous mode [ 385.403170][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.491084][ T8350] netlink: zone id is out of range [ 385.491100][ T8350] netlink: zone id is out of range [ 385.491156][ T8350] netlink: zone id is out of range [ 385.491165][ T8350] netlink: zone id is out of range [ 385.491174][ T8350] netlink: zone id is out of range [ 385.491182][ T8350] netlink: zone id is out of range [ 385.491190][ T8350] netlink: zone id is out of range [ 385.491199][ T8350] netlink: zone id is out of range [ 385.491207][ T8350] netlink: zone id is out of range [ 385.491216][ T8350] netlink: zone id is out of range [ 385.662163][ T8353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 385.698500][ T167] bridge_slave_0: left allmulticast mode [ 385.698538][ T167] bridge_slave_0: left promiscuous mode [ 385.698812][ T167] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.778264][ T8356] fuse: fd is not a fuse device [ 385.784170][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 386.699006][ T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.777843][ T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.799342][ T167] bond0 (unregistering): Released all slaves [ 386.984121][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 387.052146][ T8358] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 387.276748][ T8366] overlayfs: failed to clone upperpath [ 387.567382][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.569555][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.569997][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.570312][ T8199] bridge_slave_0: entered allmulticast mode [ 387.645274][ T8199] bridge_slave_0: entered promiscuous mode [ 387.691872][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.692345][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.692693][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.692985][ T8199] bridge_slave_1: entered allmulticast mode [ 387.738910][ T8199] bridge_slave_1: entered promiscuous mode [ 387.830351][ T8382] loop1: detected capacity change from 0 to 164 [ 387.831700][ T8382] iso9660: Unknown parameter 'unhide' [ 387.932923][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 388.155512][ T8390] loop2: detected capacity change from 0 to 2048 [ 388.174707][ T8390] udf: Unknown parameter 'dmode' [ 388.581985][ T8388] bridge1: port 1(veth3) entered blocking state [ 388.583977][ T8388] bridge1: port 1(veth3) entered disabled state [ 388.584378][ T8388] veth3: entered allmulticast mode [ 388.617903][ T8388] veth3: entered promiscuous mode [ 388.849107][ T8171] team0: Port device team_slave_0 added [ 388.986785][ T167] hsr_slave_0: left promiscuous mode [ 389.007633][ T167] hsr_slave_1: left promiscuous mode [ 389.009007][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.082634][ T8391] loop2: detected capacity change from 0 to 40427 [ 389.085847][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.183363][ T8397] loop1: detected capacity change from 0 to 1024 [ 389.227379][ T8397] hfsplus: Unknown parameter '00000000000000000000003•QЗ 7Ÿ»Yè‡ð¶ÄR”©' [ 389.507063][ T5737] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 389.660656][ T5737] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 389.660688][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.660709][ T5737] usb 3-1: config 0 has no interface number 0 [ 389.660758][ T5737] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 14129, setting to 64 [ 389.660788][ T5737] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 389.660834][ T5737] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 389.661426][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.702350][ T5737] usb 3-1: config 0 descriptor?? [ 390.197050][ T5737] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 390.274444][ T5737] usb 3-1: USB disconnect, device number 13 [ 390.320452][ T3339] usb 3-1: Failed to submit usb control message: -19 [ 390.320493][ T3339] usb 3-1: unable to send the bmi data to the device: -19 [ 390.320513][ T3339] usb 3-1: unable to get target info from device [ 390.320602][ T3339] usb 3-1: could not get target info (-19) [ 390.321038][ T3339] usb 3-1: could not probe fw (-19) [ 392.008646][ T8408] loop2: detected capacity change from 0 to 512 [ 392.022893][ T8408] EXT4-fs: Mount option(s) incompatible with ext2 [ 392.823364][ T8410] loop2: detected capacity change from 0 to 32768 [ 392.832186][ T8410] btrfs: Deprecated parameter 'usebackuproot' [ 392.832258][ T8410] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 392.850807][ T8410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.599 (8410) [ 393.061925][ T8410] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.062109][ T8410] BTRFS info (device loop2): using crc32c checksum algorithm [ 393.253081][ T167] team0 (unregistering): Port device team_slave_1 removed [ 393.290810][ T5933] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 393.399839][ T167] team0 (unregistering): Port device team_slave_0 removed [ 393.445208][ T8410] BTRFS error (device loop2): failed to load root extent [ 393.445315][ T8410] BTRFS warning (device loop2): try to load backup roots slot 1 [ 393.449291][ T44] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 393.451088][ T8410] BTRFS warning (device loop2): couldn't read tree root [ 393.451153][ T8410] BTRFS warning (device loop2): try to load backup roots slot 2 [ 393.452143][ T44] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 393.454591][ T8410] BTRFS warning (device loop2): couldn't read tree root [ 393.454653][ T8410] BTRFS warning (device loop2): try to load backup roots slot 3 [ 393.619838][ T8410] BTRFS info (device loop2): rebuilding free space tree [ 394.581402][ T8410] BTRFS info (device loop2): checking UUID tree [ 394.587291][ T8410] BTRFS info (device loop2): enabling ssd optimizations [ 394.587343][ T8410] BTRFS info (device loop2): turning on async discard [ 394.587364][ T8410] BTRFS info (device loop2): enabling free space tree [ 394.587404][ T8410] BTRFS info (device loop2): force clearing of disk cache [ 394.587423][ T8410] BTRFS info (device loop2): enabling auto defrag [ 394.587442][ T8410] BTRFS info (device loop2): trying to use backup root at mount time [ 394.587529][ T8410] BTRFS info (device loop2): use zstd compression, level 3 [ 394.799259][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.820139][ T8171] team0: Port device team_slave_1 added [ 394.914098][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.199489][ T5613] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.463982][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.464002][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.464034][ T8171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.515437][ T8435] net_ratelimit: 57 callbacks suppressed [ 395.515459][ T8435] netlink: zone id is out of range [ 395.515467][ T8435] netlink: zone id is out of range [ 395.515528][ T8435] netlink: zone id is out of range [ 395.515537][ T8435] netlink: zone id is out of range [ 395.515544][ T8435] netlink: zone id is out of range [ 395.515552][ T8435] netlink: zone id is out of range [ 395.515561][ T8435] netlink: zone id is out of range [ 395.515568][ T8435] netlink: zone id is out of range [ 395.515576][ T8435] netlink: zone id is out of range [ 395.515584][ T8435] netlink: zone id is out of range [ 395.586981][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.586999][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.587030][ T8171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.659431][ T8199] team0: Port device team_slave_0 added [ 395.687274][ T8199] team0: Port device team_slave_1 added [ 396.148386][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.148405][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.148437][ T8199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.379226][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.379255][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.379287][ T8199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.488304][ T8171] hsr_slave_0: entered promiscuous mode [ 396.505149][ T8171] hsr_slave_1: entered promiscuous mode [ 396.521116][ T8171] debugfs: 'hsr0' already exists in 'hsr' [ 396.521147][ T8171] Cannot create hsr debugfs directory [ 398.777421][ T8464] loop1: detected capacity change from 0 to 32768 [ 398.790799][ T8464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.608 (8464) [ 398.945865][ T8464] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.945903][ T8464] BTRFS info (device loop1): using sha256 checksum algorithm [ 399.124192][ T8464] BTRFS info (device loop1): enabling ssd optimizations [ 399.124237][ T8464] BTRFS info (device loop1): turning on async discard [ 399.124256][ T8464] BTRFS info (device loop1): enabling free space tree [ 399.702111][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 399.762082][ T8463] vlan2: entered promiscuous mode [ 399.762111][ T8463] macsec0: entered promiscuous mode [ 399.766151][ T8469] tipc: Enabling of bearer rejected, failed to enable media [ 399.825314][ T8199] hsr_slave_0: entered promiscuous mode [ 399.835056][ T8199] hsr_slave_1: entered promiscuous mode [ 399.843778][ T8199] debugfs: 'hsr0' already exists in 'hsr' [ 399.843808][ T8199] Cannot create hsr debugfs directory [ 399.921497][ T8489] loop2: detected capacity change from 0 to 256 [ 399.953051][ T8489] vfat: Unknown parameter 'obj_user' [ 399.980498][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 404.575347][ T8521] No control pipe specified [ 404.700540][ T8521] loop1: detected capacity change from 0 to 8 [ 405.747453][ T5623] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 405.976903][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 406.300443][ T8527] loop2: detected capacity change from 0 to 2048 [ 406.362377][ T8527] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 406.459343][ T8527] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 406.459368][ T8527] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 406.687505][ T8531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.625'. [ 406.688576][ T8531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.625'. [ 409.959838][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.635'. [ 409.984747][ T8561] netlink: 56 bytes leftover after parsing attributes in process `syz.2.635'. [ 410.261452][ T8568] loop2: detected capacity change from 0 to 64 [ 410.276274][ T8568] bfs: Unknown parameter '00000000000000000003' [ 410.400441][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 411.850218][ T8584] loop2: detected capacity