last executing test programs: 7m23.133459029s ago: executing program 2 (id=66): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fspick(0xffffffffffffff9c, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f00000000c0)=':.,\x0e-\x00', 0x4000, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x2]}, {0x6, 0x1, 0x5, 0x6}}, 0x8001, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x1000}, 0x1, &(0x7f0000000340)=[{0x0, 0x63244cc6, 0x0, &(0x7f00000017c0)="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", 0x1000, 0x22}]}) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800440000000026080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) pwritev2(r4, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 7m17.328919948s ago: executing program 2 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty, 0x4}, 0x1c) listen(r2, 0x4) accept(r2, 0xfffffffffffffffc, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x4001fe, @empty, 0x8000b}, 0x1c) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x2, 0x6}, {0x0, 0x10}, {}, @raw32}], 0x1c) close_range(r6, 0xffffffffffffffff, 0x0) 7m15.589928699s ago: executing program 2 (id=74): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r1, 0x0, 0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xa) keyctl$session_to_parent(0x12) 7m7.523483939s ago: executing program 2 (id=82): r0 = socket(0x8000000010, 0x2, 0x0) r1 = getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB]) r5 = getpid() statfs(&(0x7f00000000c0)='./file0\x00', 0x0) syz_pidfd_open(r5, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 7m5.391239423s ago: executing program 2 (id=83): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fspick(0xffffffffffffff9c, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f00000000c0)=':.,\x0e-\x00', 0x4000, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x2]}, {0x6, 0x1, 0x5, 0x6}}, 0x8001, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x1000}, 0x1, &(0x7f0000000340)=[{0x0, 0x63244cc6, 0x0, &(0x7f00000017c0)="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", 0x1000, 0x22}]}) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800440000000026080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) pwritev2(r4, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 6m58.953453189s ago: executing program 2 (id=97): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc880) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000", 0x19) 6m42.816433589s ago: executing program 32 (id=97): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc880) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000", 0x19) 5m48.887174893s ago: executing program 3 (id=195): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dt2815\x00', [0x2f00, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0xfffffffe, 0x20000004, 0x6, 0xffd, 0x9, 0x200001, 0x1001, 0x8004, 0x3, 0xfffc, 0x5, 0x8, 0x40000006, 0x3, 0xc, 0x208, 0x5, 0x800800, 0xeadb, 0x2, 0x1, 0xffff, 0x81, 0x7, 0xd6d, 0x70f]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70200000300000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000000e4ff00000000000000000000000039017a4780c97065ad"], 0x45}, 0x1, 0x0, 0x0, 0x40}, 0x40408d4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x18000, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)={0x9}) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000200)) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000200)=0xdc) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000009ec0)) 5m47.607345498s ago: executing program 3 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 5m47.309708465s ago: executing program 3 (id=199): r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$apparmor_thread_exec(0xffffff9c, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040), &(0x7f0000000480)=ANY=[], 0xa, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f0000000280)=ANY=[@ANYBLOB="048c0d9c8b7c7b646154d8582684cd0c0000003644"], 0x2, 0x2) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000880)="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", 0x1c5}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x65, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r4) sendmsg$nl_route(r0, 0x0, 0x5347ab71b5a3dc66) socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) 5m45.405004936s ago: executing program 3 (id=200): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x20040054) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x44054) 5m45.089298784s ago: executing program 3 (id=202): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x5a8, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) io_uring_setup(0x669, 0x0) listen(0xffffffffffffffff, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xb8f9, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x7fffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$loop(0x0, 0x7, 0x80800) 5m43.405616402s ago: executing program 3 (id=206): syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0xffff, 0x3) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) unlink(&(0x7f0000000140)='./file1\x00') r7 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 5m27.428538224s ago: executing program 33 (id=206): syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0xffff, 0x3) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) unlink(&(0x7f0000000140)='./file1\x00') r7 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 4m7.021946151s ago: executing program 4 (id=345): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000540)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}, {@threads_num}]}, 0x1, 0x1b4, &(0x7f0000000280)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x480, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f00000005c0)={0xbe, 0x0, 0x1}) r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000280)) semget$private(0x0, 0x2, 0x201) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0xffff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) 4m3.041821424s ago: executing program 4 (id=348): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m2.58585819s ago: executing program 4 (id=352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0xffff, 0x4) 4m2.269573478s ago: executing program 4 (id=353): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 4m2.026705143s ago: executing program 4 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4m1.085527717s ago: executing program 4 (id=358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000540)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}, {@threads_num}]}, 0x1, 0x1b4, &(0x7f0000000280)="$eJzKKC4sZmdgYPj7sSaZQYCBgZEBhHkYHjAwMrAwMDBIgwQYGBg+QukFUPomlG6EUAyiUH4OlJ4EpStuaa9bc8rvzElPXa1lsotn8JX1GLlJLu5ZeMyhgNHE+YvIJIaKW8lJFadPMLBct7+m0izpocDaMXPCk5kXnyyJkJCYIfnv8NPGGDYBd9mOr95F3F+6tVeXGBcLXw6+HPy5p6fnLI8PD49P75fLRsVBvAoqypM++gQsdtyiJrCZ2VB9ko32pK8xGX6tlnv7WJ2UXyczX+IMqORNDalV2P2PmZFZqNfgM8MdnrIVEhocThJXJCwaTBhythnMcQW5KaWBIU0hjCFJjU2sbcuZOSHM7GxuCxRakk8whR7lWDpTwuKAUNXJn5aaXx0S3WZs++nAdobn8GueNQV9gkbHJRgsIwVP8zFU3PJOaGBw1eBlYJdgaIqBhokMyPiEhoYqjbUMS2UXfKnRqJX18jZ2ymBwsmcqKoGqYmkAkbOgPFmwnoTkFR46mppGKckJDZskEpLcCgyVGbbu4Vwt0ACNBwYmBgYGFQYGhhVQjVCK4TiUAQgAAP//NFaMqQ==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x480, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f00000005c0)={0xbe, 0x0, 0x1}) r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000280)) semget$private(0x0, 0x2, 0x201) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 4m0.123286243s ago: executing program 34 (id=358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000540)={[{@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_str={'threads', 0x3d, 'percpu'}}, {@threads_num={'threads', 0x3d, 0x931d}}, {@threads_num}]}, 0x1, 0x1b4, &(0x7f0000000280)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x480, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f00000005c0)={0xbe, 0x0, 0x1}) r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000280)) semget$private(0x0, 0x2, 0x201) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 2m24.299058009s ago: executing program 7 (id=511): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa, 0x0, 0xa6}, [@typed={0x4}]}, 0x18}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 2m22.676914724s ago: executing program 7 (id=513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0xc, 0x3c, 0x0, @private0, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 2m22.377674261s ago: executing program 7 (id=514): r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000b80)={0x3}, 0x8, 0x0) 2m20.136299261s ago: executing program 7 (id=516): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 2m18.394435223s ago: executing program 7 (id=519): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0xf, 0x99, 0xee, 0x6}, {0xb, 0x28, 0x5, 0xc}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000000700)={0x0, 0xddbd, 0x1, 0xffffffff, 0x156}, &(0x7f0000000540), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, 0x0, 0x0) rename(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(0x0, 0x8, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m17.685346195s ago: executing program 7 (id=522): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r7, 0x0, 0xb8f9, 0x0) splice(r6, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x0) write(r3, &(0x7f0000000040), 0xffffff4a) 2m17.042982402s ago: executing program 35 (id=522): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r7, 0x0, 0xb8f9, 0x0) splice(r6, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x0) write(r3, &(0x7f0000000040), 0xffffff4a) 1m7.330177855s ago: executing program 8 (id=622): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m5.086065116s ago: executing program 8 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x28008004) 1m4.68555888s ago: executing program 8 (id=626): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m3.964837562s ago: executing program 8 (id=628): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(anubis)\x00'}, 0x58) r3 = socket(0x25, 0x5, 0x0) r4 = syz_io_uring_setup(0xae1, &(0x7f0000000d40)={0x0, 0x1484, 0x800, 0x0, 0xe4}, &(0x7f0000000d00)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m1.107248739s ago: executing program 8 (id=633): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 59.330173872s ago: executing program 8 (id=635): syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf2504000000140001800f0001006574683a6e6963766630d2"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) 44.505039316s ago: executing program 36 (id=635): syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf2504000000140001800f0001006574683a6e6963766630d2"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) 23.215170377s ago: executing program 5 (id=691): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = io_uring_setup(0x6f04, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x2, 0x11a}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) eventfd2(0x0, 0x0) chroot(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 20.665504596s ago: executing program 1 (id=696): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000002100)=""/4089, &(0x7f0000000040)=0xfffffe25) gettid() 20.459676618s ago: executing program 1 (id=697): socket$inet6(0xa, 0x3, 0x5) fanotify_init(0x1, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) 19.310350945s ago: executing program 1 (id=698): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/214, 0xd6}], 0x1, 0x49, 0x0) 17.212086917s ago: executing program 6 (id=699): write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000019340)={0x7, 0x15, 0x2}, 0x7) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x13c0, 0x0, 0x94, 0x1204, 0x1170, 0x0, 0x132c, 0x132c, 0x132c, 0x132c, 0x132c, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@remote, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x10a0, 0x10dc, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x4, {0x5}}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xffff0001, 0x751, @ipv4=@local, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x141c) r1 = fsopen(&(0x7f0000000200)='adfs\x00', 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x81, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0xbc99) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 16.506879498s ago: executing program 1 (id=700): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 16.347418367s ago: executing program 1 (id=701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x45) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 11.267576523s ago: executing program 5 (id=707): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setuid(0xee01) openat$hwrng(0xffffffffffffff9c, 0x0, 0xf0c0a85915640486, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 10.272363381s ago: executing program 5 (id=708): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.207431565s ago: executing program 6 (id=709): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x2007ffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/214, 0xd6}], 0x1, 0x49, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 9.853303476s ago: executing program 1 (id=710): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 9.836049027s ago: executing program 5 (id=711): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 8.542142832s ago: executing program 37 (id=710): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 8.524995793s ago: executing program 0 (id=713): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.524696434s ago: executing program 5 (id=714): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x1000}], 0xffffffffffffff26, 0x0, 0x0}) 8.481349356s ago: executing program 6 (id=715): socket$inet6(0xa, 0x3, 0x5) fanotify_init(0x1, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() fcntl$dupfd(0xffffffffffffffff, 0x408, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) bpf$MAP_CREATE_CONST_STR(0x1800000000000000, &(0x7f0000000500)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) listen(r4, 0x0) sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)="9c9a8c89b6b16549b7a0b99d14f6cf925aa382fdb43dde3156c4ed3613f705ebb83323c1d79326318cab2dd730bfdbe9d5d50292dd5fbca3", 0x38}], 0x2, &(0x7f0000000380)=[@tclass={{0x14, 0x29, 0x43, 0x7f}}], 0x18}, 0x4001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x10, 0x803, 0x8) 6.975899654s ago: executing program 5 (id=716): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = io_uring_setup(0x6f04, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x2, 0x11a}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) eventfd2(0x0, 0x0) chroot(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 5.652636471s ago: executing program 0 (id=717): write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000019340)={0x7, 0x15, 0x2}, 0x7) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x13c0, 0x0, 0x94, 0x1204, 0x1170, 0x0, 0x132c, 0x132c, 0x132c, 0x132c, 0x132c, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@remote, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x10a0, 0x10dc, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x4, {0x5}}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xffff0001, 0x751, @ipv4=@local, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x141c) r1 = fsopen(0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x81, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000001000001440005002001060000000000000000000000000000000002320000000a000000fc0100000000000000000000080000000000000004000000"], 0xf8}}, 0x0) syz_open_dev$audion(&(0x7f0000019300), 0x6, 0x2) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 5.584022345s ago: executing program 6 (id=718): write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000019340)={0x7, 