last executing test programs: 29m44.248094498s ago: executing program 32 (id=9): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x180) r1 = dup(r0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) fallocate(r2, 0x20, 0x0, 0x3) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 29m30.261322824s ago: executing program 33 (id=65): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d00)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000340)=&(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 29m23.446711827s ago: executing program 34 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26m49.656024562s ago: executing program 35 (id=949): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008"], 0x44}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) 22m47.584709833s ago: executing program 36 (id=1760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 22m0.024404619s ago: executing program 37 (id=1894): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 21m57.328908639s ago: executing program 38 (id=1905): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000ac0)) futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) 21m54.487590397s ago: executing program 39 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x4}, 0x38) 21m32.294344281s ago: executing program 40 (id=1980): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001300f5d100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00(\x00\x00\x00\x00\x00\b\x00)'], 0x58}}, 0x0) 21m31.345146568s ago: executing program 41 (id=1985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="f30fc7b3290066b9c80800000f3266b8af0000000f23c80f21f86635040020000f23f80f01c8660f388039baa100b80018ef0f6e300f20c06635100000000f22c00f01ca66b9800000c00f326635000800000f30", 0x54}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m12.358501264s ago: executing program 42 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, 0x0) setgroups(0x0, 0x0) lseek(r1, 0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 21m12.252779324s ago: executing program 43 (id=2003): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002180)=""/28, 0x1c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 21m5.303006257s ago: executing program 44 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 20m30.657043643s ago: executing program 45 (id=2114): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xcc}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 20m22.633067312s ago: executing program 46 (id=2148): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x1, "6f78c0fb"}, @global=@item_012={0x2, 0x1, 0x2, "0100"}, @main=@item_012={0x2, 0x0, 0x8, "b10a"}]}}, 0x0}, 0x0) 19m56.138453939s ago: executing program 47 (id=2227): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '?'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x4, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x4048014) 19m46.385239401s ago: executing program 48 (id=2257): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x80, 0xe4a9}}}}, 0x11) 19m44.262229293s ago: executing program 49 (id=2273): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 17m48.939292626s ago: executing program 50 (id=2553): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="896caaa7dc4fdfbbce721bab75ebf351349bccac86964173351ff91bda2508d31927903c448fb94467abd4e7b82666674b393525550ebbddd09a49a8ba8b50a32c88ec95a572b7649f91bda22416f7d253062a876baf4d325fcc61f856", 0x5d}, {&(0x7f0000000580)="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", 0x53c}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x3b, 0x1, 0x4, [{@dev}, {@broadcast, 0x7}, {@multicast1}, {@remote}]}, @ra={0x94, 0x4}]}}}], 0x38}, 0x0) 17m15.001041094s ago: executing program 51 (id=2624): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000011c0)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) 16m12.185433276s ago: executing program 52 (id=2724): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e000000", @ANYRES32=r1, @ANYBLOB="0a003400020202020202000004001e010400490010004c0006ac0f0001ac0f0000000000040008010400cc"], 0x50}}, 0x0) 14m20.426962083s ago: executing program 53 (id=2891): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1b}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14m12.161139332s ago: executing program 54 (id=2906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x2, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {}, {}, {}, {}, {}, {0x1000}], 0x20}) bpf$ITER_CREATE(0x1d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) fcntl$addseals(r4, 0x409, 0x7) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) poll(&(0x7f0000000000)=[{r3, 0x4008}], 0x1, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 13m7.137572746s ago: executing program 55 (id=3023): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x2000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket(0x1e, 0x80000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x1200cc00, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') lseek(r5, 0xcbe, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) 13m5.017261148s ago: executing program 56 (id=3029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) read$FUSE(r0, 0x0, 0x0) 11m39.412536194s ago: executing program 57 (id=3221): socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) dup(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xf) syz_emit_vhci(0x0, 0x0) 11m31.595980075s ago: executing program 58 (id=3210): r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) timerfd_gettime(r0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 10m21.124807888s ago: executing program 59 (id=3335): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') read$FUSE(r0, 0x0, 0x0) 9m6.462433146s ago: executing program 60 (id=3490): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0xd}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = io_uring_setup(0x2e34, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x207ffd}, 0x8) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x4, @none, 0x8ad9, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="b70500000010000061103000400000000fa00000000000009500000000000000064cd87d9d8fabe8862a46cb3bf346f76a82d440f67aefa092eca23b95e2adfed65221f60ca1fe0777b0c01c7f108ff8e3bada871ba1c5e0b25e3ea1c5df3e210c2f167bbe7d02ee00c1b0dc24eae409257c15b48e8afb2a0c31ef6bc0a1061fc0d6ca7f0430a133efd8a1203935cc2ab93dd5f9ac57"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x8, 0x307, &(0x7f0000000a00)="$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") r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000003c0)="fc0000001c000704ab5b2509b868030002ab087a0100000013481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d9cefc00e2e76e7ec700f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74ce4184406f90d435ef8b29d3ef3d9748f02331f24623a2c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4861b19", 0xff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000500)='./file0\x00', 0x300001a, &(0x7f00000034c0)=ANY=[], 0xd, 0x2a9, &(0x7f0000000240)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x2000003}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4040, &(0x7f0000000040)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@sysvgroups}, {@errors_continue}, {@noinit_itable}, {@discard}, {@max_batch_time}, {@noload}]}, 0xd, 0x5ee, &(0x7f00000007c0)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlN52bktvf0xhPp/ktjPn3Ok509vvPWdOz5kbQGUNpl9qEfsjYjqJ6E/mF/M6I8scXHjegz8/Ops+kqjXX/s9iSRLy5+fZN/7soN7IuLHH5LY17Gy3Jm5axfHp6Ymr2b7w7OXpodn5q4dvnBp/Pzk+cnLoy+Mnjh+7PiJkSNtndf1grTTN999v/+TsTe/+eqvZOTbX8aSOBkvZ09ceh6bZTAGG7+TZGVW34nNLqwkHdnfydKXOOkssUKsS/76dUXE/6I/OuLhi9cfH79SauWALVVPIupARSXiHyoq7wfk1/bLr4NrpfRKgO1w/9TCAMDK+O9cGBuMnsbYwO4HSSwd1kkior2RuWZ7IuLunbGb5+6M3YwtGocDis3fiIj/F8V/0oj/geiJgUb815riP+0XnMm+p+mvtln+8qFi8Q/bZyH+e1aN/2gR/28tif+32yx/8OHmO71N8d/b7ikBAAAAAABAZd0+FRHPF/3/v7Y4/ycK5v/0RcTJTSh/cNn+yv//1+5tQjFAgfunIl4qnP9by2f/DnRkW/9qzAfoSs5dmJo8EhH/johD0bUr3R9ZpYzDn+77slXeYDb/L3+k5d/N5gJm9bjXuav5mInx2fGNnjcQcf9GxFOF83+TxfY/KWj/0/eD6UcsY9+zt860yls7/oGtUv864mBh+//wrhXJ6vfnGG70B4bzXsFKT3/42Xetym83/t1iAjYubf93rx7/A8nS+/XMrL+Mo3Od9VZ57fb/u5PXG7ec6c7SPhifnb06EtGdnO5IU5vSR9dfZ3gS5fGQx0sa/4eeWX38r6j/3xsR88t+dvJH85ri3H//7vu1VX30/6E8afxPrKv9X//G6K2B71uV/2jt/7FGW38oSzH+Bwu+yMO0ezGpK/1SEI55892UVUadAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBxV4uIPZHUhha3a7WhoYi+iPhP7K5NXZmZfe7clfcuT6R5jc//r+Wf9Nu/sJ/kn/8/sGR/dNn+0YjYGxGfd/Q29ofOXpmaKPvkAQAAAAAAAAAAAAAAAAAAYIfoa7H+P/VbR9m1A7ZcZ9kVAEpTEP8/lVEPYPtp/6G6xD9Ul/iH6hL/UF1txv+Nza4HsP20/1Bd4h+qS/wDAAAAAMATZe+B2z8nETH/Ym/jkerO8rpKrRmw1WplVwAojVv8QHW1NfXHmwY8EVzjA8ka+T0tD1rryNVMn93AwQAAAAAAAAAAAABQOQf3W/8PVWX9P1SXpbxQXfn6/wMl1wPYfq7xgVhjJX/h+v81jwIAAAAAAAAAAAAANtPM3LWL41NTk1dtvLHRn9O1E85iXRv1ev16+lewU+rzmG/kU+F3Sn2WbeRr/R7tqPLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BAAA//+dCiTh") ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$FUSE_ENTRY(r6, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000003b80)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008080}}], 0x1, 0x5) 6m5.286898311s ago: executing program 1 (id=3820): fsopen(&(0x7f0000000140)='devpts\x00', 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mkdir(&(0x7f0000000140)='./bus\x00', 0x80) r3 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x4004662b, &(0x7f0000000240)=@v2={0x2, @aes128, 0x8, '\x00', @c}) socket(0x200000100000011, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) 6m1.749275268s ago: executing program 1 (id=3831): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd27, 0x0, {0x2, 0x80, 0x0, 0x20, 0x1, 0x3, 0xfe, 0x2}, [@RTA_FLOW={0x8, 0xb, 0x10000000}, @RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x2c}}, 0x0) 6m1.186716255s ago: executing program 1 (id=3834): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r1) syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m59.046252597s ago: executing program 1 (id=3838): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0xc4, 0x452, &(0x7f0000000480)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 5m56.448136997s ago: executing program 1 (id=3844): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@private0, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x4, [{0x1, 0xb4}, {0xa, 0x1a10}, {0x200, 0xe0}, {0x6, 0xb0}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') read$char_usb(r4, &(0x7f0000001080)=""/147, 0x93) 5m55.286786043s ago: executing program 1 (id=3848): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r1) syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)) 5m53.902401638s ago: executing program 61 (id=3848): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r1) syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)) 5m49.465127391s ago: executing program 3 (id=3864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 5m47.454213774s ago: executing program 3 (id=3868): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xfffffff9]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@empty, 0x3}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x0, [@dev, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) read$msr(r5, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1, 0x0, 0x0, @void, @value}, 0x20) keyctl$set_timeout(0xf, r3, 0x21000) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x18a8) r9 = dup(r1) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 5m46.216171429s ago: executing program 3 (id=3870): r0 = socket$inet6(0xa, 0x3, 0xff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="3f4e351eb49e3edaff"], 0x28) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) 5m45.856858807s ago: executing program 3 (id=3872): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x461, 0x4e05, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2c, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "1329a8f1"}]}}, 0x0}, 0x0) 5m43.604675819s ago: executing program 3 (id=3875): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="040000000400000004000000280b00000008"], 0x48) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x2, r3, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5m42.380124514s ago: executing program 3 (id=3876): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x401}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000050000000900000084000000440100001a48e170da6f4c6fa9bdbfd4eaa111cc956c1e5750e55a0775699c4676d7adff529757657a1c0aeb99a36b7cab16867e6a51cc57095008cd7a6db58f5574d661ae920b1bc5e582709b9fc234d15b0853ae0c9e4efe51a1a0e09e237e7c10cc0693af4271b19fd65593b92f7a1dc99249f168263fa359faafcd05ae6e9c715e05", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fanotify_init(0x2, 0x6e41326b9eed017e) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x700, 0x8, 0xffffffff, 0x7, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @local}}}}) 5m39.794131564s ago: executing program 2 (id=3879): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x500000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000014c0)={0x0, 0x6b, 0x0, 0x0, 0x0, "076a1400"}) syz_open_pts(r2, 0x42) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) pread64(r0, &(0x7f0000001380)=""/241, 0xf1, 0x9) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5m35.787052699s ago: executing program 2 (id=3882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000014c0)={0x0, 0x6b, 0x0, 0x0, 0x0, "076a1400"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 5m35.390285568s ago: executing program 2 (id=3883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = memfd_create(&(0x7f00000008c0)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x719ec197, 0x0, r5, 0x814c, '\x00', 0x0, r5, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) fsetxattr$security_ima(r3, 0x0, &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0x11, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m34.047273972s ago: executing program 2 (id=3884): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f00000003c0)={[{@noblock_validity}, {@usrjquota, 0x2e}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x1}}], [], 0x22}, 0x84, 0x46f, &(0x7f0000000f40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@nodiscard}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 5m32.926653518s ago: executing program 2 (id=3888): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c0000000000069078ac141400ac1e00014404ed630085aad2912dcfab9c4b11cfff69c433000000bcd9b2257c4e4acd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 5m27.134775166s ago: executing program 62 (id=3876): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x401}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000050000000900000084000000440100001a48e170da6f4c6fa9bdbfd4eaa111cc956c1e5750e55a0775699c4676d7adff529757657a1c0aeb99a36b7cab16867e6a51cc57095008cd7a6db58f5574d661ae920b1bc5e582709b9fc234d15b0853ae0c9e4efe51a1a0e09e237e7c10cc0693af4271b19fd65593b92f7a1dc99249f168263fa359faafcd05ae6e9c715e05", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fanotify_init(0x2, 0x6e41326b9eed017e) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x700, 0x8, 0xffffffff, 0x7, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @local}}}}) 5m26.254617643s ago: executing program 2 (id=3896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 5m25.728856151s ago: executing program 63 (id=3896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 2m7.924890983s ago: executing program 5 (id=4246): creat(0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x14000, &(0x7f0000000080)) 2m6.124885926s ago: executing program 5 (id=4250): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xfffffff9]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@empty, 0x3}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x0, [@dev, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) read$msr(r5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) keyctl$set_timeout(0xf, r3, 0x21000) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x18a8) r9 = dup(r1) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 2m2.056761041s ago: executing program 5 (id=4259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x101, 0x80000000, 0xa9, 0x4004, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xb, @void, @value, @void, @value}, 0x50) syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc37c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae803645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046fc4e1ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec64ff21318445692e7c4cbd1c3360"], 0x9, 0x1a2, &(0x7f0000000000)="$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") r1 = io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x491f, 0x82, 0x1, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x8, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) creat(0x0, 