change from 0 to 2048 [ 412.345629][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.3.636'. [ 412.709598][ T8584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.780097][ T8594] tipc: Started in network mode [ 413.780118][ T8594] tipc: Node identity , cluster identity 4711 [ 413.780260][ T8594] tipc: Failed to obtain node identity [ 413.780290][ T8594] tipc: Enabling of bearer rejected, failed to enable media [ 413.855664][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.644'. [ 414.091314][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.645'. [ 414.092573][ T8600] netlink: 56 bytes leftover after parsing attributes in process `syz.2.645'. [ 414.537545][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 414.537597][ T8612] net_ratelimit: 23 callbacks suppressed [ 414.537609][ T8612] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 414.865953][ T8622] loop2: detected capacity change from 0 to 512 [ 414.866208][ T8623] loop1: detected capacity change from 0 to 128 [ 415.078842][ T8622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.078947][ T8622] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 415.386570][ T8622] batman_adv: batadv0: Adding interface: macvtap1 [ 415.387051][ T8622] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.387088][ T8622] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 415.855869][ T8638] input: syz0 as /devices/virtual/input/input8 [ 415.882887][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.091128][ T8666] netlink: zone id is out of range [ 417.091146][ T8666] netlink: zone id is out of range [ 417.091200][ T8666] netlink: zone id is out of range [ 417.091210][ T8666] netlink: zone id is out of range [ 417.091257][ T8666] netlink: zone id is out of range [ 417.091267][ T8666] netlink: zone id is out of range [ 417.091276][ T8666] netlink: zone id is out of range [ 417.091284][ T8666] netlink: zone id is out of range [ 417.091293][ T8666] netlink: zone id is out of range [ 417.659440][ T5780] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 417.809929][ T5780] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 417.809964][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.888316][ T5780] usb 2-1: config 0 descriptor?? [ 417.905221][ T5780] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 418.101707][ T5780] gspca_cpia1: usb_control_msg 05, error -71 [ 418.102119][ T5780] gspca_cpia1: usb_control_msg 01, error -71 [ 418.102137][ T5780] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 418.148939][ T5780] usb 2-1: USB disconnect, device number 14 [ 418.669087][ T44] bridge_slave_1: left allmulticast mode [ 418.669127][ T44] bridge_slave_1: left promiscuous mode [ 418.669433][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.828517][ T44] bridge_slave_0: left allmulticast mode [ 418.828555][ T44] bridge_slave_0: left promiscuous mode [ 418.828882][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.267145][ T8711] net_ratelimit: 110 callbacks suppressed [ 420.267167][ T8711] netlink: zone id is out of range [ 420.267178][ T8711] netlink: zone id is out of range [ 420.267232][ T8711] netlink: zone id is out of range [ 420.267243][ T8711] netlink: zone id is out of range [ 420.267289][ T8711] netlink: zone id is out of range [ 420.267298][ T8711] netlink: zone id is out of range [ 420.267308][ T8711] netlink: zone id is out of range [ 420.267316][ T8711] netlink: zone id is out of range [ 420.267326][ T8711] netlink: zone id is out of range [ 420.267334][ T8711] netlink: zone id is out of range [ 421.244267][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.387463][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.436336][ T44] bond0 (unregistering): Released all slaves [ 421.945643][ T8724] loop2: detected capacity change from 0 to 32768 [ 421.969703][ T8724] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #66: fs_generation is 3923141654 [ 421.969740][ T8724] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 421.969751][ T8724] OCFS2: File system is now read-only. [ 421.969771][ T8724] (syz.2.672,8724,0):ocfs2_read_locked_inode:633 ERROR: status = -30 [ 421.970018][ T8724] (syz.2.672,8724,0):ocfs2_init_global_system_inodes:452 ERROR: status = -30 [ 421.970043][ T8724] (syz.2.672,8724,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 421.970097][ T8724] (syz.2.672,8724,0):ocfs2_initialize_super:2195 ERROR: status = -30 [ 421.970223][ T8724] (syz.2.672,8724,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 422.419932][ T8695] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 423.393654][ T8729] loop1: detected capacity change from 0 to 32768 [ 423.430628][ T8729] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.673 (8729) [ 423.497246][ T44] hsr_slave_0: left promiscuous mode [ 423.538415][ T44] hsr_slave_1: left promiscuous mode [ 423.567385][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.567416][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.607465][ T8747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.678'. [ 423.629005][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.629035][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.658282][ T8729] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 423.658319][ T8729] BTRFS info (device loop1): using crc32c checksum algorithm [ 425.176565][ T44] veth1_macvtap: left promiscuous mode [ 425.183022][ T44] veth0_macvtap: left promiscuous mode [ 425.183350][ T44] veth1_vlan: left promiscuous mode [ 425.183558][ T44] veth0_vlan: left promiscuous mode [ 425.283370][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 425.297182][ T8729] BTRFS error (device loop1): failed to load root extent [ 425.582211][ T8729] BTRFS error (device loop1): open_ctree failed: -5 [ 426.463714][ T8780] loop8: detected capacity change from 0 to 1 [ 426.683979][ T8780] Dev loop8: unable to read RDB block 1 [ 426.684030][ T8780] loop8: unable to read partition table [ 426.684247][ T8780] loop8: partition table beyond EOD, truncated [ 426.684288][ T8780] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 427.185998][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.301494][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.340740][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.342270][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.343063][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.757936][ T44] team0 (unregistering): Port device team_slave_1 removed [ 428.838349][ T44] team0 (unregistering): Port device team_slave_0 removed [ 429.072147][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.196415][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.211671][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.212896][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.234716][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.487748][ T5623] Bluetooth: hci0: command tx timeout [ 429.732761][ T8797] loop1: detected capacity change from 0 to 40427 [ 429.752130][ T8797] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 429.752156][ T8797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 429.754694][ T8797] F2FS-fs (loop1): Image doesn't support compression [ 429.754718][ T8797] F2FS-fs (loop1): build fault injection rate: 690 [ 429.754736][ T8797] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 429.805388][ T8797] F2FS-fs (loop1): invalid crc value [ 429.829225][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 430.155728][ T8812] net_ratelimit: 227 callbacks suppressed [ 430.155751][ T8812] netlink: zone id is out of range [ 430.155761][ T8812] netlink: zone id is out of range [ 430.155816][ T8812] netlink: zone id is out of range [ 430.155826][ T8812] netlink: zone id is out of range [ 430.155873][ T8812] netlink: zone id is out of range [ 430.155883][ T8812] netlink: zone id is out of range [ 430.155892][ T8812] netlink: zone id is out of range [ 430.155901][ T8812] netlink: zone id is out of range [ 430.155910][ T8812] netlink: zone id is out of range [ 430.155920][ T8812] netlink: zone id is out of range [ 431.262247][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 431.340166][ T5623] Bluetooth: hci6: command tx timeout [ 431.568398][ T5623] Bluetooth: hci0: command tx timeout [ 431.632413][ T8797] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 431.856995][ T8797] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 431.857083][ T8797] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 431.857250][ T8797] F2FS-fs (loop1): Start checkpoint disabled! [ 432.094594][ T8797] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 433.950488][ T5623] Bluetooth: hci6: command tx timeout [ 433.950530][ T5623] Bluetooth: hci0: command tx timeout [ 434.597890][ T8857] loop1: detected capacity change from 0 to 512 [ 434.770167][ T8857] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.694: corrupted in-inode xattr: invalid ea_ino [ 434.770202][ T8857] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 435.048603][ T8857] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.694: couldn't read orphan inode 15 (err -117) [ 435.048645][ T8857] loop1: lost filesystem error report for type 5 error -117 [ 435.093282][ T8857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.967067][ T5623] Bluetooth: hci6: command tx timeout [ 435.967170][ T5611] Bluetooth: hci0: command tx timeout [ 436.175471][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.430048][ T8878] loop2: detected capacity change from 0 to 4096 [ 436.445847][ T8878] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 436.446405][ T8878] ntfs3(loop2): ino=3, mi_enum_attr [ 436.446510][ T8878] ntfs3(loop2): Failed to load $Volume (-22). [ 436.560569][ T8889] loop1: detected capacity change from 0 to 128 [ 436.574372][ T8889] ext4: Unknown parameter 'noacl' [ 436.920846][ T8892] loop1: detected capacity change from 0 to 1764 [ 437.571541][ T8898] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 437.571576][ T8898] overlayfs: failed to set xattr on upper [ 437.571586][ T8898] overlayfs: ...falling back to redirect_dir=nofollow. [ 437.575037][ T8898] overlayfs: ...falling back to index=off. [ 437.575051][ T8898] overlayfs: ...falling back to uuid=null. [ 437.611472][ T8900] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 438.057111][ T5611] Bluetooth: hci6: command tx timeout [ 439.405154][ T8919] loop1: detected capacity change from 0 to 512 [ 439.420985][ T8897] 9p: Bad value for 'wfdno' [ 439.473097][ T8919] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.707: corrupted in-inode xattr: invalid ea_ino [ 439.473138][ T8919] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 439.476226][ T8919] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.707: couldn't read orphan inode 15 (err -117) [ 439.476263][ T8919] loop1: lost filesystem error report for type 5 error -117 [ 439.476693][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 439.476714][ C1] EXT4-fs (loop1): initial error at time 1780246800: ext4_iget_extra_inode:5128: inode 15 [ 439.476746][ C1] EXT4-fs (loop1): last error at time 1780246800: ext4_orphan_get:1402 [ 439.593121][ T8919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.755149][ T8926] loop2: detected capacity change from 0 to 256 [ 440.313269][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.313395][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.317582][ T145] bridge_slave_1: left allmulticast mode [ 440.317620][ T145] bridge_slave_1: left promiscuous mode [ 440.317919][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.158195][ T8938] loop2: detected capacity change from 0 to 32768 [ 442.454017][ T8938] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.556067][ T8938] XFS (loop2): Ending clean mount [ 442.609619][ T145] bridge_slave_0: left allmulticast mode [ 442.609659][ T145] bridge_slave_0: left promiscuous mode [ 442.609968][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.667354][ T8950] net_ratelimit: 226 callbacks suppressed [ 442.667375][ T8950] openvswitch: netlink: Actions may not be safe on all matching packets [ 442.816985][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.306870][ T5613] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 443.828442][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.687626][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.808528][ T145] bond0 (unregistering): Released all slaves [ 445.911827][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'. [ 446.385001][ T8979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.720'. [ 447.985167][ T8991] loop1: detected capacity change from 0 to 512 [ 448.245986][ T8991] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.721: corrupted in-inode xattr: invalid ea_ino [ 448.246050][ T8991] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.249402][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 448.249429][ C0] EXT4-fs (loop1): initial error at time 1780246808: ext4_iget_extra_inode:5128: inode 15 [ 448.249551][ C0] EXT4-fs (loop1): last error at time 1780246808: ext4_iget_extra_inode:5128: inode 15 [ 448.250189][ T8991] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.721: couldn't read orphan inode 15 (err -117) [ 448.250265][ T8991] loop1: lost filesystem error report for type 5 error -117 [ 448.383332][ T8991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.644720][ T8999] loop2: detected capacity change from 0 to 2048 [ 448.701536][ T145] hsr_slave_0: left promiscuous mode [ 448.747193][ T145] hsr_slave_1: left promiscuous mode [ 448.748372][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.755814][ T8999] NILFS (loop2): invalid segment: Checksum error in segment payload [ 448.755844][ T8999] NILFS (loop2): trying rollback from an earlier position [ 448.756461][ T8999] NILFS (loop2): invalid segment: Inconsistency found [ 448.756481][ T8999] NILFS (loop2): error -22 while searching super root [ 448.786784][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.085574][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.178749][ T145] team0 (unregistering): Port device team_slave_1 removed [ 451.230701][ T9013] loop2: detected capacity change from 0 to 40427 [ 451.249133][ T9013] f2fs: Unknown parameter '0x0000000000000003ÿÿ' [ 451.290357][ T145] team0 (unregistering): Port device team_slave_0 removed [ 451.374887][ T9024] loop1: detected capacity change from 0 to 256 [ 451.386878][ T9024] vfat: Unknown parameter '00000000000000000003' [ 451.888016][ T9030] loop2: detected capacity change from 0 to 512 [ 452.014209][ T9030] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.734: corrupted in-inode xattr: invalid ea_ino [ 452.014245][ T9030] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 452.016702][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 452.016728][ C1] EXT4-fs (loop2): initial error at time 1780246812: ext4_iget_extra_inode:5128: inode 15 [ 452.016758][ C1] EXT4-fs (loop2): last error at time 1780246812: ext4_iget_extra_inode:5128: inode 15 [ 452.070534][ T9030] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.734: couldn't read orphan inode 15 (err -117) [ 452.070570][ T9030] loop2: lost filesystem error report for type 5 error -117 [ 452.099743][ T9030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.105068][ T9021] netlink: 'syz.3.731': attribute type 12 has an invalid length. [ 452.105092][ T9021] netlink: 'syz.3.731': attribute type 29 has an invalid length. [ 452.105118][ T9021] netlink: 148 bytes leftover after parsing attributes in process `syz.3.731'. [ 452.252577][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.253011][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.253420][ T8783] bridge_slave_0: entered allmulticast mode [ 452.285612][ T8783] bridge_slave_0: entered promiscuous mode [ 454.153334][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.153683][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.156845][ T8783] bridge_slave_1: entered allmulticast mode [ 454.794281][ T8783] bridge_slave_1: entered promiscuous mode [ 454.812354][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.812698][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.813041][ T8798] bridge_slave_0: entered allmulticast mode [ 454.851003][ T8798] bridge_slave_0: entered promiscuous mode [ 455.887309][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.887670][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.888027][ T8798] bridge_slave_1: entered allmulticast mode [ 455.893726][ T8798] bridge_slave_1: entered promiscuous mode [ 456.019801][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.080650][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.238406][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.334012][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.355506][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.522225][ T8783] team0: Port device team_slave_0 added [ 456.592112][ T8783] team0: Port device team_slave_1 added [ 456.614848][ T8798] team0: Port device team_slave_0 added [ 456.718273][ T8798] team0: Port device team_slave_1 added [ 456.818910][ T9063] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 456.819022][ T9063] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 456.952517][ T9063] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 456.952622][ T9063] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 457.230140][ T9069] sctp: [Deprecated]: syz.1.744 (pid 9069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.230140][ T9069] Use struct sctp_sack_info instead [ 457.242944][ T9063] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 457.243247][ T9063] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 457.524565][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.524583][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.524615][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.927626][ T9074] gretap0: entered promiscuous mode [ 457.929469][ T9074] vlan3: entered promiscuous mode [ 458.188112][ T5780] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 460.950614][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.950634][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.950666][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.019557][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.019578][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.019610][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.163065][ T5780] usb 3-1: device descriptor read/all, error -71 [ 461.328949][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.328969][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.329001][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.845833][ T9101] loop1: detected capacity change from 0 to 32768 [ 461.848369][ T9101] btrfs: Deprecated parameter 'usebackuproot' [ 461.848393][ T9101] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 461.850986][ T9101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.754 (9101) [ 461.910219][ T9101] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 461.910248][ T9101] BTRFS info (device loop1): using crc32c checksum algorithm [ 462.181100][ T1549] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 462.181237][ T9101] BTRFS error (device loop1): failed to load root extent [ 462.181283][ T9101] BTRFS warning (device loop1): try to load backup roots slot 1 [ 462.191093][ T3339] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 462.191222][ T9101] BTRFS warning (device loop1): couldn't read tree root [ 462.191247][ T9101] BTRFS warning (device loop1): try to load backup roots slot 2 [ 462.202446][ T1549] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 462.202573][ T9101] BTRFS warning (device loop1): couldn't read tree root [ 462.202597][ T9101] BTRFS warning (device loop1): try to load backup roots slot 3 [ 462.220195][ T8783] hsr_slave_0: entered promiscuous mode [ 462.362876][ T8783] hsr_slave_1: entered promiscuous mode [ 462.368811][ T9101] BTRFS info (device loop1): rebuilding free space tree [ 462.704475][ T8798] hsr_slave_0: entered promiscuous mode [ 462.731269][ T8798] hsr_slave_1: entered promiscuous mode [ 462.748815][ T8798] debugfs: 'hsr0' already exists in 'hsr' [ 462.748835][ T8798] Cannot create hsr debugfs directory [ 462.871940][ T9106] syz.2.755 (9106) used greatest stack depth: 18072 bytes left [ 462.882086][ T9101] BTRFS info (device loop1): checking UUID tree [ 462.904618][ T9101] BTRFS info (device loop1): enabling ssd optimizations [ 462.904651][ T9101] BTRFS info (device loop1): turning on async discard [ 462.904688][ T9101] BTRFS info (device loop1): enabling free space tree [ 462.904707][ T9101] BTRFS info (device loop1): force clearing of disk cache [ 462.904731][ T9101] BTRFS info (device loop1): enabling auto defrag [ 462.904749][ T9101] BTRFS info (device loop1): trying to use backup root at mount time [ 462.904770][ T9101] BTRFS info (device loop1): use zstd compression, level 3 [ 464.317731][ T5780] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 464.485310][ T5780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.485341][ T5780] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 464.485394][ T5780] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 