0x15, 0x2}, 0x7) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x13c0, 0x0, 0x94, 0x1204, 0x1170, 0x0, 0x132c, 0x132c, 0x132c, 0x132c, 0x132c, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@remote, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x10a0, 0x10dc, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x4, {0x5}}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xffff0001, 0x751, @ipv4=@local, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x141c) r1 = fsopen(&(0x7f0000000200)='adfs\x00', 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x81, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0xbc99) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 4.489567629s ago: executing program 0 (id=719): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xf0c0a85915640486, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 3.988202408s ago: executing program 6 (id=720): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.869655645s ago: executing program 9 (id=658): bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) lseek(r0, 0x7, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 1.814555495s ago: executing program 0 (id=721): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.71358067s ago: executing program 6 (id=722): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002}) 1.413758548s ago: executing program 9 (id=723): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x2007ffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)=""/214, 0xd6}], 0x1, 0x49, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 1.201285581s ago: executing program 0 (id=724): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x1000}], 0xffffffffffffff26, 0x0, 0x0}) 0s ago: executing program 0 (id=725): socket$inet6(0xa, 0x3, 0x5) fanotify_init(0x1, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) kernel console output (not intermixed with test programs): 117.520557][ T75] hfsplus: b-tree write err: -5, ino 4 [ 117.539843][ T4356] usb 3-1: USB disconnect, device number 2 [ 119.443050][ T7] usb 2-1: USB disconnect, device number 2 [ 121.717560][ T4580] loop2: detected capacity change from 0 to 128 [ 122.071919][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.137432][ T4590] loop3: detected capacity change from 0 to 512 [ 122.282475][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 122.726770][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.772427][ T4590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.781552][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.792094][ T4590] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.847480][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.864880][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.902568][ T4590] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 122.962120][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.013685][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.092685][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 126.507194][ T4613] loop2: detected capacity change from 0 to 512 [ 127.506856][ T4616] loop1: detected capacity change from 0 to 512 [ 127.956667][ T22] usb 5-1: usb_control_msg returned -71 [ 127.982214][ T22] usbtmc 5-1:16.0: can't read capabilities [ 128.015587][ T22] usb 5-1: USB disconnect, device number 2 [ 128.028326][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.037704][ T4616] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.127974][ T4613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.145156][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 128.174313][ T4613] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.321992][ T4627] syz.2.66 (4627) used greatest stack depth: 20624 bytes left [ 129.882983][ T4634] loop4: detected capacity change from 0 to 128 [ 130.552698][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 134.118743][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.125547][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.515130][ T4648] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.721915][ T4648] usb 2-1: Using ep0 maxpacket: 8 [ 139.870478][ T4648] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.900850][ T4648] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.026296][ T4648] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.087287][ T4648] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.169373][ T4648] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.227085][ T4648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.487429][ T4648] usb 2-1: usb_control_msg returned -32 [ 140.497340][ T4648] usbtmc 2-1:16.0: can't read capabilities [ 140.720598][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.883264][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.892613][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.063494][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.073018][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.082134][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.091320][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.100398][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.383627][ T4697] netlink: 64 bytes leftover after parsing attributes in process `syz.0.76'. [ 141.712419][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.721795][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.731035][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.740201][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.749421][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 141.882383][ T4693] netlink: 'syz.2.82': attribute type 12 has an invalid length. [ 142.202264][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.211527][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.220660][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.464604][ T4339] usb 2-1: USB disconnect, device number 3 [ 144.077601][ T4711] loop2: detected capacity change from 0 to 512 [ 144.184529][ T4713] loop0: detected capacity change from 0 to 164 [ 144.326058][ T4713] rock: directory entry would overflow storage [ 144.358013][ T4713] rock: sig=0x66, size=4, remaining=3 [ 144.436971][ T4711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.537969][ T4713] rock: directory entry would overflow storage [ 144.544599][ T4713] rock: sig=0x66, size=4, remaining=3 [ 144.638937][ T4711] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.673098][ T4745] netlink: 64 bytes leftover after parsing attributes in process `syz.1.93'. [ 147.814547][ T4748] fuse: Invalid rootmode [ 147.818785][ T4332] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.013982][ T4332] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.036650][ T4332] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.070583][ T4332] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 148.125834][ T4332] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.150032][ T4332] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 148.176942][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.220369][ T4332] usb 5-1: config 0 descriptor?? [ 148.923936][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 149.058835][ T4332] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 149.249347][ T4332] usb 5-1: USB disconnect, device number 3 [ 149.284321][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 149.452721][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 149.623910][ T4753] fido_id[4753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 151.349098][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 151.592697][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 151.930911][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 152.049176][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 153.742841][ T4772] fuse: Bad value for 'rootmode' [ 153.835133][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 153.865338][ T4774] loop1: detected capacity change from 0 to 512 [ 153.982982][ T4774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.992492][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 154.013330][ T4774] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.050765][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 155.503905][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 155.782896][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 155.790252][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 156.127468][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 156.436209][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 156.551714][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 156.722390][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 156.842057][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 156.955659][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 157.003447][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 157.087253][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 157.125579][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 158.831352][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 160.402325][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 160.591309][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 160.637980][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 160.764886][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 161.814289][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 161.895500][ T4804] netlink: 64 bytes leftover after parsing attributes in process `syz.4.105'. [ 161.921857][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 161.950495][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 161.999237][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 162.089785][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 162.196015][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 162.268283][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 162.406198][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 162.525605][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 162.647443][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 162.752618][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 162.855338][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 162.959033][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 163.042613][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 163.049706][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 163.269370][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 163.460809][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 163.649795][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 165.363662][ T4826] syz.3.119 (4826): /proc/4825/oom_adj is deprecated, please use /proc/4825/oom_score_adj instead. [ 165.525515][ T4826] loop3: detected capacity change from 0 to 512 [ 165.628706][ T4826] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 165.694641][ T4826] EXT4-fs (loop3): failed to open journal device unknown-block(128,0) -6 [ 167.082238][ T4447] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 167.209070][ T4836] loop0: detected capacity change from 0 to 128 [ 167.501892][ T4447] usb 4-1: Using ep0 maxpacket: 32 [ 167.509335][ T4447] usb 4-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 167.601822][ T4447] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 167.611405][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.631409][ T4447] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.631498][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.651147][ T4447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.659308][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.667534][ T4447] usb 4-1: Product: syz [ 167.672224][ T4447] usb 4-1: Manufacturer: syz [ 167.677859][ T4447] usb 4-1: SerialNumber: syz [ 167.682601][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.691235][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.699978][ T4699] EXT4-fs: 37 callbacks suppressed [ 167.699989][ T4699] EXT4-fs (loop2): unmounting filesystem. [ 167.723593][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.930746][ T4447] usb 4-1: USB disconnect, device number 2 [ 168.050701][ T4837] chnl_net:caif_netlink_parms(): no params data found [ 171.052374][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 171.191131][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.292319][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.300693][ T4837] device bridge_slave_0 entered promiscuous mode [ 171.393705][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.400967][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.463036][ T4837] device bridge_slave_1 entered promiscuous mode [ 171.491013][ T4858] loop4: detected capacity change from 0 to 256 [ 171.577578][ T4837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.616861][ T4858] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 171.690706][ T4837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.798225][ T4837] team0: Port device team_slave_0 added [ 171.868081][ T4837] team0: Port device team_slave_1 added [ 172.016985][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.062404][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.134626][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 173.150267][ T4837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.163854][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.171065][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.197597][ T4837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.712830][ T4837] device hsr_slave_0 entered promiscuous mode [ 173.748507][ T4837] device hsr_slave_1 entered promiscuous mode [ 173.804249][ T4837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.821380][ T4837] Cannot create hsr debugfs directory [ 174.245583][ T4410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.482924][ T4410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.577765][ T4874] loop0: detected capacity change from 0 to 512 [ 176.349460][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 176.423266][ T4410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.483921][ T4874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.493060][ T4874] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.597743][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 176.697913][ T4410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.599054][ T4837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.696821][ T4837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.729283][ T4837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.891407][ T4837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.412737][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 179.015506][ T4837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.246197][ T4906] loop4: detected capacity change from 0 to 128 [ 179.642192][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.692275][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.738168][ T4837] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.747636][ T4911] loop0: detected capacity change from 0 to 1024 [ 179.925118][ T4911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.620492][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.650051][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.663642][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 