last executing test programs: 13.419589504s ago: executing program 3 (id=70): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000000004000045"], 0x58) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) 10.40262356s ago: executing program 3 (id=74): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) 7.742866554s ago: executing program 2 (id=76): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) 7.620055188s ago: executing program 2 (id=77): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401", 0x30}], 0x1}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010f00000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905"], 0x0) 6.579877161s ago: executing program 3 (id=80): r0 = syz_open_dev$cec(0x0, 0x0, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x182400) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1b) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) mknod(0x0, 0x8001420, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6.364074158s ago: executing program 3 (id=82): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="40309f00000044932b2fd80072c498df4f9b6b770b0200ce5b849cd6b53540a433be3048ed5b8c2141f80fa53717bd5fce"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d0009050f0200020500ff090582"], 0x0) 6.045311548s ago: executing program 2 (id=83): syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003a5f4860835120100d00601020301090238000206351007090404"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) 5.405790698s ago: executing program 0 (id=84): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x3, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x23, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x4874, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0xf, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x8, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x2, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0xb, 0x7fff, 0x9, 0x420, 0x20000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x400004, 0x8, 0x3, 0x3, 0x9, 0x81, 0x4, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x7, 0x5, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x1, 0x9, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x8, 0x6d01, 0xa, 0x3d, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xae, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x8, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x1, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x4, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x6, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x0, 0x7, 0x7f800000, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xf7ff343e, 0xfff]}, 0x45c) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000184000000400000000000000000000009500000000000000950000000000000019a1deb0ad7c79e218400000feffffff48000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x1b, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x13, 0x10, &(0x7f0000000200), 0x10}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r2, @ANYRES32, @ANYRES64=r2], 0x50) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a000004"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r1, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=""/2, 0x3d, 0x0, 0x44, 0xa1, &(0x7f0000000a00)="054c38c372a2665a3f1b9c64fd783aec9e18f06b4828f83c701997f5ad06fb0ea93db1a2e1c59b648943d19b097bed803326402a2da0bf5bf11434bec047c58c903a38aa", &(0x7f0000000a80)="7e5f68d27396122711adadb6c318ea1a17526b04ceea82752fed967868c258ece4556b3ccad8ca5fc5d7b9d5b4eaa69ef31412269a644d8fafe0606de6479593fd0783aeb91e7f0757a9010b4baddae6102bbf14ca293021a2fdafd098b93a568c078e277670131505079086cc4779582149aa779bfe7181bd09e2944b0ab71857c25887eb7b1e951daff52221ef9d1422413c0e55bbd99bca242b58138b6ebf6e", 0x4, 0x0, 0x5a}, 0x50) 4.39297312s ago: executing program 0 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32=r0, @ANYRES8=r0], 0x0) 4.319817613s ago: executing program 3 (id=87): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = semget$private(0x0, 0x20000000102, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 3.990443463s ago: executing program 2 (id=89): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.786871872s ago: executing program 1 (id=91): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000000080)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@numtail}, {@shortname_lower}, {@fat=@debug}, {@fat=@check_normal}, {@fat=@umask={'umask', 0x3d, 0x3}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@utf8no}]}, 0x7d, 0x29b, &(0x7f00000011c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.183149183s ago: executing program 0 (id=92): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x379, &(0x7f0000000600)="$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") creat(&(0x7f0000000000)='./file0\x00', 0x78) 1.056351637s ago: executing program 3 (id=93): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000018c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xdc, &(0x7f0000000280)=ANY=[]) 985.521739ms ago: executing program 1 (id=94): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x00'}]}, 0x18}], 0x1}, 0x0) 760.426586ms ago: executing program 1 (id=95): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x4}) 632.68751ms ago: executing program 0 (id=96): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) 545.251973ms ago: executing program 1 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'wlan0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x48, 0x5, 0x2}}) 487.284864ms ago: executing program 0 (id=98): r0 = syz_open_dev$cec(0x0, 0x0, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x182400) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1b) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) mknod(0x0, 0x8001420, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 486.455784ms ago: executing program 2 (id=99): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x14001) 323.86949ms ago: executing program 2 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(0x0, 0x402081, 0x112) getdents(r3, &(0x7f0000001880)=""/4093, 0xffd) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="bbcebf2e9bb51264564aba06d72d2048", 