464.531621][ T5780] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 464.531655][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.531677][ T5780] usb 3-1: Product: syz [ 464.531692][ T5780] usb 3-1: Manufacturer: syz [ 464.531709][ T5780] usb 3-1: SerialNumber: syz [ 464.842887][ T5780] usb 3-1: config 0 descriptor?? [ 464.871507][ T5780] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 464.871589][ T5780] uvcvideo 3-1:0.0: No valid video chain found. [ 465.125218][ T9147] pim6reg: entered allmulticast mode [ 465.130458][ T5710] usb 3-1: USB disconnect, device number 17 [ 465.148239][ T9148] pim6reg: left allmulticast mode [ 465.220213][ T5618] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 465.936954][ T9159] netlink: zone id is out of range [ 465.936971][ T9159] netlink: zone id is out of range [ 465.937028][ T9159] netlink: zone id is out of range [ 465.937037][ T9159] netlink: zone id is out of range [ 465.937046][ T9159] netlink: zone id is out of range [ 465.937056][ T9159] netlink: zone id is out of range [ 465.937065][ T9159] netlink: zone id is out of range [ 465.937074][ T9159] netlink: zone id is out of range [ 465.937083][ T9159] netlink: zone id is out of range [ 465.937092][ T9159] netlink: zone id is out of range [ 466.860447][ T9154] loop1: detected capacity change from 0 to 512 [ 467.063463][ T9154] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.762: corrupted in-inode xattr: invalid ea_ino [ 467.063510][ T9154] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 467.076634][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 467.076668][ C0] EXT4-fs (loop1): initial error at time 1780246827: ext4_iget_extra_inode:5128: inode 15 [ 467.076699][ C0] EXT4-fs (loop1): last error at time 1780246827: ext4_iget_extra_inode:5128: inode 15 [ 467.133228][ T9154] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.762: couldn't read orphan inode 15 (err -117) [ 467.133265][ T9154] loop1: lost filesystem error report for type 5 error -117 [ 467.182254][ T9154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.628807][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.830855][ T9175] loop1: detected capacity change from 0 to 2048 [ 467.874484][ T9175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.057584][ T9194] loop9: detected capacity change from 0 to 1 [ 470.151370][ T9194] Dev loop9: unable to read RDB block 1 [ 470.151405][ T9194] loop9: unable to read partition table [ 470.151567][ T9194] loop9: partition table beyond EOD, truncated [ 470.151590][ T9194] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 470.371110][ T145] bridge_slave_1: left allmulticast mode [ 470.371148][ T145] bridge_slave_1: left promiscuous mode [ 470.371440][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.446371][ T9197] 9p: Bad value for 'wfdno' [ 470.608738][ T145] bridge_slave_0: left allmulticast mode [ 470.608776][ T145] bridge_slave_0: left promiscuous mode [ 470.609065][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.667794][ T9206] loop1: detected capacity change from 0 to 1024 [ 470.698547][ T9206] hfsplus: failed to load extents file [ 471.015769][ T5611] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 471.229423][ T9215] loop2: detected capacity change from 0 to 4096 [ 471.598032][ T9225] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5615] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9225] [ 472.827029][ T9215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.177666][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.241267][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.387798][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.488410][ T145] bond0 (unregistering): Released all slaves [ 473.898929][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 473.952315][ T1389] bridge1: port 1(veth3) entered blocking state [ 473.952483][ T1389] bridge1: port 1(veth3) entered forwarding state [ 477.674721][ T145] hsr_slave_0: left promiscuous mode [ 477.708193][ T145] hsr_slave_1: left promiscuous mode [ 477.710231][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.747924][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.757565][ T145] team0 (unregistering): Port device team_slave_1 removed [ 479.000333][ T9258] loop1: detected capacity change from 0 to 1024 [ 479.514263][ T9258] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 479.518590][ T9258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 479.522447][ T9258] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 479.787305][ T9258] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #5: comm syz.1.791: unexpected bad inode w/o EXT4_IGET_BAD [ 479.787344][ T9258] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 479.792232][ T9258] EXT4-fs (loop1): no journal found [ 479.792254][ T9258] EXT4-fs (loop1): can't get journal size [ 479.796645][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 479.796671][ C0] EXT4-fs (loop1): initial error at time 1780246840: ext4_get_journal_inode:5896: inode 5 [ 479.796704][ C0] EXT4-fs (loop1): last error at time 1780246840: ext4_get_journal_inode:5896: inode 5 [ 479.833556][ T9258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 480.099079][ T145] team0 (unregistering): Port device team_slave_0 removed [ 480.149381][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.257765][ T5611] Bluetooth: hci1: connection err: -111 [ 480.324424][ T9265] loop2: detected capacity change from 0 to 128 [ 480.453159][ T9265] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.470917][ T5611] Bluetooth: hci4: unexpected event for opcode 0x080b [ 480.481756][ T9265] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 480.603891][ T9273] loop1: detected capacity change from 0 to 16 [ 480.618092][ T9273] erofs (device loop1): invalid ishare xattr prefix id 0 [ 480.796037][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.869248][ T9277] loop1: detected capacity change from 0 to 1024 [ 480.915853][ T9277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 480.916023][ T9277] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.859204][ T10] hid_parser_main: 214 callbacks suppressed [ 482.859228][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 483.062221][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.161945][ T9284] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.799: bg 0: block 112: padding at end of block bitmap is not set [ 483.289967][ T9284] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28 [ 483.290006][ T9284] EXT4-fs (loop1): This should not happen!! Data will be lost [ 483.290006][ T9284] [ 483.290024][ T9284] EXT4-fs (loop1): Total free blocks count 0 [ 483.290041][ T9284] EXT4-fs (loop1): Free/Dirty block details [ 483.290088][ T9284] EXT4-fs (loop1): free_blocks=0 [ 483.290131][ T9284] EXT4-fs (loop1): dirty_blocks=64 [ 483.290145][ T9284] EXT4-fs (loop1): Block reservation details [ 483.290159][ T9284] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 483.571263][ T9290] fido_id[9290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.681403][ T3339] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:13: lblock 40 mapped to illegal pblock 8 (length 8) [ 483.747471][ T3339] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 484.621870][ T5618] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 484.972485][ T9307] loop2: detected capacity change from 0 to 16 [ 485.022771][ T9307] erofs: Unknown parameter 'syz1' [ 485.367141][ T9311] loop1: detected capacity change from 0 to 512 [ 485.372731][ T9311] EXT4-fs: Ignoring removed nobh option [ 485.685581][ T9311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.705293][ T9311] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.483842][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.202240][ T8784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.248916][ T8784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.267019][ T8784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.277890][ T8784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.304876][ T8784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.672193][ T5623] Bluetooth: hci6: command 0x0405 tx timeout [ 493.215098][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.365190][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.381656][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.402129][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.412946][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.506932][ T5623] Bluetooth: hci2: command tx timeout [ 493.842914][ T9368] loop2: detected capacity change from 0 to 1024 [ 493.937974][ T9368] hfsplus: failed to load extents file [ 494.442278][ T9373] loop2: detected capacity change from 0 to 128 [ 494.530869][ T9373] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 494.667408][ T9373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.000086][ T5611] Bluetooth: hci5: command tx timeout [ 497.390677][ T5611] Bluetooth: hci2: command tx timeout [ 498.402108][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.816'. [ 499.006810][ T5611] Bluetooth: hci5: command tx timeout [ 499.486711][ T5611] Bluetooth: hci2: command tx timeout [ 501.087369][ T5611] Bluetooth: hci5: command tx timeout [ 501.612924][ T5611] Bluetooth: hci2: command tx timeout [ 501.735840][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.735960][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.017041][ T5611] Bluetooth: hci5: command tx timeout [ 504.901650][ T9446] loop2: detected capacity change from 0 to 1024 [ 504.953733][ T9446] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 505.119489][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 505.278761][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 505.278792][ T10] usb 2-1: config 0 has no interface number 0 [ 505.283644][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 505.283667][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.283682][ T10] usb 2-1: Product: syz [ 505.283692][ T10] usb 2-1: Manufacturer: syz [ 505.283704][ T10] usb 2-1: SerialNumber: syz [ 505.420811][ T10] usb 2-1: config 0 descriptor?? [ 506.036182][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 506.036214][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 506.036474][ T10] asix 2-1:0.251: probe with driver asix failed with error -71 [ 506.179200][ T10] usb 2-1: USB disconnect, device number 15 [ 506.418680][ T9446] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.826: lblock 1 mapped to illegal pblock 1 (length 1) [ 506.418724][ T9446] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 