0xa1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1m59.840371882s ago: executing program 5 (id=4263): fsopen(&(0x7f0000000140)='devpts\x00', 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mkdir(&(0x7f0000000140)='./bus\x00', 0x80) r3 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x4004662b, &(0x7f0000000240)=@v2={0x2, @aes128, 0x8, '\x00', @c}) socket(0x200000100000011, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000380)=""/186, 0xba) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 1m54.178823071s ago: executing program 5 (id=4270): r0 = socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000480)=[{r1, 0x1002}, {0xffffffffffffffff, 0x5040}, {0xffffffffffffffff, 0x11}, {0xffffffffffffffff, 0xa43849d30d6262b3}], 0x4, &(0x7f0000000500)={r3, r4+10000000}, &(0x7f0000000540)={[0x101]}, 0x8) 1m48.6843908s ago: executing program 5 (id=4281): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.948636192s ago: executing program 64 (id=4281): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.664876383s ago: executing program 8 (id=4344): unshare(0x8020400) flistxattr(0xffffffffffffffff, 0x0, 0x0) 1m9.448565963s ago: executing program 8 (id=4345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f0000000000)={0x0, 0x2575, 0x40, 0x1000}) r2 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3, 0x293}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x16, 0x20000002, r3) 1m9.191937602s ago: executing program 8 (id=4346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x2, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {}, {}, {}, {}, {}, {0x1000}], 0x20}) bpf$ITER_CREATE(0x1d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0x40046201, 0x0) r6 = inotify_init() r7 = inotify_add_watch(r6, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r6, r7) 1m7.614337036s ago: executing program 8 (id=4349): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) 1m5.084814376s ago: executing program 8 (id=4355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f0000000000)={0x0, 0x2575, 0x40, 0x1000}) r2 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3, 0x293}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x16, 0x20000002, r3) 1m4.928016405s ago: executing program 8 (id=4357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 49.683332788s ago: executing program 65 (id=4357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 18.286433899s ago: executing program 4 (id=4486): fsopen(&(0x7f0000000140)='devpts\x00', 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mkdir(&(0x7f0000000140)='./bus\x00', 0x80) r3 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x4004662b, &(0x7f0000000240)=@v2={0x2, @aes128, 0x8, '\x00', @c}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 14.060976663s ago: executing program 0 (id=4496): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file1\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d63703433372c756d61736b3d303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030353237362c00"/104], 0x3, 0x6b5, &(0x7f0000000c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 12.980389209s ago: executing program 0 (id=4500): r0 = socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x5040}, {r0}, {0xffffffffffffffff, 0x11}, {0xffffffffffffffff, 0xa43849d30d6262b3}], 0x4, &(0x7f0000000500)={r2, r3+10000000}, &(0x7f0000000540)={[0x101]}, 0x8) 11.760742114s ago: executing program 9 (id=4505): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file1', [{0x20, '(*c:,-\x84\x8d\xd2\x89\xbd\xc9\x95\xff\"\x060^IVf_\xef\x14\xa0\xb6\xc8\xd7\x17\xb0\x89\xa5\x8d\x15Z\xf7\xd3k1\xb8\x8c\x8f\xf7\xca\x16\xf5\xd3\x83\xf9:\xf4\xf8\xc9f'}, {0x20, '!(\x96}'}], 0xa, "d161050000000000000074bdca9720dfcc73de5b223a3c160f224c83ef6cefab8104649d48cdb9a6c7669fce915c6e7588a6259b6eb774f58cd31674f9"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 9.048612754s ago: executing program 0 (id=4508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.002771264s ago: executing program 9 (id=4510): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000a8c6109b"], 0x50) 8.958099584s ago: executing program 4 (id=4511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f0000000000)={0x0, 0x2575, 0x40, 0x1000}) r2 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3, 0x293}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x16, 0x20000002, r3) 6.345307724s ago: executing program 9 (id=4514): unshare(0x8020400) r0 = userfaultfd(0x801) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, 0x0) 6.135714093s ago: executing program 4 (id=4516): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.899060712s ago: executing program 9 (id=4518): r0 = socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x5040}, {r0}, {0xffffffffffffffff, 0x11}, {0xffffffffffffffff, 0xa43849d30d6262b3}], 0x4, &(0x7f0000000500)={r2, r3+10000000}, &(0x7f0000000540)={[0x101]}, 0x8) 5.728758211s ago: executing program 0 (id=4519): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) flock(0xffffffffffffffff, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000000500)=[@rights={{0x10}}], 0x10}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.832282688s ago: executing program 6 (id=4521): fsopen(&(0x7f0000000140)='devpts\x00', 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mkdir(&(0x7f0000000140)='./bus\x00', 0x80) open(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 4.620906487s ago: executing program 4 (id=4523): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 4.030646195s ago: executing program 7 (id=4524): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) 3.741166424s ago: executing program 6 (id=4525): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.740636764s ago: executing program 7 (id=4526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f0000000000)={0x0, 0x2575, 0x40, 0x1000}) r2 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3, 0x293}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x16, 0x20000002, r3) 3.635483224s ago: executing program 9 (id=4527): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 3.260856332s ago: executing program 7 (id=4528): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f0000000100)={0xe8d, 0x2d, 0x1, 0xa, 0x0, 0x2c}, 0x48) 3.260451942s ago: executing program 6 (id=4529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.988370721s ago: executing program 9 (id=4530): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360002000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 2.78400382s ago: executing program 0 (id=4531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x2bb, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}, {0xffffffffffffffff}, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.78382151s ago: executing program 6 (id=4532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file1', [{0x20, '(*c:,-\x84\x8d\xd2\x89\xbd\xc9\x95\xff\"\x060^IVf_\xef\x14\xa0\xb6\xc8\xd7\x17\xb0\x89\xa5\x8d\x15Z\xf7\xd3k1\xb8\x8c\x8f\xf7\xca\x16\xf5\xd3\x83\xf9:\xf4\xf8\xc9f'}, {0x20, '!(\x96}'}], 0xa, "d161050000000000000074bdca9720dfcc73de5b223a3c160f224c83ef6cefab8104649d48cdb9a6c7669fce915c6e7588a6259b6eb774f58cd31674f9"}, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 2.78357179s ago: executing program 7 (id=4533): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.75174407s ago: executing program 4 (id=4534): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x101, 0x80000000, 0xa9, 0x4004, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xb, @void, @value, @void, @value}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x622a40, 0x140) fchown(r0, 0x0, 0xffffffffffffffff) 1.955794017s ago: executing program 7 (id=4535): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x20, 0x1, 0x0, 0xd2c, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x64, 0x0, 0x7f, 0x2f, 0x0, @multicast1, @local, {[@generic={0x83, 0x4, "bb26"}]}}}}}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r2, 0x0, 0x4, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 1.322060265s ago: executing program 6 (id=4536): fsopen(&(0x7f0000000140)='devpts\x00', 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mkdir(&(0x7f0000000140)='./bus\x00', 0x80) open(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 620.522212ms ago: executing program 7 (id=4537): r0 = socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) clock_gettime(0x0, &(0x7f00000004c0)) ppoll(&(0x7f0000000480)=[{r1, 0x1002}, {0xffffffffffffffff, 0x5040}, {r0}, {0xffffffffffffffff, 0x11}, {0xffffffffffffffff, 0xa43849d30d6262b3}], 0x5, 0x0, &(0x7f0000000540)={[0x101]}, 0x8) 480.674902ms ago: executing program 0 (id=4538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f0000000000)={0x0, 0x2575, 0x40, 0x1000}) r2 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3, 0x293}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x16, 0x20000002, r3) 400.844761ms ago: executing program 4 (id=4539): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fanotify_init(0x4, 0x800) fanotify_mark(r1, 0x1, 0x101b, r0, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="969d", 0x2}], 0x1, 0x4) 0s ago: executing program 6 (id=4540): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000900000000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): 6 [ 1390.591270][T19154] erofs: (device loop1): mounted with root inode @ nid 36. [ 1390.760779][T16598] usb 3-1: selecting invalid altsetting 1 [ 1390.778596][T16598] sierra 3-1:2.177: Sierra USB modem converter detected [ 1390.871086][T16598] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1390.941053][T16598] usb 3-1: USB disconnect, device number 6 [ 1390.989087][T16598] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1391.031506][T16598] sierra 3-1:2.177: device disconnected [ 1399.230904][ T3639] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1399.379460][T19234] loop2: detected capacity change from 0 to 1024 [ 1399.489390][T18902] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1400.958234][ T4251] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1402.232792][ T4251] usb 6-1: config 2 has an invalid interface number: 177 but max is 1 [ 1402.286448][ T4251] usb 6-1: config 2 has an invalid interface number: 177 but max is 1 [ 1402.341279][ T4251] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1402.409498][ T4251] usb 6-1: config 2 has no interface number 0 [ 1402.434332][ T4251] usb 6-1: config 2 interface 177 has no altsetting 1 [ 1402.562068][ T4251] usb 6-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 1402.601160][ T4251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.640076][ T4251] usb 6-1: Product: syz [ 1402.683644][ T4251] usb 6-1: Manufacturer: syz [ 1404.160900][ T4251] usb 6-1: SerialNumber: syz [ 1404.264628][ T4251] usb 6-1: can't set config #2, error -71 [ 1404.284308][ T4251] usb 6-1: USB disconnect, device number 23 [ 1407.647571][T19319] loop2: detected capacity change from 0 to 512 [ 1409.262553][T19319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1409.281112][T19319] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.390692][T19319] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.3664: corrupted inode contents [ 1409.457878][T19319] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz.2.3664: mark_inode_dirty error [ 1409.540344][T19319] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.3664: corrupted inode contents [ 1409.630893][T19319] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3664: mark_inode_dirty error [ 1411.163842][T16437] EXT4-fs (loop2): unmounting filesystem. [ 1411.983356][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 1411.983375][ T26] audit: type=1326 audit(1734305695.815:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.074366][ T26] audit: type=1326 audit(1734305695.815:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.180918][ T26] audit: type=1326 audit(1734305695.815:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.276757][ T26] audit: type=1326 audit(1734305695.815:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.340434][ T26] audit: type=1326 audit(1734305695.815:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.371231][ T4251] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1412.453947][ T26] audit: type=1326 audit(1734305695.815:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.546517][ T26] audit: type=1326 audit(1734305695.815:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.582682][ T26] audit: type=1326 audit(1734305695.815:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.613160][ T4251] usb 4-1: config 2 has an invalid interface number: 177 but max is 1 [ 1412.640979][ T4251] usb 4-1: config 2 has an invalid interface number: 177 but max is 1 [ 1412.685034][ T4251] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1412.721817][ T4251] usb 4-1: config 2 has no interface number 0 [ 1412.744159][ T26] audit: type=1326 audit(1734305695.815:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1412.746634][ T4251] usb 4-1: config 2 interface 177 has no altsetting 1 [ 1412.834351][ T4251] usb 4-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 1412.864044][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.894469][ T4251] usb 4-1: Product: syz [ 1412.898690][ T4251] usb 4-1: Manufacturer: syz [ 1412.931290][ T4251] usb 4-1: SerialNumber: syz [ 1412.956982][ T26] audit: type=1326 audit(1734305695.815:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19346 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1413.292799][T16598] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1415.218035][T16598] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1415.230359][T16598] usb 6-1: no configurations [ 1415.250180][T16598] usb 6-1: can't read configurations, error -22 [ 1418.176237][ T4251] usb 4-1: selecting invalid altsetting 1 [ 1418.231024][ T4251] sierra 4-1:2.177: Sierra USB modem converter detected [ 1418.297974][ T4251] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1418.351468][ T4251] usb 4-1: USB disconnect, device number 3 [ 1418.415375][ T4251] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1418.485753][ T4251] sierra 4-1:2.177: device disconnected [ 1422.155533][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 1422.155552][ T26] audit: type=1326 audit(1734305704.815:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1422.556942][T19433] loop1: detected capacity change from 0 to 1024 [ 1422.623928][T19436] loop2: detected capacity change from 0 to 512 [ 1422.715552][T19436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3688: inode #1: comm syz.2.3688: iget: illegal inode # [ 1422.810468][T19436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3688: error while reading EA inode 1 err=-117 [ 1422.872020][T19436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3688: inode #1: comm syz.2.3688: iget: illegal inode # [ 1422.928785][T19436] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3688: error while reading EA inode 1 err=-117 [ 1422.949877][T19436] EXT4-fs (loop2): 1 orphan inode deleted [ 1422.966285][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.972706][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.983016][T19436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1424.119362][T16437] EXT4-fs (loop2): unmounting filesystem. [ 1427.473022][ T5740] hfsplus: b-tree write err: -5, ino 4 [ 1430.061283][ T26] audit: type=1326 audit(1734305713.895:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19475 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1433.836471][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 1433.878692][T19501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3693'. [ 1433.911116][T19501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3693'. [ 1435.751794][ T26] audit: type=1326 audit(1734305719.585:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1435.828607][ T26] audit: type=1326 audit(1734305719.585:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1435.964347][ T26] audit: type=1326 audit(1734305719.585:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1437.562554][T19523] loop1: detected capacity change from 0 to 256 [ 1437.569606][T19523] exfat: Deprecated parameter 'namecase' [ 1437.606581][T19523] exfat: Deprecated parameter 'namecase' [ 1437.623125][ T26] audit: type=1326 audit(1734305719.585:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1437.713131][T19523] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 1437.771561][ T26] audit: type=1326 audit(1734305719.585:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1437.834769][T19523] syz.1.3709: attempt to access beyond end of device [ 1437.834769][T19523] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 1437.904049][ T26] audit: type=1326 audit(1734305719.585:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1437.939185][T19532] syz.1.3709: attempt to access beyond end of device [ 1437.939185][T19532] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 1439.060528][ T26] audit: type=1326 audit(1734305719.585:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1439.205653][ T26] audit: type=1326 audit(1734305719.585:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1439.357236][ T26] audit: type=1326 audit(1734305719.585:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1439.466974][ T26] audit: type=1326 audit(1734305719.585:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.5.3704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1439.854469][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1439.876570][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1439.918762][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1443.389694][T19587] loop2: detected capacity change from 0 to 256 [ 1443.473164][T19587] exfat: Deprecated parameter 'namecase' [ 1443.478966][T19587] exfat: Deprecated parameter 'utf8' [ 1443.577669][T19587] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1445.520896][T12212] Bluetooth: hci3: command 0x0406 tx timeout [ 1445.697399][T19599] Core dump to core aborted: cannot preserve file permissions [ 1449.340747][T19626] loop2: detected capacity change from 0 to 1024 [ 1449.616283][T19626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1449.835355][T16437] EXT4-fs (loop2): unmounting filesystem. [ 1451.030040][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 1451.030057][ T26] audit: type=1326 audit(1734305734.855:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19637 comm="syz.3.