181.722433][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.729618][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.822110][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.890829][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.928198][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.037192][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.044473][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.119142][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.520201][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.553012][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.583544][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.662690][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.703482][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.740960][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.785535][ T4936] loop4: detected capacity change from 0 to 256 [ 183.813189][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.852041][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.869891][ T4936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 183.892596][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.912947][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.963617][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.630009][ T4410] device hsr_slave_0 left promiscuous mode [ 185.659005][ T4410] device hsr_slave_1 left promiscuous mode [ 187.168260][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.211709][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.243401][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.250913][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.303072][ T4410] device bridge_slave_1 left promiscuous mode [ 187.310871][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.351029][ T4410] device bridge_slave_0 left promiscuous mode [ 187.372110][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.474330][ T4410] device veth1_macvtap left promiscuous mode [ 187.480965][ T4410] device veth0_macvtap left promiscuous mode [ 187.506464][ T4410] device veth1_vlan left promiscuous mode [ 187.527150][ T4410] device veth0_vlan left promiscuous mode [ 189.189201][ T4948] loop0: detected capacity change from 0 to 512 [ 189.292887][ T4948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.302067][ T4948] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.423669][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 190.547931][ T4960] loop3: detected capacity change from 0 to 128 [ 192.608149][ T4970] loop0: detected capacity change from 0 to 4096 [ 192.662007][ T4970] EXT4-fs (loop0): Test dummy encryption mode enabled [ 192.699392][ T4970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.928397][ T4410] team0 (unregistering): Port device team_slave_1 removed [ 192.987618][ T4410] team0 (unregistering): Port device team_slave_0 removed [ 193.074546][ T4410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.161649][ T4410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.377344][ T4970] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 193.522757][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 194.379995][ T4410] bond0 (unregistering): Released all slaves [ 194.429118][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435928][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.575664][ T4997] loop0: detected capacity change from 0 to 1024 [ 197.364390][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.379328][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.466468][ T4837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.783951][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 198.814765][ T5033] bridge: RTM_NEWNEIGH with invalid ether address [ 198.965829][ T4332] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.171999][ T4332] usb 4-1: Using ep0 maxpacket: 32 [ 199.179428][ T4332] usb 4-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 199.240608][ T4332] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 199.269616][ T4332] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 199.299327][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.352854][ T4332] usb 4-1: Product: syz [ 199.375179][ T4332] usb 4-1: Manufacturer: syz [ 199.391357][ T4332] usb 4-1: SerialNumber: syz [ 199.400106][ T5045] loop1: detected capacity change from 0 to 512 [ 199.514858][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 199.582067][ T5045] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.625731][ T4332] usb 4-1: USB disconnect, device number 3 [ 199.859863][ T5056] loop4: detected capacity change from 0 to 256 [ 199.901881][ T5056] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 200.168029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.379602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.321393][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.331120][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.346297][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.355386][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.398467][ T4837] device veth0_vlan entered promiscuous mode [ 201.590299][ T4837] device veth1_vlan entered promiscuous mode [ 201.620477][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 201.683550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.722763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.775330][ T4837] device veth0_macvtap entered promiscuous mode [ 201.844874][ T4837] device veth1_macvtap entered promiscuous mode [ 203.261658][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.371882][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.433173][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.450034][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.596922][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.675318][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.701877][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.734781][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.802494][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.839357][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.855813][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.892906][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.954307][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.005645][ T5088] mkiss: ax0: crc mode is auto. [ 204.027248][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.071940][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.119138][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.135457][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.166062][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.201279][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.221538][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.241849][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.300392][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.360145][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.420046][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.447840][ T4837] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.467106][ T4837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.497523][ T4837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.526090][ T4837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.868071][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.921099][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.978137][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.032793][ T4666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.051176][ T4666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.116414][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.035518][ T5113] netlink: 64 bytes leftover after parsing attributes in process `syz.5.117'. [ 207.482273][ T5118] loop0: detected capacity change from 0 to 512 [ 207.496868][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 207.502991][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 207.509037][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 207.599500][ T5118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 207.608651][ T5118] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.768743][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 209.455903][ T4332] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.682070][ T4332] usb 5-1: Using ep0 maxpacket: 32 [ 209.697538][ T4332] usb 5-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 209.775488][ T4332] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 209.824542][ T4332] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.883177][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.913597][ T4332] usb 5-1: Product: syz [ 209.936796][ T4332] usb 5-1: Manufacturer: syz [ 209.971936][ T4332] usb 5-1: SerialNumber: syz [ 210.220311][ T4332] usb 5-1: USB disconnect, device number 4 [ 212.630386][ T5149] mkiss: ax0: crc mode is auto. [ 213.015507][ T5152] loop0: detected capacity change from 0 to 1024 [ 213.212522][ T5152] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.566435][ T5166] overlayfs: missing 'lowerdir' [ 214.381060][ T5169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.187'. [ 215.073964][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 217.207521][ T5185] loop5: detected capacity change from 0 to 512 [ 218.119861][ T5185] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 218.128916][ T5185] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.258323][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 219.799657][ T5201] loop1: detected capacity change from 0 to 512 [ 219.920732][ T5201] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.183: inode has both inline data and extents flags [ 219.955403][ T5200] mkiss: ax0: crc mode is auto. [ 219.982183][ T5201] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.183: couldn't read orphan inode 15 (err -117) [ 220.019490][ T5201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.280800][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 220.392118][ T4645] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 220.594025][ T4645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 220.618290][ T4645] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 220.639712][ T4645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.688633][ T4645] usb 5-1: config 0 descriptor?? [ 220.742382][ T22] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 220.771683][ T5219] overlayfs: missing 'lowerdir' [ 220.787522][ T5207] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.978752][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 221.100918][ T22] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 221.267741][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.519617][ T22] usb 2-1: config 0 descriptor?? [ 221.660507][ T5214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.718819][ T4645] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 222.266009][ T4645] usb 5-1: USB disconnect, device number 5 [ 222.352371][ T22] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 222.458664][ T5222] fido_id[5222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 222.636823][ T4645] usb 2-1: USB disconnect, device number 4 [ 222.751562][ T5229] loop0: detected capacity change from 0 to 2048 [ 222.771025][ T5229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.784424][ T5226] fido_id[5226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 224.579184][ T5239] loop5: detected capacity change from 0 to 2368 [ 226.081346][ T5247] mkiss: ax0: crc mode is auto. [ 226.536443][ T5265] overlayfs: missing 'lowerdir' [ 229.917220][ T5259] loop5: detected capacity change from 0 to 128 [ 230.075333][ T5275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.213'. [ 231.137059][ T5283] can0: slcan on pty20. [ 236.835412][ T5299] loop3: detected capacity change from 0 to 256 [ 236.872361][ T5276] can0 (unregistered): slcan off pty20. [ 236.954090][ T5299] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 238.399105][ T5311] mkiss: ax0: crc mode is auto. [ 238.434563][ T5315] loop1: detected capacity change from 0 to 512 [ 238.859822][ T5315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.890302][ T5315] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.924668][ T5319] loop5: detected capacity change from 0 to 2048 [ 239.035502][ T5319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.614695][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 240.768709][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 240.938308][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 240.938672][ T27] audit: type=1400 audit(1770937843.605:26): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=5336 comm="syz.1.226" [ 241.025327][ T5341] overlayfs: missing 'lowerdir' [ 242.449409][ T5335] netlink: 56 bytes leftover after parsing attributes in process `syz.4.225'. [ 244.351616][ T5358] netlink: 'syz.0.231': attribute type 12 has an invalid length. [ 244.420523][ T5358] netlink: 'syz.0.231': attribute type 29 has an invalid length. [ 244.524160][ T5358] netlink: 148 bytes leftover after parsing attributes in process `syz.0.231'. [ 244.586321][ T5358] netlink: 59 bytes leftover after parsing attributes in process `syz.0.231'. [ 244.722670][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.731525][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.739380][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.748071][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.755862][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.794010][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.837328][ T1303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.253780][ T1303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.510285][ T1303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.728630][ T5367] loop0: detected capacity change from 0 to 4096 [ 245.731438][ T1303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.093396][ T5361] chnl_net:caif_netlink_parms(): no params data found [ 246.123164][ T5367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 246.420653][ T5367] fs-verity: sha256 using implementation "sha256-avx2" [ 246.812976][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 247.684505][ T5382] fs-verity (loop0, inode 16): Error -4 building Merkle tree [ 248.531543][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 248.762133][ T5399] loop5: detected capacity change from 0 to 16 [ 248.822438][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.832511][ T5399] erofs: (device loop5): mounted with root inode @ nid 36. [ 248.852992][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.893120][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 248.899458][ T5361] device bridge_slave_0 entered promiscuous mode [ 248.914011][ T5399] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 248.942594][ T5399] syz.5.238: attempt to access beyond end of device [ 248.942594][ T5399] loop5: rw=0, sector=16392, nr_sectors = 8 limit=16 [ 248.973494][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.982599][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.995670][ T5399] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 249.011980][ T5361] device bridge_slave_1 entered promiscuous mode [ 249.052271][ T5399] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 249.396330][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.437451][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.983246][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 251.160192][ T5361] team0: Port device team_slave_0 added [ 251.263418][ T5361] team0: Port device team_slave_1 added [ 251.328110][ T5415] loop4: detected capacity change from 0 to 256 [ 251.452214][ T5415] ======================================================= [ 251.452214][ T5415] WARNING: The mand mount option has been deprecated and [ 251.452214][ T5415] and is ignored by this kernel. Remove the mand [ 251.452214][ T5415] option from the mount to silence this warning. [ 251.452214][ T5415] ======================================================= [ 253.132038][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 253.282469][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.289534][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.511780][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.630406][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.641973][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.522146][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.936912][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.943659][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.935571][ T5361] device hsr_slave_0 entered promiscuous mode [ 257.964015][ T5361] device hsr_slave_1 entered promiscuous mode [ 258.023127][ T5444] netlink: 'syz.5.241': attribute type 12 has an invalid length. [ 258.030903][ T5444] netlink: 'syz.5.241': attribute type 29 has an invalid length. [ 258.099445][ T5444] netlink: 148 bytes leftover after parsing attributes in process `syz.5.241'. [ 258.112250][ T5444] netlink: 59 bytes leftover after parsing attributes in process `syz.5.241'. [ 258.803822][ T1303] device hsr_slave_0 left promiscuous mode [ 258.871445][ T1303] device hsr_slave_1 left promiscuous mode [ 258.883297][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.931887][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.960509][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.980661][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.196449][ T1303] device bridge_slave_1 left promiscuous mode [ 259.242777][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.519467][ T1303] device bridge_slave_0 left promiscuous mode [ 259.529971][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.725022][ T5468] fuse: Unknown parameter '0x0000000000000003' [ 259.738003][ T1303] device veth1_macvtap left promiscuous mode [ 259.746484][ T1303] device veth0_macvtap left promiscuous mode [ 259.765467][ T1303] device veth1_vlan left promiscuous mode [ 259.786483][ T1303] device veth0_vlan left promiscuous mode [ 265.773684][ T1303] team0 (unregistering): Port device team_slave_1 removed [ 265.952545][ T1303] team0 (unregistering): Port device team_slave_0 removed [ 266.923452][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.489463][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.389387][ T1303] bond0 (unregistering): Released all slaves [ 269.515792][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): rose4: link becomes ready [ 269.530977][ T5501] netlink: 'syz.0.261': attribute type 12 has an invalid length. [ 269.541974][ T5501] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 269.568938][ T5501] netlink: 148 bytes leftover after parsing attributes in process `syz.0.261'. [ 269.607945][ T5501] netlink: 59 bytes leftover after parsing attributes in process `syz.0.261'. [ 270.661957][ T4447] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.696734][ T5361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.716143][ T5361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.757346][ T5361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.820333][ T5361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.843613][ T4447] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 271.859684][ T4447] usb 6-1: config 0 has no interface number 0 [ 271.905164][ T4447] usb 6-1: config 0 interface 175 has no altsetting 0 [ 271.941923][ T4447] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 271.961965][ T4447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.000751][ T4447] usb 6-1: config 0 descriptor?? [ 272.030491][ T4447] cp210x 6-1:0.175: cp210x converter detected [ 273.630335][ T4447] cp210x 6-1:0.175: failed to get vendor val 0x370b size 1: -71 [ 273.643844][ T4447] cp210x 6-1:0.175: querying part number failed [ 273.669052][ T4447] usb 6-1: cp210x converter now attached to ttyUSB0 [ 273.677381][ T5533] loop4: detected capacity change from 0 to 2048 [ 273.711931][ T4447] usb 6-1: USB disconnect, device number 2 [ 273.749584][ T5533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.772878][ T4447] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 273.781295][ T4447] cp210x 6-1:0.175: device disconnected [ 275.060873][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.140081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.152395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.201818][ T27] audit: type=1800 audit(1770937877.865:27): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.268" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 275.239697][ T5361] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.262131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.270925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.341094][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.348294][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.433196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.474285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.510467][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.517692][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.607946][ T5549] squashfs: Unknown parameter 'threads' [ 275.667027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.696775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.877760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.537617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.610773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.668753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.742816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.778744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.808493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.828495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.930747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.949727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.091937][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 277.106127][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.357781][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 277.506275][ T7] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 277.544763][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.993408][ T7] usb 2-1: config 0 descriptor?? [ 279.012733][ T5559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 279.517100][ T7] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 279.689463][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): rose5: link becomes ready [ 279.978179][ T4419] usb 2-1: USB disconnect, device number 5 [ 281.383424][ T5581] fido_id[5581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 281.577694][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.587018][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.085965][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.610696][ T5632] binder: 5631:5632 ioctl 4018620d 0 returned -22 [ 286.656233][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.722444][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.838095][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.866979][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.935880][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.978677][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.064325][ T5637] kthread_run failed with err -4 [ 287.092923][ T5640] can0: slcan on pty30. [ 287.093800][ T5361] device veth0_vlan entered promiscuous mode [ 287.190350][ T5361] device veth1_vlan entered promiscuous mode [ 287.337110][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.354614][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.400169][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.578627][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.478138][ T5361] device veth0_macvtap entered promiscuous mode [ 288.524996][ T5361] device veth1_macvtap entered promiscuous mode [ 288.553038][ T5634] can0 (unregistered): slcan off pty30. [ 288.654450][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.710803][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.731123][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.797247][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.841753][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.870408][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.901750][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.191082][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.539571][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.589405][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.650611][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.151769][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.191760][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.222140][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.256867][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.287136][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.319044][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.357448][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.402610][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.469915][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.480915][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.505088][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.551491][ T5361] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.591075][ T5658] loop0: detected capacity change from 0 to 1024 [ 291.598652][ T5361] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.612714][ T5361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.621457][ T5361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.638795][ T5658] EXT4-fs: Ignoring removed bh option [ 291.644744][ T5658] EXT4-fs: inline encryption not supported [ 291.706622][ T5658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 291.887273][ T5658] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.292: lblock 2 mapped to illegal pblock 2 (length 1) [ 291.941007][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.972345][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.980019][ T5658] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 291.989361][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.015918][ T5658] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.292: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.077482][ T5658] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 292.102641][ T5658] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.292: Failed to acquire dquot type 0 [ 292.142100][ T5658] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 292.190578][ T5658] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.292: mark_inode_dirty error [ 292.276830][ T5658] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 292.333991][ T5658] EXT4-fs (loop0): 1 orphan inode deleted [ 292.340021][ T5658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 292.428160][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.448160][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.108886][ T5396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.125102][ T4551] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.165708][ T5396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.253754][ T4551] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 293.292225][ T4551] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 0 [ 293.301378][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.334365][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 293.340514][ T4276] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 293.410942][ T4276] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 293.461898][ T4276] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 295.080438][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 295.135119][ T5686] squashfs: Unknown parameter 'threads' [ 295.315682][ T5693] loop0: detected capacity change from 0 to 128 [ 296.081128][ T5699] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.291' resets device [ 296.391809][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.581742][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 296.589174][ T22] usb 2-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 296.649496][ T5705] can0: slcan on pty28. [ 296.703005][ T22] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 296.779026][ T22] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.861943][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.923536][ T22] usb 2-1: Product: syz [ 296.943845][ T22] usb 2-1: Manufacturer: syz [ 296.967850][ T22] usb 2-1: SerialNumber: syz [ 297.218605][ T22] usb 2-1: USB disconnect, device number 6 [ 297.322260][ T5701] can0 (unregistered): slcan off pty28. [ 298.823872][ T5731] fuse: Unknown parameter 'fd0x0000000000000003' [ 302.143642][ T5751] loop1: detected capacity change from 0 to 128 [ 302.753957][ T4290] Bluetooth: hci3: unexpected cc 0x203d length: 9 > 1 [ 303.231132][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 303.317992][ T5771] squashfs: Unknown parameter 'threads' [ 304.295729][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): rose6: link becomes ready [ 304.354322][ T5773] netlink: 56 bytes leftover after parsing attributes in process `syz.1.314'. [ 304.625252][ T5782] squashfs: Unknown parameter 'threads' [ 306.389604][ T5794] loop5: detected capacity change from 0 to 512 [ 306.627830][ T5794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 306.685932][ T5794] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.076138][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 308.301048][ T5805] loop5: detected capacity change from 0 to 1024 [ 308.431392][ T5805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 308.472632][ T5805] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.846945][ T5811] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: comm syz.5.322: lblock 0 mapped to illegal pblock 0 (length 4) [ 309.011934][ T5811] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 309.131251][ T5811] EXT4-fs (loop5): This should not happen!! Data will be lost [ 309.131251][ T5811] [ 309.393020][ T41] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 309.440532][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 56 with max blocks 4 with error 117 [ 309.454847][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 309.454847][ T41] [ 309.662068][ T5822] loop1: detected capacity change from 0 to 128 [ 309.980636][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 311.344923][ T5829] loop5: detected capacity change from 0 to 2048 [ 311.667995][ T5829] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 311.841448][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 312.400165][ T5842] squashfs: Unknown parameter 'threads' [ 312.704471][ T5848] loop4: detected capacity change from 0 to 512 [ 313.899024][ T5848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.320784][ T5848] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.514318][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 317.995359][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.001804][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.739484][ T5875] loop5: detected capacity change from 0 to 128 [ 318.794224][ T5875] EXT4-fs (loop5): Test dummy encryption mode enabled [ 318.846601][ T5875] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 318.886009][ T5875] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.476648][ T5875] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 319.654475][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 320.721794][ T4419] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 320.736606][ T5906] loop1: detected