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffffffffffe6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000240)={0x5, 0x33565348, 0x1, @stepwise={0x1, 0x724, 0x2, 0x1, 0x7ff, 0x101}}) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006300)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 251.909672ms ago: executing program 1 (id=101): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") syz_mount_image$vfat(&(0x7f0000002100), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 147.283015ms ago: executing program 0 (id=102): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = semget$private(0x0, 0x20000000102, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 0s ago: executing program 1 (id=103): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x3810082, &(0x7f0000000280)=ANY=[@ANYBLOB='undelete,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,rootdir=00000000000000001055,iocharset=cp864,unhide,gid=ignore,mode=00000000000000000000001,anchor=00000000000000000000,\x00'], 0x1, 0xc3c, &(0x7f0000002680)="$eJzs3U9sHNd9B/DfGy7Fld1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpVlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNIXRI9O6QHLxocipJ6KFjaDogS0C5BSwmNm34pKibEUkJUr6fGzquzvz3ux789YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN979dzxE+lBtwIAuJ8ujH/1+En3fwB4rFzy//8AAAAAAAAAAAAAALDfpSjiqUgxd2EtTVbvu+rnO4M3bk6Mjm1f7WCqag5U5cuf+omTp05/6cWRM70835n5iPq77bPx+vilc41XZq/PzbcXFtpTjYmZzpXZqfZdH2Gn9bc6Wp2AxvU3bkxdvbrQOPnCqU27bw5/OPTk4eGzI88de7ZXdmJ0bGx8o0i9v3ztnhvSdacZHgeiiGOR4vnv/SS1IqKInZ+L+v0d+60OVp04WnViYnSs6sh0pzWzWO682DsRRUSjr1Kzd462H4uoDd7XPtxZM2KpbH7Z4KNl98bnWvOty9PtxsXW/GJnsTM7czF1W1v2pxFFnEkRyxGxOnT74QajiFqk+M6htXQ5IgZ65+GL1cTgO7ej2MM+3oWynY3BiOXiIRizfWwoingtUvz0vSNxJV9nqmvNFyJeK/PdiLfLfDkilV+M0xEfbPM94uFUiyL+ohz/s2tpqroe9K4r57/W+MrM1dm+sr3ryi94f7jtSvGA7g8Ht+T9sc+vTfUoolVd8dfSvf9mBwAAAAAAAAAAAAAAAIDddjCK+EykePXf/7iaVxzVvPRDZ0d+f/iX++eMP/MxxynLvhARS8Xdzck9kCcGXkwXU3rAc4kfZ/Uo4k/i3Wr+37cedGMAAAAAAAAAAAAAAAAAAAAea0X8OFK89P6RtBz9a4p3Zq41LrUuT3dXhe2t/dtbM319fX29kbrZzDmZcynncs6VnKs5o8j1czZzTuZcyrmccyXnas4YyPVzNnNO5lzKuZxzJedqzqjl+jmbOSdzLuVczrmSczVn7JO1ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiVFFPHzSPHtb6ylSBHRjJiMbq4MPejWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACloVTE9yNF4w+at7bVIiJV/3YdKX85Hc0DZX4ymiNlvhzNczlbVdaa33oA7WdnBlMRP4oUQ/V3bg14Hv/B7rtbX4N4+5sb7z5b6+ZAb+fwh0NPHj50dmTs15650+u0XQOOnu/M3LjZmBgdGxvv21zLn/7Jvm3D+XOL3ek6EbHw5ltvtKan2/P3/qL8Cuyg+kP0ItX2pqdD+6WDXmx+EbV90YwH03ceA+X9/4NI8dvv/0fvht+9/9fjl7rvbt3h42d/unH/f2nrge7y/l/bWi/f/8t7+nb3/6f6tr2UfzcyWIuoL16fGzwcUV94861jneuta+1r7ZnTx49/eWTky6eODx6IqF/tTLf7Xu3K6QIAAAAAAAAAAAAAAAC4f1IRvxspWj9aS42IuFnN1xo+O/LcsWcHYqCab7Vp3vbr45fONV6ZvT43315YaE81JmY6V2an2nf7cfVqutfE6NiedOZjHdzj9h+svzI79+Z859ofLW67/4n6ucsLi/OtK9vvjoNRRDT7txytGjwxOlY1errTmqmqXtx2Mv0vbjAV8Z+R4srpRvp83pbn/2+d4b9p/v/S1gPt0fz/T/RtKz8zpSJ+Fil+6y+fic9X7XwibjtnudzfRoqjZz6Xy8WBslyvDd3nCnRnBpZl/zdS/OPPN5ftzYd8aqPsibs+sQ+JcvwPRYrv//l349fzts3Pf9h+/J/YeqA9Gv+n+7Y9sel5BTvuOnn8j0WKl596J34jb/uo53/0nr1xJBe+9XyOPRr/T/VtG86f+5u703UAAAAAAAAAAICH2mAq4u8ixQ/GaunFvO1u/v7f1NYD7dHf//p037ap3Vmv6GNf7PikAgAAAMA+MZiK+HGkuLb4zq051Jvnf/fN//ydjfmfo2nL3urP+X6lem7Abv75X7/h/LmTO+82AAAAAAAAAAAAAAAAAAAA7CspFfFiXk99sprPn7ZZ3L1bbiVSvPrfz/fKHY5io+hw9Wv9wuzMsXPT07NXWouty9Ptxvhc60q7rPt0pFj7m8/lukW1vnpvvfnuGu8ba7HPR4qxv++V7a7F3lub/Ole2aX2ibLsJyLFf/3D5rK9daw/tXHck2XZv44UX//n7cse3ih7qiz73Ujxw683emWfKMv2no/66Y2yL1yZLXZ7SAAAAAAAAAAAAAAAAAAAAHgMDaYi/ixS/M/15Vtz+fP6/4N9bytvf7Nvvf8tblbr/A9X6//f6fW9rP9fPVdg6U6fCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj6YURbwVKeYurKWVofJ9V/18Z+bGzYnRse2rHUxVzYGqfPlTP3Hy1OkvvThyppcfXX+3fSZeH790rvHK7PW5+fbCQnuqMTHTuTI71b7rI+y0/lZHqxPQuP7GjamrVxcaJ184tWn3zeEPh548PHx25Lljz/bKToyOjY33lakN3vOn3ybdYfuBKOKvIsXz3/tJ+sFQRBE7Pxcf893ZawerThytOjExOlZ1ZLrTmlksd17snYgiotFXqdk7R/dhLHakGbFUNr9s8NGye+NzrfnW5el242JrfrGz2JmduZi6rS3704gizqSI5YhYHbr9cINRxBuR4juH1tK/DEUM9M7DFy+krx4/eed2FHvYx7tQtrMxGLFcfNSYbdNhNhmKIv4pUvz0vSPxr0MRtej+xBciXivz3Yi3ozveqfxinI74wGl9ZNSiiP8rx//sWnpvqLwe9K4r57/W+MrM1dm+sr3ryub7w0A8dPeH+2mf30/qUcQPqyv+Wvo3/10DAAAAAAAAAAAAAAAA7CNF/GqkeOn9I6maH3xrTnFn5lrjUuvydHdaX2/uX2/O9Pr6+nojdbOZczLnUs7lnCs5V3NGkevnbJZZX1+fzO+Xci7nXMm5mjMGcv2czT/Mjcrvl3Iu51zJuZozarl+zmbOyZxLOZdzruRczRn7ZO4eAAAAAAAAAAAAAAAAAADwaCmqf1J8+xtraX2oWl96oLdvxXqgj7z/DwAA//9cO/Ma") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') kernel console output (not intermixed with test programs): no interfaces have a carrier [ 52.325195][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.354191][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. syzkaller login: [ 71.835398][ T5766] cgroup: Unknown subsys name 'net' [ 71.970654][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.541220][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.090158][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.100252][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.108256][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.116770][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.125892][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.133756][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.141949][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.150057][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.157547][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.164875][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.172947][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.203462][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.210992][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.219358][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.227169][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.231768][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.234975][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.249778][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.252274][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.264205][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.265232][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.279886][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.292768][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.305690][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.756439][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 