last executing test programs: 12.728067493s ago: executing program 3 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 12.577471158s ago: executing program 3 (id=150): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x15, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@binder={0x73622a85, 0x100b, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 12.577275878s ago: executing program 1 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc0) madvise(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x9) socket(0x2, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x5, @pix={0x8, 0x9, 0x50565559, 0x0, 0x119, 0x1, 0x5, 0x80, 0x1, 0x7}}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000340)="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") 11.826126586s ago: executing program 1 (id=152): r0 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) 9.232764539s ago: executing program 1 (id=159): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.201647826s ago: executing program 2 (id=160): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) 8.159816707s ago: executing program 1 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x57, 0x4c, 0x80, 0x5, 0x2, 0x3b, 0x7fffffff, 0x31, 0x40, 0xe9, 0x5, 0x4, 0x38, 0x1, 0x800, 0x1, 0xeea5}, [{0x7, 0x5, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x8, 0x3}]}, 0x78) 6.215123537s ago: executing program 1 (id=162): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x38000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execveat$binfmt(r0, 0x0, &(0x7f0000000340), 0x0, 0x100) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 5.475758593s ago: executing program 3 (id=164): syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905027677"], 0x0) 4.949676112s ago: executing program 2 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000001480)=""/4082, 0xff2) 4.793811298s ago: executing program 2 (id=167): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000d80)="f2435f0100088000008508004dae", 0xe, 0x45, &(0x7f0000000100)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.399542502s ago: executing program 0 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) 4.345492584s ago: executing program 2 (id=172): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8fffb) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 4.17345652s ago: executing program 0 (id=173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf2514000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x20008000) 4.116707622s ago: executing program 0 (id=174): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) listen(0xffffffffffffffff, 0x90004) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2.924692545s ago: executing program 3 (id=175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) 1.11146487s ago: executing program 1 (id=176): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000200)='./file0\x00', 0x0, r1) 377.147667ms ago: executing program 0 (id=177): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 328.527988ms ago: executing program 2 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 228.362522ms ago: executing program 0 (id=179): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000dc0)={0x2}) 127.681856ms ago: executing program 3 (id=180): sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) linkat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) 56.301698ms ago: executing program 0 (id=181): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) 0s ago: executing program 2 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="e24fc801dffdf37981a92f7f4005844301258a0ec141f1ec014bd9d03d1db52a75dfb8e04daddc3fac31adda350235262d9e1b8e20d406b97372033032d7623ff84bbf544a91c12eb644b323e9653fd76852c025e718cc91d9e9e274a7ed2dc15d8efec8d11a7983cdc8f3c39dbf764fc28873b760c435743929653c359ee706dcf2658403b25fbf3382f179562dc64883887ead6a916ef430ee4f67e21a3f01a3a35627bfb2f6ba204da0280c9f2fb5443879616a431884af82606286c4760a9ef4aa264e0000137f28dbe594332062120a76b565165987eef46c1d523f0fba98cd51f14537e313952f76574e3137aa1b41ae8e16f4087ddbaa7de98ca609a1b01b64ab10613204e4d18f376138fe7735ffb2fa09843922ce5a365e1e84286f09c432e0f521be13182256dcf534e03efb1735e55a8dce53e32ac669207d21e3b79414a8e61204f7c4173f2381e4c5e6cce12f6bae60d5bff199d5da50e40f87efbcec332173caba740a1b12c915bccf04940399b9a72a7dca4b8c7d46a2c444f6c7e30cf1f811a4a31cabb9b512a949105e2aa4081a3d613ad9ae4cf209d684e4b27c204bc5a395da552b8638df42d4c3522b64eaf11c988fce5634757ed41b39c338aea3ed2171e86fd34cde22dc3519edd2108641f3c3d4ca2016524b8f7d67e80ef5474d0a4a157eca9e5c0c5fcd7f459f64e91effe3bbcdcf9aba5704952cf0b82b1b0d4533a9c7ddc914bc7dfd8eea591be5806408191e3cca1cd6101f575b7c7206cd219b9f379fc3d03c3c867e5c36a8fcc75e86988a1897876b5a3bb2b3e102a742ebaeb50e08096c1990fa8d8755c187f86213f3cfc322f7997da73594e30f68a1da5768201916dfd52711ad79caae751260cc054dda58307f4031aebc75514795e6d7ae7725c27f7bc8f1e2115603e1f8b18517a74ddd901752a194cfb37535c949f4a5eefc98b231e03fd7a5d7643817567c7fbdcad37365a1a063c11bfd7e6474e9608391f3f3ebcd97a3ad7a9873d8615a9a4dac09ebc528b9277f71d5c2e6012645c643764319941206e6957987b5423b3864e6acb89c0e0371d66c5e16dfd920305cf5dc39ea0d48cea652236f3492f5b60a2a648e8ac61bf13811a81be593e430f504d0fe3d38222acd10e188605410900c55f203e0f6d553cf4e7cdfdfdbf4b60ee166c8be15757c6042f7f7b0c0c75932f795b075ba4116f1336622bafc47e58206255af610b3a7e88fed94a1c4a8b29e7e379b084431d5e059c0d0342678ef5b2ad08d10be3b48e4a1d0de16e8ca0175e1453fa15f8086f7b93d15e5f0769d56cbcec255fd1e82c43a61d50b893a8e7bc84c7cc1b9cffbc4d8f8d703d1ca879acf93e82f35a534665bd5a5a9e13e35ed00d796b830c45f87ba6c90857d05774506611c940e391752237af000473cfff41236801a9e78c48206e03e2a4b1c9164eb1f8cfb71d1559d3b5650327868ef87906b5a0e05470b0655f51090a57a65895608866ac0e008c44898ea0fa968ae510b561b8ebb9f0a38c2572f93aa6a8f5aaab1ff62ad761af234379adfc397c186a99bbecd534266358c5e053de4698e37fb0c512d72492c6f0d18e686c21665224d23fb6b15670e235a96bab63d63df51624f73d78fc38e0c8956882ebbbe0207f3b13be74b70ef29e64912cac49dd90a7f4d5fd09bec08dcb8413578f9e4456079c3673ffd33b366d4a203af63f25ba792a722a4d36749c6724e0b37cfd71761f3ff122861e362aab7a26a8c8090b65ab080535fa912d5b58a9b65410b94acc42396796e35a308cac7594439f4ed2afc8cc4676159751d9ce63ff894a7cad95b375f852d9bd493719ab9bac41cd9ec817b835628a6a9f4869fc9ce72ea3fc7119341ceaf23e85f7a990b7eeb35ef2ef2c84f6fafa0c186a0b2490c72cfe2ce7607634e0d651e4c87514a177300f4f3b762e386cc1522e9b859fb9297329a73b89b8a97184864823d1829fe7a6bf30c69f24b61338e3f341e05e3f70ec6cd6f3544652f69ade293dc896836632271cde36ebb6f515dc8d13121def9d2911ed0d19f2fc31a12b1de3b43dbfb32c0df664c85d4b978f3a41b43546844c8581590dade2db066d5a948a386438232b0be334232800fd164aac8047a96b85356820597a0ef21b2df300a8ef2a08155b7a8eb7793e5ec768db868432c9d65cd748369f24909862131553af695be43c95f2e65a9ef1f8fbad3d03bee4640639c0351c6ed58113b86ec0530aff32f4e4b786285ce72afd6dce83b3a82f58a0bc62735e3402848690d2865438c81f174588e6046ba95935ec0dfbbbb87dda17d8fdcf07b8322bdf18b1421293ead6a8b38119724c9c122f457f85129cbd50338a7e3194418c00ed91cd39878f7753477a17856281ae743c8dcdfc7d5c7142348f9fae4f7767f2c89c394c3fd5d8f261bde3b2055ccddf05c36643e21ec542a62be492501b470813fcedf01c876da0e1e822c3867f32951053f2963b5d1f90e713df0b2c526f36e685b4153d4ae4e8c607df1308c84e500c0bd9fe80dc3cf28187a39fd09643afb25eaa9411f3ce6304dc8bfd02afc9a6bad59887a1cad44a1f613a0779059a90248f09e357af291b1cce42cb9ac766dac70e599c1bbba4a58715adf2426a865eb1e0b80f10602db39c400b45131700490a9c38345022acc79851c2368bc7d191bc1f995722c564198669a68c971f60779e6983508a7c8077cdc7677d9a8b70b8fd1183f57cbc2d653ef6e96110c0c6730be7add59392b4082a6478447cc307d35512dfb2c4e27122b9749eeed9b5a5906f99ee57d7b565822bd4d78aed8f1567409a59ae77b3a1552a5cdb1558ff3ffd2b4cd0e141fce5ad11de5509c6dac5858bbb222bc403e3a307294afbe9633e162bfc5231284f58d475ef19cc1012cb4a81bd26e7e24509ecb5bd859a04a8e39f373188fc58573a52bf8a5de50aa082a4ad28202d01da2f0c7d3a6d1d3b9c3dab9d3ad9a663af4894904236632514d668e5f5016a350ae5accae2902cb9cba8d5262abc4e934329f410739831d447b798bb1da19bd3c98e90f43e54b8911ab9da8d594c9d0617396a53469ec2eb6ca0843ffd39e65b79bf856c755d8fda71b66e16cba537adac14de21a16a379513555d13ee6e021e6bb1cb5db35a7cb0162c3dbf631e8b6b42cc98fba74396971be184b910dbf0fbc29c0e45acfe59c789a134bcc01f7c3b2513d4ef988e7f66e5002d9ee8766870b9502d173953b78b654f020349b7af7845462822a6c78a63416606a265389216f141ca8269a11f18edf1d11de7f11906b787a0189a4fe5a55bb0f78c25319583b5f81c4ad25dd4544d35a2f8afce5b8a117b16104c45997f9ad31421414006f158881e9c7f553f3b7364e274bff39236720d67346e8270b2fd6b5b33c0cece3251b62ec09c709ad1adee626e43a54356b803adf23e45ddbe2bbade69974ca43c3f2246389612398a5247678299995592002f369b0a779ffa60d0785edecab597