capacity change from 0 to 1024 [ 320.778046][ T5906] EXT4-fs: Ignoring removed orlov option [ 320.888585][ T5906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.931946][ T4419] usb 6-1: Using ep0 maxpacket: 8 [ 320.939563][ T4419] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.475965][ T4419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.522129][ T4419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.554098][ T5914] squashfs: Unknown parameter 'threads' [ 321.562061][ T4419] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.667151][ T4419] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.070775][ T4419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.098820][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 322.531060][ T5924] loop1: detected capacity change from 0 to 512 [ 323.025567][ T4419] usb 6-1: usb_control_msg returned -32 [ 323.043767][ T4419] usbtmc 6-1:16.0: can't read capabilities [ 323.068371][ T5924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 323.078469][ T5924] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.188893][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 323.217495][ T4419] usb 6-1: USB disconnect, device number 3 [ 325.181949][ T5942] can0: slcan on pty30. [ 326.072562][ T5935] can0 (unregistered): slcan off pty30. [ 326.902865][ T4410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.564373][ T4410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.827507][ T4410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.947260][ T4410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.066039][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 328.191769][ T4419] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 328.382078][ T4419] usb 2-1: Using ep0 maxpacket: 8 [ 328.389580][ T4419] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.431787][ T4419] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.489358][ T4419] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.537412][ T4419] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.578307][ T4419] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.609187][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.618433][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.627130][ T5982] netlink: 56 bytes leftover after parsing attributes in process `syz.0.363'. [ 328.636156][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.644072][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.652557][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.659850][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.667279][ T4419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.918061][ T4419] usb 2-1: usb_control_msg returned -32 [ 328.925553][ T4419] usbtmc 2-1:16.0: can't read capabilities [ 328.976163][ T4419] usb 2-1: USB disconnect, device number 7 [ 329.044814][ T5975] kthread_run failed with err -4 [ 329.421835][ T4278] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 329.641789][ T4278] usb 6-1: Using ep0 maxpacket: 32 [ 329.663069][ T5997] squashfs: Unknown parameter 'threads' [ 329.670400][ T4278] usb 6-1: unable to get BOS descriptor or descriptor too short [ 329.709894][ T4278] usb 6-1: config 9 has an invalid interface number: 111 but max is 0 [ 329.861003][ T4278] usb 6-1: config 9 has no interface number 0 [ 329.868395][ T4278] usb 6-1: config 9 interface 111 altsetting 5 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 329.881749][ T4278] usb 6-1: config 9 interface 111 has no altsetting 0 [ 329.894095][ T4278] usb 6-1: New USB device found, idVendor=0bda, idProduct=318b, bcdDevice=cf.10 [ 330.621122][ T4278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.629593][ T4278] usb 6-1: Product: syz [ 330.641800][ T4278] usb 6-1: Manufacturer: syz [ 330.646469][ T4278] usb 6-1: SerialNumber: syz [ 330.855915][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 330.887019][ T4278] usb 6-1: USB disconnect, device number 4 [ 331.929198][ T6011] can0: slcan on pty22. [ 332.483049][ T6006] can0 (unregistered): slcan off pty22. [ 333.004150][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 333.669556][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 334.784856][ T6032] input: syz1 as /devices/virtual/input/input7 [ 335.051774][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 335.140059][ T6047] capability: warning: `syz.5.378' uses deprecated v2 capabilities in a way that may be insecure [ 335.391821][ T6054] loop5: detected capacity change from 0 to 512 [ 335.405763][ T6054] EXT4-fs: Ignoring removed i_version option [ 335.419736][ T6054] EXT4-fs: Ignoring removed bh option [ 335.446000][ T4410] device hsr_slave_0 left promiscuous mode [ 335.488155][ T4410] device hsr_slave_1 left promiscuous mode [ 335.503628][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.521998][ T6054] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 335.548710][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.561837][ T6054] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.612861][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.620350][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.676389][ T4410] device bridge_slave_1 left promiscuous mode [ 335.704932][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.756076][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 335.767162][ T4410] device bridge_slave_0 left promiscuous mode [ 335.786143][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.891192][ T4410] device veth1_macvtap left promiscuous mode [ 335.909983][ T4410] device veth0_macvtap left promiscuous mode [ 335.932961][ T4410] device veth1_vlan left promiscuous mode [ 335.938839][ T4410] device veth0_vlan left promiscuous mode [ 336.233620][ T6067] squashfs: Unknown parameter 'threads' [ 337.132129][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 337.286472][ T6075] fuse: Invalid rootmode [ 339.323042][ T6088] loop0: detected capacity change from 0 to 8 [ 339.621586][ T6088] SQUASHFS error: zlib decompression failed, data probably corrupt [ 339.656930][ T6088] SQUASHFS error: Failed to read block 0x9b: -5 [ 339.665281][ T6088] SQUASHFS error: Unable to read metadata cache entry [99] [ 339.672823][ T6088] SQUASHFS error: Unable to read inode 0x127 [ 341.864916][ T4410] team0 (unregistering): Port device team_slave_1 removed [ 342.459787][ T4410] team0 (unregistering): Port device team_slave_0 removed [ 342.555353][ T4410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.143970][ T4410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.508229][ T4410] bond0 (unregistering): Released all slaves [ 343.602376][ T6062] netlink: 'syz.5.380': attribute type 12 has an invalid length. [ 343.610156][ T6062] netlink: 'syz.5.380': attribute type 29 has an invalid length. [ 343.618633][ T6062] netlink: 148 bytes leftover after parsing attributes in process `syz.5.380'. [ 343.627950][ T6062] netlink: 'syz.5.380': attribute type 2 has an invalid length. [ 343.636612][ T6062] netlink: 23 bytes leftover after parsing attributes in process `syz.5.380'. [ 343.750887][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.798977][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.840294][ T5984] device bridge_slave_0 entered promiscuous mode [ 343.912989][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.951981][ T6113] input: syz1 as /devices/virtual/input/input8 [ 343.958940][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.984757][ T5984] device bridge_slave_1 entered promiscuous mode [ 344.005021][ T6115] squashfs: Unknown parameter 'threads' [ 345.440430][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.469163][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.653680][ T5984] team0: Port device team_slave_0 added [ 345.738310][ T5984] team0: Port device team_slave_1 added [ 347.527178][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.566023][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.592641][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.614375][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.621363][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.653431][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.791009][ T5984] device hsr_slave_0 entered promiscuous mode [ 347.832100][ T5984] device hsr_slave_1 entered promiscuous mode [ 347.868878][ T5984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.878710][ T5984] Cannot create hsr debugfs directory [ 348.672223][ T6137] netlink: 'syz.5.403': attribute type 12 has an invalid length. [ 348.713180][ T6137] netlink: 'syz.5.403': attribute type 29 has an invalid length. [ 348.768762][ T6137] netlink: 148 bytes leftover after parsing attributes in process `syz.5.403'. [ 348.809731][ T6137] netlink: 'syz.5.403': attribute type 2 has an invalid length. [ 348.817752][ T6137] netlink: 23 bytes leftover after parsing attributes in process `syz.5.403'. [ 349.237652][ T5984] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 351.022118][ T5984] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 351.130149][ T5984] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 351.150409][ T5984] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 351.206981][ T6156] squashfs: Unknown parameter 'threads' [ 351.420841][ T6163] fuse: Bad value for 'rootmode' [ 352.285297][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.348199][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.430628][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.543579][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.581178][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.644900][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.882301][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.889559][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.407619][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.427920][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.448823][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.471781][ T6179] input: syz1 as /devices/virtual/input/input9 [ 354.490442][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.497665][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.552332][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.592407][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.614638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.635233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.657517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.715456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.732951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.777976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.806677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.836011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.865754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.911291][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.807486][ T6196] netlink: 'syz.6.414': attribute type 12 has an invalid length. [ 355.877424][ T6196] netlink: 'syz.6.414': attribute type 29 has an invalid length. [ 355.921113][ T6196] netlink: 148 bytes leftover after parsing attributes in process `syz.6.414'. [ 355.964993][ T6196] netlink: 'syz.6.414': attribute type 2 has an invalid length. [ 355.980908][ T6196] netlink: 'syz.6.414': attribute type 3 has an invalid length. [ 355.992292][ T6196] netlink: 15 bytes leftover after parsing attributes in process `syz.6.414'. [ 357.752467][ T6209] netlink: 64 bytes leftover after parsing attributes in process `syz.6.416'. [ 357.938968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.952387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.093462][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.289881][ T6223] fuse: Bad value for 'rootmode' [ 361.462819][ T6240] netlink: 'syz.6.425': attribute type 12 has an invalid length. [ 361.470620][ T6240] netlink: 'syz.6.425': attribute type 29 has an invalid length. [ 361.525494][ T6240] netlink: 148 bytes leftover after parsing attributes in process `syz.6.425'. [ 361.559255][ T6240] netlink: 'syz.6.425': attribute type 2 has an invalid length. [ 361.584781][ T6240] netlink: 'syz.6.425': attribute type 3 has an invalid length. [ 361.605214][ T6240] netlink: 15 bytes leftover after parsing attributes in process `syz.6.425'. [ 363.731300][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.757485][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.886381][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.962661][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.973921][ T5984] device veth0_vlan entered promiscuous mode [ 363.996333][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.052372][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.207338][ T5984] device veth1_vlan entered promiscuous mode [ 364.275978][ T5984] device veth0_macvtap entered promiscuous mode [ 365.384651][ T5984] device veth1_macvtap entered promiscuous mode [ 365.590110][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 365.646626][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 365.722590][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.762851][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.812113][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.853291][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.033890][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.044979][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.055137][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.067023][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.088761][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.247330][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.362012][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.391804][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.426292][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.454749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.477673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.585249][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.604242][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.661712][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.706227][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.729393][ T6276] fuse: Bad value for 'rootmode' [ 366.742058][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.795051][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.831730][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.875281][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.922228][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.959399][ T6284] loop6: detected capacity change from 0 to 2048 [ 368.342926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.402965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.452543][ T6284] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 368.549726][ T5984] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.611787][ T5984] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.620598][ T5984] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.747537][ T5984] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.790510][ T5361] EXT4-fs (loop6): unmounting filesystem. [ 368.941120][ T6292] Bluetooth: MGMT ver 1.22 [ 369.021270][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.041431][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.072610][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 369.140255][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.174603][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.205900][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 370.582225][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 373.992218][ T6319] fuse: Unknown parameter 'use00000000000000000000' [ 