75.836507][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 75.966570][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 75.984810][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.991971][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.000850][ T5783] bridge_slave_0: entered allmulticast mode [ 76.008302][ T5783] bridge_slave_0: entered promiscuous mode [ 76.016956][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 76.062877][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.070077][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.077555][ T5783] bridge_slave_1: entered allmulticast mode [ 76.084999][ T5783] bridge_slave_1: entered promiscuous mode [ 76.129897][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.139876][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.147169][ T5778] bridge_slave_0: entered allmulticast mode [ 76.154845][ T5778] bridge_slave_0: entered promiscuous mode [ 76.174769][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.195569][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.205758][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.213394][ T5778] bridge_slave_1: entered allmulticast mode [ 76.220380][ T5778] bridge_slave_1: entered promiscuous mode [ 76.252813][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.314443][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.327973][ T5783] team0: Port device team_slave_0 added [ 76.353283][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.374353][ T5783] team0: Port device team_slave_1 added [ 76.411442][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.418792][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.426091][ T5781] bridge_slave_0: entered allmulticast mode [ 76.433559][ T5781] bridge_slave_0: entered promiscuous mode [ 76.455879][ T5778] team0: Port device team_slave_0 added [ 76.482210][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.489862][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.497299][ T5781] bridge_slave_1: entered allmulticast mode [ 76.504572][ T5781] bridge_slave_1: entered promiscuous mode [ 76.514479][ T5778] team0: Port device team_slave_1 added [ 76.530489][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.537751][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.564546][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.576707][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.584072][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.591317][ T5782] bridge_slave_0: entered allmulticast mode [ 76.598871][ T5782] bridge_slave_0: entered promiscuous mode [ 76.607611][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.614951][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.622190][ T5782] bridge_slave_1: entered allmulticast mode [ 76.629420][ T5782] bridge_slave_1: entered promiscuous mode [ 76.660248][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.667361][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.693445][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.746711][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.757601][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.764874][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.791263][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.805930][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.813258][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.839845][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.865497][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.878868][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.900893][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.959931][ T5782] team0: Port device team_slave_0 added [ 76.980530][ T5781] team0: Port device team_slave_0 added [ 77.001005][ T5782] team0: Port device team_slave_1 added [ 77.030901][ T5781] team0: Port device team_slave_1 added [ 77.042927][ T5783] hsr_slave_0: entered promiscuous mode [ 77.051013][ T5783] hsr_slave_1: entered promiscuous mode [ 77.063521][ T5778] hsr_slave_0: entered promiscuous mode [ 77.070991][ T5778] hsr_slave_1: entered promiscuous mode [ 77.077682][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.086269][ T5778] Cannot create hsr debugfs directory [ 77.137366][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.144455][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.170659][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.188858][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.196136][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.222234][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.234980][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.241973][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.268192][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.314504][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.321600][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.348580][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.359289][ T5786] Bluetooth: hci3: command tx timeout [ 77.365321][ T5086] Bluetooth: hci0: command tx timeout [ 77.367071][ T5788] Bluetooth: hci2: command tx timeout [ 77.377385][ T51] Bluetooth: hci1: command tx timeout [ 77.539013][ T5782] hsr_slave_0: entered promiscuous mode [ 77.547043][ T5782] hsr_slave_1: entered promiscuous mode [ 77.553481][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.561047][ T5782] Cannot create hsr debugfs directory [ 77.572726][ T5781] hsr_slave_0: entered promiscuous mode [ 77.580538][ T5781] hsr_slave_1: entered promiscuous mode [ 77.587003][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.595089][ T5781] Cannot create hsr debugfs directory [ 