cb6fa11e2ce68d5e956c5fe95c12ce24cb334a2d1fe9e63491b7d85d58ba4150df6c42f29223eaa607837fee3c71667d7c4a69d5bd2a88e548429e4630c59c38689a52cbc9099f303d680c053cce1a0b24c17a918f7dd08a9348a414e30c8c91e9680facb185914018e1c5a090cd00578c837d9f69e49eae3e45326b679678cca81ca20cf3bfa8e4e548dc446d168382695319ea9fdc14bf29c2b15e2acb925f7db4723f6b382efcbdb10f00837278564a2d0e0da63b755206bdf69faba7e5d7406ec324ca089729a68ca29cbccd17256cb465b91e718b3b64429b8a8e70a72d85b470d85f4b8169ebc74809334db04384c3c2887f09374e60cb3d5c93f3ce5077bcea293b37215ba345f6a30b1d6e08c1cf7024b65ecac5063e177d9af7f687a35c377871d87b00fe7c453199e5c0588a49bf9981651f57468bb37d1812cce02cf1a6df234cf50aabb65959fb7863384d46cbf43600aeb2858a8bea733eec75bcf02f2dfc0c2df6b6c0f807236e67cf6e7253a6f0582cad219daad67c91b8c2f38ad91a9db3bc284f6301f28ad3d1ade08cfc4a8b63268de502d7b4cad5973ce2867a534e576789fe2bd60b15da33d7a5a5e728f6e5ab7052c4636439258979a804bf67aec5546343d7cbee90b4be9d5ef0775d64bfade2daae18d7de4240dd1d88ff3816f2d5c871174b3b48e9fab898abd4cd2df8cb1c3cfff889594a3f08cb935031edbe34aab3433ffd50263a406deef158bbabfa2ec70e79c761d95fcfbef0800c95413068b3789c6b12de5ebe9b414e65ce4f86a6bbccd5ec8e4e220f8ad07255abbaef719ebe1e5d066db4dd1f639cb156c34755eb14053824a1003e97ee54e8dab35f441ee563d80d3163a7b8f71d4f17e240cfae9f2e50c164cf373bb174f5dadafe2430a17be757e30f251d5d60863526a8f46addb932c8170c4a383348c5441aa353e5f1181482d4d0cc0e5d2809c11ee1fac29230c907926c2d3fa55298ae9835c46218650421497d060d15a4194c4d7382a886333375098156a9f0fd6b1d0d94933bb6f285fe51d4aa3037739f143ba20f9b326565f6db49787d1aeb30055ce588dd3c008c0bc1a08935c991067d63003b68b9e2db95360d8aaf2103bb5142c590bb799b268488febc7414b9ae8e108ca4ab4f031adbb9fbe4631c29adb14fb9726df3c6192a3e81b6c34d68e15ee309503ccc1ab240d4ce3c9a099cd7f8782eea9bd1c7005582b9c1fe08030b47958865723652fed003c90703e07f9f1782e33f3bf3d0b83691cd5970fb4af65afa2244bff41e93fa24c33c26c43c93c33a2144aac437a4ab2b4f498104278ec5f2cd38de61eb8b436f5a9dbc3d8b2405ff0598cbcaa964377f61daaf935c42e0db4567520cfee195da1c6090d62031dd0865b2f5aa88be1746a761e3a64b78de338b8996136bbd6b859eb730aa8ab1f68bb5a02b713d8b303ab2ef1e5433d225b0dd485d40a049a1953b488df5314fdbc1c654132498838043c35c7b168e786b0f35a04ec4417968c5561c45735cc09163e8fdbbe67a4c04d672948037e957968c6bf672668d1f6369475d4a238f46af939dbca37cc96ae88b152c1b8b524883e296e5e915a928e9a54268c28e14a85c87fe3bde0e9175dd2eb2645852464ddeae29aefc01d05ef668914829f340f6b14a7bc0f2ce4114f1bef1e2afc37583670a900c58affc6c55bb69e737e5fd02322536ec1e4249f8cca7171394d97c930656beb437ea1b7ac8f6b69d8c1499371deeff7608dde446d4a50f29ce015c655885fcc090aeed40d52390ef952c6b9f937197718aae27fe924c419d1468b45bc0e88688425c3a451dac67f29460fce27a5b753f60b244c1832e9b485e321e8d8d4f547eda56680d9d01aa6d4d7881ab760f926157315a3fcb4d7f9653b91270fc43637420215c71274e4effaf6b67fea48c05393272e288e103e28d26eb39fcb9afdef67686485e90e605b45d2f36a39b4973426f843c2db1e861c67d7c2ca2b8e92ca98ad1297d3fd913258081fff78d981097a2c22b0a9d881f649582e49fd9baaaa89d0d7091f9cfeb8bec3c9b7dfb85e53bee2fb051ff0f7d57ef4af134a7ca9ab91271411a0c95be1af414689425f985faa808a2520c96403788d71af4314023af7a2761ee7ba7e135edfaa51f9f89caa784d853886c147d11f3ccab318250aa65d366396b5dfcda0dda9f8cca5ad6815252ebc061c47f871785e0b3edbdcfb2d74c6fa3eaabaf9f3", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e2", 0x3f}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2", 0x2e}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 72.129618][ T5757] cgroup: Unknown subsys name 'net' [ 72.275334][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.572932][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.579653][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.704961][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.315170][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.323422][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.334180][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.342831][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.350693][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.358809][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.366373][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.367207][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.375950][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.388442][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.389319][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.399010][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.404409][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.417503][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.425237][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.432649][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.441154][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.449979][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.457498][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.468910][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.472473][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.485745][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.493223][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.501440][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.869535][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 75.982512][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.999157][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.062798][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.121697][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.129629][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.136914][ T5771] bridge_slave_0: entered allmulticast mode [ 76.143984][ T5771] bridge_slave_0: entered promiscuous mode [ 76.173208][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.180441][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.187684][ T5771] bridge_slave_1: entered allmulticast mode [ 76.194753][ T5771] bridge_slave_1: entered promiscuous mode [ 76.273170][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.280783][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.288000][ T5770] bridge_slave_0: entered allmulticast mode [ 76.295081][ T5770] bridge_slave_0: entered promiscuous mode [ 76.331424][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.338765][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.345959][ T5770] bridge_slave_1: entered allmulticast mode [ 76.353501][ T5770] bridge_slave_1: entered promiscuous mode [ 76.360219][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.367355][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.374706][ T5772] bridge_slave_0: entered allmulticast mode [ 76.382337][ T5772] bridge_slave_0: entered promiscuous mode [ 76.390935][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.398107][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.405396][ T5772] bridge_slave_1: entered allmulticast mode [ 76.412237][ T5772] bridge_slave_1: entered promiscuous mode [ 76.422111][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.433666][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.443111][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.450426][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.457609][ T5769] bridge_slave_0: entered allmulticast mode [ 76.464549][ T5769] bridge_slave_0: entered promiscuous mode [ 76.501134][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.508431][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.515608][ T5769] bridge_slave_1: entered allmulticast mode [ 76.522557][ T5769] bridge_slave_1: entered promiscuous mode [ 76.574820][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.586586][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.599317][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.610609][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.625568][ T5771] team0: Port device team_slave_0 added [ 76.633622][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.652775][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.672830][ T5771] team0: Port device team_slave_1 added [ 76.715669][ T5770] team0: Port device team_slave_0 added [ 76.734634][ T5772] team0: Port device team_slave_0 added [ 76.741964][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.749553][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.775697][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.797066][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.804166][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.830545][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.843399][ T5770] team0: Port device team_slave_1 added [ 