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1452.851859][T19660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1455.661226][ T26] audit: type=1326 audit(1734305739.495:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.2.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0bb85d19 code=0x7fc00000 [ 1465.307129][ T26] audit: type=1326 audit(1734305749.125:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1465.329973][ T26] audit: type=1326 audit(1734305749.125:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1465.410991][ T26] audit: type=1326 audit(1734305749.125:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1465.482045][ T26] audit: type=1326 audit(1734305749.125:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1465.584443][ T26] audit: type=1326 audit(1734305749.125:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1466.965928][ T26] audit: type=1326 audit(1734305749.125:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1467.030944][T19776] binder: 19775:19776 ioctl 4018620d 0 returned -22 [ 1467.061189][ T26] audit: type=1326 audit(1734305749.125:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1467.130213][ T26] audit: type=1326 audit(1734305749.125:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1467.179586][ T26] audit: type=1326 audit(1734305749.125:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1467.244663][ T26] audit: type=1326 audit(1734305749.125:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4853f85d19 code=0x7fc00000 [ 1467.519730][T19784] loop1: detected capacity change from 0 to 256 [ 1468.123225][T19784] exfat: Deprecated parameter 'namecase' [ 1468.857150][T19784] exfat: Deprecated parameter 'utf8' [ 1468.957583][T19784] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1470.767143][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1472.363814][T19814] Core dump to core aborted: cannot preserve file permissions [ 1472.493090][T19806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1473.621489][T19829] xt_hashlimit: overflow, rate too high: 0 [ 1474.819368][T19832] loop3: detected capacity change from 0 to 1024 [ 1474.958002][T19832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1475.203534][T17750] EXT4-fs (loop3): unmounting filesystem. [ 1475.704241][T19849] binder: 19848:19849 ioctl 4018620d 0 returned -22 [ 1475.817504][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 1475.817522][ T26] audit: type=1326 audit(1734305759.645:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588fd85d19 code=0x7fc00000 [ 1477.391829][ T26] audit: type=1326 audit(1734305761.215:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19844 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1477.761353][T19868] loop3: detected capacity change from 0 to 256 [ 1477.831699][T19868] exfat: Deprecated parameter 'namecase' [ 1477.837515][T19868] exfat: Deprecated parameter 'utf8' [ 1477.921888][T19868] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1480.650744][T19889] Core dump to core aborted: cannot preserve file permissions [ 1481.890326][T19901] binder: 19900:19901 ioctl 4018620d 0 returned -22 [ 1482.459316][ T26] audit: type=1326 audit(1734305766.285:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1482.561026][ T26] audit: type=1326 audit(1734305766.285:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1482.620649][ T26] audit: type=1326 audit(1734305766.285:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1482.655672][ T26] audit: type=1326 audit(1734305766.285:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1482.757059][ T26] audit: type=1326 audit(1734305766.285:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1483.934723][ T26] audit: type=1326 audit(1734305766.285:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1484.405536][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.412941][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.120573][ T26] audit: type=1326 audit(1734305766.285:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1485.395613][ T26] audit: type=1326 audit(1734305766.285:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1485.811299][ T26] audit: type=1326 audit(1734305766.285:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1485.936423][ T26] audit: type=1326 audit(1734305766.285:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1488.812708][ T26] audit: type=1326 audit(1734305766.285:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1488.951216][ T26] audit: type=1326 audit(1734305766.285:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.035275][ T26] audit: type=1326 audit(1734305766.285:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.125783][ T26] audit: type=1326 audit(1734305766.285:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.231060][ T26] audit: type=1326 audit(1734305766.295:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.300867][ T26] audit: type=1326 audit(1734305766.295:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.421433][ T26] audit: type=1326 audit(1734305766.295:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.516634][ T26] audit: type=1326 audit(1734305766.295:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.610864][ T26] audit: type=1326 audit(1734305766.295:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1489.741532][ T26] audit: type=1326 audit(1734305766.295:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19895 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1492.753698][T19972] binder: BINDER_SET_CONTEXT_MGR already set [ 1492.759751][T19972] binder: 19970:19972 ioctl 4018620d 200001c0 returned -16 [ 1496.963257][T20002] loop2: detected capacity change from 0 to 256 [ 1497.025432][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 1497.025450][ T26] audit: type=1326 audit(1734305780.845:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1497.139098][T20002] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 1497.249258][T20002] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005) [ 1497.295595][ T26] audit: type=1326 audit(1734305780.845:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1497.350956][T20002] exFAT-fs (loop2): failed to initialize root inode [ 1497.450941][ T26] audit: type=1326 audit(1734305780.845:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1497.594711][ T26] audit: type=1326 audit(1734305780.845:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1497.761267][ T26] audit: type=1326 audit(1734305780.845:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1497.921636][ T26] audit: type=1326 audit(1734305780.845:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1498.071756][ T26] audit: type=1326 audit(1734305780.845:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1498.203349][ T26] audit: type=1326 audit(1734305780.845:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1498.380928][ T26] audit: type=1326 audit(1734305780.855:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1498.481340][ T26] audit: type=1326 audit(1734305780.855:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.3.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e77785d19 code=0x7fc00000 [ 1498.991373][T20040] binder: BINDER_SET_CONTEXT_MGR already set [ 1499.010328][T20040] binder: 20039:20040 ioctl 4018620d 200001c0 returned -16 [ 1504.522420][ T26] kauditd_printk_skb: 94 callbacks suppressed [ 1504.522439][ T26] audit: type=1326 audit(1734305787.765:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1505.711296][ T26] audit: type=1326 audit(1734305787.765:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1505.828124][T20109] loop1: detected capacity change from 0 to 512 [ 1505.842779][T20110] binder: BINDER_SET_CONTEXT_MGR already set [ 1505.894244][T20110] binder: 20108:20110 ioctl 4018620d 200001c0 returned -16 [ 1505.903335][T20109] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1505.926411][ T26] audit: type=1326 audit(1734305787.765:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1506.846825][ T26] audit: type=1326 audit(1734305787.765:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1506.849256][T20109] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1506.894136][T20109] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3838: invalid indirect mapped block 2683928664 (level 1) [ 1506.977249][T20109] EXT4-fs (loop1): 1 truncate cleaned up [ 1507.000919][ T26] audit: type=1326 audit(1734305787.765:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1507.025410][T20109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1507.079327][T20109] EXT4-fs: user quota file already specified [ 1507.086193][ T26] audit: type=1326 audit(1734305787.765:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1507.221019][ T26] audit: type=1326 audit(1734305787.765:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1507.261357][T18577] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1507.310085][ T26] audit: type=1326 audit(1734305787.765:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1507.358355][T18577] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 1507.440982][ T26] audit: type=1326 audit(1734305787.775:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1507.461252][T18577] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1507.519999][T18577] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 1507.561245][ T26] audit: type=1326 audit(1734305787.775:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20082 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1507.585066][T18577] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 1507.885607][T19224] EXT4-fs (loop1): unmounting filesystem. [ 1509.298832][T20116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.527503][T20116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.816051][T20116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.013918][T20116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.361617][T20162] binder: 20161:20162 ioctl c0306201 0 returned -14 [ 1510.384744][T20162] binder: BINDER_SET_CONTEXT_MGR already set [ 1510.407472][T20162] binder: 20161:20162 ioctl 4018620d 200001c0 returned -16 [ 1511.742390][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1511.756146][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1511.765237][ T4256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1511.805050][ T4256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1511.813224][ T4256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1511.820499][ T4256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1513.679478][T20182] chnl_net:caif_netlink_parms(): no params data found [ 1513.920931][ T4256] Bluetooth: hci3: command 0x0409 tx timeout [ 1514.282863][T20222] binder: 20221:20222 ioctl c0306201 0 returned -14 [ 1516.001114][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 1516.876316][T20182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.054121][T20182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.394745][T20182] device bridge_slave_0 entered promiscuous mode [ 1518.050330][T20182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.090879][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 1518.164050][T20182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.225566][T20182] device bridge_slave_1 entered promiscuous mode [ 1518.271186][T16359] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1518.461493][T20116] device hsr_slave_0 left promiscuous mode [ 1518.503667][T16359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.557589][T16359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.582348][T20116] device hsr_slave_1 left promiscuous mode [ 1518.603124][T20116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.613990][T16359] usb 4-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.00 [ 1518.626149][T20116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.658621][T16359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.699570][T16359] usb 4-1: config 0 descriptor?? [ 1518.737084][T20116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1518.755355][T20116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.900295][T20116] device bridge_slave_1 left promiscuous mode [ 1518.921348][T20116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.972184][T20116] device bridge_slave_0 left promiscuous mode [ 1518.981835][T20116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.139688][T16359] primax 0003:0461:4E05.0011: global environment stack underflow [ 1519.174744][T16359] primax 0003:0461:4E05.0011: item 0 4 1 11 parsing failed [ 1519.205974][T16359] primax: probe of 0003:0461:4E05.0011 failed with error -22 [ 1519.338407][T20116] device veth1_macvtap left promiscuous mode [ 1519.342337][T16359] usb 4-1: USB disconnect, device number 4 [ 1519.361723][T20116] device veth0_macvtap left promiscuous mode [ 1519.408910][T20116] device veth1_vlan left promiscuous mode [ 1519.431356][T20116] device veth0_vlan left promiscuous mode [ 1520.275389][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 1527.473462][T20116] team0 (unregistering): Port device team_slave_1 removed [ 1527.858588][T20116] team0 (unregistering): Port device team_slave_0 removed [ 1528.633009][T20116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.539880][T20116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.819836][T20303] loop2: detected capacity change from 0 to 512 [ 1529.882119][T20303] ext4: Unknown parameter '"' [ 1530.044990][T20294] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1530.117356][T20303] loop2: detected capacity change from 0 to 512 [ 1530.442566][T20303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 1530.462160][T20303] System zones: 1-12 [ 1530.493792][T20303] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3884: Directory hole found for htree index block 0 [ 1530.551821][T20303] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1530.561299][T20303] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3884: Directory hole found for htree index block 0 [ 1530.574827][T20303] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1530.583392][T20303] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1530.817093][T16437] EXT4-fs (loop2): unmounting filesystem. [ 1535.455167][T20116] bond0 (unregistering): Released all slaves [ 1537.212065][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 1537.212083][ T26] audit: type=1326 audit(1734305821.045:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.5.3891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x0 [ 1537.396242][T20182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.682898][T20182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.780387][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1537.790988][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1537.799783][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1537.808063][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1537.817298][ T4256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1537.824767][ T4256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1537.842429][T20346] input: syz0 as /devices/virtual/input/input24 [ 1539.111848][T20182] team0: Port device team_slave_0 added [ 1539.193511][T20182] team0: Port device team_slave_1 added [ 1539.432948][T20182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.439943][T20182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.498186][T12212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1539.678821][T12212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1539.689153][T12212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1539.701197][T20182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.853106][T12212] Bluetooth: hci1: command 0x0409 tx timeout [ 1540.790997][T12212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1540.817467][T12212] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1540.826073][T12212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1540.893691][T20182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.940852][T20182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.080925][T20182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.580303][T20182] device hsr_slave_0 entered promiscuous mode [ 1542.329320][T12212] Bluetooth: hci1: command 0x041b tx timeout [ 1542.336140][T20182] device hsr_slave_1 entered promiscuous mode [ 1542.357388][T20182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1542.367363][T20182] Cannot create hsr debugfs directory [ 1542.886350][T12212] Bluetooth: hci4: command 0x0409 tx timeout [ 1543.050964][T20343] chnl_net:caif_netlink_parms(): no params data found [ 1543.530633][T20116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.695338][T20359] chnl_net:caif_netlink_parms(): no params data found [ 1543.872813][T20116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.189898][T20116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.219228][T20343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.226664][T20343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.236883][T20343] device bridge_slave_0 entered promiscuous mode [ 1544.401717][T12212] Bluetooth: hci1: command 0x040f tx timeout [ 1544.458334][T20116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.510594][T20343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.519291][T20343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.546591][T20343] device bridge_slave_1 entered promiscuous mode [ 1544.867462][T20343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.961094][T12212] Bluetooth: hci4: command 0x041b tx timeout [ 1544.988563][T20343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.056335][T20359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.064937][T20359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.077295][T20359] device bridge_slave_0 entered promiscuous mode [ 1545.144022][T20359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.163429][T20359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.184774][T20359] device bridge_slave_1 entered promiscuous mode [ 1545.210267][T20343] team0: Port device team_slave_0 added [ 1545.263593][T20343] team0: Port device team_slave_1 added [ 1545.404387][T20116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.453938][T20343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.465516][T20343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.509576][T20343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.538646][T20359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.640392][T20116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.676377][T20343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.688302][T20343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.750989][T20343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.775000][T20359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.862123][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.868688][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.028220][T12212] Bluetooth: hci1: command 0x0419 tx timeout [ 1547.038563][T20116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.067170][T12212] Bluetooth: hci4: command 0x040f tx timeout [ 1547.439346][T20182] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1547.460438][T20182] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1547.634748][T20116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.670369][T20182] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1547.684954][T20359] team0: Port device team_slave_0 added [ 1547.707206][T20359] team0: Port device team_slave_1 added [ 1547.736798][T20182] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1547.766626][T20343] device hsr_slave_0 entered promiscuous mode [ 1547.781778][T20343] device hsr_slave_1 entered promiscuous mode [ 1547.789001][T20343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1547.797683][T20343] Cannot create hsr debugfs directory [ 1547.831085][T20359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.838270][T20359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.873840][T20359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.936480][T20359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.944342][T20359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.971531][T20359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.196164][T20182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.284170][T20359] device hsr_slave_0 entered promiscuous mode [ 1548.313764][T20359] device hsr_slave_1 entered promiscuous mode [ 1548.320681][T20359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.328805][T20359] Cannot create hsr debugfs directory [ 1549.198924][T12212] Bluetooth: hci4: command 0x0419 tx timeout [ 1550.139576][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1550.155262][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1550.678167][T20182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.614488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1551.659398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1551.668201][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.675399][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.907085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1551.926533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1551.991729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1552.010591][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.017813][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.037225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1554.334732][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1554.353579][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1554.366333][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1554.409051][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1554.427687][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1554.449091][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1554.469217][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1554.479247][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1554.669703][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1554.681489][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1554.817229][T20182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1560.507526][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1560.519754][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1560.697093][T20182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.699912][T20343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1563.853747][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1563.866221][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1564.931939][T20343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1565.155598][T20182] device veth0_vlan entered promiscuous mode [ 1565.194370][T20343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1565.242886][T20343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1565.281534][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1565.331400][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1565.366964][T20182] device veth1_vlan entered promiscuous mode [ 1565.414425][T20116] device hsr_slave_0 left promiscuous mode [ 1565.428487][T20116] device hsr_slave_1 left promiscuous mode [ 1565.437206][T20116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.450992][T20116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.471865][T20116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.482280][T20116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.613850][T20116] device bridge_slave_1 left promiscuous mode [ 1565.761203][T20116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.802159][T20116] device bridge_slave_0 left promiscuous mode [ 1565.808463][T20116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.859569][T20116] device hsr_slave_0 left promiscuous mode [ 1565.881803][T20116] device hsr_slave_1 left promiscuous mode [ 1565.888469][T20116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.900886][T20116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.914183][T20116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.930992][T20116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.981860][T20116] device bridge_slave_1 left promiscuous mode [ 1565.988141][T20116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.015464][T20116] device bridge_slave_0 left promiscuous mode [ 1566.031161][T20116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.194612][T20116] device veth1_macvtap left promiscuous mode [ 1567.200705][T20116] device veth0_macvtap left promiscuous mode [ 1567.211460][T20116] device veth1_vlan left promiscuous mode [ 1567.217315][T20116] device veth0_vlan left promiscuous mode [ 1567.261685][T20116] device veth1_macvtap left promiscuous mode [ 1567.267736][T20116] device veth0_macvtap left promiscuous mode [ 1567.275684][T20116] device veth1_vlan left promiscuous mode [ 1567.291558][T20116] device veth0_vlan left promiscuous mode [ 1569.745536][T20116] team0 (unregistering): Port device team_slave_1 removed [ 1569.870243][T20116] team0 (unregistering): Port device team_slave_0 removed [ 1569.927461][T20116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1569.987173][T20116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.642705][T20116] bond0 (unregistering): Released all slaves [ 1570.831134][ T4256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1570.842855][ T4256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1570.857211][ T4256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1570.888690][ T4256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1570.902133][ T4256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1570.909461][ T4256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.308498][T20116] team0 (unregistering): Port device team_slave_1 removed [ 1571.357793][T20116] team0 (unregistering): Port device team_slave_0 removed [ 1571.406436][T20116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.463769][T20116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.007829][T20116] bond0 (unregistering): Released all slaves [ 1572.103998][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1572.122282][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1572.130397][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1572.557431][T20359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1572.621319][T20359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1572.692237][T20359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1572.729610][T20581] chnl_net:caif_netlink_parms(): no params data found [ 1572.784875][T20359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1574.246150][ T4256] Bluetooth: hci5: command 0x0409 tx timeout [ 1575.453998][T20343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.486539][T20581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.507631][T20581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.533195][T20581] device bridge_slave_0 entered promiscuous mode [ 1575.555335][T20581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.571129][T20581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.606231][T20581] device bridge_slave_1 entered promiscuous mode [ 1575.731842][T20581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.779304][T20343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.823939][T20581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.849903][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1575.870155][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1575.971719][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1575.989100][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1576.021811][T16980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.028961][T16980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.065784][T20581] team0: Port device team_slave_0 added [ 1576.121013][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1576.154666][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1576.171652][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1576.186541][T16980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.193748][T16980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.219891][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1576.229475][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1576.241230][T20581] team0: Port device team_slave_1 added [ 1576.250193][T20359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.289420][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1576.306761][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1576.324741][ T4256] Bluetooth: hci5: command 0x041b tx timeout [ 1576.373113][T20581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.380097][T20581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1576.412252][T20581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.475234][T20343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1576.485861][T20343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1576.513695][T20359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.611012][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1576.633573][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1576.652171][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1576.977820][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1577.012200][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1578.487652][ T26] audit: type=1326 audit(1734305861.345:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7ffc0000 [ 1578.488410][ T4256] Bluetooth: hci5: command 0x040f tx timeout [ 1578.616906][ T26] audit: type=1326 audit(1734305861.345:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.5.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7ffc0000 [ 1578.617747][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1578.679242][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1578.689095][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1578.705073][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1578.726964][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1578.737254][T16980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.744456][T16980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.765155][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1578.780706][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1578.790709][T16980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.797978][T16980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.813265][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1578.827796][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1578.840285][T20581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.849274][T20581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.900783][T20581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.771396][ T4256] Bluetooth: hci5: command 0x0419 tx timeout [ 1580.777914][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1580.800023][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1580.811475][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1580.819802][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1580.832749][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1580.842729][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1580.852539][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1580.862642][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1580.877545][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1580.891791][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1580.911018][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1580.920408][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1580.953872][T20359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1580.997737][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1581.023742][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1581.174541][T20581] device hsr_slave_0 entered promiscuous mode [ 1581.239105][T20581] device hsr_slave_1 entered promiscuous mode [ 1582.257268][ T26] audit: type=1326 audit(1734305865.325:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588fd85d19 code=0x7ffc0000 [ 1582.344990][T20581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1582.370932][T20581] Cannot create hsr debugfs directory [ 1582.389575][T20343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.406490][ T26] audit: type=1326 audit(1734305865.325:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588fd85d19 code=0x7ffc0000 [ 1582.478543][ T26] audit: type=1326 audit(1734305865.325:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f588fd7cce7 code=0x7ffc0000 [ 1582.581584][ T26] audit: type=1326 audit(1734305865.325:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f588fd21f29 code=0x7ffc0000 [ 1582.651145][ T26] audit: type=1326 audit(1734305865.325:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588fd85d19 code=0x7ffc0000 [ 1582.775858][ T26] audit: type=1326 audit(1734305865.335:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f588fd7cce7 code=0x7ffc0000 [ 1582.921386][ T26] audit: type=1326 audit(1734305865.335:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f588fd21f29 code=0x7ffc0000 [ 1583.011009][ T26] audit: type=1326 audit(1734305865.335:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20640 comm="syz.6.