last executing test programs: 1m12.180773909s ago: executing program 0 (id=74): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 1m12.032396439s ago: executing program 0 (id=75): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b33000000000000000005", @ANYRES64=r5], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) 1m11.924914568s ago: executing program 3 (id=76): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1m11.018099527s ago: executing program 0 (id=77): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0\x00', 0x101c8ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1bc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r1 = fanotify_init(0xf00, 0x40000) fanotify_mark(r1, 0x105, 0x4000997d, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x191) read(r1, &(0x7f00000000c0)=""/77, 0x4d) 1m10.802438397s ago: executing program 0 (id=79): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1600008, &(0x7f00000005c0)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030332c6e6f6465636f6d706f73652c706172743d3078303030303030303030303030303030372c6e6f6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d312c747970653d25f205c12c00fda5eb202594d6f03492c5dcec5e93ca946d5a3d8bbeec226c4181fafb5335bb19b76d77eb7bc1c165aa4c68f1d1b50606d7b18ed3ee238f9a213a127ba2ee94bf17debc420923f0416b4030338c3765578df725ee58a6bd52d54b6d53b0"], 0x3, 0x656, &(0x7f0000001280)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000100)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf49}}, {@nobh}, {@nojournal_checksum}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x472, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) 1m10.591804947s ago: executing program 0 (id=80): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.108469046s ago: executing program 0 (id=86): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x47, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0xb, 0x8, 0x4, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m9.961417415s ago: executing program 32 (id=86): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x47, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0xb, 0x8, 0x4, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m8.158181583s ago: executing program 3 (id=98): getpid() stat(&(0x7f0000002500)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x34, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1m7.005501141s ago: executing program 3 (id=103): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000300)={0x0, 0x6c, [0x1, 0x8000000000000000, 0x3, 0x80000001, 0x3, 0x6]}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x7, 0x564b043e, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x2, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) chmod(&(0x7f00000001c0)='./file0\x00', 0xc) dup3(r1, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.724424249s ago: executing program 3 (id=107): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1600008, &(0x7f00000005c0)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030332c6e6f6465636f6d706f73652c706172743d3078303030303030303030303030303030372c6e6f6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d312c747970653d25f205c12c00fda5eb202594d6f03492c5dcec5e93ca946d5a3d8bbeec226c4181fafb5335bb19b76d77eb7bc1c165aa4c68f1d1b50606d7b18ed3ee238f9a213a127ba2ee94bf17debc420923f0416b4030338c3765578df725ee58a6bd52d54b6d53b0"], 0x3, 0x656, &(0x7f0000001280)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000100)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf49}}, {@nobh}, {@nojournal_checksum}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x472, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) 1m5.240581538s ago: executing program 3 (id=112): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m2.828087205s ago: executing program 3 (id=121): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800d1e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAgIi4cdOwFS0IBAogAJiSaUxnaikEuMYiORKIKAUChRJHpEicRfQAUNAiokWuhRpAilIVAd2rtd38N3ju2cvYH7/aTNzezOZea72bmb3fEGMLDGsn+SiN0R8VtEjDSy7QXGGi83b1ya/fvGpdkkarW3/kzq5f66cWm2KFq8b1eeGU8j0k+TONil3sULF8/MVKvz5/P85NLZ9yYXL1x89vTZmVPzp+bPTR8/fuzo1AvPTz/Xlzjvydp64MOFQ/tfe/vqG7Mnrr7z0zdJEX9HHH0yttrBJ2q1PldXrj0t6WSoxIawLpWIyLpruD7+R6ISzc4biVc/KbVxwKaq5XocvlwD/seSKLsFQDmKH/rs+rfYtm72Ub7rLzUugLK4b+Zb48hQpHmZ4Y7r234ai4gTl//5Mttic+5DAAC0+S6b/zzTbf6Xxv0t5e7O14ZG87WUvRFxb0Tsi4j7IuplH4iIB9dZf+ciycr5T3ptQ4GtUTb/ezFf22qf/xWzvxit5Lk99fiHk5Onq/NH8s9kPIa3Z/mpVer4/pVfP+91rHX+l21Z/cVcMG/HtaHt7e+Zm1mauZ2YW13/OOLAULf4k+WVgCQi9kfEgQ3Wcfqprw/1Onbr+FfRh3Wm2lcRTzb6/3J0xF9IVl+fnLwrqvNHJouzYqWff7nyZq/6byv+Psj6f2fX8385/tGkdb12cf11XPn9s57XNBMbOv+bO7blrx/MLC2dn4rYlrzeaHTr/unme4t8UT6Lf/xw9/G/N5qfxMGIyE7ihyLi4Yh4JO+7RyPisYg4vEr8P778+Lu9jt0J/T/X0f+j7UU6+r+Z2Bade7onKmd++Lb9f2wm1/b9d6yeGs/3rOX7by3t2tjZDAAAAP89aUTsjiSdWE6n6cRE42/498XOtLqwuPT0yYX3z801nhEYjeG0uNM10nI/dCq/rC/y0x35o/l94y8qO+r5idmF6lzZwcOA29Vj/Gf+qJTdOmDTeV4LBpfxD4PL+IfBZfzD4Ooy/neU0Q5g63X7/f+ohHYAW69j/Fv2gwHi+h8Gl/EPg6t1/CcltgPYUos74tYPyUtIrEhEekc0oz+JZJNHwe6yA1x/ouxvJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP74NwAA//+7Iehw") setxattr$system_posix_acl(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)='system.posix_acl_default\x00', &(0x7f0000003180)={{}, {0x1, 0x3}, [], {0x4, 0x7}, [], {}, {0x20, 0x2}}, 0x24, 0x0) r0 = creat(0x0, 0x100) close(r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x322000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r1, 0x0, 0x0, 0x0) 1m1.768920143s ago: executing program 33 (id=121): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800d1e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$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") setxattr$system_posix_acl(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)='system.posix_acl_default\x00', &(0x7f0000003180)={{}, {0x1, 0x3}, [], {0x4, 0x7}, [], {}, {0x20, 0x2}}, 0x24, 0x0) r0 = creat(0x0, 0x100) close(r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x322000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r1, 0x0, 0x0, 0x0) 1m1.759971713s ago: executing program 4 (id=123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 1m0.706802622s ago: executing program 4 (id=128): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020) signalfd(r0, &(0x7f00000002c0)={[0x7]}, 0x8) r2 = open(&(0x7f0000000180)='.