506.510053][ C1] EXT4-fs (loop2): initial error at time 1780246867: ext4_map_blocks:833: inode 3: block 1 [ 506.510103][ C1] EXT4-fs (loop2): last error at time 1780246867: ext4_map_blocks:833: inode 3: block 1 [ 506.619935][ T9446] Quota error (device loop2): write_blk: dquota write failed [ 506.619989][ T9446] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 506.620074][ T9446] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.826: Failed to acquire dquot type 0 [ 506.620100][ T9446] loop2: lost filesystem error report for type 5 error -117 [ 506.625603][ T9446] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.826: Freeing blocks not in datazone - block = 0, count = 4096 [ 506.625647][ T9446] loop2: lost filesystem error report for type 5 error -117 [ 507.139487][ T9446] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.826: Invalid inode bitmap blk 0 in block_group 0 [ 507.140893][ T9446] loop2: lost filesystem error report for type 5 error -117 [ 507.179948][ T167] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 507.179997][ T167] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 507.757786][ T167] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 507.757989][ T167] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 0 [ 507.758009][ T167] loop2: lost filesystem error report for type 5 error -117 [ 507.972043][ T9446] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 507.972066][ T9446] loop2: lost filesystem error report for type 5 error -117 [ 507.980117][ T9446] EXT4-fs (loop2): 1 orphan inode deleted [ 508.018457][ T9446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.472522][ T9463] loop1: detected capacity change from 0 to 128 [ 509.477567][ T9463] vfat: Bad value for 'fmask' [ 509.524628][ T9463] loop3: detected capacity change from 0 to 7 [ 509.767119][ T9463] Dev loop3: unable to read RDB block 7 [ 509.767167][ T9463] loop3: unable to read partition table [ 509.767422][ T9463] loop3: partition table beyond EOD, truncated [ 509.767459][ T9463] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.995931][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.121485][ T9475] loop1: detected capacity change from 0 to 8 [ 510.133608][ T9475] SQUASHFS error: lzo decompression failed, data probably corrupt [ 510.133641][ T9475] SQUASHFS error: Failed to read block 0x91: -5 [ 510.133660][ T9475] SQUASHFS error: Unable to read metadata cache entry [8f] [ 510.133677][ T9475] SQUASHFS error: Unable to read inode 0x11f [ 510.865031][ T68] bridge_slave_1: left allmulticast mode [ 510.865070][ T68] bridge_slave_1: left promiscuous mode [ 510.865420][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.073836][ T68] bridge_slave_0: left allmulticast mode [ 512.073874][ T68] bridge_slave_0: left promiscuous mode [ 512.074181][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.147405][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.267609][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.108454][ T68] bond0 (unregistering): Released all slaves [ 516.153651][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.153986][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.154352][ T9357] bridge_slave_0: entered allmulticast mode [ 516.178702][ T9357] bridge_slave_0: entered promiscuous mode [ 516.312114][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.312451][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.312804][ T9357] bridge_slave_1: entered allmulticast mode [ 516.337880][ T9357] bridge_slave_1: entered promiscuous mode [ 516.854204][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.854482][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.854704][ T9343] bridge_slave_0: entered allmulticast mode [ 516.857794][ T9343] bridge_slave_0: entered promiscuous mode [ 517.057460][ T68] hsr_slave_0: left promiscuous mode [ 517.102517][ T68] hsr_slave_1: left promiscuous mode [ 517.103737][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.143395][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.767641][ T68] team0 (unregistering): Port device team_slave_1 removed [ 518.850041][ T68] team0 (unregistering): Port device team_slave_0 removed [ 520.771172][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.771485][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.774024][ T9343] bridge_slave_1: entered allmulticast mode [ 520.799720][ T9343] bridge_slave_1: entered promiscuous mode [ 520.859678][ T9357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.966195][ T9357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.133388][ T9343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.245754][ T9343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.260505][ T9357] team0: Port device team_slave_0 added [ 521.324905][ T9357] team0: Port device team_slave_1 added [ 521.390523][ T9343] team0: Port device team_slave_0 added [ 521.429225][ T9343] team0: Port device team_slave_1 added [ 521.454971][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.454984][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.455006][ T9357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.590193][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.590213][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.590247][ T9357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.679108][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.679124][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.679260][ T9343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.928015][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.928036][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.928069][ T9343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.721663][ T9357] hsr_slave_0: entered promiscuous mode [ 523.737316][ T9357] hsr_slave_1: entered promiscuous mode [ 526.909011][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 526.968945][ T5611] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 527.150947][ T9343] hsr_slave_0: entered promiscuous mode [ 527.165132][ T9343] hsr_slave_1: entered promiscuous mode [ 527.182438][ T9343] debugfs: 'hsr0' already exists in 'hsr' [ 527.182468][ T9343] Cannot create hsr debugfs directory [ 527.266802][ T5737] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 527.375797][ T9579] loop2: detected capacity change from 0 to 1024 [ 527.433239][ T9579] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 527.433276][ T9579] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 527.484258][ T5737] usb 2-1: config 0 has no interfaces? [ 527.484302][ T5737] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.484328][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.535106][ T5737] usb 2-1: config 0 descriptor?? [ 527.541945][ T9579] EXT4-fs (loop2): journal inode is deleted [ 527.935434][ T9] usb 2-1: USB disconnect, device number 16 [ 528.099918][ T9583] loop2: detected capacity change from 0 to 128 [ 528.130960][ T9583] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 529.500397][ T9602] loop1: detected capacity change from 0 to 128 [ 529.524642][ T9602] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 530.412071][ T9620] loop2: detected capacity change from 0 to 8 [ 530.484619][ T9620] unable to read inode lookup table [ 530.553674][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'. [ 530.731406][ T5618] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 530.732099][ T5618] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 531.863409][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 533.449714][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 538.674224][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.743421][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.749419][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.795917][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.815479][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.327403][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 539.451649][ T3339] bridge_slave_1: left allmulticast mode [ 539.451690][ T3339] bridge_slave_1: left promiscuous mode [ 539.477745][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.649485][ T3339] bridge_slave_0: left allmulticast mode [ 539.649524][ T3339] bridge_slave_0: left promiscuous mode [ 539.649851][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.256828][ T5710] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 540.275513][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.367688][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.417343][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.417382][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 540.417427][ T5710] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 540.417457][ T5710] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.419967][ T5710] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.419999][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.420022][ T5710] usb 3-1: Product: syz [ 540.420037][ T5710] usb 3-1: Manufacturer: syz [ 540.420052][ T5710] usb 3-1: SerialNumber: syz [ 540.504388][ T3339] bond0 (unregistering): Released all slaves [ 540.508428][ T9696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 540.773767][ T9696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 540.948652][ T5611] Bluetooth: hci0: command tx timeout [ 542.643294][ T9696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.874797][ T5710] cdc_ncm 3-1:1.0: bind() failure [ 542.962255][ T5710] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 542.963985][ T5710] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 543.003248][ T5710] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 543.007015][ T5611] Bluetooth: hci0: command tx timeout [ 543.032864][ T5710] usb 3-1: USB disconnect, device number 18 [ 543.312330][ T3339] hsr_slave_0: left promiscuous mode [ 543.365983][ T3339] hsr_slave_1: left promiscuous mode [ 543.377118][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.433470][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.369399][ T5611] Bluetooth: hci0: command tx timeout [ 545.637350][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 545.700571][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 546.715304][ T9742] fuse: fd is not a fuse device [ 547.008779][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 547.418150][ T5623] Bluetooth: hci0: command tx timeout [ 548.292337][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 