77.909813][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.925251][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.941521][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.953400][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.033935][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.045835][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.058023][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.076035][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.140158][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.159620][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.188222][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.199290][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.283821][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.294370][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.306919][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.320515][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.437844][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.490845][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.507768][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.520250][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.527574][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.549039][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.556268][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.636257][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.667014][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.681248][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.688452][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.715763][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.735166][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.742295][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.759725][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.825901][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.844526][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.865477][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.872839][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.901440][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.908725][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.947039][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.954285][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.980904][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.988131][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.151760][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.282022][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.409997][ T5778] veth0_vlan: entered promiscuous mode [ 79.433679][ T51] Bluetooth: hci3: command tx timeout [ 79.439231][ T51] Bluetooth: hci0: command tx timeout [ 79.444122][ T5788] Bluetooth: hci1: command tx timeout [ 79.446886][ T51] Bluetooth: hci2: command tx timeout [ 79.488708][ T5778] veth1_vlan: entered promiscuous mode [ 79.521901][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.649449][ T5778] veth0_macvtap: entered promiscuous mode [ 79.666645][ T5778] veth1_macvtap: entered promiscuous mode [ 79.725953][ T5781] veth0_vlan: entered promiscuous mode [ 79.737464][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.758489][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.775364][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.788271][ T5781] veth1_vlan: entered promiscuous mode [ 79.801910][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.812779][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.821534][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.830854][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.851522][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.989715][ T5783] veth0_vlan: entered promiscuous mode [ 80.047559][ T5782] veth0_vlan: entered promiscuous mode [ 80.053792][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.061837][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.087624][ T5781] veth0_macvtap: entered promiscuous mode [ 80.100168][ T5783] veth1_vlan: entered promiscuous mode [ 80.130692][ T5781] veth1_macvtap: entered promiscuous mode [ 80.158792][ T5782] veth1_vlan: entered promiscuous mode [ 80.177970][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.193932][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.213676][ T5783] veth0_macvtap: entered promiscuous mode [ 80.228861][ T5783] veth1_macvtap: entered promiscuous mode [ 80.254610][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.265953][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.278948][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.328290][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.339504][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.351924][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.363110][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.374674][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.385345][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.400593][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.412977][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.432766][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.441602][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.450795][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.460514][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.480646][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.494695][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.509369][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.526342][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.539702][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.597418][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.612756][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.621536][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.633421][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.525682][ T51] Bluetooth: hci1: command tx timeout [ 82.531177][ T51] Bluetooth: hci0: command tx timeout [ 82.536937][ T5786] Bluetooth: hci3: command tx timeout [ 82.542419][ T5786] Bluetooth: hci2: command tx timeout [ 82.549697][ T5782] veth0_macvtap: entered promiscuous mode [ 83.028072][ T5782] veth1_macvtap: entered promiscuous mode [ 