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588fd85d19 code=0x7ffc0000 [ 1584.597543][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1584.611482][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1584.738469][T20359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.846446][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1584.862196][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1584.898320][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1584.931848][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1584.964332][T20343] device veth0_vlan entered promiscuous mode [ 1584.987389][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1585.011843][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1585.044355][T20343] device veth1_vlan entered promiscuous mode [ 1585.301380][T20343] device veth0_macvtap entered promiscuous mode [ 1585.312552][T20343] device veth1_macvtap entered promiscuous mode [ 1585.392186][T20343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.443413][T20343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.488991][T20343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.520222][T20343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.559836][T20343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.597096][T20343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.629210][T20343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.659970][T20343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.697685][T20343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.729779][T20343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.760216][T20343] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.789702][T20343] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.811956][T20343] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.846555][T20343] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.274830][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1586.283599][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1586.312221][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1586.321357][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1586.330263][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1586.339249][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1586.349350][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1586.358844][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1586.367749][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1586.541373][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1586.668634][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.690917][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.771555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1586.780147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1586.797106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1586.855874][ T4464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.877596][ T4464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.912598][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1586.925885][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1586.934580][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1586.946254][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1586.955251][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1586.965419][T20359] device veth0_vlan entered promiscuous mode [ 1587.008361][T20359] device veth1_vlan entered promiscuous mode [ 1587.125666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1587.139633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1587.149782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1587.150443][T20675] loop8: detected capacity change from 0 to 1024 [ 1587.159853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1587.177072][T20359] device veth0_macvtap entered promiscuous mode [ 1587.190472][T20675] EXT4-fs: Ignoring removed orlov option [ 1587.203077][T20675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1587.236478][T20675] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1587.253453][T20359] device veth1_macvtap entered promiscuous mode [ 1587.282266][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1587.296789][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1587.356999][T20343] EXT4-fs (loop8): unmounting filesystem. [ 1587.382858][T20455] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1587.391215][T20359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.440067][T20359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.504249][T20359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.519857][T20359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.539106][T20359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.550426][T20359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.577066][T20359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.594926][T20359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.636574][T20359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.697569][T20359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.720972][T20359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.732211][T20359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.743299][T20359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.835787][T20455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.846808][T20455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.854586][T20359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.856745][T20455] usb 6-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1587.872953][T20455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.892696][T20455] usb 6-1: config 0 descriptor?? [ 1587.908875][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1587.930618][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1587.948298][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1587.967623][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1588.035818][T20359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.045265][T20359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.054148][T20359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.063138][T20359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.272765][T20116] device hsr_slave_0 left promiscuous mode [ 1588.304196][T20116] device hsr_slave_1 left promiscuous mode [ 1588.306790][T20455] hid-generic 0003:05AC:4262.0012: unbalanced delimiter at end of report description [ 1588.322389][T20116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1588.351458][T20116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1588.363864][T20116] device bridge_slave_1 left promiscuous mode [ 1588.370705][T20455] hid-generic: probe of 0003:05AC:4262.0012 failed with error -22 [ 1588.384561][T20116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.419341][T20116] device bridge_slave_0 left promiscuous mode [ 1588.440280][T20116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.550146][T20455] usb 6-1: USB disconnect, device number 26 [ 1588.669721][T20116] device veth1_vlan left promiscuous mode [ 1588.698434][T20116] device veth0_vlan left promiscuous mode [ 1589.585113][T20116] team0 (unregistering): Port device team_slave_1 removed [ 1589.647535][T20116] team0 (unregistering): Port device team_slave_0 removed [ 1589.713230][T20116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.809680][T20116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.578042][T20116] bond0 (unregistering): Released all slaves [ 1590.733565][T20581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1590.784275][T20581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1590.812629][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.864637][T20581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1590.876246][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.900465][T20581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1590.960520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1591.025627][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.046402][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.095506][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1591.399612][T20581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.227416][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1593.249569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1593.285738][T20581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.324800][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1593.346008][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1593.388307][T15735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.395502][T15735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.454962][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1593.499413][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1593.541683][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1593.571872][T15735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.579018][T15735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.661326][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1593.689745][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1593.761695][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1593.793691][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1593.835128][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1593.885974][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1593.927019][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1593.995755][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1594.042720][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1594.088184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1594.112030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1594.164428][T20581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1596.068108][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1596.081661][T16980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1596.107240][T20581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.300899][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 1599.300919][ T26] audit: type=1326 audit(1734305882.515:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20845 comm="syz.6.4005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f588fd85d19 code=0x0 [ 1600.853797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1600.864444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1600.991176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1601.024698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1601.078059][T20581] device veth0_vlan entered promiscuous mode [ 1602.623164][ T26] audit: type=1326 audit(1734305885.505:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68ea57cce7 code=0x7ffc0000 [ 1602.692481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1602.702040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1602.735291][T20581] device veth1_vlan entered promiscuous mode [ 1602.763212][ T26] audit: type=1326 audit(1734305885.505:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68ea521f29 code=0x7ffc0000 [ 1602.863000][T20581] device veth0_macvtap entered promiscuous mode [ 1602.880870][ T26] audit: type=1326 audit(1734305885.515:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68ea57cce7 code=0x7ffc0000 [ 1602.881152][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1602.975331][ T26] audit: type=1326 audit(1734305885.515:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68ea521f29 code=0x7ffc0000 [ 1603.047146][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1603.071133][ T26] audit: type=1326 audit(1734305885.515:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ea585d19 code=0x7ffc0000 [ 1603.087110][T20326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1603.170806][ T26] audit: type=1326 audit(1734305885.525:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68ea57cce7 code=0x7ffc0000 [ 1603.198718][T20581] device veth1_macvtap entered promiscuous mode [ 1603.282522][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.301346][ T26] audit: type=1326 audit(1734305885.525:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68ea521f29 code=0x7ffc0000 [ 1603.349748][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.375136][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.405133][ T26] audit: type=1326 audit(1734305885.535:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68ea57cce7 code=0x7ffc0000 [ 1603.441420][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.500824][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.517245][ T26] audit: type=1326 audit(1734305885.545:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.8.