550.620187][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.664278][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.692540][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.761121][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.776696][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.004134][ T3339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.092498][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.155600][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.170803][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.174066][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.174883][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 552.468691][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.469124][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.469471][ T9676] bridge_slave_0: entered allmulticast mode [ 552.473806][ T9676] bridge_slave_0: entered promiscuous mode [ 552.520938][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.521232][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.521540][ T9676] bridge_slave_1: entered allmulticast mode [ 552.556023][ T9676] bridge_slave_1: entered promiscuous mode [ 553.010223][ T5611] Bluetooth: hci4: command tx timeout [ 553.015490][ T9814] loop2: detected capacity change from 0 to 1024 [ 553.041371][ T9814] EXT4-fs: inline encryption not supported [ 553.042547][ T9814] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 553.111016][ T9814] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.913: lblock 2 mapped to illegal pblock 2 (length 1) [ 553.111061][ T9814] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 553.117470][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 553.117551][ C1] EXT4-fs (loop2): initial error at time 1780247169: ext4_map_blocks:791: inode 3: block 2 [ 553.122584][ C1] EXT4-fs (loop2): last error at time 1780247169: ext4_map_blocks:791: inode 3: block 2 [ 553.147878][ T9814] EXT4-fs (loop2): Remounting filesystem read-only [ 553.147919][ T9814] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 553.148056][ T9814] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 553.210208][ T9814] EXT4-fs (loop2): 1 orphan inode deleted [ 553.212814][ T9814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.507756][ T9820] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.913'. [ 553.960814][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.366746][ T5611] Bluetooth: hci6: command tx timeout [ 554.384401][ T3339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.817248][ T5611] Bluetooth: hci4: command tx timeout [ 556.086234][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.455126][ T5611] Bluetooth: hci6: command tx timeout [ 556.596173][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.127216][ T3339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.450923][ T9676] team0: Port device team_slave_0 added [ 557.845366][ T9676] team0: Port device team_slave_1 added [ 557.888067][ T5611] Bluetooth: hci4: command tx timeout [ 558.193159][ T3339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.397221][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.397238][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.397262][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.464379][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.464399][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.464430][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.536923][ T5611] Bluetooth: hci6: command tx timeout [ 559.558717][ T9676] hsr_slave_0: entered promiscuous mode [ 559.562836][ T9676] hsr_slave_1: entered promiscuous mode [ 559.574274][ T9676] debugfs: 'hsr0' already exists in 'hsr' [ 559.574307][ T9676] Cannot create hsr debugfs directory [ 559.976929][ T5611] Bluetooth: hci4: command tx timeout [ 560.977399][ T5611] Bluetooth: hci6: command tx timeout [ 562.019912][ T9891] loop2: detected capacity change from 0 to 512 [ 562.130345][ T9891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.130528][ T9891] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.253710][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.171968][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.172100][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.147315][ T3339] bridge_slave_1: left allmulticast mode [ 565.147364][ T3339] bridge_slave_1: left promiscuous mode [ 565.147678][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.331597][ T3339] bridge_slave_0: left allmulticast mode [ 565.331636][ T3339] bridge_slave_0: left promiscuous mode [ 565.331924][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.742118][ T3339] veth3: left allmulticast mode [ 565.742157][ T3339] veth3: left promiscuous mode [ 565.742441][ T3339] bridge1: port 1(veth3) entered disabled state [ 565.872496][ T9931] loop2: detected capacity change from 0 to 16 [ 565.883280][ T9931] erofs (device loop2): invalid ishare xattr prefix id 0 [ 566.171068][ T9934] loop2: detected capacity change from 0 to 1024 [ 566.185793][ T9934] EXT4-fs: Ignoring removed bh option [ 566.282307][ T9934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.454711][ T38] audit: type=1800 audit(1780247183.095:42): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.948" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 566.732668][ T9939] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 567.315671][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.737513][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.777060][ T3339] bond_slave_0: left promiscuous mode [ 567.807551][ T823] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 567.820662][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.857605][ T3339] bond_slave_1: left promiscuous mode [ 567.865259][ T3339] bond0 (unregistering): Released all slaves [ 567.956736][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 567.963117][ T823] usb 3-1: config index 0 descriptor too short (expected 134, got 36) [ 567.963179][ T823] usb 3-1: config 1 interface 0 has no altsetting 0 [ 568.927802][ T823] usb 3-1: string descriptor 0 read error: -22 [ 568.928641][ T823] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.40 [ 568.928672][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.036099][ T9958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 569.420088][ T823] apple 0003:05AC:0219.0004: unknown main item tag 0x3 [ 569.420127][ T823] apple 0003:05AC:0219.0004: invalid report_size 2133616522 [ 569.420147][ T823] apple 0003:05AC:0219.0004: item 0 4 1 7 parsing failed [ 569.420929][ T823] apple 0003:05AC:0219.0004: parse failed [ 569.421041][ T823] apple 0003:05AC:0219.0004: probe with driver apple failed with error -22 [ 569.628719][ T823] usb 3-1: USB disconnect, device number 19 [ 569.814031][ T9779] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.814427][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.814739][ T9779] bridge_slave_0: entered allmulticast mode [ 569.849430][ T9779] bridge_slave_0: entered promiscuous mode [ 569.948533][ T9779] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.948804][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.949078][ T9779] bridge_slave_1: entered allmulticast mode [ 569.954460][ T9779] bridge_slave_1: entered promiscuous mode [ 573.161302][ T9983] loop2: detected capacity change from 0 to 512 [ 573.345005][ T9983] EXT4-fs (loop2): 1 truncate cleaned up [ 573.349931][ T9983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.455228][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.800297][ T9779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.288404][ T9779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.518776][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.519204][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.519588][ T9796] bridge_slave_0: entered allmulticast mode [ 574.546342][ T9796] bridge_slave_0: entered promiscuous mode [ 576.883834][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.885744][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.886266][ T9796] bridge_slave_1: entered allmulticast mode [ 576.945281][ T9796] bridge_slave_1: entered promiscuous mode [ 576.987878][ T9779] team0: Port device team_slave_0 added [ 577.242089][ T9779] team0: Port device team_slave_1 added [ 577.332378][ T5611] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 577.544066][T10024] loop2: detected capacity change from 0 to 512 [ 577.567206][T10024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 577.762224][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.883709][T10024] EXT4-fs (loop2): 1 truncate cleaned up [ 577.895718][T10024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.052621][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.146738][ T3339] hsr_slave_0: left promiscuous mode [ 578.186829][ T3339] hsr_slave_1: left promiscuous mode [ 578.188162][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.188191][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.229056][T10039] 9p: Bad value for 'rfdno' [ 578.241472][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.241501][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.631789][ T3339] veth1_macvtap: left promiscuous mode [ 578.632114][ T3339] veth0_macvtap: left promiscuous mode [ 578.692162][ T3339] veth1_vlan: left promiscuous mode [ 578.692386][ T3339] veth0_vlan: left promiscuous mode [ 580.545949][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 581.762228][T10061] futex_wake_op: syz.3.973 tries to shift op by -1; fix this program [ 581.790084][ T5611] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 581.790297][ T5611] Bluetooth: hci1: Injecting HCI hardware error event [ 581.794689][ T5611] Bluetooth: hci1: hardware error 0x00 [ 582.056649][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 582.114939][ T10] usb 3-1: device descriptor read/all, error -71 [ 582.423934][T10073] No source specified [ 584.056888][ T5611] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 585.787237][T10102] fuse: Bad value for 'fd' [ 585.846576][T10106] netlink: 68 bytes leftover after parsing attributes in process `syz.2.980'. [ 585.846609][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 587.584445][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.597508][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.597535][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.597567][ T9779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.758218][T10115] loop2: detected capacity change from 0 to 128 [ 587.759051][T10115] udf: Unknown parameter '' [ 588.492691][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.492710][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.492742][ T9779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.680385][ T9676] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.823348][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.850645][ T9796] team0: Port device team_slave_0 added [ 589.048218][ T9676] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 589.112820][ T5611] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 589.126131][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.146106][ T9796] team0: Port device team_slave_1 added [ 589.208298][ T9676] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 589.253923][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.449470][ T9676] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 589.699341][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.771338][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.771358][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.771391][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.222357][ T9779] hsr_slave_0: entered promiscuous mode [ 591.224857][ T9779] hsr_slave_1: entered promiscuous mode [ 591.226931][ T9779] debugfs: 'hsr0' already exists in 'hsr' [ 591.226957][ T9779] Cannot create hsr debugfs directory [ 591.299153][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.299173][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.299205][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.509962][ T9796] hsr_slave_0: entered promiscuous mode [ 592.523063][ T9796] hsr_slave_1: entered promiscuous mode [ 592.533534][ T9796] debugfs: 'hsr0' already exists in 'hsr' [ 592.533563][ T9796] Cannot create hsr debugfs directory [ 592.555079][T10184] loop2: detected capacity change from 0 to 512 [ 592.830658][T10184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.830822][T10184] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 593.021241][ T3339] IPVS: stop unused estimator thread 0... [ 593.273259][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.579367][T10192] loop2: detected capacity change from 0 to 512 [ 593.687039][T10192] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 593.687074][T10192] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 593.687093][T10192] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1000: Corrupt directory, running e2fsck is recommended [ 593.758188][T10192] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 593.785417][T10192] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1000: corrupted in-inode xattr: e_name out of bounds [ 593.785460][T10192] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 593.786647][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 593.786671][ C0] EXT4-fs (loop2): initial error at time 1780247210: ext4_iget_extra_inode:5128: inode 15 [ 593.786704][ C0] EXT4-fs (loop2): last error at time 1780247210: ext4_iget_extra_inode:5128: inode 15 [ 593.883457][T10192] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1000: couldn't read orphan inode 15 (err -117) [ 593.883506][T10192] loop2: lost filesystem error report for type 5 error -117 [ 593.910248][T10192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.913605][T10192] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 593.913638][T10192] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 593.913660][T10192] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1000: Corrupt directory, running e2fsck is recommended [ 593.979650][T10192] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 593.979690][T10192] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 593.979711][T10192] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1000: Corrupt directory, running e2fsck is recommended [ 594.048652][T10199] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 594.048690][T10199] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 594.048711][T10199] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1000: Corrupt directory, running e2fsck is recommended [ 594.155425][T10201] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 594.438583][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.094969][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 596.156788][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 596.160714][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 596.162497][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 596.183769][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.636134][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 597.879626][T10254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1013'. [ 598.367360][ T5623] Bluetooth: hci2: command tx timeout [ 600.339770][ T9779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 600.791317][ T5623] Bluetooth: hci2: command tx timeout [ 602.858609][ T5623] Bluetooth: hci2: command tx timeout [ 602.859834][ T9779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.033255][ T9779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 603.197080][ T9779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 603.243227][ T9779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 603.392662][ T9779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 603.486871][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 603.584805][ T9779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 603.623690][ T9779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.964968][ T5623] Bluetooth: hci2: command tx timeout [ 605.206874][ T3339] bridge_slave_1: left allmulticast mode [ 605.206904][ T3339] bridge_slave_1: left promiscuous mode [ 605.207200][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.348059][ T3339] bridge_slave_0: left allmulticast mode [ 605.348100][ T3339] bridge_slave_0: left promiscuous mode [ 605.348417][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.586789][ T3339] bridge_slave_1: left allmulticast mode [ 605.586819][ T3339] bridge_slave_1: left promiscuous mode [ 605.587025][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.788636][ T3339] bridge_slave_0: left allmulticast mode [ 605.788667][ T3339] bridge_slave_0: left promiscuous mode [ 605.788865][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.248895][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.327887][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.389013][ T3339] bond0 (unregistering): Released all slaves [ 606.668650][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.768222][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.829396][ T3339] bond0 (unregistering): Released all slaves [ 606.979091][T10334] fuse: fd is not a fuse device [ 608.186713][ T3339] hsr_slave_0: left promiscuous mode [ 608.227893][ T3339] hsr_slave_1: left promiscuous mode [ 608.228928][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.289049][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.306813][ T3339] hsr_slave_0: left promiscuous mode [ 610.346911][ T3339] hsr_slave_1: left promiscuous mode [ 610.347961][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.369382][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.396906][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 610.549494][ T9] usb 3-1: device descriptor read/64, error -71 [ 610.747472][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 610.797643][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 611.039529][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 611.234206][ T9] usb 3-1: device descriptor read/64, error -71 [ 611.348191][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 611.457960][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 611.681864][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.719833][ T9] usb usb3-port1: attempt power cycle [ 611.802789][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.806741][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.808184][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.809693][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 612.578042][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.578460][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.578796][T10218] bridge_slave_0: entered allmulticast mode [ 612.582701][T10218] bridge_slave_0: entered promiscuous mode [ 612.874959][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.875298][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.875659][T10218] bridge_slave_1: entered allmulticast mode [ 612.961918][T10218] bridge_slave_1: entered promiscuous mode [ 613.064373][T10371] loop2: detected capacity change from 0 to 256 [ 613.200108][T10218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.238598][T10218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.413299][T10371] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 613.654621][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.712451][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 614.971774][ T5623] Bluetooth: hci0: command tx timeout [ 614.972298][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 615.202709][ T8784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 615.225034][ T8784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 615.959057][T10391] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5613] was attempted by ""[10391] [ 616.513821][T10218] team0: Port device team_slave_0 added [ 616.548135][T10218] team0: Port device team_slave_1 added [ 616.994585][T10399] loop2: detected capacity change from 0 to 128 [ 617.007478][ T8784] Bluetooth: hci0: command tx timeout [ 617.631472][ T8784] Bluetooth: hci4: command tx timeout [ 618.357829][T10218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.357849][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.357881][T10218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.396131][T10218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.396183][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.396267][T10218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.772311][ T38] audit: type=1800 audit(1780247235.385:43): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1046" name="bus" dev="loop2" ino=1048622 res=0 errno=0 [ 619.096740][ T8784] Bluetooth: hci0: command tx timeout [ 619.461644][T10416] loop2: detected capacity change from 0 to 512 [ 619.530810][T10218] hsr_slave_0: entered promiscuous mode [ 619.534035][T10218] hsr_slave_1: entered promiscuous mode [ 619.633056][T10416] EXT4-fs (loop2): orphan cleanup on readonly fs [ 619.633154][T10416] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.1047: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 619.633200][T10416] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 619.636596][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 