83.714988][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.750999][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.816052][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.913561][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.003579][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.065752][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.162906][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.192487][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.214192][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.225179][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.236229][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.252698][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.282430][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.308505][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.342535][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.369730][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.463453][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.498575][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.516735][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.542493][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.552666][ T5788] Bluetooth: hci2: command tx timeout [ 84.558144][ T5788] Bluetooth: hci0: command tx timeout [ 84.563765][ T5786] Bluetooth: hci3: command tx timeout [ 84.569217][ T5786] Bluetooth: hci1: command tx timeout [ 84.626166][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.669618][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.341404][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 85.400293][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.436225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.528381][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.600563][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.645714][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.664075][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.681671][ T5863] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7'. [ 85.784603][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.835235][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.163388][ T5861] IPVS: starting estimator thread 0... [ 86.172464][ T5863] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 86.227638][ T5864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 86.240198][ T5864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 86.290753][ T5864] gretap1: entered promiscuous mode [ 86.306750][ T5870] IPVS: using max 18 ests per chain, 43200 per kthread [ 86.383205][ T5872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.325962][ T5880] Zero length message leads to an empty skb [ 89.602747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 91.018534][ T5890] syz.1.10[5890]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.130634][ T5890] loop1: detected capacity change from 0 to 1024 [ 91.314702][ T5890] ======================================================= [ 91.314702][ T5890] WARNING: The mand mount option has been deprecated and [ 91.314702][ T5890] and is ignored by this kernel. Remove the mand [ 91.314702][ T5890] option from the mount to silence this warning. [ 91.314702][ T5890] ======================================================= [ 91.421001][ T5901] mmap: syz.0.11 (5901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.175563][ T968] cfg80211: failed to load regulatory.db [ 92.208093][ T5890] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 92.868211][ T5918] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.844031][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15'. [ 95.881275][ T5926] block device autoloading is deprecated and will be removed. [ 96.009681][ T5926] syz.2.12: attempt to access beyond end of device [ 96.009681][ T5926] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 96.171145][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.276993][ T5936] bridge0: port 3(syz_tun) entered blocking state [ 96.284208][ T5936] bridge0: port 3(syz_tun) entered disabled state [ 96.292515][ T5936] syz_tun: entered allmulticast mode [ 96.305124][ T5936] syz_tun: entered promiscuous mode [ 96.312687][ T5936] bridge0: port 3(syz_tun) entered blocking state [ 96.319453][ T5936] bridge0: port 3(syz_tun) entered forwarding state [ 96.365717][ T5936] bridge0: port 3(syz_tun) entered learning state [ 96.388885][ T5936] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 96.457157][ T5931] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 97.578398][ T5943] loop1: detected capacity change from 0 to 512 [ 97.639428][ T5943] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #2: block 3: comm syz.1.19: lblock 0 mapped to illegal pblock 3 (length 1) [ 97.735607][ T5943] EXT4-fs (loop1): Remounting filesystem read-only [ 97.757724][ T5943] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.19: error -117 reading directory block [ 97.792842][ T5943] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 97.813104][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.998918][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.658694][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.669688][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.679947][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.690543][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.700513][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.711091][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.721016][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.731555][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.744938][ T5958] ipvlan2: entered allmulticast mode [ 98.750359][ T5958] batadv_slave_1: entered allmulticast mode [ 98.765166][ T5958] batman_adv: batadv0: Adding interface: ipvlan2 [ 98.771703][ T5958] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.797307][ T5958] batman_adv: batadv0: Interface activated: ipvlan2 [ 99.222275][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.612681][ T28] audit: type=1400 audit(1781066383.916:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5961 comm="syz.0.23" [ 101.635254][ T5978] loop3: detected capacity change from 0 to 64 [ 101.676267][ T5978] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 101.727368][ T5978] MINIX-fs: bad superblock [ 104.924738][ T5983] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 106.563607][ T6007] netlink: 96 bytes leftover after parsing attributes in process `syz.2.25'. [ 106.942390][ T6012] loop2: detected capacity change from 0 to 512 [ 107.593717][ T5769] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.898412][ T6008] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 110.297232][ T6028] loop0: detected capacity change from 0 to 128 [ 110.319982][ T6026] loop2: detected capacity change from 0 to 2048 [ 110.415774][ T6026] loop2: p2 p3 < > p4 < p5 > [ 110.425290][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.691938][ T5141] loop2: p2 p3 < > p4 < p5 > [ 111.833320][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 112.179669][ T5818] usb 4-1: config 0 has an invalid interface number: 197 but max is 0 [ 112.368003][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.473658][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 112.592522][ T5818] usb 4-1: config 0 has no interface number 0 [ 112.622433][ T5818] usb 4-1: config 0 interface 197 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.815315][ T5818] usb 4-1: string descriptor 0 read error: -71 [ 112.840948][ T5818] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 112.859011][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.920089][ T5818] usb 4-1: config 0 descriptor?? [ 112.972374][ T5818] usb 4-1: can't set config #0, error -71 [ 113.008176][ T5818] usb 4-1: USB disconnect, device number 2 [ 113.172020][ T6042] loop3: detected capacity change from 0 to 128 [ 113.265855][ T6042] hpfs: bad mount options. [ 113.402809][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.640903][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 113.652831][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 113.684797][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 113.707492][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.722523][ T5874] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 113.742035][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.770738][ T9] usb 1-1: Product: syz [ 113.780893][ T9] usb 1-1: Manufacturer: syz [ 113.796102][ T9] usb 1-1: SerialNumber: syz [ 113.826361][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 113.894929][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 113.914935][ T5874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.919440][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 113.943637][ T5874] usb 3-1: not running at top speed; connect to a high speed hub [ 113.978354][ T5874] usb 3-1: config 1 has an invalid interface number: 58 but max is 0 [ 114.004707][ T5874] usb 3-1: config 1 has no interface number 0 [ 114.034095][ T5874] usb 3-1: config 1 interface 58 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 114.063260][ T5874] usb 3-1: config 1 interface 58 has no altsetting 0 [ 114.083230][ T5874] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=c5.c9 [ 114.240746][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.250895][ T5874] usb 3-1: Product: syz [ 114.272077][ T5874] usb 3-1: Manufacturer: syz [ 114.284942][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 114.286971][ T5874] usb 3-1: SerialNumber: syz [ 114.364344][ T9] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 115.317216][ T5874] hdpvr 3-1:1.58: Could not find bulk-in endpoint [ 117.504953][ T5874] hdpvr: probe of 3-1:1.58 failed with error -12 [ 117.552914][ T5874] usb 3-1: USB disconnect, device number 2 [ 117.911303][ T5788] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 122.083324][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 122.099793][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 122.915995][ T28] audit: type=1400 audit(1781066406.266:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6082 comm="syz.1.42" [ 123.194710][ T6089] loop3: detected capacity change from 0 to 8 [ 123.235287][ T5874] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.262945][ T6089] SQUASHFS error: zlib decompression failed, data probably corrupt [ 123.287367][ T6089] SQUASHFS error: Failed to read block 0x9b: -5 [ 123.297487][ T6089] SQUASHFS error: Unable to read metadata cache entry [99] [ 123.312575][ T6089] SQUASHFS error: Unable to read inode 0x127 [ 123.455645][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.571682][ T6093] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 123.769555][ T6093] qrtr: Invalid version 46 [ 125.454276][ T6095] binder: 6094:6095 ioctl c018620c 200000000180 returned -1 [ 126.613477][ T5874] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 126.667614][ T5874] usb 2-1: can't read configurations, error -71 [ 127.047109][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 128.697641][ T6104] netlink: 64 bytes leftover after parsing attributes in process `syz.0.49'. [ 129.096627][ T6122] loop3: detected capacity change from 0 to 128 [ 130.752714][ T6128] netlink: 64 bytes leftover after parsing attributes in process `syz.0.52'. [ 131.120851][ T6139] loop2: detected capacity change from 0 to 164 [ 132.857123][ T6146] loop1: detected capacity change from 0 to 512 [ 133.039295][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.050687][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074169][ T6146] EXT4-fs: inline encryption not supported [ 133.080154][ T6146] EXT4-fs: Invalid want_extra_isize 3 [ 134.636896][ T5769] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.714045][ T5821] IPVS: starting estimator thread 0... [ 136.142130][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 136.172724][ T6143] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.219159][ T6156] IPVS: using max 26 ests per chain, 62400 per kthread [ 136.659172][ T6134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.52'. [ 136.719784][ T6134] gretap1: entered promiscuous mode [ 140.652468][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.067759][ T6178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.60'. [ 141.951208][ T6182] loop0: detected capacity change from 0 to 164 [ 143.362584][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.082439][ T6194] netlink: 'syz.3.70': attribute type 2 has an invalid length. [ 145.681960][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 145.692847][ T6194] netlink: 'syz.3.70': attribute type 2 has an invalid length. [ 145.788847][ T5874] usb 3-1: device descriptor read/all, error -71 [ 145.806927][ T6195] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 148.023414][ T6217] netlink: 64 bytes leftover after parsing attributes in process `syz.2.73'. [ 149.681935][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.874331][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.885923][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.909586][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.925137][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.935602][ T9] usb 4-1: Product: syz [ 149.939927][ T9] usb 4-1: Manufacturer: syz [ 149.948749][ T9] usb 4-1: SerialNumber: syz [ 149.965947][ T9] cdc_ncm 4-1:1.0: skipping garbage [ 149.981582][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 149.988479][ T9] cdc_ncm 4-1:1.0: bind() failure [ 150.004515][ T786] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.022221][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 150.029143][ T9] cdc_ncm 4-1:1.1: bind() failure [ 150.183536][ T9] usb 4-1: USB disconnect, device number 4 [ 150.205896][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 150.248182][ T786] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 150.284470][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.311617][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.331388][ T786] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 150.340735][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.358588][ T786] usb 3-1: config 0 descriptor?? [ 150.368139][ T786] pxrc 3-1:0.0: Could not find endpoint [ 150.396857][ T786] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 150.624876][ T5874] usb 3-1: USB disconnect, device number 5 [ 150.830712][ T6232] loop3: detected capacity change from 0 to 4096 [ 150.877236][ T6233] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.921465][ T786] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 151.209869][ T786] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 151.229461][ T786] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.249191][ T786] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 151.258808][ T786] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 151.267832][ T786] usb 2-1: Manufacturer: syz [ 151.282262][ T786] usb 2-1: SerialNumber: syz [ 151.351534][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.520987][ T786] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 151.548563][ T786] usb 2-1: USB disconnect, device number 4 [ 151.571596][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 151.586862][ T5874] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 151.598823][ T5874] usb 4-1: config 0 has no interface number 0 [ 151.617237][ T5874] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.630918][ T5874] usb 4-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.644930][ T5874] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 151.655232][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.667291][ T5874] usb 4-1: Product: syz [ 151.671827][ T5874] usb 4-1: Manufacturer: syz [ 151.676589][ T5874] usb 4-1: SerialNumber: syz [ 151.685436][ T5874] usb 4-1: config 0 descriptor?? [ 151.691308][ T5821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.702033][ T5874] redrat3 4-1:0.83: Couldn't find all endpoints [ 151.885018][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 151.898127][ T5821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.915831][ T5821] usb 3-1: config 6 has an invalid interface number: 4 but max is 1 [ 151.929539][ T5821] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 151.946808][ T5821] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 151.971570][ T786] usb 4-1: USB disconnect, device number 5 [ 151.977778][ T5821] usb 3-1: config 6 has no interface number 0 [ 151.998362][ T5821] usb 3-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 152.015112][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.024551][ T5821] usb 3-1: Product: syz [ 152.028790][ T5821] usb 3-1: Manufacturer: syz [ 152.037715][ T5821] usb 3-1: SerialNumber: syz [ 152.163627][ T6245] netlink: 64 bytes leftover after parsing attributes in process `syz.0.84'. [ 152.729393][ T5821] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 153.290620][ T5821] usb 3-1: USB disconnect, device number 6 [ 153.411916][ T5768] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.476703][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 153.486073][ T6261] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 153.494387][ T6261] netlink: 'syz.1.90': attribute type 2 has an invalid length. [ 153.545687][ T6261] netlink: 120 bytes leftover after parsing attributes in process `syz.1.90'. [ 153.664109][ T5768] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 154.161514][ T5821] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 154.470630][ T5821] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 154.548731][ T5821] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 154.642059][ T5821] usb 3-1: config 0 has no interface number 0 [ 154.705557][ T5821] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 154.808862][ T5821] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.910155][ T5821] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 155.005349][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.163092][ T5821] usb 3-1: config 0 descriptor?? [ 155.588842][ T5768] usb 1-1: config 0 has no interface number 0 [ 155.667664][ T6264] loop1: detected capacity change from 0 to 256 [ 156.101516][ T5768] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 156.120719][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.139114][ T5768] usb 1-1: config 0 descriptor?? [ 156.162456][ T5768] usb 1-1: can't set config #0, error -71 [ 156.171159][ T5768] usb 