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68ea521f29 code=0x7ffc0000 [ 1603.550801][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.560665][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.611057][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.651896][T20581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.672760][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1603.694995][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1603.732114][T15735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1603.784088][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.815031][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.852346][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.887817][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.918312][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.949505][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.975436][T20581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.014292][T20581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.044615][T20581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1604.070298][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1604.088651][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1604.124684][T20581] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.278035][T20581] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.322607][T20581] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.336494][T20581] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.415353][T15735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.592858][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.599221][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.670847][T15735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.797633][T20116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1607.877808][T20116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.931160][T20116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.985032][T20116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1609.744038][T15661] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1610.111114][T15661] usb 5-1: Using ep0 maxpacket: 8 [ 1610.351459][T15661] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1610.757246][T15661] usb 5-1: config 179 has no interface number 0 [ 1610.783795][T15661] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1610.826388][T15661] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1610.874496][T15661] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1610.927148][T15661] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1610.948191][T15661] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1610.978064][T15661] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1610.997311][T15661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.051132][T20924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1611.421312][T15661] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input25 [ 1611.586001][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1611.586001][T16359] usb 5-1: USB disconnect, device number 32 [ 1611.609426][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1611.644643][T16359] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1612.600925][T16359] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1612.790864][T16359] usb 9-1: Using ep0 maxpacket: 16 [ 1613.428217][T16359] usb 9-1: config 0 has an invalid interface number: 181 but max is 0 [ 1613.484714][T16359] usb 9-1: config 0 has no interface number 0 [ 1613.512166][T16359] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 1613.539389][T16359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.566077][T16359] usb 9-1: Product: syz [ 1613.574880][T16359] usb 9-1: Manufacturer: syz [ 1613.586255][T16359] usb 9-1: SerialNumber: syz [ 1613.613717][T16359] usb 9-1: config 0 descriptor?? [ 1613.644334][T16359] hub 9-1:0.181: bad descriptor, ignoring hub [ 1613.662876][T16359] hub: probe of 9-1:0.181 failed with error -5 [ 1613.991100][T15661] usb 9-1: USB disconnect, device number 10 [ 1614.185739][T15661] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1626.731092][ T4298] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1627.612364][ T4298] usb 6-1: Using ep0 maxpacket: 32 [ 1627.625639][ T4298] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1627.658008][ T4298] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1627.709301][ T4298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.751446][ T4298] usb 6-1: Product: syz [ 1627.773259][ T4298] usb 6-1: Manufacturer: syz [ 1627.821205][ T4298] usb 6-1: SerialNumber: syz [ 1627.859283][ T4298] usb 6-1: config 0 descriptor?? [ 1627.891564][T21106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1628.220170][T21120] 9pnet_fd: Insufficient options for proto=fd [ 1628.276877][ T4298] usb 6-1: USB disconnect, device number 27 [ 1628.861436][T21126] loop8: detected capacity change from 0 to 256 [ 1628.901770][T21126] exfat: Deprecated parameter 'namecase' [ 1629.006488][T21126] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1631.236959][ T4298] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1638.520959][T20670] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1638.780931][T20670] usb 9-1: Using ep0 maxpacket: 8 [ 1638.790058][T20670] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1638.826823][T20670] usb 9-1: config 179 has no interface number 0 [ 1638.844875][T20670] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1638.880837][T20670] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1638.941226][T20670] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1639.006804][T20670] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1639.067801][T20670] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1639.137035][T20670] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1639.190778][T20670] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.244630][T21217] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1640.596149][ T4298] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input26 [ 1640.654836][T21245] 9pnet_fd: Insufficient options for proto=fd [ 1640.796760][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1640.805170][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1640.844322][ T4298] usb 9-1: USB disconnect, device number 11 [ 1640.861961][ T4298] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1655.561523][T21363] 9pnet_fd: Insufficient options for proto=fd [ 1657.376604][T21383] loop8: detected capacity change from 0 to 164 [ 1657.416609][T21383] rock: directory entry would overflow storage [ 1657.423443][T21383] rock: sig=0x66, size=4, remaining=3 [ 1658.497204][T21383] rock: directory entry would overflow storage [ 1658.536874][T21383] rock: sig=0x66, size=4, remaining=3 [ 1658.577803][T21383] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1661.170058][T12212] Bluetooth: hci1: command 0x0406 tx timeout [ 1662.749335][T21418] loop8: detected capacity change from 0 to 512 [ 1663.541459][T21418] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.4123: corrupted inode contents [ 1663.700982][T21418] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #16: comm syz.8.4123: mark_inode_dirty error [ 1663.903025][T21418] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.4123: corrupted inode contents [ 1664.011329][T21418] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.4123: mark_inode_dirty error [ 1664.116624][T21418] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.4123: corrupted inode contents [ 1664.604460][T21418] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 1664.661031][T21418] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.4123: corrupted inode contents [ 1664.784637][T21418] EXT4-fs error (device loop8): ext4_truncate:4311: inode #16: comm syz.8.4123: mark_inode_dirty error [ 1664.877505][T21418] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 1664.974102][T21418] EXT4-fs (loop8): 1 truncate cleaned up [ 1664.979842][T21418] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1665.681038][T12212] Bluetooth: hci4: command 0x0406 tx timeout [ 1665.913186][T15278] __quota_error: 18 callbacks suppressed [ 1665.913206][T15278] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1665.940966][T21418] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1665.950873][T15278] EXT4-fs error (device loop8): ext4_release_dquot:6817: comm kworker/u4:0: Failed to release dquot type 1 [ 1666.084976][T21453] 9pnet_fd: Insufficient options for proto=fd [ 1667.109688][T20343] EXT4-fs (loop8): unmounting filesystem. [ 1668.723994][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.730402][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.974776][T21500] 9pnet_fd: Insufficient options for proto=fd [ 1676.487732][T21535] loop8: detected capacity change from 0 to 512 [ 1676.595843][T21469] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1677.372675][T21558] 9pnet_fd: Insufficient options for proto=fd [ 1679.661457][T12212] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1679.679905][T12212] Bluetooth: hci1: Injecting HCI hardware error event [ 1679.689384][ T4256] Bluetooth: hci1: hardware error 0x00 [ 1681.921300][ T4256] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1683.088048][T21604] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4145'. [ 1683.341391][T21604] device gretap0 entered promiscuous mode [ 1684.696694][T21627] 9pnet_fd: Insufficient options for proto=fd [ 1685.096556][T21636] loop8: detected capacity change from 0 to 8 [ 1692.596256][T21688] ecryptfs_parse_options: eCryptfs: unrecognized option [/dev/sr0] [ 1692.604479][T21688] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1692.619889][T21688] Error parsing options; rc = [-22] [ 1695.693614][ T4298] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1695.890794][ T4298] usb 6-1: Using ep0 maxpacket: 32 [ 1695.897953][ T4298] usb 6-1: config 0 has an invalid interface number: 80 but max is 0 [ 1695.946103][ T4298] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1696.007401][ T4298] usb 6-1: config 0 has no interface number 0 [ 1696.063508][ T4298] usb 6-1: config 0 interface 80 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1696.136640][ T4298] usb 6-1: config 0 interface 80 has no altsetting 0 [ 1696.176543][ T4298] usb 6-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=a0.f8 [ 1696.211951][ T4298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.240417][ T4298] usb 6-1: Product: syz [ 1696.270975][ T4298] usb 6-1: Manufacturer: syz [ 1696.300872][ T4298] usb 6-1: SerialNumber: syz [ 1696.335597][ T4298] usb 6-1: config 0 descriptor?? [ 1696.401431][ T4256] Bluetooth: hci5: command 0x0406 tx timeout [ 1696.597266][ T4298] rndis_wlan 6-1:0.80: skipping garbage [ 1696.603122][ T4298] usb 6-1: bad CDC descriptors [ 1696.630345][ T4298] rndis_host 6-1:0.80: skipping garbage [ 1696.668684][ T4298] usb 6-1: bad CDC descriptors [ 1696.684829][ T4298] cdc_acm 6-1:0.80: skipping garbage [ 1696.740437][ T4298] usb 6-1: USB disconnect, device number 28 [ 1699.251799][T21743] loop8: detected capacity change from 0 to 1024 [ 1700.719556][ T4390] hfsplus: b-tree write err: -5, ino 4 [ 1708.400862][T21821] ecryptfs_parse_options: eCryptfs: unrecognized option [/dev/sr0] [ 1708.408996][T21821] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1708.422794][T21821] Error parsing options; rc = [-22] [ 1711.256786][T21839] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4194'. [ 1711.266491][T21839] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4194'. [ 1721.401896][T21929] loop8: detected capacity change from 0 to 4096 [ 1722.377045][T21929] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1724.800852][T21939] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 474: padding at end of block bitmap is not set [ 1724.982631][T20343] EXT4-fs (loop8): unmounting filesystem. [ 1729.342040][ T26] audit: type=1326 audit(1734306013.175:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21975 comm="syz.5.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab85d19 code=0x7fc00000 [ 1730.169221][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.175619][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.774306][ T26] audit: type=1326 audit(1734306019.605:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1735.890445][ T26] audit: type=1326 audit(1734306019.605:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1736.003706][ T26] audit: type=1326 audit(1734306019.605:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1736.199083][ T26] audit: type=1326 audit(1734306019.605:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1737.069259][ T26] audit: type=1326 audit(1734306019.605:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1737.210751][ T26] audit: type=1326 audit(1734306019.625:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1737.339009][ T26] audit: type=1326 audit(1734306019.625:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1737.481477][ T26] audit: type=1326 audit(1734306019.625:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1737.629925][ T26] audit: type=1326 audit(1734306019.625:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1737.750202][ T26] audit: type=1326 audit(1734306019.625:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.4.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01e185d19 code=0x7fc00000 [ 1737.918599][ T4256] Bluetooth: hci5: Unknown advertising packet type: 0x3180 [ 1749.922065][T22175] fuse: Bad value for 'fd' [ 1753.297718][T22209] loop8: detected capacity change from 0 to 512 [ 1753.431397][T22209] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1753.508204][T22209] EXT4-fs (loop8): invalid journal inode [ 1753.585474][T22209] EXT4-fs (loop8): can't get journal size [ 1753.900898][T22209] EXT4-fs (loop8): 1 truncate cleaned up [ 1753.918777][T22209] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1755.927222][T22242] EXT4-fs (loop8): shut down requested (2) [ 1756.076940][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 1756.076957][ T26] audit: type=1800 audit(1734306039.905:1541): pid=22238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4276" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1762.204161][T20343] EXT4-fs (loop8): unmounting filesystem. [ 1762.942060][T22289] fuse: Bad value for 'fd' [ 1770.462414][ T26] audit: type=1326 audit(1734306054.295:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22356 comm="syz.7.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1770.813716][T22371] loop8: detected capacity change from 0 to 512 [ 1771.071067][T22371] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1771.209856][T22371] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1771.337853][T22371] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1771.411397][T22371] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.4300: Failed to acquire dquot type 1 [ 1771.490009][T22371] EXT4-fs (loop8): 1 truncate cleaned up [ 1771.564227][T22371] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1771.781202][T12212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1771.799859][T12212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1771.810030][T12212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1771.810522][T22371] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 1771.835797][T12212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1771.844845][T12212] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1771.852342][T12212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1773.921174][T12212] Bluetooth: hci3: command 0x0409 tx timeout [ 1773.981657][T22388] chnl_net:caif_netlink_parms(): no params data found [ 1774.277031][T20343] EXT4-fs (loop8): unmounting filesystem. [ 1774.526704][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4311'. [ 1775.293434][T22388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.310876][T22388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.363519][T22388] device bridge_slave_0 entered promiscuous mode [ 1775.405508][T22388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.457009][T22388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.498310][T22388] device bridge_slave_1 entered promiscuous mode [ 1775.636132][T22388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.689839][T22388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.765058][T22432] netlink: 'syz.7.4312': attribute type 1 has an invalid length. [ 1775.859385][T22432] netlink: 'syz.7.4312': attribute type 1 has an invalid length. [ 1775.895803][T22388] team0: Port device team_slave_0 added [ 1775.912815][T22432] netlink: 'syz.7.4312': attribute type 1 has an invalid length. [ 1776.001123][T12212] Bluetooth: hci3: command 0x041b tx timeout [ 1776.060460][T22388] team0: Port device team_slave_1 added [ 1777.554980][T22388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.610983][T22388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.733046][T22388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.814346][T22388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.852103][T22388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.999845][T22388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.081157][T12212] Bluetooth: hci3: command 0x040f tx timeout [ 1778.309112][ T26] audit: type=1326 audit(1734306062.125:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22442 comm="syz.7.