76.852743][ T5772] team0: Port device team_slave_1 added [ 76.871010][ T5769] team0: Port device team_slave_0 added [ 76.913321][ T5769] team0: Port device team_slave_1 added [ 76.927572][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.937833][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.964407][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.003361][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.017635][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.046492][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.061197][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.068213][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.094445][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.106251][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.113760][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.139684][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.161203][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.168226][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.195869][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.214514][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.221650][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.247718][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.268105][ T5771] hsr_slave_0: entered promiscuous mode [ 77.276483][ T5771] hsr_slave_1: entered promiscuous mode [ 77.346558][ T5770] hsr_slave_0: entered promiscuous mode [ 77.353043][ T5770] hsr_slave_1: entered promiscuous mode [ 77.359813][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.367639][ T5770] Cannot create hsr debugfs directory [ 77.407924][ T5769] hsr_slave_0: entered promiscuous mode [ 77.414713][ T5769] hsr_slave_1: entered promiscuous mode [ 77.421179][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.429596][ T5769] Cannot create hsr debugfs directory [ 77.441564][ T5772] hsr_slave_0: entered promiscuous mode [ 77.448193][ T5772] hsr_slave_1: entered promiscuous mode [ 77.456645][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.464276][ T5772] Cannot create hsr debugfs directory [ 77.569513][ T5089] Bluetooth: hci3: command tx timeout [ 77.575663][ T5783] Bluetooth: hci0: command tx timeout [ 77.575678][ T5784] Bluetooth: hci2: command tx timeout [ 77.587641][ T5780] Bluetooth: hci1: command tx timeout [ 77.836321][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.847823][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.858121][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.868202][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.942846][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.957755][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.967385][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.982810][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.036215][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.076757][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.087232][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.103945][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.186522][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.211728][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.222035][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.234479][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.295405][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.307072][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.350581][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.365645][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.373213][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.400170][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.417784][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.425127][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.447478][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.454677][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.486400][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.493557][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.520849][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.581251][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.636708][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.667549][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.695725][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.703012][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.752906][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.767212][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.774387][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.817935][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.825151][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.886730][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.893939][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.918191][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.932665][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.091526][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.113750][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.270444][ T5772] veth0_vlan: entered promiscuous mode [ 79.306474][ T5772] veth1_vlan: entered promiscuous mode [ 79.336793][ T5771] veth0_vlan: entered promiscuous mode [ 79.362571][ T5771] veth1_vlan: entered promiscuous mode [ 79.422642][ T5771] veth0_macvtap: entered promiscuous mode [ 79.437371][ T5772] veth0_macvtap: entered promiscuous mode [ 79.450832][ T5771] veth1_macvtap: entered promiscuous mode [ 79.466130][ T5772] veth1_macvtap: entered promiscuous mode [ 79.477379][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.496277][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.528006][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.550020][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.564180][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.576504][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.596436][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.621293][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.631157][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.641514][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.650649][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.651071][ T5780] Bluetooth: hci1: command tx timeout [ 79.664990][ T5783] Bluetooth: hci0: command tx timeout [ 79.667382][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.670878][ T5783] Bluetooth: hci3: command tx timeout [ 79.682338][ T5089] Bluetooth: hci2: command tx timeout [ 79.691916][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.703658][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.737232][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.746718][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.755663][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.765815][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.804652][ T5769] veth0_vlan: entered promiscuous mode [ 79.834399][ T5769] veth1_vlan: entered promiscuous mode [ 79.930608][ T5770] veth0_vlan: entered promiscuous mode [ 79.981669][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.993495][ T5769] veth0_macvtap: entered promiscuous mode [ 79.998611][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.006816][ T5769] veth1_macvtap: entered promiscuous mode [ 80.069971][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.080797][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.091667][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.102381][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.115245][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.127867][ T5770] veth1_vlan: entered promiscuous mode [ 80.147331][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.160139][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.170541][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.182023][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.194053][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.206960][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.209360][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.222524][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.233821][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.238231][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.251090][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.276394][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.285300][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.345474][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.347015][ T5770] veth0_macvtap: entered promiscuous mode [ 80.380103][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.385502][ T5770] veth1_macvtap: entered promiscuous mode [ 80.504610][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.537562][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.796361][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.804469][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.817476][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.831391][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.124819][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.915689][ T5780] Bluetooth: hci1: command tx timeout [ 81.917195][ T5784] Bluetooth: hci3: command tx timeout [ 81.921598][ T5783] Bluetooth: hci0: command tx timeout [ 81.927363][ T5089] Bluetooth: hci2: command tx timeout [ 81.941238][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.954275][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.968806][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.981389][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.027024][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.046110][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.057614][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.092725][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.119578][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.158394][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.185687][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.225116][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.239850][ T5847] syz.1.6[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.273903][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.327749][ T5847] loop1: detected capacity change from 0 to 16 [ 82.341661][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.443307][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.445207][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.010623][ T5783] Bluetooth: hci1: command tx timeout [ 84.016970][ T5783] Bluetooth: hci0: command tx timeout [ 84.022554][ T5783] Bluetooth: hci2: command tx timeout [ 84.028088][ T5783] Bluetooth: hci3: command tx timeout [ 84.059704][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.113854][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.123189][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.258941][ T5854] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 84.265614][ T5854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.273410][ T5854] vhci_hcd vhci_hcd.0: Device attached [ 84.312355][ T5854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.698466][ T5873] tipc: Started in network mode [ 84.703628][ T5873] tipc: Node identity 84e, cluster identity 4711 [ 84.710107][ T5873] tipc: Node number set to 2126 [ 84.739656][ T5811] vhci_hcd: vhci_device speed not set [ 85.484075][ T5864] vhci_hcd: connection closed [ 85.485584][ T2915] vhci_hcd: stop threads [ 85.514469][ T2915] vhci_hcd: release socket [ 85.539235][ T2915] vhci_hcd: disconnect device [ 85.548795][ T5811] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 85.557234][ T5811] usb 39-1: enqueue for inactive port 0 [ 85.688581][ T5811] vhci_hcd: vhci_device speed not set [ 86.222855][ T5878] loop0: detected capacity change from 0 to 32768 [ 86.254017][ T5878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (5878) [ 86.318701][ T5878] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.395489][ T5878] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 86.443133][ T5878] BTRFS info (device loop0): using free space tree [ 86.685388][ T5878] BTRFS info (device loop0): enabling ssd optimizations [ 86.725962][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 86.735097][ T5878] BTRFS info (device loop0): auto enabling async discard [ 86.869983][ T5880] loop1: detected capacity change from 0 to 32768 [ 86.884499][ T5880] ======================================================= [ 86.884499][ T5880] WARNING: The mand mount option has been deprecated and [ 86.884499][ T5880] and is ignored by this kernel. Remove the mand [ 86.884499][ T5880] option from the mount to silence this warning. [ 86.884499][ T5880] ======================================================= [ 86.919358][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.043372][ T5880] JBD2: Ignoring recovery information on journal [ 87.129605][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 87.135904][ T5880] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.343496][ T5880] syz.1.11 (5880) used greatest stack depth: 18960 bytes left [ 87.542689][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 87.549486][ T5906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 88.284225][ T5906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 88.672035][ T5918] loop1: detected capacity change from 0 to 512 [ 88.754266][ T5918] EXT4-fs: Ignoring removed bh option [ 88.786899][ T5922] loop2: detected capacity change from 0 to 2048 [ 90.538335][ C0] sched: RT throttling activated [ 90.548650][ T27] cfg80211: failed to load regulatory.db [ 90.631558][ T5918] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 91.556999][ T5922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.643195][ T5921] loop0: detected capacity change from 0 to 4096 [ 91.651228][ T5918] EXT4-fs (loop1): 1 truncate cleaned up [ 91.688016][ T5918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.850389][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.290556][ T5940] No such timeout policy "syz1" [ 93.400443][ T5928] loop2: detected capacity change from 0 to 32768 [ 93.557382][ T5928] JBD2: Ignoring recovery information on journal [ 93.671362][ T5928] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.011674][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 94.162892][ T5944] loop1: detected capacity change from 0 to 32768 [ 94.201222][ T5944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.24 (5944) [ 94.270620][ T5944] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.301294][ T5944] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 94.338507][ T5944] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 94.377983][ T5944] BTRFS info (device loop1): trying to use backup root at mount time [ 94.396816][ T5944] BTRFS info (device loop1): setting nodatasum [ 94.435683][ T5944] BTRFS info (device loop1): enabling ssd optimizations [ 94.460628][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 94.479369][ T5944] BTRFS info (device loop1): using spread ssd allocation scheme [ 94.507467][ T5944] BTRFS info (device loop1): turning on flush-on-commit [ 94.537966][ T5944] BTRFS info (device loop1): force zlib compression, level 3 [ 94.545882][ T5944] BTRFS info (device loop1): using free space tree [ 94.820925][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 94.885136][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 94.908566][ T28] audit: type=1800 audit(1775259686.012:2): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.24" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 94.927645][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 95.023589][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 95.097511][ T5979] loop2: detected capacity change from 0 to 64 [ 95.188815][ T5979] process 'syz.2.30' launched './file0' with NULL argv: empty string added [ 95.284049][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.707492][ T5988] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure [ 95.800433][ T5994] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.366417][ T5990] loop3: detected capacity change from 0 to 32768 [ 96.415883][ T5990] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.35 (5990) [ 96.496116][ T5990] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.508228][ T5990] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 96.568477][ T5990] BTRFS info (device loop3): setting nodatasum [ 96.590373][ T5990] BTRFS info (device loop3): force zlib compression, level 3 [ 96.647396][ T5990] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 96.670337][ T5990] BTRFS info (device loop3): use lzo compression, level 0 [ 96.707790][ T5990] BTRFS info (device loop3): turning on flush-on-commit [ 96.751616][ T5990] BTRFS info (device loop3): enabling auto defrag [ 96.766491][ T5990] BTRFS info (device loop3): max_inline at 4096 [ 96.783293][ T5990] BTRFS info (device loop3): using free space tree [ 97.487893][ T5990] BTRFS info (device loop3): enabling ssd optimizations [ 98.174189][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.402181][ T6024] loop1: detected capacity change from 0 to 32768 [ 98.428761][ T6024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.38 (6024) [ 98.467980][ T6024] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.511487][ T6024] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.548477][ T6024] BTRFS info (device loop1): force clearing of disk cache [ 98.566920][ T6024] BTRFS info (device loop1): metadata ratio 0 [ 98.591824][ T6024] BTRFS info (device loop1): enabling ssd optimizations [ 98.606720][ T6024] BTRFS info (device loop1): using spread ssd allocation scheme [ 98.629325][ T6024] BTRFS info (device loop1): using free space tree [ 98.818441][ T6024] BTRFS info (device loop1): auto enabling async discard [ 98.871992][ T6024] BTRFS info (device loop1): rebuilding free space tree [ 99.277570][ T5771] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.398757][ T6026] loop0: detected capacity change from 0 to 32768 [ 99.432181][ T6026] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.40 (6026) [ 99.490610][ T6026] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.539603][ T6026] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 99.568766][ T6026] BTRFS info (device loop0): force clearing of disk cache [ 99.610666][ T6026] BTRFS info (device loop0): force zlib compression, level 3 [ 99.618142][ T6026] BTRFS info (device loop0): enabling auto defrag [ 99.683177][ T6026] BTRFS info (device loop0): max_inline at 0 [ 99.711626][ T6026] BTRFS info (device loop0): enabling disk space caching [ 99.738503][ T6026] BTRFS info (device loop0): disk space caching is enabled [ 100.468437][ T6026] BTRFS info (device loop0): enabling ssd optimizations [ 100.498565][ T6026] BTRFS info (device loop0): auto enabling async discard [ 100.559866][ T6026] BTRFS info (device loop0): rebuilding free space tree [ 100.665549][ T6026] BTRFS info (device loop0): disabling free space tree [ 100.717597][ T6026] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.791701][ T6026] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.840009][ T5773] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.209020][ T5773] usb 2-1: Using ep0 maxpacket: 8 [ 102.344465][ T5773] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 102.507544][ T5773] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 102.590307][ T5769] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.213431][ T5773] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.258499][ T5773] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 103.297863][ T5773] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 103.350940][ T5773] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.419675][ T5773] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.479613][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.630863][ T5773] usbtmc: probe of 2-1:16.0 failed with error -22 [ 103.652143][ T28] audit: type=1326 audit(1775259694.762:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 103.715387][ T28] audit: type=1326 audit(1775259694.782:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 103.768640][ T5773] usb 2-1: USB disconnect, device number 2 [ 103.860728][ T28] audit: type=1326 audit(1775259694.792:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 103.958692][ T28] audit: type=1326 audit(1775259694.792:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 103.990271][ T28] audit: type=1326 audit(1775259694.792:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 104.028713][ T28] audit: type=1326 audit(1775259694.792:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 104.125297][ T28] audit: type=1326 audit(1775259694.792:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 104.186970][ T28] audit: type=1326 audit(1775259694.792:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 104.240127][ T28] audit: type=1326 audit(1775259694.792:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213019c819 code=0x7ffc0000 [ 104.480256][ T6097] loop1: detected capacity change from 0 to 64 [ 104.912636][ T6105] loop1: detected capacity change from 0 to 512 [ 104.918437][ T5811] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.964607][ T6105] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.998178][ T6105] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.066294][ T6105] EXT4-fs (loop1): 1 truncate cleaned up [ 105.102099][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.119541][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.128406][ T5811] usb 4-1: config 0 has no interfaces? [ 105.140664][ T5811] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.150141][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.158194][ T5811] usb 4-1: Product: syz [ 105.163105][ T5811] usb 4-1: Manufacturer: syz [ 105.170552][ T5811] usb 4-1: config 0 descriptor?? [ 105.392419][ T5811] usb 4-1: USB disconnect, device number 2 [ 105.905108][ T28] audit: type=1800 audit(1775259697.002:12): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 106.108251][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.368922][ T5811] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.665979][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.677504][ T5811] usb 4-1: config 0 has no interfaces? [ 106.712343][ T5811] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.722751][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.746881][ T5811] usb 4-1: Product: syz [ 106.873917][ T5773] IPVS: starting estimator thread 0... [ 107.230854][ T5811] usb 4-1: Manufacturer: syz [ 107.260638][ T5811] usb 4-1: config 0 descriptor?? [ 107.348611][ T6120] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.386550][ T6122] loop1: detected capacity change from 0 to 1024 [ 107.505924][ T5811] usb 4-1: USB disconnect, device number 3 [ 107.760715][ T6128] loop1: detected capacity change from 0 to 4096 [ 107.811272][ T6130] loop0: detected capacity change from 0 to 1024 [ 107.921302][ T6128] EXT4-fs: Ignoring removed orlov option [ 107.945605][ T6128] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.004737][ T6128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.368686][ T6137] syzkaller0: entered promiscuous mode [ 108.386716][ T6137] syzkaller0: entered allmulticast mode [ 108.472681][ T6128] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 108.765438][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.404710][ T6153] loop3: detected capacity change from 0 to 2048 [ 109.455334][ T6153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.607028][ T6157] loop1: detected capacity change from 0 to 64 [ 110.172789][ T5867] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 110.700508][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 110.736506][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.815661][ T5867] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 110.888732][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.932476][ T5867] usb 4-1: config 0 descriptor?? [ 110.941261][ T6159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.403982][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.413514][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.421388][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.429150][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.436464][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.444119][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.451814][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.460089][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.467305][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.476720][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.484689][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.492353][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.499739][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.506875][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.514461][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.522720][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.530194][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.537358][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.544849][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.552643][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.560338][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.567982][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.576498][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.584130][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.591599][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.600363][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.607505][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.615798][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.623114][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.630331][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.637484][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.644875][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.652408][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.659619][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.667652][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.675118][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.682571][ T5867] a4tech 0003:09DA:001A.0001: unknown main item tag 0x0 [ 111.741749][ T5867] a4tech 0003:09DA:001A.0001: hidraw0: USB HID v0.20 Device [HID 09da:001a] on usb-dummy_hcd.3-1/input0 [ 113.867405][ T6174] loop0: detected capacity change from 0 to 32768 [ 113.921734][ T6174] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.957924][ T5867] usb 4-1: USB disconnect, device number 4 [ 114.083945][ T6174] XFS (loop0): Ending clean mount [ 114.139885][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.279730][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.338606][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 114.349556][ T5830] usb 2-1: config 0 has no interfaces? [ 114.370376][ T5830] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 114.398920][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.406980][ T5830] usb 2-1: Product: syz [ 114.418862][ T27] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 114.428469][ T5830] usb 2-1: Manufacturer: syz [ 114.443294][ T5830] usb 2-1: SerialNumber: syz [ 114.460274][ T5830] usb 2-1: config 0 descriptor?? [ 114.525513][ T6207] loop3: detected capacity change from 0 to 736 [ 114.632983][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.655913][ T27] usb 3-1: not running at top speed; connect to a high speed hub [ 114.665779][ T27] usb 3-1: config 6 has an invalid interface number: 50 but max is 0 [ 114.681945][ T6210] loop0: detected capacity change from 0 to 16 [ 114.699814][ T5830] usb 2-1: USB disconnect, device number 3 [ 114.701898][ T27] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 114.725164][ T6210] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xc130e81b, 0x7bbbea8c expected [ 114.733340][ T27] usb 3-1: config 6 has no interface number 0 [ 114.752981][ T27] usb 3-1: config 6 interface 50 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.753766][ T5764] udevd[5764]: incorrect erofs checksum on /dev/loop0 [ 114.767313][ T27] usb 3-1: config 6 interface 50 has no altsetting 0 [ 114.840885][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=fa.d4 [ 114.867399][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.898201][ T27] usb 3-1: Product: syz [ 114.930855][ T27] usb 3-1: Manufacturer: syz [ 114.949581][ T27] usb 3-1: SerialNumber: syz [ 115.058197][ T6218] loop3: detected capacity change from 0 to 8 [ 115.236935][ T27] usb 3-1: USB disconnect, device number 2 [ 116.534134][ T6240] 9pnet_fd: Insufficient options for proto=fd [ 116.690924][ T6236] loop3: detected capacity change from 0 to 4096 [ 116.995152][ T6246] loop0: detected capacity change from 0 to 1764 [ 117.613547][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 117.631969][ T6244] loop2: detected capacity change from 0 to 32768 [ 117.640956][ T6263] loop1: detected capacity change from 0 to 128 [ 117.780798][ T6244] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 117.780798][ T6244] [ 117.798596][ T6266] loop3: detected capacity change from 0 to 16 [ 117.800908][ T6244] ERROR: (device loop2): remounting filesystem as read-only [ 117.847228][ T6266] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.877629][ T6267] warning: `syz.0.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.659259][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.005960][ T6273] bond0: (slave rose0): Enslaving as an active interface with an up link [ 119.232980][ T6282] loop2: detected capacity change from 0 to 8 [ 119.255525][ T6275] llc_conn_state_process: llc_conn_service failed [ 120.133682][ T6276] loop3: detected capacity change from 0 to 40427 [ 120.153674][ T6284] loop0: detected capacity change from 0 to 32768 [ 120.159796][ T6276] F2FS-fs (loop3): heap/no_heap options were deprecated [ 120.177865][ T6276] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 120.203283][ T6284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.111 (6284) [ 120.276287][ T6284] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.347820][ T6284] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 120.398928][ T6284] BTRFS info (device loop0): setting nodatasum [ 120.403074][ T6288] loop2: detected capacity change from 0 to 32768 [ 120.438214][ T6284] BTRFS info (device loop0): force zlib compression, level 3 [ 120.473609][ T6288] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (6288) [ 120.485965][ T6284] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 120.508490][ T6284] BTRFS info (device loop0): use lzo compression, level 0 [ 120.515896][ T6284] BTRFS info (device loop0): turning on flush-on-commit [ 120.562301][ T6284] BTRFS info (device loop0): enabling auto defrag [ 120.570712][ T6288] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 120.582743][ T6308] loop3: detected capacity change from 0 to 1024 [ 120.587574][ T6284] BTRFS info (device loop0): max_inline at 4096 [ 120.608417][ T6284] BTRFS info (device loop0): using free space tree [ 120.617032][ T6288] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 120.647609][ T6288] BTRFS info (device loop2): enabling disk space caching [ 120.668924][ T6288] BTRFS info (device loop2): force clearing of disk cache [ 120.714449][ T6288] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 120.759123][ T6288] BTRFS info (device loop2): use zstd compression, level 3 [ 120.766404][ T6288] BTRFS info (device loop2): disk space caching is enabled [ 120.915366][ T6284] BTRFS info (device loop0): enabling ssd optimizations [ 120.925683][ T28] audit: type=1800 audit(1775259712.022:13): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.115" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 120.970054][ T6288] BTRFS info (device loop2): enabling ssd optimizations [ 121.011530][ T6288] BTRFS info (device loop2): auto enabling async discard [ 121.084219][ T6288] BTRFS info (device loop2): rebuilding free space tree [ 121.185410][ T6288] BTRFS info (device loop2): disabling free space tree [ 121.195016][ T990] hfsplus: b-tree write err: -5, ino 3 [ 121.222063][ T6288] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.279293][ T6288] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.319404][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.511584][ T6352] syzkaller0: entered promiscuous mode [ 121.517285][ T6352] syzkaller0: entered allmulticast mode [ 121.603267][ T5764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5764) [ 121.768817][ T6359] netlink: 48 bytes leftover after parsing attributes in process `syz.0.117'. [ 121.817904][ T5770] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 122.490216][ T6370] loop3: detected capacity change from 0 to 4096 [ 122.757030][ T6378] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.848023][ T28] audit: type=1800 audit(1775259713.942:14): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.120" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 122.972155][ T28] audit: type=1804 audit(1775259714.072:15): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.120" name="/newroot/35/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 124.518672][ T6375] loop2: detected capacity change from 0 to 40427 [ 124.559613][ T6375] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 124.578179][ T6375] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.638511][ T6375] F2FS-fs (loop2): invalid crc value [ 124.648255][ T6401] loop3: detected capacity change from 0 to 2048 [ 124.681533][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 124.711855][ T6375] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.723507][ T6401] NILFS (loop3): invalid segment: Magic number mismatch [ 124.737484][ T6403] netlink: 'syz.0.128': attribute type 7 has an invalid length. [ 124.755656][ T6401] NILFS (loop3): trying rollback from an earlier position [ 124.756341][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 