1-1: USB disconnect, device number 3 [ 156.179857][ T5821] usb 3-1: USB disconnect, device number 7 [ 156.359756][ T6266] loop0: detected capacity change from 0 to 256 [ 156.436648][ T6266] FAT-fs (loop0): Directory bread(block 64) failed [ 156.454183][ T6266] FAT-fs (loop0): Directory bread(block 65) failed [ 156.461958][ T6266] FAT-fs (loop0): Directory bread(block 66) failed [ 156.468627][ T6266] FAT-fs (loop0): Directory bread(block 67) failed [ 156.480052][ T6266] FAT-fs (loop0): Directory bread(block 68) failed [ 156.490133][ T6266] FAT-fs (loop0): Directory bread(block 69) failed [ 156.513608][ T6266] FAT-fs (loop0): Directory bread(block 70) failed [ 156.520227][ T6266] FAT-fs (loop0): Directory bread(block 71) failed [ 156.544618][ T6266] FAT-fs (loop0): Directory bread(block 72) failed [ 156.570706][ T6266] FAT-fs (loop0): Directory bread(block 73) failed [ 156.690923][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.899981][ T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.918452][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.940667][ T27] usb 4-1: Product: syz [ 156.956849][ T27] usb 4-1: Manufacturer: syz [ 156.975922][ T27] usb 4-1: SerialNumber: syz [ 156.996549][ T27] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 157.040091][ T6280] loop0: detected capacity change from 0 to 4096 [ 157.068535][ T6281] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.160158][ T786] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 157.173003][ T6283] loop1: detected capacity change from 0 to 64 [ 157.365113][ T59] ------------[ cut here ]------------ [ 157.371178][ T59] kernel BUG at fs/hfs/inode.c:449! [ 157.436481][ T59] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 157.442658][ T59] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 157.450062][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.460149][ T59] Workqueue: writeback wb_workfn (flush-7:1) [ 157.466188][ T59] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 157.471764][ T59] Code: c7 c1 00 73 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 73 31 97 e8 f0 f2 83 ff e9 62 fe ff ff e8 e6 b2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 157.491423][ T59] RSP: 0018:ffffc900015a7340 EFLAGS: 00010293 [ 157.497524][ T59] RAX: ffffffff825b78aa RBX: ffff888051758ea8 RCX: ffff88801aef1e00 [ 157.505531][ T59] RDX: 0000000000000000 RSI: ffffffff8d33a040 RDI: 0000000000000000 [ 157.513535][ T59] RBP: ffffc900015a74d0 R08: ffff88801aef1e00 R09: 0000000000000003 [ 157.521539][ T59] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 157.529551][ T59] R13: 1ffff920002b4e6c R14: ffff888051758e58 R15: 0000000000000000 [ 157.537564][ T59] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 157.546525][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.553141][ T59] CR2: 0000001b2e01eff8 CR3: 0000000025ab9000 CR4: 00000000003506f0 [ 157.561142][ T59] Call Trace: [ 157.564458][ T59] [ 157.567439][ T59] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 157.572858][ T59] ? __rwlock_init+0x150/0x150 [ 157.577668][ T59] __writeback_single_inode+0x705/0xec0 [ 157.583261][ T59] writeback_sb_inodes+0x7cd/0xf50 [ 157.588432][ T59] ? queue_io+0x550/0x550 [ 157.592814][ T59] ? rcu_is_watching+0x15/0xb0 [ 157.597622][ T59] wb_writeback+0x46a/0xbf0 [ 157.602172][ T59] ? queue_io+0x3d1/0x550 [ 157.606562][ T59] ? percpu_ref_tryget+0x250/0x250 [ 157.611713][ T59] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 157.617737][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.622987][ T59] wb_workfn+0x400/0xe60 [ 157.627271][ T59] ? try_to_wake_up+0x70a/0x1190 [ 157.632250][ T59] ? inode_wait_for_writeback+0x230/0x230 [ 157.638017][ T59] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 157.644039][ T59] ? read_lock_is_recursive+0x20/0x20 [ 157.649446][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.654689][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 157.660454][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 157.666208][ T59] process_scheduled_works+0xa5d/0x15d0 [ 157.671805][ T59] ? worker_attach_to_pool+0x380/0x380 [ 157.677306][ T59] ? assign_work+0x3d2/0x5d0 [ 157.681934][ T59] worker_thread+0xa55/0xfc0 [ 157.686579][ T59] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 157.692518][ T59] ? _raw_spin_unlock+0x40/0x40 [ 157.697408][ T59] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 157.703347][ T59] kthread+0x2fa/0x390 [ 157.707464][ T59] ? pr_cont_work+0x560/0x560 [ 157.712219][ T59] ? kthread_blkcg+0xd0/0xd0 [ 157.716849][ T59] ret_from_fork+0x48/0x80 [ 157.721302][ T59] ? kthread_blkcg+0xd0/0xd0 [ 157.725914][ T59] ret_from_fork_asm+0x11/0x20 [ 157.730717][ T59] [ 157.733781][ T59] Modules linked in: [ 157.760247][ T59] ---[ end trace 0000000000000000 ]--- [ 157.765945][ T59] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 157.773822][ T59] Code: c7 c1 00 73 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 73 31 97 e8 f0 f2 83 ff e9 62 fe ff ff e8 e6 b2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 158.340326][ T786] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 158.347396][ T786] ath9k_htc: Failed to initialize the device [ 158.421940][ T5768] usb 4-1: USB disconnect, device number 6 [ 158.548594][ T59] RSP: 0018:ffffc900015a7340 EFLAGS: 00010293 [ 158.569838][ T5768] usb 4-1: ath9k_htc: USB layer deinitialized [ 158.586228][ T59] RAX: ffffffff825b78aa RBX: ffff888051758ea8 RCX: ffff88801aef1e00 [ 158.673264][ T59] RDX: 0000000000000000 RSI: ffffffff8d33a040 RDI: 0000000000000000 [ 158.718515][ T59] RBP: ffffc900015a74d0 R08: ffff88801aef1e00 R09: 0000000000000003 [ 158.808664][ T59] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 158.893701][ T59] R13: 1ffff920002b4e6c R14: ffff888051758e58 R15: 0000000000000000 [ 158.950706][ T59] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 159.013785][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.065915][ T59] CR2: 0000001b2e002ff8 CR3: 0000000025ab9000 CR4: 00000000003506f0 [ 159.089003][ T59] Kernel panic - not syncing: Fatal exception [ 159.095700][ T59] Kernel Offset: disabled [ 159.100037][ T59] Rebooting in 86400 seconds..