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1778.410842][T21644] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.693789][T22450] loop8: detected capacity change from 0 to 2048 [ 1778.801851][T22450] journal_path: Lookup failure for './file0' [ 1778.882809][T22450] EXT4-fs: error: could not find journal device path [ 1778.993551][T21644] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.150363][T22388] device hsr_slave_0 entered promiscuous mode [ 1779.190986][T22388] device hsr_slave_1 entered promiscuous mode [ 1779.225615][T22388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1779.255338][T22388] Cannot create hsr debugfs directory [ 1780.220901][T12212] Bluetooth: hci3: command 0x0419 tx timeout [ 1780.557913][T21644] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.879834][T21644] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.482462][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4323'. [ 1787.394846][ T26] audit: type=1326 audit(1734306071.225:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1787.552877][ T26] audit: type=1326 audit(1734306071.225:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1787.620988][ T26] audit: type=1326 audit(1734306071.225:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1788.830902][ T26] audit: type=1326 audit(1734306071.225:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1788.884129][T22388] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1790.336185][ T26] audit: type=1326 audit(1734306071.225:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1790.389970][ T26] audit: type=1326 audit(1734306071.225:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1790.510751][ T26] audit: type=1326 audit(1734306071.225:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1790.600726][ T26] audit: type=1326 audit(1734306071.225:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1790.631774][T22388] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1790.675011][ T26] audit: type=1326 audit(1734306071.225:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1790.714128][T22388] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1790.872673][ T26] audit: type=1326 audit(1734306071.225:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db385d19 code=0x7fc00000 [ 1791.229857][T22388] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1791.380933][T21644] device hsr_slave_0 left promiscuous mode [ 1791.393051][T21644] device hsr_slave_1 left promiscuous mode [ 1791.428270][T21644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1791.450784][T21644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1791.491547][T21644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.499014][T21644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.544679][T21644] device bridge_slave_1 left promiscuous mode [ 1791.604767][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.611162][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.621111][T21644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.653724][T21644] device bridge_slave_0 left promiscuous mode [ 1791.660024][T21644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.024438][T21644] device veth1_macvtap left promiscuous mode [ 1794.030549][T21644] device veth0_macvtap left promiscuous mode [ 1794.085941][T21644] device veth1_vlan left promiscuous mode [ 1794.111113][T21644] device veth0_vlan left promiscuous mode [ 1799.074823][T21644] team0 (unregistering): Port device team_slave_1 removed [ 1799.265010][T21644] team0 (unregistering): Port device team_slave_0 removed [ 1799.422495][T21644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.544571][T21644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.210608][T21644] bond0 (unregistering): Released all slaves [ 1804.969511][T22646] Error parsing options; rc = [-22] [ 1814.612281][ T4256] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1814.644524][ T4256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1814.653766][ T4256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1814.663189][ T4256] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1814.672754][ T4256] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1814.680065][ T4256] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1815.436035][T22746] input: syz0 as /devices/virtual/input/input28 [ 1815.446800][T22746] input: failed to attach handler leds to device input28, error: -6 [ 1816.440314][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4408'. [ 1816.699889][T22388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.721053][T12212] Bluetooth: hci2: command 0x0409 tx timeout [ 1816.808518][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1816.824132][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1816.929212][T22388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.075020][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1817.092993][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1817.103734][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.110931][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.119921][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1817.161596][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1817.172366][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1817.215828][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.223175][T20515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.284297][T22735] chnl_net:caif_netlink_parms(): no params data found [ 1817.326508][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1817.343400][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1817.360473][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1817.378961][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1817.389891][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1817.478930][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1817.498486][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1817.517787][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1817.557183][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1817.577180][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1818.049850][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1818.104348][T22388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1818.214528][T22735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.249981][T22735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.280263][T22735] device bridge_slave_0 entered promiscuous mode [ 1818.389460][T21644] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.451381][T22735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.460458][T22735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.479294][T22735] device bridge_slave_1 entered promiscuous mode [ 1818.580368][T21644] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.739470][T22735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1818.801227][T12212] Bluetooth: hci2: command 0x041b tx timeout [ 1818.834885][T21644] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.874319][T22735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1818.952905][T21644] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.002631][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1819.010315][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1819.020312][T22388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.049714][T22735] team0: Port device team_slave_0 added [ 1819.081925][T22735] team0: Port device team_slave_1 added [ 1819.152517][T22735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.159530][T22735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.193680][T22735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1819.211434][T22735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1819.219174][T22735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.254419][T22735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.418174][T22735] device hsr_slave_0 entered promiscuous mode [ 1819.425593][T22735] device hsr_slave_1 entered promiscuous mode [ 1819.810951][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1819.819788][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1819.877294][T22388] device veth0_vlan entered promiscuous mode [ 1819.885130][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1819.894417][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1819.908723][T22388] device veth1_vlan entered promiscuous mode [ 1819.916859][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1819.925760][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1819.934283][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1820.038470][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1820.056564][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1820.065908][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1820.125368][T22388] device veth0_macvtap entered promiscuous mode [ 1820.159508][T22388] device veth1_macvtap entered promiscuous mode [ 1820.228904][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.244225][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.254613][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.265889][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.276644][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.287186][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.297093][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.307608][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.318811][T22388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1820.348260][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1820.358198][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1820.369957][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1820.380476][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1820.391987][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.403602][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.413581][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.424600][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.434761][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.445413][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.455430][T22388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.466109][T22388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.479221][T22388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1820.544985][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1820.554701][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1820.568678][T22388] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.582177][T22388] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.591256][T22388] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.599999][T22388] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.780911][T16215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.789935][T16215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.831055][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1820.899400][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 1820.960432][T16361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.977725][T22735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1820.992285][T16361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.024077][T22735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1821.038902][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1821.157576][T22735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1821.168259][T22735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1821.242994][T21644] device hsr_slave_0 left promiscuous mode [ 1821.270601][T21644] device hsr_slave_1 left promiscuous mode [ 1821.319861][T21644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.360717][T21644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.380455][T21644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1821.404067][T21644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.426367][T21644] device bridge_slave_1 left promiscuous mode [ 1821.564829][T21644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.621988][T21644] device bridge_slave_0 left promiscuous mode [ 1821.636347][T21644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.747566][T21644] device veth1_macvtap left promiscuous mode [ 1821.754411][T21644] device veth0_macvtap left promiscuous mode [ 1821.767034][T21644] device veth1_vlan left promiscuous mode [ 1821.773187][T21644] device veth0_vlan left promiscuous mode [ 1823.021332][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 1824.710900][T15661] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1824.890738][T15661] usb 10-1: device descriptor read/64, error -71 [ 1825.171032][T15661] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1825.340938][T15661] usb 10-1: device descriptor read/64, error -71 [ 1825.566925][T15661] usb usb10-port1: attempt power cycle [ 1826.653291][T21644] team0 (unregistering): Port device team_slave_1 removed [ 1826.670850][T15661] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1826.752231][T15661] usb 10-1: device descriptor read/8, error -71 [ 1826.975803][T21644] team0 (unregistering): Port device team_slave_0 removed [ 1827.040788][T15661] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1827.091292][T15661] usb 10-1: device descriptor read/8, error -71 [ 1827.211102][T15661] usb usb10-port1: unable to enumerate USB device [ 1827.430817][T21644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.775233][T22892] loop9: detected capacity change from 0 to 512 [ 1827.802742][T21644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1828.150873][T22892] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1828.230283][T22892] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1828.877309][T22388] EXT4-fs (loop9): unmounting filesystem. [ 1829.235613][T22898] loop9: detected capacity change from 0 to 2048 [ 1829.364523][T22898] loop9: p1 < > p3 p4 < > [ 1829.393419][T22898] loop9: p3 start 4284289 is beyond EOD, truncated [ 1830.797727][T22918] loop9: detected capacity change from 0 to 1024 [ 1830.954596][T21644] bond0 (unregistering): Released all slaves [ 1831.293366][T22919] device batadv_slave_1 entered promiscuous mode [ 1832.000912][T22916] device batadv_slave_1 left promiscuous mode [ 1833.841368][ T4256] Bluetooth: hci2: command 0x0405 tx timeout [ 1834.321134][T22735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.389404][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1834.458641][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1834.480599][T22932] loop9: detected capacity change from 0 to 1024 [ 1834.499221][T22735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.588275][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1834.641875][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1834.732110][T16215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.739363][T16215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.764055][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 1834.764074][ T26] audit: type=1800 audit(1734306118.595:1606): pid=22932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4466" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 1834.892103][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1834.941244][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1834.981572][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1835.015805][T16215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.023013][T16215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.080239][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1835.125262][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1835.194573][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1835.251228][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1835.308959][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1835.332180][T15278] hfsplus: b-tree write err: -5, ino 4 [ 1835.336714][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1835.441861][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1835.471601][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1835.524744][T22735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1835.655639][T22735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1836.398128][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1836.678450][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1836.911313][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1837.772006][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1837.779516][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1837.866659][T22735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1837.963280][T21644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1838.013284][T21644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1838.259645][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1838.281651][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1838.354686][T22735] device veth0_vlan entered promiscuous mode [ 1838.751582][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1838.759715][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1838.860904][T22735] device veth1_vlan entered promiscuous mode [ 1838.965710][T22735] device veth0_macvtap entered promiscuous mode [ 1838.991408][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1839.009493][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1839.074247][T22735] device veth1_macvtap entered promiscuous mode [ 