124.813532][ T6401] NILFS (loop3): recovery complete [ 124.837004][ T6390] loop1: detected capacity change from 0 to 32768 [ 124.867156][ T6407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.992031][ T6375] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 125.001902][ T6390] ialloc: diAlloc returned -5! [ 125.011536][ T6375] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 125.251538][ T5770] syz-executor: attempt to access beyond end of device [ 125.251538][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.310997][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 126.758490][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 127.002789][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 127.016357][ T9] usb 3-1: config 9 has an invalid interface number: 70 but max is 0 [ 127.026987][ T9] usb 3-1: config 9 has no interface number 0 [ 127.037956][ T9] usb 3-1: config 9 interface 70 has no altsetting 0 [ 127.058019][ T9] usb 3-1: New USB device found, idVendor=0411, idProduct=0001, bcdDevice=17.67 [ 127.089832][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.119767][ T9] usb 3-1: Product: syz [ 127.124044][ T9] usb 3-1: Manufacturer: syz [ 127.140139][ T9] usb 3-1: SerialNumber: syz [ 127.517771][ T6456] mmap: syz.0.144 (6456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.162820][ T6454] syz.0.144 (6454) used greatest stack depth: 17480 bytes left [ 129.181315][ T6475] binder: 6470:6475 ioctl c0306201 2000000004c0 returned -14 [ 129.433264][ T9] pegasus 3-1:9.70: Missing or invalid endpoints [ 129.493583][ T9] usb 3-1: USB disconnect, device number 3 [ 131.136762][ T6490] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.358896][ T6490] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 132.061807][ T6486] loop2: detected capacity change from 0 to 32768 [ 132.797416][ T6486] read_mapping_page failed! [ 132.808611][ T6486] ERROR: (device loop2): txCommit: [ 132.808611][ T6486] [ 132.825855][ T6486] ERROR: (device loop2): remounting filesystem as read-only [ 132.853533][ T5770] ERROR: (device loop2): diFree: numfree > numinos [ 132.853533][ T5770] [ 133.974939][ T2997] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 134.166842][ T6495] loop0: detected capacity change from 0 to 32768 [ 134.277104][ T6495] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.294201][ T6495] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.369205][ T6495] BTRFS info (device loop0): setting nodatasum [ 134.375439][ T6495] BTRFS info (device loop0): force zlib compression, level 3 [ 134.438558][ T6495] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 134.458135][ T6495] BTRFS info (device loop0): use lzo compression, level 0 [ 134.478740][ T6495] BTRFS info (device loop0): turning on flush-on-commit [ 134.485755][ T6495] BTRFS info (device loop0): enabling auto defrag [ 134.518473][ T6495] BTRFS info (device loop0): max_inline at 4096 [ 134.540800][ T6495] BTRFS info (device loop0): using free space tree [ 134.637147][ T6495] BTRFS info (device loop0): enabling ssd optimizations [ 134.984242][ T5769] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.016975][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.023831][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.971448][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 135.992190][ T5773] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.092738][ T5811] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.278743][ T5773] usb 2-1: device descriptor read/64, error -71 [ 136.348488][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 136.381485][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.399322][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.428390][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 119 [ 136.441003][ T6554] batman_adv: batadv0: Adding interface: dummy0 [ 136.448014][ T6554] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.473927][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.487548][ T6554] batman_adv: batadv0: Interface activated: dummy0 [ 136.497218][ T5811] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.510796][ T5811] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.542892][ T6557] batadv0: mtu less than device minimum [ 136.549246][ T5811] usb 4-1: Manufacturer: syz [ 136.556490][ T5811] usb 4-1: config 0 descriptor?? [ 136.562018][ T6559] loop0: detected capacity change from 0 to 2048 [ 136.564408][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.581095][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.593525][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.605987][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.618565][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.630961][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.643385][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.655848][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.668255][ T6557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 136.700922][ T5773] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.858894][ T5773] usb 2-1: device descriptor read/64, error -71 [ 136.929816][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 136.979084][ T5773] usb usb2-port1: attempt power cycle [ 136.998561][ T5811] rc_core: IR keymap rc-hauppauge not found [ 137.004527][ T5811] Registered IR keymap rc-empty [ 137.019824][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 137.050763][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 137.106478][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 137.125342][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'. [ 137.297161][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 137.468052][ T5773] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.632825][ T5773] usb 2-1: device descriptor read/8, error -71 [ 137.825942][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 137.964895][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 138.002148][ T5773] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.140070][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 138.848317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 138.938337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 138.968382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.048329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.238344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.408331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.568331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.628388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.911416][ T5773] usb 2-1: device descriptor read/8, error -71 [ 139.928170][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 140.001580][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 140.032291][ T5773] usb usb2-port1: unable to enumerate USB device [ 140.048932][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 140.143022][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 140.244140][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 140.279817][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 140.309875][ T5811] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 140.356073][ T5811] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 140.364858][ T5811] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.386698][ T5811] usb 4-1: USB disconnect, device number 5 [ 140.433110][ T5764] udevd[5764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 140.449587][ T6580] loop1: detected capacity change from 0 to 512 [ 141.290506][ T6580] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 141.335145][ T6580] ------------[ cut here ]------------ [ 141.341385][ T6580] EA inode 11 i_nlink=2 [ 141.349716][ T6580] WARNING: CPU: 0 PID: 6580 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 141.365219][ T6580] Modules linked in: [ 141.369326][ T6580] CPU: 0 PID: 6580 Comm: syz.1.176 Not tainted syzkaller #0 [ 141.376784][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.386985][ T6580] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 141.393727][ T6580] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 141.414069][ T6580] RSP: 0018:ffffc900198172e0 EFLAGS: 00010246 [ 141.420702][ T6580] RAX: 80ad5d945f857000 RBX: 0000000000000002 RCX: 0000000000080000 [ 141.428793][ T6580] RDX: ffffc9000d43a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 141.436942][ T6580] RBP: ffffc900198173d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 141.444944][ T6580] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 