374.631767][ T4447] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 375.742327][ T6336] loop0: detected capacity change from 0 to 2048 [ 376.121770][ T4447] usb 7-1: Using ep0 maxpacket: 32 [ 376.131305][ T4447] usb 7-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 376.161712][ T4447] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 376.192373][ T4447] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 376.212367][ T6336] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 376.287505][ T4447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.296063][ T4447] usb 7-1: Product: syz [ 376.301100][ T4447] usb 7-1: Manufacturer: syz [ 376.305828][ T4447] usb 7-1: SerialNumber: syz [ 376.315827][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 376.521505][ T4447] usb 7-1: USB disconnect, device number 2 [ 378.273890][ T6353] loop1: detected capacity change from 0 to 2048 [ 378.306334][ T6353] UDF-fs: bad mount option "0xffffffffffffffff˙˙" or missing value [ 379.347021][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.355221][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.756138][ T6372] fuse: Unknown parameter 'use00000000000000000000' [ 385.195150][ T6395] loop7: detected capacity change from 0 to 2048 [ 385.631812][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 385.733487][ T6395] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 385.908364][ T5984] EXT4-fs (loop7): unmounting filesystem. [ 386.033302][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 386.063940][ T22] usb 1-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 386.105322][ T22] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 387.820770][ T22] usb 1-1: string descriptor 0 read error: -71 [ 387.831784][ T22] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 387.840886][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.923355][ T22] usb 1-1: can't set config #4, error -71 [ 387.952031][ T22] usb 1-1: USB disconnect, device number 4 [ 393.282760][ T6445] fuse: Unknown parameter 'use00000000000000000000' [ 396.786396][ T6452] loop1: detected capacity change from 0 to 512 [ 396.903127][ T6452] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 396.912223][ T6452] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.503251][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 401.618708][ T6498] fuse: Unknown parameter 'user_i00000000000000000000' [ 408.975077][ T6544] loop0: detected capacity change from 0 to 512 [ 410.478260][ T6544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 410.692503][ T6544] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.197374][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 418.742059][ T6608] loop5: detected capacity change from 0 to 512 [ 419.999606][ T6613] fuse: Unknown parameter 'user_i00000000000000000000' [ 420.029853][ T6608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 420.039739][ T6608] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.153355][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 422.971960][ T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 423.171745][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 423.173593][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.173649][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.175485][ T22] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.175516][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.175539][ T22] usb 7-1: Product: syz [ 423.175556][ T22] usb 7-1: Manufacturer: syz [ 423.175572][ T22] usb 7-1: SerialNumber: syz [ 423.693990][ T22] usb 7-1: 0:2 : does not exist [ 425.117538][ T22] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 425.182007][ T22] usb 7-1: USB disconnect, device number 3 [ 425.525729][ T4839] udevd[4839]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.382708][ T6673] netlink: 64 bytes leftover after parsing attributes in process `syz.0.509'. [ 428.987602][ T6680] loop6: detected capacity change from 0 to 512 [ 429.501362][ T6680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 429.510682][ T6680] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.597711][ T5361] EXT4-fs (loop6): unmounting filesystem. [ 429.696298][ T6687] fuse: Unknown parameter 'user_i00000000000000000000' [ 430.226042][ T6672] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.559073][ T6672] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.789423][ T6672] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.808530][ T6705] loop0: detected capacity change from 0 to 164 [ 433.818267][ T6705] Unable to read rock-ridge attributes [ 434.170257][ T6672] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.316367][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.325755][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.333692][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.343067][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.350551][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 436.361701][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.411907][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 438.443068][ T6740] fuse: Unknown parameter 'user_id00000000000000000000' [ 439.285902][ T6738] loop1: detected capacity change from 0 to 512 [ 441.290778][ T6738] EXT4-fs: error -4 creating inode table initialization thread [ 441.299114][ T6738] EXT4-fs (loop1): mount failed [ 441.311938][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.318212][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.325472][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 441.429950][ T6754] loop0: detected capacity change from 0 to 512 [ 441.496196][ T6719] chnl_net:caif_netlink_parms(): no params data found [ 441.606125][ T6710] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.241120][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.401781][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.412082][ T7] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 442.421771][ T6719] device bridge_slave_0 entered promiscuous mode [ 442.452972][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.480973][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.489593][ T6719] device bridge_slave_1 entered promiscuous mode [ 442.619232][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.630336][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 442.661672][ T7] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 442.671326][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.743031][ T7] usb 1-1: config 0 descriptor?? [ 442.749454][ T6759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 442.784366][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.129305][ T6719] team0: Port device team_slave_0 added [ 443.150440][ T6719] team0: Port device team_slave_1 added [ 443.183939][ T7] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 443.339294][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.371887][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 443.386871][ T7] usb 1-1: USB disconnect, device number 5 [ 443.399249][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.431470][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.637249][ T6768] fido_id[6768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 443.980877][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.003982][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.441738][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.534850][ T6672] device hsr_slave_0 left promiscuous mode [ 444.569985][ T6672] device hsr_slave_1 left promiscuous mode [ 444.610902][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.958660][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 446.005328][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.151892][ T27] audit: type=1400 audit(1770938048.815:28): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6789 comm="syz.1.538" [ 446.236457][ T6793] overlayfs: missing 'lowerdir' [ 448.141762][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.179694][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.292987][ T6672] device bridge_slave_1 left promiscuous mode [ 448.311877][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.330792][ T6672] device bridge_slave_0 left promiscuous mode [ 448.383626][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.532345][ T6672] device veth1_macvtap left promiscuous mode [ 448.549259][ T6801] fuse: Unknown parameter 'user_id00000000000000000000' [ 448.552020][ T6672] device veth0_macvtap left promiscuous mode [ 449.623824][ T6672] device veth1_vlan left promiscuous mode [ 449.637530][ T6672] device veth0_vlan left promiscuous mode [ 451.409320][ T27] audit: type=1326 audit(1770938054.075:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 451.521974][ T27] audit: type=1326 audit(1770938054.115:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 451.631711][ T27] audit: type=1326 audit(1770938054.115:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 451.708117][ T27] audit: type=1326 audit(1770938054.115:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 451.786230][ T27] audit: type=1326 audit(1770938054.115:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 451.811771][ T4378] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 451.851835][ T27] audit: type=1326 audit(1770938054.115:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 451.916292][ T27] audit: type=1326 audit(1770938054.115:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 451.977926][ T4378] usb 6-1: device descriptor read/64, error -71 [ 451.984724][ T26] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 451.999744][ T27] audit: type=1326 audit(1770938054.115:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 452.051715][ T27] audit: type=1326 audit(1770938054.115:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 452.091695][ T27] audit: type=1326 audit(1770938054.115:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 452.233774][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 452.261865][ T4378] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 452.269624][ T26] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 452.293494][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.319656][ T26] usb 1-1: config 0 descriptor?? [ 452.344860][ T6816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 452.436967][ T4378] usb 6-1: device descriptor read/64, error -71 [ 452.582961][ T4378] usb usb6-port1: attempt power cycle [ 452.843004][ T26] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 453.001829][ T4378] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 453.009826][ T4332] usb 1-1: USB disconnect, device number 6 [ 453.033582][ T4378] usb 6-1: device descriptor read/8, error -71 [ 453.311815][ T4378] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 453.366117][ T4378] usb 6-1: device descriptor read/8, error -71 [ 453.419419][ T6823] fido_id[6823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 454.239726][ T6826] loop6: detected capacity change from 0 to 512 [ 454.255279][ T4378] usb usb6-port1: unable to enumerate USB device [ 454.308619][ T6826] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 454.317935][ T6826] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.594178][ T5361] EXT4-fs (loop6): unmounting filesystem. [ 455.190296][ T6672] team0 (unregistering): Port device team_slave_1 removed [ 455.604685][ T6672] team0 (unregistering): Port device team_slave_0 removed [ 455.831141][ T6672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.028211][ T6672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.187268][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 457.187318][ T27] audit: type=1400 audit(1770938059.855:53): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6843 comm="syz.6.551" [ 457.279432][ T6846] overlayfs: missing 'lowerdir' [ 459.738139][ T6855] fuse: Unknown parameter 'user_id00000000000000000000' [ 460.712751][ T6672] bond0 (unregistering): Released all slaves [ 460.843963][ T6856] loop0: detected capacity change from 0 to 128 [ 461.045066][ T6863] loop6: detected capacity change from 0 to 1024 [ 461.127834][ T6863] hfsplus: failed to extend attributes file [ 461.365694][ T6719] device hsr_slave_0 entered promiscuous mode [ 461.517640][ T6719] device hsr_slave_1 entered promiscuous mode [ 461.557045][ T6719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.569624][ T6719] Cannot create hsr debugfs directory [ 463.354941][ T27] audit: type=1400 audit(1770938066.025:54): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6877 comm="syz.5.561" [ 463.442053][ T6881] overlayfs: missing 'lowerdir' [ 466.715877][ T6719] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 466.808489][ T6719] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 466.845050][ T6719] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 466.935014][ T6897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.566'. [ 467.455306][ T6719] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 467.964089][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.034935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.048771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.107565][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.233282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.271142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.290050][ T6910] loop1: detected capacity change from 0 to 1024 [ 468.305220][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.312377][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.373206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.435807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.461167][ T27] audit: type=1800 audit(1770938071.125:55): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.562" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 468.534209][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.541565][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.135369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.169468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.213831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.246816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.291305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.342366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.361378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.382707][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 469.413538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.482186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.551130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.580328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.602042][ T14] usb 1-1: device descriptor read/64, error -71 [ 469.662728][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.694771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.880364][ T6920] fuse: Bad value for 'fd' [ 469.891853][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 470.457004][ T14] usb 1-1: device descriptor read/64, error -71 [ 470.591890][ T14] usb usb1-port1: attempt power cycle [ 471.037510][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 471.108503][ T14] usb 1-1: device descriptor read/8, error -71 [ 472.751765][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 473.875318][ T6932] loop5: detected capacity change from 0 to 1024 [ 473.889844][ T14] usb 1-1: device descriptor read/8, error -71 [ 473.902876][ T6932] hfsplus: unable to parse mount options [ 474.011958][ T14] usb usb1-port1: unable to enumerate USB device [ 