619.636620][ C1] EXT4-fs (loop2): last error at time 1780247236: ext4_ext_check_inode:521: inode 4 [ 619.756605][ T8784] Bluetooth: hci4: command tx timeout [ 619.782601][T10416] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.1047: Bad quota inode: 4, type: 1 [ 619.782634][T10416] loop2: lost filesystem error report for type 5 error -117 [ 619.792789][T10416] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 619.949507][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 619.974342][T10416] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 619.987720][T10416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 620.163080][T10416] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 620.261728][T10416] EXT4-fs warning (device loop2): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 620.261728][T10416] [ 620.462406][T10421] ================================================================== [ 620.462425][T10421] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 620.462457][T10421] Read of size 8 at addr ffff8880257bf680 by task syz.3.1045/10421 [ 620.462477][T10421] [ 620.462497][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.3.1045 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 620.462524][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.462544][T10421] Call Trace: [ 620.462557][T10421] [ 620.462567][T10421] dump_stack_lvl+0xe8/0x150 [ 620.462601][T10421] print_address_description+0x55/0x1e0 [ 620.462634][T10421] ? reverse_path_check_proc+0x5b/0x240 [ 620.462656][T10421] print_report+0x58/0x70 [ 620.462685][T10421] kasan_report+0x117/0x150 [ 620.462717][T10421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 620.462760][T10421] ? reverse_path_check_proc+0x5b/0x240 [ 620.462786][T10421] ? ep_insert+0xbbb/0x1820 [ 620.462821][T10421] reverse_path_check_proc+0x5b/0x240 [ 620.462847][T10421] ? ep_insert+0xbbb/0x1820 [ 620.462881][T10421] ep_insert+0xc6c/0x1820 [ 620.462924][T10421] ? __pfx_ep_insert+0x10/0x10 [ 620.462963][T10421] ? lockdep_hardirqs_on+0x7a/0x110 [ 620.462986][T10421] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 620.463024][T10421] ? mutex_lock_nested+0x152/0x1d0 [ 620.463053][T10421] ? do_epoll_ctl_file+0xc69/0xed0 [ 620.463089][T10421] do_epoll_ctl_file+0x8bb/0xed0 [ 620.463126][T10421] ? do_epoll_ctl_file+0xac3/0xed0 [ 620.463163][T10421] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 620.463201][T10421] ? __fget_files+0x3a6/0x420 [ 620.463231][T10421] ? __fget_files+0x2a/0x420 [ 620.463266][T10421] __se_sys_epoll_ctl+0x14e/0x210 [ 620.463303][T10421] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 620.463353][T10421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.463378][T10421] do_syscall_64+0x174/0x580 [ 620.463401][T10421] ? trace_irq_disable+0x3b/0x140 [ 620.463431][T10421] ? clear_bhb_loop+0x40/0x90 [ 620.463458][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.463483][T10421] RIP: 0033:0x7f96cd4bce59 [ 620.463503][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.463525][T10421] RSP: 002b:00007f96cb6cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 620.463548][T10421] RAX: ffffffffffffffda RBX: 00007f96cd736180 RCX: 00007f96cd4bce59 [ 620.463565][T10421] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 620.463579][T10421] RBP: 00007f96cd552d6f R08: 0000000000000000 R09: 0000000000000000 [ 620.463591][T10421] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 620.463604][T10421] R13: 00007f96cd736218 R14: 00007f96cd736180 R15: 00007ffd086b7ca8 [ 620.463625][T10421] [ 620.463632][T10421] [ 620.463637][T10421] Allocated by task 10420: [ 620.463646][T10421] kasan_save_track+0x3e/0x80 [ 620.463668][T10421] __kasan_slab_alloc+0x6c/0x80 [ 620.463690][T10421] kmem_cache_alloc_noprof+0x33b/0x680 [ 620.463713][T10421] ep_insert+0x512/0x1820 [ 620.463737][T10421] do_epoll_ctl_file+0x8bb/0xed0 [ 620.463762][T10421] __se_sys_epoll_ctl+0x14e/0x210 [ 620.463790][T10421] do_syscall_64+0x174/0x580 [ 620.463808][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.463827][T10421] [ 620.463833][T10421] Freed by task 10420: [ 620.463842][T10421] kasan_save_track+0x3e/0x80 [ 620.463865][T10421] kasan_save_free_info+0x46/0x50 [ 620.463882][T10421] __kasan_slab_free+0x5c/0x80 [ 620.463904][T10421] kmem_cache_free+0x187/0x6c0 [ 620.463929][T10421] eventpoll_release_file+0xc2/0x240 [ 620.463954][T10421] __fput+0x83c/0xa70 [ 620.463977][T10421] task_work_run+0x1d9/0x270 [ 620.464001][T10421] exit_to_user_mode_loop+0x193/0x680 [ 620.464025][T10421] do_syscall_64+0x353/0x580 [ 620.464041][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.464059][T10421] [ 620.464064][T10421] The buggy address belongs to the object at ffff8880257bf680 [ 620.464064][T10421] which belongs to the cache ep_head of size 16 [ 620.464083][T10421] The buggy address is located 0 bytes inside of [ 620.464083][T10421] freed 16-byte region [ffff8880257bf680, ffff8880257bf690) [ 620.464105][T10421] [ 620.464111][T10421] The buggy address belongs to the physical page: [ 620.464136][T10421] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880257bfde0 pfn:0x257bf [ 620.464157][T10421] memcg:ffff88802877e801 [ 620.464167][T10421] flags: 0x80000000000200(workingset|node=0|zone=1) [ 620.464189][T10421] page_type: f5(slab) [ 620.464209][T10421] raw: 0080000000000200 ffff888140e96dc0 ffffea0000dbc850 ffffea0000db1b50 [ 620.464228][T10421] raw: ffff8880257bfde0 0000000800800036 00000000f5000000 ffff88802877e801 [ 620.464238][T10421] page dumped because: kasan: bad access detected [ 620.464254][T10421] page_owner tracks the page as allocated [ 620.464261][T10421] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4981, tgid 4981 (udevd), ts 52342957938, free_ts 52200152515 [ 620.464299][T10421] post_alloc_hook+0x1f9/0x250 [ 620.464324][T10421] get_page_from_freelist+0x265c/0x26e0 [ 620.464364][T10421] __alloc_frozen_pages_noprof+0x18d/0x380 [ 620.464394][T10421] allocate_slab+0x74/0x5e0 [ 620.464412][T10421] refill_objects+0x33c/0x3d0 [ 620.464429][T10421] __pcs_replace_empty_main+0x373/0x720 [ 620.464449][T10421] kmem_cache_alloc_noprof+0x433/0x680 [ 620.464473][T10421] ep_insert+0x512/0x1820 [ 620.464500][T10421] do_epoll_ctl_file+0x8bb/0xed0 [ 620.464528][T10421] __se_sys_epoll_ctl+0x14e/0x210 [ 620.464557][T10421] do_syscall_64+0x174/0x580 [ 620.464576][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.464597][T10421] page last free pid 4980 tgid 4980 stack trace: [ 620.464624][T10421] __free_frozen_pages+0x10af/0x1190 [ 620.464652][T10421] __slab_free+0x252/0x2a0 [ 620.464679][T10421] qlist_free_all+0x99/0x100 [ 620.464702][T10421] kasan_quarantine_reduce+0x148/0x160 [ 620.464723][T10421] __kasan_slab_alloc+0x22/0x80 [ 620.464747][T10421] __kmalloc_noprof+0x399/0x7b0 [ 620.464781][T10421] tomoyo_realpath_from_path+0xe3/0x5d0 [ 620.464807][T10421] tomoyo_path_perm+0x283/0x560 [ 620.464828][T10421] security_inode_getattr+0x12b/0x310 [ 620.464858][T10421] __x64_sys_newfstat+0x13b/0x270 [ 620.464881][T10421] do_syscall_64+0x174/0x580 [ 620.464898][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.464917][T10421] [ 620.464922][T10421] Memory state around the buggy address: [ 620.464934][T10421] ffff8880257bf580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 620.464948][T10421] ffff8880257bf600: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 620.464962][T10421] >ffff8880257bf680: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 620.464974][T10421] ^ [ 620.464986][T10421] ffff8880257bf700: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 620.465001][T10421] ffff8880257bf780: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 620.465013][T10421] ================================================================== [ 620.465036][T10421] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 620.465057][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.3.1045 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 620.465082][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.465095][T10421] Call Trace: [ 620.465103][T10421] [ 620.465111][T10421] vpanic+0x56c/0xa60 [ 620.465144][T10421] ? __pfx_vpanic+0x10/0x10 [ 620.465179][T10421] panic+0xc5/0xd0 [ 620.465209][T10421] ? __pfx_panic+0x10/0x10 [ 620.465242][T10421] ? reverse_path_check_proc+0x5b/0x240 [ 620.465266][T10421] ? rcu_is_watching+0x15/0xb0 [ 620.465306][T10421] ? reverse_path_check_proc+0x5b/0x240 [ 620.465339][T10421] check_panic_on_warn+0x89/0xb0 [ 620.465372][T10421] ? reverse_path_check_proc+0x5b/0x240 [ 620.465395][T10421] end_report+0x73/0x170 [ 620.465433][T10421] ? reverse_path_check_proc+0x5b/0x240 [ 620.465456][T10421] kasan_report+0x128/0x150 [ 620.465486][T10421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 620.465527][T10421] ? reverse_path_check_proc+0x5b/0x240 [ 620.465555][T10421] ? ep_insert+0xbbb/0x1820 [ 620.465588][T10421] reverse_path_check_proc+0x5b/0x240 [ 620.465616][T10421] ? ep_insert+0xbbb/0x1820 [ 620.465651][T10421] ep_insert+0xc6c/0x1820 [ 620.465693][T10421] ? __pfx_ep_insert+0x10/0x10 [ 620.465733][T10421] ? lockdep_hardirqs_on+0x7a/0x110 [ 620.465756][T10421] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 620.465795][T10421] ? mutex_lock_nested+0x152/0x1d0 [ 620.465824][T10421] ? do_epoll_ctl_file+0xc69/0xed0 [ 620.465861][T10421] do_epoll_ctl_file+0x8bb/0xed0 [ 620.465898][T10421] ? do_epoll_ctl_file+0xac3/0xed0 [ 620.465936][T10421] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 620.465972][T10421] ? __fget_files+0x3a6/0x420 [ 620.466000][T10421] ? __fget_files+0x2a/0x420 [ 620.466036][T10421] __se_sys_epoll_ctl+0x14e/0x210 [ 620.466074][T10421] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 620.466115][T10421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.466139][T10421] do_syscall_64+0x174/0x580 [ 620.466161][T10421] ? trace_irq_disable+0x3b/0x140 [ 620.466191][T10421] ? clear_bhb_loop+0x40/0x90 [ 620.466218][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.466242][T10421] RIP: 0033:0x7f96cd4bce59 [ 620.466261][T10421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.466282][T10421] RSP: 002b:00007f96cb6cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 620.466308][T10421] RAX: ffffffffffffffda RBX: 00007f96cd736180 RCX: 00007f96cd4bce59 [ 620.466335][T10421] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 620.466350][T10421] RBP: 00007f96cd552d6f R08: 0000000000000000 R09: 0000000000000000 [ 620.466366][T10421] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 620.466382][T10421] R13: 00007f96cd736218 R14: 00007f96cd736180 R15: 00007ffd086b7ca8 [ 620.466409][T10421] [ 620.467039][T10421] Kernel Offset: disabled