141.452958][ T6580] R13: ffff88805d75d4a8 R14: ffff88805d75d2b0 R15: ffff88805d75d300 [ 141.461006][ T6580] FS: 00007fc6d010f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 141.471084][ T6580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.477976][ T6580] CR2: 00007ffe64f38d7c CR3: 0000000024d18000 CR4: 00000000003506f0 [ 141.486076][ T6580] Call Trace: [ 141.489464][ T6580] [ 141.492429][ T6580] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 141.498175][ T6580] ? __ext4_journal_ensure_credits+0x30/0x450 [ 141.504574][ T6580] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 141.511004][ T6580] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 141.516707][ T6580] ? __ext4_journal_ensure_credits+0x450/0x450 [ 141.523084][ T6580] ext4_xattr_delete_inode+0xb3e/0xd10 [ 141.528636][ T6580] ? up_write+0x1c3/0x410 [ 141.533103][ T6580] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 141.539744][ T6580] ext4_evict_inode+0xaaf/0xea0 [ 141.544636][ T6580] ? _raw_spin_unlock+0x28/0x40 [ 141.549611][ T6580] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 141.555558][ T6580] ? do_raw_spin_unlock+0x121/0x230 [ 141.560900][ T6580] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 141.568159][ T6580] evict+0x4ca/0x8d0 [ 141.572404][ T6580] ? proc_nr_inodes+0x230/0x230 [ 141.577400][ T6580] ? do_raw_spin_unlock+0x121/0x230 [ 141.582811][ T6580] ? _raw_spin_unlock+0x28/0x40 [ 141.587402][ T6607] loop0: detected capacity change from 0 to 2048 [ 141.587671][ T6580] ? iput+0x706/0x920 [ 141.598129][ T6580] ext4_orphan_cleanup+0xbec/0x1420 [ 141.603679][ T6580] ? ext4_orphan_del+0xbf0/0xbf0 [ 141.608679][ T6580] ? ext4_register_li_request+0x183/0x940 [ 141.614447][ T6580] ? errseq_check_and_advance+0x66/0x120 [ 141.620186][ T6580] ext4_fill_super+0x5ed0/0x6790 [ 141.625164][ T6580] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 141.631562][ T6580] ? __might_sleep+0xe0/0xe0 [ 141.636176][ T6580] ? read_lock_is_recursive+0x20/0x20 [ 141.641690][ T6580] ? snprintf+0xe9/0x140 [ 141.645952][ T6580] ? down_read_killable+0x340/0x340 [ 141.651232][ T6580] ? setup_bdev_super+0x56b/0x660 [ 141.656399][ T6580] get_tree_bdev+0x3f3/0x520 [ 141.661124][ T6580] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 141.668121][ T6580] ? setup_bdev_super+0x660/0x660 [ 141.673733][ T6580] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 141.679570][ T6580] ? security_capable+0x89/0xb0 [ 141.684437][ T6580] vfs_get_tree+0x8c/0x280 [ 141.688913][ T6580] do_new_mount+0x24b/0xa40 [ 141.693634][ T6580] __se_sys_mount+0x2e7/0x3d0 [ 141.698538][ T6580] ? __x64_sys_mount+0xc0/0xc0 [ 141.703348][ T6580] ? lockdep_hardirqs_on+0x98/0x150 [ 141.708582][ T6580] ? __x64_sys_mount+0x20/0xc0 [ 141.713353][ T6580] do_syscall_64+0x55/0xa0 [ 141.717789][ T6580] ? clear_bhb_loop+0x40/0x90 [ 141.722731][ T6580] ? clear_bhb_loop+0x40/0x90 [ 141.727415][ T6580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.733509][ T6580] RIP: 0033:0x7fc6cf19da8a [ 141.737976][ T6580] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.757838][ T6580] RSP: 002b:00007fc6d010ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.766603][ T6580] RAX: ffffffffffffffda RBX: 00007fc6d010eee0 RCX: 00007fc6cf19da8a [ 141.775173][ T6580] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fc6d010eea0 [ 141.783411][ T6580] RBP: 00002000000009c0 R08: 00007fc6d010eee0 R09: 0000000000800718 [ 141.791448][ T6580] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 141.799563][ T6580] R13: 00007fc6d010eea0 R14: 000000000000048d R15: 0000200000000200 [ 141.807544][ T6580] [ 141.810831][ T6580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.818188][ T6580] CPU: 0 PID: 6580 Comm: syz.1.176 Not tainted syzkaller #0 [ 141.825551][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.835597][ T6580] Call Trace: [ 141.839070][ T6580] [ 141.841991][ T6580] dump_stack_lvl+0x18c/0x250 [ 141.846677][ T6580] ? show_regs_print_info+0x20/0x20 [ 141.851872][ T6580] ? load_image+0x400/0x400 [ 141.856380][ T6580] panic+0x2dc/0x730 [ 141.860298][ T6580] ? bpf_jit_dump+0xd0/0xd0 [ 141.864796][ T6580] __warn+0x2e0/0x470 [ 141.868762][ T6580] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 141.874737][ T6580] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 141.880748][ T6580] report_bug+0x2be/0x4f0 [ 141.885597][ T6580] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 141.891679][ T6580] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 141.897668][ T6580] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 141.903763][ T6580] handle_bug+0xcf/0x120 [ 141.908020][ T6580] exc_invalid_op+0x1a/0x50 [ 141.912534][ T6580] asm_exc_invalid_op+0x1a/0x20 [ 141.917373][ T6580] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 141.924063][ T6580] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 141.943780][ T6580] RSP: 0018:ffffc900198172e0 EFLAGS: 00010246 [ 141.949862][ T6580] RAX: 80ad5d945f857000 RBX: 0000000000000002 RCX: 0000000000080000 [ 141.957843][ T6580] RDX: ffffc9000d43a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 141.965826][ T6580] RBP: ffffc900198173d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 141.973817][ T6580] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 141.981833][ T6580] R13: ffff88805d75d4a8 R14: ffff88805d75d2b0 R15: ffff88805d75d300 [ 141.989836][ T6580] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 141.995494][ T6580] ? __ext4_journal_ensure_credits+0x30/0x450 [ 142.001570][ T6580] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 142.007558][ T6580] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 142.013289][ T6580] ? __ext4_journal_ensure_credits+0x450/0x450 [ 142.019537][ T6580] ext4_xattr_delete_inode+0xb3e/0xd10 [ 142.025003][ T6580] ? up_write+0x1c3/0x410 [ 142.029425][ T6580] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 142.035687][ T6580] ext4_evict_inode+0xaaf/0xea0 [ 142.040538][ T6580] ? _raw_spin_unlock+0x28/0x40 [ 142.045389][ T6580] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 142.051392][ T6580] ? do_raw_spin_unlock+0x121/0x230 [ 142.056628][ T6580] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 142.062521][ T6580] evict+0x4ca/0x8d0 [ 142.066501][ T6580] ? proc_nr_inodes+0x230/0x230 [ 142.071342][ T6580] ? do_raw_spin_unlock+0x121/0x230 [ 142.076545][ T6580] ? _raw_spin_unlock+0x28/0x40 [ 142.081605][ T6580] ? iput+0x706/0x920 [ 142.085584][ T6580] ext4_orphan_cleanup+0xbec/0x1420 [ 142.090785][ T6580] ? ext4_orphan_del+0xbf0/0xbf0 [ 142.095712][ T6580] ? ext4_register_li_request+0x183/0x940 [ 142.101456][ T6580] ? errseq_check_and_advance+0x66/0x120 [ 142.107170][ T6580] ext4_fill_super+0x5ed0/0x6790 [ 142.112125][ T6580] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 142.118368][ T6580] ? __might_sleep+0xe0/0xe0 [ 142.122967][ T6580] ? read_lock_is_recursive+0x20/0x20 [ 142.128644][ T6580] ? snprintf+0xe9/0x140 [ 142.133060][ T6580] ? down_read_killable+0x340/0x340 [ 142.138265][ T6580] ? setup_bdev_super+0x56b/0x660 [ 142.143460][ T6580] get_tree_bdev+0x3f3/0x520 [ 142.148036][ T6580] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 142.154269][ T6580] ? setup_bdev_super+0x660/0x660 [ 142.159283][ T6580] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 142.164816][ T6580] ? security_capable+0x89/0xb0 [ 142.169658][ T6580] vfs_get_tree+0x8c/0x280 [ 142.174064][ T6580] do_new_mount+0x24b/0xa40 [ 142.178559][ T6580] __se_sys_mount+0x2e7/0x3d0 [ 142.183227][ T6580] ? __x64_sys_mount+0xc0/0xc0 [ 142.187975][ T6580] ? lockdep_hardirqs_on+0x98/0x150 [ 142.193164][ T6580] ? __x64_sys_mount+0x20/0xc0 [ 142.197916][ T6580] do_syscall_64+0x55/0xa0 [ 142.202334][ T6580] ? clear_bhb_loop+0x40/0x90 [ 142.207190][ T6580] ? clear_bhb_loop+0x40/0x90 [ 142.212018][ T6580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.218535][ T6580] RIP: 0033:0x7fc6cf19da8a [ 142.222982][ T6580] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.242881][ T6580] RSP: 002b:00007fc6d010ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.251290][ T6580] RAX: ffffffffffffffda RBX: 00007fc6d010eee0 RCX: 00007fc6cf19da8a [ 142.259255][ T6580] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fc6d010eea0 [ 142.267264][ T6580] RBP: 00002000000009c0 R08: 00007fc6d010eee0 R09: 0000000000800718 [ 142.275269][ T6580] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 142.283404][ T6580] R13: 00007fc6d010eea0 R14: 000000000000048d R15: 0000200000000200 [ 142.291373][ T6580] [ 142.294887][ T6580] Kernel Offset: disabled [ 142.299290][ T6580] Rebooting in 86400 seconds..