474.109615][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.127657][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.195802][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.571885][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 474.786289][ T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 474.821849][ T14] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 474.896000][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 474.936587][ T14] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 474.997608][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.041353][ T14] usb 1-1: config 0 descriptor?? [ 476.775134][ T14] hid-rmi 0003:17EF:6085.0008: invalid report_size 36947 [ 476.812192][ T14] hid-rmi 0003:17EF:6085.0008: item 0 2 1 7 parsing failed [ 476.820020][ T14] hid-rmi 0003:17EF:6085.0008: parse failed [ 476.980142][ T14] hid-rmi: probe of 0003:17EF:6085.0008 failed with error -22 [ 477.073480][ T14] usb 1-1: USB disconnect, device number 11 [ 477.497638][ T27] audit: type=1400 audit(1770938080.165:56): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6974 comm="syz.1.574" [ 477.579941][ T6979] overlayfs: missing 'lowerdir' [ 479.096684][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.209952][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.340424][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 479.383930][ T6983] loop0: detected capacity change from 0 to 512 [ 479.962733][ T6981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.970393][ T6981] IPv6: NLM_F_CREATE should be set when creating new route [ 479.983058][ T6986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.032708][ T6983] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 480.042799][ T6983] ext4 filesystem being mounted at /149/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.063550][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.215437][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.344033][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 481.445495][ T6719] device veth0_vlan entered promiscuous mode [ 481.454882][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.488245][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.523284][ T6719] device veth1_vlan entered promiscuous mode [ 481.638552][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.672693][ T7000] loop5: detected capacity change from 0 to 1024 [ 481.694485][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.740474][ T6719] device veth0_macvtap entered promiscuous mode [ 481.742395][ T7000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 481.774157][ T6719] device veth1_macvtap entered promiscuous mode [ 481.879205][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.908126][ T7000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 481.931487][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.942332][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.953198][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.963948][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.974717][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.985130][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.996979][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.008858][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.021803][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.032408][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.043161][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.054533][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.109940][ T7016] netlink: 64 bytes leftover after parsing attributes in process `syz.0.586'. [ 482.111969][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 482.129353][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.160101][ T7000] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 482.169087][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.311824][ T7] usb 2-1: device descriptor read/64, error -71 [ 482.334006][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.451811][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.547802][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.593561][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 482.626822][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.666890][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.688480][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.696805][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 482.708185][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.742549][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.781876][ T7] usb 2-1: device descriptor read/64, error -71 [ 482.809455][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.837744][ T6719] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.881015][ T6719] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.911996][ T7] usb usb2-port1: attempt power cycle [ 482.948216][ T27] audit: type=1400 audit(1770938085.615:57): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7021 comm="syz.6.589" [ 483.035305][ T7027] overlayfs: missing 'lowerdir' [ 484.333815][ T6719] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.016315][ T6719] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.111701][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 485.361691][ T7] usb 2-1: device descriptor read/8, error -71 [ 487.431950][ T4498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.447985][ T4498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.538916][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 487.581319][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.612130][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.667784][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 489.055952][ T7058] binder: 7056:7058 ioctl c0306201 200000001040 returned -14 [ 490.426443][ T7064] netlink: 64 bytes leftover after parsing attributes in process `syz.5.599'. [ 491.142498][ T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 491.388955][ T22] usb 9-1: Using ep0 maxpacket: 32 [ 491.400900][ T22] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 491.443895][ T22] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 491.502896][ T22] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 491.534769][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.551474][ T7075] loop0: detected capacity change from 0 to 512 [ 491.561201][ T22] usb 9-1: Product: syz [ 491.597965][ T22] usb 9-1: Manufacturer: syz [ 491.621382][ T7075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 491.632421][ T22] usb 9-1: SerialNumber: syz [ 491.656986][ T7075] ext4 filesystem being mounted at /153/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.150138][ T22] usb 9-1: USB disconnect, device number 2 [ 493.449677][ T27] audit: type=1400 audit(1770938096.115:58): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7077 comm="syz.5.603" [ 493.544053][ T7091] overlayfs: missing 'lowerdir' [ 494.893636][ T7098] netlink: 64 bytes leftover after parsing attributes in process `syz.8.606'. [ 495.187578][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 495.597416][ T7109] netlink: 56 bytes leftover after parsing attributes in process `syz.5.609'. [ 496.281665][ T27] audit: type=1326 audit(1770938098.415:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 496.985245][ T27] audit: type=1326 audit(1770938098.415:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20159bf79 code=0x7ffc0000 [ 497.172832][ T7124] Bluetooth: MGMT ver 1.22 [ 498.737958][ T4278] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 499.571733][ T4278] usb 9-1: Using ep0 maxpacket: 8 [ 499.579052][ T4278] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 499.621665][ T4278] usb 9-1: config 179 has no interface number 0 [ 499.628067][ T4278] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 499.710913][ T4278] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 499.753661][ T4278] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 499.857108][ T4278] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 499.897982][ T4278] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 499.988778][ T4278] usb 9-1: config 179 interface 65 has no altsetting 0 [ 500.009053][ T4278] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 500.060466][ T7149] loop1: detected capacity change from 0 to 512 [ 500.112519][ T7149] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 500.126844][ T7149] ext4 filesystem being mounted at /126/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.177285][ T4278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.460209][ T4278] usb 9-1: can't set config #179, error -71 [ 500.483539][ T4278] usb 9-1: USB disconnect, device number 3 [ 501.503092][ T7161] netlink: 64 bytes leftover after parsing attributes in process `syz.5.621'. [ 501.935037][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.941435][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.856555][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 503.222839][ T7174] Bluetooth: hci0: invalid len left 7, exp >= 111 [ 503.839139][ T7178] loop6: detected capacity change from 0 to 1024 [ 504.575898][ T7178] hfsplus: xattr searching failed [ 508.599844][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.634'. [ 512.471258][ T7238] netlink: 64 bytes leftover after parsing attributes in process `syz.5.636'. [ 516.191337][ T7275] loop6: detected capacity change from 0 to 256 [ 516.282563][ T7275] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 516.367544][ T27] audit: type=1800 audit(1770938119.035:61): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.651" name="file1" dev="loop6" ino=1048617 res=0 errno=0 [ 516.506944][ T27] audit: type=1800 audit(1770938119.175:62): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.651" name="file1" dev="loop6" ino=1048617 res=0 errno=0 [ 520.728030][ T7281] loop1: detected capacity change from 0 to 512 [ 521.004854][ T7281] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 525.839681][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.850173][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.862435][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.872524][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.880467][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.888151][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.781436][ T7314] chnl_net:caif_netlink_parms(): no params data found [ 527.963829][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 528.287767][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.295039][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.303841][ T7314] device bridge_slave_0 entered promiscuous mode [ 528.314272][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.321488][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.364340][ T7334] loop5: detected capacity change from 0 to 128 [ 528.430342][ T7314] device bridge_slave_1 entered promiscuous mode [ 528.580337][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.654227][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.575700][ T7348] loop0: detected capacity change from 0 to 2048 [ 529.967537][ T7348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 530.005357][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 530.012630][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 530.059578][ T7314] team0: Port device team_slave_0 added [ 530.295094][ T7314] team0: Port device team_slave_1 added [ 530.429576][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.463124][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.100750][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.178621][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.211462][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.331716][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.371744][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 532.379086][ T4645] kworker/dying (4645) used greatest stack depth: 20176 bytes left [ 532.669362][ T7314] device hsr_slave_0 entered promiscuous mode [ 532.696534][ T7314] device hsr_slave_1 entered promiscuous mode [ 532.718395][ T7314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.747790][ T7314] Cannot create hsr debugfs directory [ 533.687869][ T7314] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 533.747841][ T7314] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 533.812971][ T7314] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 534.052462][ T7314] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 534.402460][ T7388] binder: 7387:7388 ioctl c0306201 200000001040 returned -14 [ 534.417702][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 535.577286][ T4551] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.813736][ T4551] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.503094][ T4551] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.636688][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.735950][ T4551] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.858104][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.889205][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.040126][ T5491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.132449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 539.141270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.207127][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.214273][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.248606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 539.249384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.249953][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.250066][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.284373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 539.285056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 539.285707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 539.321541][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 539.504646][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 539.551708][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 539.570120][ T7422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.681'. [ 540.773957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 540.802769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.942501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 540.965136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.050291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.090810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.154196][ T7314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.055216][ T7438] loop1: detected capacity change from 0 to 8 [ 545.246869][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.264735][ T7117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.385178][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.994283][ T7455] binder: 7453:7455 ioctl c0306201 200000001040 returned -14 [ 546.953272][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 546.991988][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 547.481034][ T7468] overlayfs: failed to resolve './file1': -2 [ 549.580714][ T4551] device hsr_slave_0 left promiscuous mode [ 549.601813][ T4551] device hsr_slave_1 left promiscuous mode [ 549.691934][ T4551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.702007][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.742532][ T4551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.791664][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.870831][ T4551] device bridge_slave_1 left promiscuous mode [ 549.891857][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.914267][ T4551] device bridge_slave_0 left promiscuous mode [ 549.927699][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.010359][ T7479] loop5: detected