1839.096242][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1839.193958][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1839.661837][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.718374][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.760822][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.834409][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.034547][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1840.364098][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.530777][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.430671][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.494557][T22735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1841.536585][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1841.562609][T16361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1841.613740][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.650859][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.677767][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.700800][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.730874][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.752990][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.774190][T22735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.801919][T22735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.832746][T22735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1841.864068][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1841.883392][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1841.912547][T22735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.950791][T22735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.989118][T22735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.039734][T22735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.375694][T20515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.421138][T20515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.476857][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.476951][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1842.500687][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.559952][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1846.606982][T23035] loop9: detected capacity change from 0 to 512 [ 1847.617036][T23035] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1847.630812][T23035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1847.691344][T23035] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1847.782658][T23035] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 1847.860734][T23035] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 1847.901197][T23035] EXT4-fs (loop9): 1 truncate cleaned up [ 1847.906925][T23035] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1847.919305][T23042] device batadv_slave_1 entered promiscuous mode [ 1847.971924][T23041] device batadv_slave_1 left promiscuous mode [ 1848.241807][T22388] EXT4-fs (loop9): unmounting filesystem. [ 1848.444348][T23050] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4491'. [ 1849.321033][T20670] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1849.510759][T20670] usb 10-1: Using ep0 maxpacket: 8 [ 1849.517880][T20670] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.592318][T20670] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1849.640961][T20670] usb 10-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 1849.710810][T20670] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.751901][T20670] usb 10-1: config 0 descriptor?? [ 1849.977901][T23078] loop0: detected capacity change from 0 to 128 [ 1850.070337][T23078] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1850.168613][T20670] sony 0003:12BA:074B.0015: hidraw0: USB HID v0.04 Device [HID 12ba:074b] on usb-dummy_hcd.9-1/input0 [ 1850.234729][T20670] sony 0003:12BA:074B.0015: failed to claim input [ 1850.365722][T20670] usb 10-1: USB disconnect, device number 7 [ 1851.477854][T23107] loop9: detected capacity change from 0 to 128 [ 1851.532731][T23107] ext4: Unknown parameter 'nouser_xattr' [ 1853.187746][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.358833][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.752233][T23158] netlink: 'syz.4.4516': attribute type 4 has an invalid length. [ 1862.379449][T23221] loop9: detected capacity change from 0 to 512 [ 1862.491216][T23221] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1863.133371][T23221] EXT4-fs (loop9): 1 truncate cleaned up [ 1863.139052][T23221] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1863.734418][T23221] ================================================================== [ 1863.742541][T23221] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 1863.750305][T23221] Read of size 18446744073709551572 at addr ffff888055dd1050 by task syz.9.4530/23221 [ 1863.759874][T23221] [ 1863.762205][T23221] CPU: 0 PID: 23221 Comm: syz.9.4530 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 1863.773669][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1863.783834][T23221] Call Trace: [ 1863.787124][T23221] [ 1863.790076][T23221] dump_stack_lvl+0x1e3/0x2cb [ 1863.794796][T23221] ? nf_tcp_handle_invalid+0x642/0x642 [ 1863.800286][T23221] ? panic+0x764/0x764 [ 1863.804355][T23221] ? _printk+0xd1/0x111 [ 1863.808510][T23221] ? __virt_addr_valid+0x17f/0x530 [ 1863.813625][T23221] ? __virt_addr_valid+0x17f/0x530 [ 1863.818828][T23221] print_report+0x15f/0x4f0 [ 1863.823334][T23221] ? __virt_addr_valid+0x17f/0x530 [ 1863.828444][T23221] ? __virt_addr_valid+0x17f/0x530 [ 1863.833558][T23221] ? __virt_addr_valid+0x45b/0x530 [ 1863.838688][T23221] ? __phys_addr+0xb6/0x170 [ 1863.843212][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1863.848699][T23221] kasan_report+0x136/0x160 [ 1863.853229][T23221] ? __x64_sys_unlink+0x45/0x50 [ 1863.858100][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1863.863572][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1863.869031][T23221] kasan_check_range+0x27f/0x290 [ 1863.873976][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1863.879444][T23221] memmove+0x25/0x60 [ 1863.883351][T23221] ext4_xattr_set_entry+0x8ca/0x1f30 [ 1863.888654][T23221] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 1863.895069][T23221] ? ext4_xattr_block_set+0x884/0x3920 [ 1863.900528][T23221] ? kmemdup+0x41/0x60 [ 1863.904629][T23221] ? memcpy+0x3c/0x60 [ 1863.908647][T23221] ext4_xattr_block_set+0xa58/0x3920 [ 1863.913948][T23221] ? __getblk_gfp+0x50/0xa20 [ 1863.918561][T23221] ? _raw_spin_unlock+0x24/0x40 [ 1863.923430][T23221] ? ext4_xattr_block_find+0x510/0x510 [ 1863.928904][T23221] ? ext4_xattr_block_find+0x468/0x510 [ 1863.934383][T23221] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 1863.940319][T23221] ? ext4_xattr_set+0x3d0/0x3d0 [ 1863.945192][T23221] ? rwsem_write_trylock+0x166/0x210 [ 1863.950482][T23221] ? clear_nonspinnable+0x60/0x60 [ 1863.955514][T23221] ? ext4_reserve_inode_write+0x2b3/0x360 [ 1863.961239][T23221] ? dquot_initialize_needed+0x128/0x320 [ 1863.966880][T23221] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 1863.972518][T23221] __ext4_mark_inode_dirty+0x54f/0x920 [ 1863.977980][T23221] ? ext4_blocks_for_truncate+0x270/0x270 [ 1863.983702][T23221] ? current_time+0x1ba/0x300 [ 1863.988384][T23221] ? atime_needs_update+0x7b0/0x7b0 [ 1863.993591][T23221] __ext4_unlink+0x6ed/0xba0 [ 1863.998182][T23221] ? __ext4_read_dirblock+0x890/0x890 [ 1864.003558][T23221] ? rwsem_write_trylock+0x166/0x210 [ 1864.008846][T23221] ? inode_permission+0xf7/0x450 [ 1864.013781][T23221] ? clear_nonspinnable+0x60/0x60 [ 1864.018810][T23221] ext4_unlink+0x1d5/0x670 [ 1864.023231][T23221] vfs_unlink+0x359/0x5f0 [ 1864.027562][T23221] do_unlinkat+0x4a5/0x820 [ 1864.031985][T23221] ? fsnotify_link_count+0xf0/0xf0 [ 1864.037105][T23221] __x64_sys_unlink+0x45/0x50 [ 1864.041791][T23221] do_syscall_64+0x3b/0xb0 [ 1864.046224][T23221] ? clear_bhb_loop+0x45/0xa0 [ 1864.050908][T23221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1864.056919][T23221] RIP: 0033:0x7f07b1585d19 [ 1864.061341][T23221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1864.080949][T23221] RSP: 002b:00007f07b237c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1864.089368][T23221] RAX: ffffffffffffffda RBX: 00007f07b1775fa0 RCX: 00007f07b1585d19 [ 1864.097337][T23221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1864.105312][T23221] RBP: 00007f07b1601a20 R08: 0000000000000000 R09: 0000000000000000 [ 1864.113279][T23221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1864.121244][T23221] R13: 0000000000000000 R14: 00007f07b1775fa0 R15: 00007ffee5dfc8d8 [ 1864.129217][T23221] [ 1864.132228][T23221] [ 1864.134540][T23221] Allocated by task 23221: [ 1864.138937][T23221] kasan_set_track+0x4b/0x70 [ 1864.143532][T23221] __kasan_kmalloc+0x97/0xb0 [ 1864.148114][T23221] __kmalloc_node_track_caller+0xb1/0x220 [ 1864.153848][T23221] kmemdup+0x26/0x60 [ 1864.157739][T23221] ext4_xattr_block_set+0x884/0x3920 [ 1864.163013][T23221] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 1864.168912][T23221] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 1864.174546][T23221] __ext4_mark_inode_dirty+0x54f/0x920 [ 1864.180103][T23221] __ext4_unlink+0x6ed/0xba0 [ 1864.184688][T23221] ext4_unlink+0x1d5/0x670 [ 1864.189097][T23221] vfs_unlink+0x359/0x5f0 [ 1864.193424][T23221] do_unlinkat+0x4a5/0x820 [ 1864.197836][T23221] __x64_sys_unlink+0x45/0x50 [ 1864.202509][T23221] do_syscall_64+0x3b/0xb0 [ 1864.207017][T23221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1864.212915][T23221] [ 1864.215229][T23221] Last potentially related work creation: [ 1864.220950][T23221] kasan_save_stack+0x3b/0x60 [ 1864.225632][T23221] __kasan_record_aux_stack+0xb0/0xc0 [ 1864.231004][T23221] kvfree_call_rcu+0x116/0x8c0 [ 1864.235761][T23221] neigh_periodic_work+0x3c5/0xd40 [ 1864.240867][T23221] process_one_work+0x8a9/0x11d0 [ 1864.245799][T23221] worker_thread+0xa47/0x1200 [ 1864.250469][T23221] kthread+0x28d/0x320 [ 1864.254553][T23221] ret_from_fork+0x1f/0x30 [ 1864.258966][T23221] [ 1864.261281][T23221] Second to last potentially related work creation: [ 1864.267868][T23221] kasan_save_stack+0x3b/0x60 [ 1864.272546][T23221] __kasan_record_aux_stack+0xb0/0xc0 [ 1864.278002][T23221] kvfree_call_rcu+0x116/0x8c0 [ 1864.282784][T23221] neigh_periodic_work+0x3c5/0xd40 [ 1864.287891][T23221] process_one_work+0x8a9/0x11d0 [ 1864.292826][T23221] worker_thread+0xa47/0x1200 [ 1864.297500][T23221] kthread+0x28d/0x320 [ 1864.301560][T23221] ret_from_fork+0x1f/0x30 [ 1864.305975][T23221] [ 1864.308290][T23221] The buggy address belongs to the object at ffff888055dd1000 [ 1864.308290][T23221] which belongs to the cache kmalloc-1k of size 1024 [ 1864.322337][T23221] The buggy address is located 80 bytes inside of [ 1864.322337][T23221] 1024-byte region [ffff888055dd1000, ffff888055dd1400) [ 1864.335606][T23221] [ 1864.337919][T23221] The buggy address belongs to the physical page: [ 1864.344327][T23221] page:ffffea0001577400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55dd0 [ 1864.354485][T23221] head:ffffea0001577400 order:3 compound_mapcount:0 compound_pincount:0 [ 1864.362798][T23221] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1864.370782][T23221] raw: 00fff00000010200 ffffea0001e57400 dead000000000002 ffff888017c41dc0 [ 1864.379358][T23221] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1864.387927][T23221] page dumped because: kasan: bad access detected [ 1864.394349][T23221] page_owner tracks the page as allocated [ 1864.400055][T23221] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u4:1), ts 78970694096, free_ts 21457769211 [ 1864.420405][T23221] post_alloc_hook+0x18d/0x1b0 [ 1864.425172][T23221] get_page_from_freelist+0x3731/0x38d0 [ 1864.430721][T23221] __alloc_pages+0x28d/0x770 [ 1864.435355][T23221] alloc_slab_page+0x6a/0x150 [ 1864.440029][T23221] new_slab+0x84/0x2d0 [ 1864.444099][T23221] ___slab_alloc+0xc20/0x1270 [ 1864.448772][T23221] __kmem_cache_alloc_node+0x19f/0x260 [ 1864.454325][T23221] __kmalloc+0xa1/0x230 [ 1864.458502][T23221] ieee802_11_parse_elems_full+0xc4/0x1380 [ 1864.464313][T23221] ieee80211_ibss_rx_queued_mgmt+0x430/0x2dd0 [ 1864.470391][T23221] ieee80211_iface_work+0x7aa/0xce0 [ 1864.475606][T23221] process_one_work+0x8a9/0x11d0 [ 1864.480540][T23221] worker_thread+0xa47/0x1200 [ 1864.485213][T23221] kthread+0x28d/0x320 [ 1864.489275][T23221] ret_from_fork+0x1f/0x30 [ 1864.493692][T23221] page last free stack trace: [ 1864.498354][T23221] free_unref_page_prepare+0x12a6/0x15b0 [ 1864.503982][T23221] free_unref_page+0x33/0x3e0 [ 1864.508650][T23221] free_contig_range+0x9a/0x150 [ 1864.513501][T23221] destroy_args+0xfe/0x997 [ 1864.517917][T23221] debug_vm_pgtable+0x416/0x46b [ 1864.522759][T23221] do_one_initcall+0x265/0x8f0 [ 1864.527522][T23221] do_initcall_level+0x157/0x207 [ 1864.532458][T23221] do_initcalls+0x49/0x86 [ 1864.536783][T23221] kernel_init_freeable+0x45c/0x60f [ 1864.541983][T23221] kernel_init+0x19/0x290 [ 1864.546309][T23221] ret_from_fork+0x1f/0x30 [ 1864.550734][T23221] [ 1864.553047][T23221] Memory state around the buggy address: [ 1864.558666][T23221] ffff888055dd0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1864.566718][T23221] ffff888055dd0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1864.574768][T23221] >ffff888055dd1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1864.582818][T23221] ^ [ 1864.589473][T23221] ffff888055dd1080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1864.597522][T23221] ffff888055dd1100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1864.605588][T23221] ================================================================== [ 1865.500897][T23221] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1865.508145][T23221] CPU: 1 PID: 23221 Comm: syz.9.4530 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 1865.519815][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1865.529907][T23221] Call Trace: [ 1865.533214][T23221] [ 1865.536182][T23221] dump_stack_lvl+0x1e3/0x2cb [ 1865.540992][T23221] ? nf_tcp_handle_invalid+0x642/0x642 [ 1865.546492][T23221] ? panic+0x764/0x764 [ 1865.550589][T23221] ? preempt_schedule_common+0xa6/0xd0 [ 1865.556080][T23221] ? vscnprintf+0x59/0x80 [ 1865.560444][T23221] panic+0x318/0x764 [ 1865.564369][T23221] ? check_panic_on_warn+0x1d/0xa0 [ 1865.569596][T23221] ? memcpy_page_flushcache+0xfc/0xfc [ 1865.574995][T23221] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1865.581011][T23221] ? _raw_spin_unlock+0x40/0x40 [ 1865.585894][T23221] check_panic_on_warn+0x7e/0xa0 [ 1865.590858][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1865.596340][T23221] end_report+0x66/0x110 [ 1865.600592][T23221] kasan_report+0x143/0x160 [ 1865.605101][T23221] ? __x64_sys_unlink+0x45/0x50 [ 1865.609963][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1865.615425][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1865.620888][T23221] kasan_check_range+0x27f/0x290 [ 1865.625826][T23221] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 1865.631287][T23221] memmove+0x25/0x60 [ 1865.635274][T23221] ext4_xattr_set_entry+0x8ca/0x1f30 [ 1865.640607][T23221] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 1865.647038][T23221] ? ext4_xattr_block_set+0x884/0x3920 [ 1865.652503][T23221] ? kmemdup+0x41/0x60 [ 1865.656581][T23221] ? memcpy+0x3c/0x60 [ 1865.660570][T23221] ext4_xattr_block_set+0xa58/0x3920 [ 1865.665870][T23221] ? __getblk_gfp+0x50/0xa20 [ 1865.670482][T23221] ? _raw_spin_unlock+0x24/0x40 [ 1865.675343][T23221] ? ext4_xattr_block_find+0x510/0x510 [ 1865.680808][T23221] ? ext4_xattr_block_find+0x468/0x510 [ 1865.686274][T23221] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 1865.692190][T23221] ? ext4_xattr_set+0x3d0/0x3d0 [ 1865.697043][T23221] ? rwsem_write_trylock+0x166/0x210 [ 1865.702338][T23221] ? clear_nonspinnable+0x60/0x60 [ 1865.707370][T23221] ? ext4_reserve_inode_write+0x2b3/0x360 [ 1865.713127][T23221] ? dquot_initialize_needed+0x128/0x320 [ 1865.718793][T23221] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 1865.724640][T23221] __ext4_mark_inode_dirty+0x54f/0x920 [ 1865.730110][T23221] ? ext4_blocks_for_truncate+0x270/0x270 [ 1865.735840][T23221] ? current_time+0x1ba/0x300 [ 1865.740530][T23221] ? atime_needs_update+0x7b0/0x7b0 [ 1865.745743][T23221] __ext4_unlink+0x6ed/0xba0 [ 1865.750341][T23221] ? __ext4_read_dirblock+0x890/0x890 [ 1865.755719][T23221] ? rwsem_write_trylock+0x166/0x210 [ 1865.761010][T23221] ? inode_permission+0xf7/0x450 [ 1865.765951][T23221] ? clear_nonspinnable+0x60/0x60 [ 1865.770986][T23221] ext4_unlink+0x1d5/0x670 [ 1865.775411][T23221] vfs_unlink+0x359/0x5f0 [ 1865.779750][T23221] do_unlinkat+0x4a5/0x820 [ 1865.784178][T23221] ? fsnotify_link_count+0xf0/0xf0 [ 1865.789400][T23221] __x64_sys_unlink+0x45/0x50 [ 1865.794083][T23221] do_syscall_64+0x3b/0xb0 [ 1865.798512][T23221] ? clear_bhb_loop+0x45/0xa0 [ 1865.803368][T23221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1865.809272][T23221] RIP: 0033:0x7f07b1585d19 [ 1865.813691][T23221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1865.833303][T23221] RSP: 002b:00007f07b237c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1865.841810][T23221] RAX: ffffffffffffffda RBX: 00007f07b1775fa0 RCX: 00007f07b1585d19 [ 1865.849870][T23221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1865.857839][T23221] RBP: 00007f07b1601a20 R08: 0000000000000000 R09: 0000000000000000 [ 1865.865827][T23221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1865.873797][T23221] R13: 0000000000000000 R14: 00007f07b1775fa0 R15: 00007ffee5dfc8d8 [ 1865.881778][T23221] [ 1865.885200][T23221] Kernel Offset: disabled [ 1865.889551][T23221] Rebooting in 86400 seconds..