capacity change from 0 to 512 [ 550.096202][ T4551] device veth1_macvtap left promiscuous mode [ 550.112194][ T7482] loop0: detected capacity change from 0 to 1024 [ 550.159672][ T4551] device veth0_macvtap left promiscuous mode [ 550.201590][ T4551] device veth1_vlan left promiscuous mode [ 550.210456][ T7482] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 550.257796][ T4551] device veth0_vlan left promiscuous mode [ 550.294867][ T7482] EXT4-fs error (device loop0): ext4_get_journal_inode:5756: inode #32: comm syz.0.695: iget: special inode unallocated [ 550.356056][ T7482] EXT4-fs (loop0): no journal found [ 550.392007][ T7482] EXT4-fs (loop0): can't get journal size [ 550.506712][ T7482] EXT4-fs error (device loop0): __ext4_fill_super:5423: inode #2: comm syz.0.695: iget: special inode unallocated [ 550.535916][ T7482] EXT4-fs (loop0): get root inode failed [ 550.553028][ T7482] EXT4-fs (loop0): mount failed [ 550.667773][ T7479] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 550.712658][ T7479] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.615797][ T7500] binder: 7498:7500 ioctl c0306201 200000001040 returned -14 [ 554.030807][ T4551] team0 (unregistering): Port device team_slave_1 removed [ 554.161116][ T4551] team0 (unregistering): Port device team_slave_0 removed [ 554.279477][ T4551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.421291][ T4551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.563570][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 556.793704][ T4551] bond0 (unregistering): Released all slaves [ 556.850746][ T7507] loop5: detected capacity change from 0 to 1024 [ 556.929779][ T27] audit: type=1800 audit(1770938159.595:63): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.707" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 557.502301][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.530162][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.700860][ T7511] loop0: detected capacity change from 0 to 2048 [ 557.747720][ T7511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.763909][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.787896][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.800090][ T7314] device veth0_vlan entered promiscuous mode [ 557.843057][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.882980][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.896309][ T7314] device veth1_vlan entered promiscuous mode [ 558.606852][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 558.916971][ T7314] device veth0_macvtap entered promiscuous mode [ 558.963736][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.004766][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.046066][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.080416][ T7314] device veth1_macvtap entered promiscuous mode [ 559.177757][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.212238][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.252075][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.280504][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.321646][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.355603][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.855154][ T7527] binder: 7523:7527 ioctl c0306201 200000001040 returned -14 [ 560.830714][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.995606][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.121996][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.477157][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 561.581081][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 561.705356][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 561.787844][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.826905][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.856825][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.881076][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.911793][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.952035][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.988342][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.019468][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.050219][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.060463][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 562.081530][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 562.102691][ T7314] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.115152][ T7314] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.144685][ T7314] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.203220][ T7314] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.520540][ T7538] netlink: 64 bytes leftover after parsing attributes in process `syz.0.717'. [ 563.055789][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.064646][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.170848][ T4551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.209067][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.218661][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.227157][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.235135][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.243866][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 563.251183][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.280366][ T7117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.321664][ T7117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.440888][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 563.486028][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.516431][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.584954][ T4551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.623304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 563.691125][ T7546] loop0: detected capacity change from 0 to 1024 [ 563.815447][ T4551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.876632][ T27] audit: type=1800 audit(1770938166.545:64): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.719" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 564.169173][ T4551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.292247][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 566.417095][ T7541] chnl_net:caif_netlink_parms(): no params data found [ 566.624592][ T7569] loop6: detected capacity change from 0 to 2048 [ 567.361847][ T7572] binder: 7571:7572 ioctl c0306201 200000001040 returned -14 [ 567.810567][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 567.918555][ T7568] loop5: detected capacity change from 0 to 512 [ 567.938088][ T7569] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 568.132382][ T27] audit: type=1800 audit(1770938170.805:65): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.722" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 568.166176][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.174453][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.188636][ T7541] device bridge_slave_0 entered promiscuous mode [ 568.201271][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.231699][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.240092][ T7541] device bridge_slave_1 entered promiscuous mode [ 568.251860][ T27] audit: type=1800 audit(1770938170.835:66): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.722" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 568.283465][ T7568] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 568.323652][ T7567] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 568.362594][ T7568] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.564048][ T7541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.610926][ T7583] ------------[ cut here ]------------ [ 568.617379][ T7583] WARNING: CPU: 0 PID: 7583 at fs/ext4/inode.c:3466 ext4_iomap_begin+0x9c1/0xb10 [ 568.626804][ T7583] Modules linked in: [ 568.630750][ T7583] CPU: 0 PID: 7583 Comm: syz.6.722 Not tainted syzkaller #0 [ 568.638174][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 568.648325][ T7583] RIP: 0010:ext4_iomap_begin+0x9c1/0xb10 [ 568.654023][ T7583] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 26 1d 5d ff 4c 8b 64 24 28 48 8d 9c 24 d0 00 00 00 e9 6b ff ff ff e8 0f 1d 5d ff <0f> 0b 41 be de ff ff ff e9 56 f7 ff ff 89 d9 80 e1 07 38 c1 0f 8c [ 568.673785][ T7583] RSP: 0018:ffffc90003857620 EFLAGS: 00010287 [ 568.679890][ T7583] RAX: ffffffff822556a1 RBX: ffff888068785dc2 RCX: 0000000000080000 [ 568.687953][ T7583] RDX: ffffc9000f653000 RSI: 0000000000007541 RDI: 0000000000007542 [ 568.695992][ T7583] RBP: ffffc90003857790 R08: ffff888068785a9f R09: 1ffff1100d0f0b53 [ 568.704047][ T7583] R10: dffffc0000000000 R11: ffffed100d0f0b54 R12: 00000000000000d4 [ 568.712083][ T7583] R13: 1ffff1100d0f0bb8 R14: 000000000000000b R15: 0000000000000000 [ 568.720105][ T7583] FS: 00007f81abc776c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 568.729101][ T7583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.735717][ T7583] CR2: 00007ffe48fdf020 CR3: 000000005bae1000 CR4: 00000000003506f0 [ 568.743750][ T7583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.751792][ T7583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 568.759778][ T7583] Call Trace: [ 568.763150][ T7583] [ 568.766126][ T7583] ? invalidate_mapping_pages+0x30/0x30 [ 568.771765][ T7583] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 568.777188][ T7583] ? xas_next_entry+0x3d0/0x3d0 [ 568.782146][ T7583] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 568.787570][ T7583] iomap_iter+0x6c6/0x1040 [ 568.792136][ T7583] ? blk_start_plug+0x94/0x110 [ 568.796936][ T7583] __iomap_dio_rw+0xd52/0x1e30 [ 568.801808][ T7583] ? ext4_reserve_inode_write+0x244/0x290 [ 568.807563][ T7583] ? iomap_dio_complete_work+0x70/0x70 [ 568.813124][ T7583] ? __mark_inode_dirty+0x3de/0xe90 [ 568.818345][ T7583] ? inode_owner_or_capable+0x200/0x200 [ 568.823945][ T7583] ? ext4_fc_replay_link_internal+0x290/0x290 [ 568.830041][ T7583] iomap_dio_rw+0x41/0xa0 [ 568.834421][ T7583] ? ext4_file_write_iter+0xa21/0x1710 [ 568.839891][ T7583] ext4_file_write_iter+0x12b7/0x1710 [ 568.845334][ T7583] ? ext4_file_write_iter+0xa21/0x1710 [ 568.850841][ T7583] ? ext4_file_read_iter+0x650/0x650 [ 568.856184][ T7583] ? end_current_label_crit_section+0x14b/0x170 [ 568.862474][ T7583] ? common_file_perm+0x171/0x1c0 [ 568.867519][ T7583] vfs_write+0x4b1/0xa30 [ 568.871834][ T7583] ? file_end_write+0x250/0x250 [ 568.876745][ T7583] ? __fget_files+0x43d/0x4b0 [ 568.881513][ T7583] ? __fdget_pos+0x2ae/0x360 [ 568.886230][ T7583] ? ksys_write+0x71/0x250 [ 568.890702][ T7583] ksys_write+0x14c/0x250 [ 568.895121][ T7583] ? __ia32_sys_read+0x80/0x80 [ 568.899911][ T7583] ? lockdep_hardirqs_on+0x94/0x140 [ 568.905157][ T7583] do_syscall_64+0x4c/0xa0 [ 568.909592][ T7583] ? clear_bhb_loop+0x60/0xb0 [ 568.914334][ T7583] ? clear_bhb_loop+0x60/0xb0 [ 568.919033][ T7583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.924977][ T7583] RIP: 0033:0x7f81aad9bf79 [ 568.929433][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.949180][ T7583] RSP: 002b:00007f81abc77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.957650][ T7583] RAX: ffffffffffffffda RBX: 00007f81ab016090 RCX: 00007f81aad9bf79 [ 568.965665][ T7583] RDX: 0000000000032600 RSI: 0000200000000140 RDI: 0000000000000004 [ 568.973699][ T7583] RBP: 00007f81aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 568.981743][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.989751][ T7583] R13: 00007f81ab016128 R14: 00007f81ab016090 R15: 00007ffde27af0b8 [ 568.997825][ T7583] [ 569.000890][ T7583] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 569.008199][ T7583] CPU: 0 PID: 7583 Comm: syz.6.722 Not tainted syzkaller #0 [ 569.015512][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 569.025582][ T7583] Call Trace: [ 569.028869][ T7583] [ 569.031833][ T7583] dump_stack_lvl+0x188/0x24e [ 569.036527][ T7583] ? memcpy+0x3c/0x60 [ 569.040522][ T7583] ? show_regs_print_info+0x12/0x12 [ 569.045763][ T7583] ? load_image+0x400/0x400 [ 569.050319][ T7583] panic+0x2e5/0x730 [ 569.054276][ T7583] ? bpf_jit_dump+0xd0/0xd0 [ 569.058834][ T7583] __warn+0x2f8/0x4f0 [ 569.062846][ T7583] ? ext4_iomap_begin+0x9c1/0xb10 [ 569.067927][ T7583] ? ext4_iomap_begin+0x9c1/0xb10 [ 569.073007][ T7583] report_bug+0x2ba/0x4f0 [ 569.077377][ T7583] ? ext4_iomap_begin+0x9c1/0xb10 [ 569.082438][ T7583] handle_bug+0x3a/0x70 [ 569.086618][ T7583] exc_invalid_op+0x16/0x40 [ 569.091160][ T7583] asm_exc_invalid_op+0x16/0x20 [ 569.096033][ T7583] RIP: 0010:ext4_iomap_begin+0x9c1/0xb10 [ 569.101704][ T7583] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 26 1d 5d ff 4c 8b 64 24 28 48 8d 9c 24 d0 00 00 00 e9 6b ff ff ff e8 0f 1d 5d ff <0f> 0b 41 be de ff ff ff e9 56 f7 ff ff 89 d9 80 e1 07 38 c1 0f 8c [ 569.121339][ T7583] RSP: 0018:ffffc90003857620 EFLAGS: 00010287 [ 569.127429][ T7583] RAX: ffffffff822556a1 RBX: ffff888068785dc2 RCX: 0000000000080000 [ 569.135425][ T7583] RDX: ffffc9000f653000 RSI: 0000000000007541 RDI: 0000000000007542 [ 569.143424][ T7583] RBP: ffffc90003857790 R08: ffff888068785a9f R09: 1ffff1100d0f0b53 [ 569.152198][ T7583] R10: dffffc0000000000 R11: ffffed100d0f0b54 R12: 00000000000000d4 [ 569.160186][ T7583] R13: 1ffff1100d0f0bb8 R14: 000000000000000b R15: 0000000000000000 [ 569.168184][ T7583] ? ext4_iomap_begin+0x9c1/0xb10 [ 569.173278][ T7583] ? invalidate_mapping_pages+0x30/0x30 [ 569.178853][ T7583] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 569.184254][ T7583] ? xas_next_entry+0x3d0/0x3d0 [ 569.189133][ T7583] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 569.194538][ T7583] iomap_iter+0x6c6/0x1040 [ 569.198991][ T7583] ? blk_start_plug+0x94/0x110 [ 569.203787][ T7583] __iomap_dio_rw+0xd52/0x1e30 [ 569.208597][ T7583] ? ext4_reserve_inode_write+0x244/0x290 [ 569.214336][ T7583] ? iomap_dio_complete_work+0x70/0x70 [ 569.219850][ T7583] ? __mark_inode_dirty+0x3de/0xe90 [ 569.225081][ T7583] ? inode_owner_or_capable+0x200/0x200 [ 569.230655][ T7583] ? ext4_fc_replay_link_internal+0x290/0x290 [ 569.236753][ T7583] iomap_dio_rw+0x41/0xa0 [ 569.241148][ T7583] ? ext4_file_write_iter+0xa21/0x1710 [ 569.246637][ T7583] ext4_file_write_iter+0x12b7/0x1710 [ 569.252040][ T7583] ? ext4_file_write_iter+0xa21/0x1710 [ 569.257542][ T7583] ? ext4_file_read_iter+0x650/0x650 [ 569.262855][ T7583] ? end_current_label_crit_section+0x14b/0x170 [ 569.269137][ T7583] ? common_file_perm+0x171/0x1c0 [ 569.274196][ T7583] vfs_write+0x4b1/0xa30 [ 569.278475][ T7583] ? file_end_write+0x250/0x250 [ 569.283357][ T7583] ? __fget_files+0x43d/0x4b0 [ 569.288140][ T7583] ? __fdget_pos+0x2ae/0x360 [ 569.292758][ T7583] ? ksys_write+0x71/0x250 [ 569.297207][ T7583] ksys_write+0x14c/0x250 [ 569.301574][ T7583] ? __ia32_sys_read+0x80/0x80 [ 569.306379][ T7583] ? lockdep_hardirqs_on+0x94/0x140 [ 569.311609][ T7583] do_syscall_64+0x4c/0xa0 [ 569.316054][ T7583] ? clear_bhb_loop+0x60/0xb0 [ 569.320754][ T7583] ? clear_bhb_loop+0x60/0xb0 [ 569.325457][ T7583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.331422][ T7583] RIP: 0033:0x7f81aad9bf79 [ 569.335869][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.355497][ T7583] RSP: 002b:00007f81abc77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.364027][ T7583] RAX: ffffffffffffffda RBX: 00007f81ab016090 RCX: 00007f81aad9bf79 [ 569.372112][ T7583] RDX: 0000000000032600 RSI: 0000200000000140 RDI: 0000000000000004 [ 569.380117][ T7583] RBP: 00007f81aae327e0 R08: 0000000000000000 R09: 0000000000000000 [ 569.388109][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.396114][ T7583] R13: 00007f81ab016128 R14: 00007f81ab016090 R15: 00007ffde27af0b8 [ 569.404142][ T7583] [ 569.407778][ T7583] Kernel Offset: disabled [ 569.412197][ T7583] Rebooting in 86400 seconds..