\x00', 0x222400, 0x129) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000500)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\8\xe8xE\xdb\xfb1\xfd\x91\xd5\xcd\xc7\x80\t\xe0c+\vl\xc1\x9f\xf9\xb9jF\xdf\xc5\x9aH\xa6@A\x0fC\x9c\x0eqX\xc4\x9b:\xae.\xf2\xda\v6y\xd4+]\xf8\xf5\xef2D{\xb0\xa2\xbd\xe8u\xfb\xab\xb0\xe9m`\x83\xae,\xdb\x95\xc9!p\xc8[0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 56.662657965s ago: executing program 4 (id=145): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0xffffffff, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x6, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00041, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x6, 0x100, 0xd8cb, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0xbe24]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 51.284722747s ago: executing program 5 (id=154): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c406031b8b76769643d", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,discard,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',\x00'], 0x80, 0x1503, &(0x7f0000000580)="$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") syz_clone3(0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 50.809301857s ago: executing program 5 (id=155): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b33000000000000000005", @ANYRES64=r4], 0x38}}, 0x0) 49.743119745s ago: executing program 5 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x7}]}) 49.342057495s ago: executing program 1 (id=159): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8413, &(0x7f0000000180)={[{@minixdf}, {}, {@nobarrier}, {@bh}, {@lazytime}, {@oldalloc}, {@block_validity}, {@nodelalloc}]}, 0x18, 0x577, &(0x7f0000001240)="$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") 49.308295244s ago: executing program 5 (id=160): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") chdir(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4004040) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0a00, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000380)={[{@mblk_io_submit}, {@quota}, {@resuid}, {@oldalloc}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@nodioread_nolock}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 47.946373002s ago: executing program 1 (id=163): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_abort}, {@errors_remount}]}, 0x0, 0x47a, &(0x7f0000000680)="$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") 47.484429892s ago: executing program 5 (id=165): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) pwrite64(r0, &(0x7f0000000000)='l\v', 0x2, 0x404042ffc) 45.608374748s ago: executing program 5 (id=168): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000040)=""/36, 0x24) getdents64(r3, 0x0, 0x0) 45.405325348s ago: executing program 34 (id=168): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000040)=""/36, 0x24) getdents64(r3, 0x0, 0x0) 44.052279987s ago: executing program 1 (id=172): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@sb={'sb', 0x3d, 0x80000001}}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@sb={'sb', 0x3d, 0x10000}}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 43.083816705s ago: executing program 1 (id=176): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") chdir(&(0x7f0000000400)='./file0\x00') r1 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10000, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000a00)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da000000", @ANYRES16=r1, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES64, @ANYRESHEX, @ANYRES32=r2, @ANYRESOCT, @ANYRESOCT], 0x10, 0x1da, &(0x7f0000000440)="$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") clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000400), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0a00, 0x4) 41.678927373s ago: executing program 1 (id=179): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b70b0000000000009500c200"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @rand_addr=0x64010101}}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) 41.642287583s ago: executing program 35 (id=145): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0xffffffff, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x6, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00041, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x6, 0x100, 0xd8cb, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0xbe24]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 41.138141152s ago: executing program 1 (id=182): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 41.069980372s ago: executing program 36 (id=182): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 17.466818046s ago: executing program 2 (id=249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) sendto$inet(r0, &(0x7f0000000780)="1ede55", 0x3, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) shutdown(r0, 0x1) 17.246894666s ago: executing program 2 (id=253): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") r0 = creat(&(0x7f00000001c0)='./file3\x00', 0x25) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) 15.850753284s ago: executing program 2 (id=260): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000014f000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7cc, &(0x7f0000001300)="$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") 13.819962511s ago: executing program 2 (id=275): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8=0x0], 0xfc, 0x2be, &(0x7f0000000100)="$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") syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000000080)={[{@init_itable}, {@test_dummy_encryption}, {@noquota}, {@grpid}, {@nouid32}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x4) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x402, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x5]}) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000010c0)={{{@in6=@empty, @in=@private}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="40000000710000042dbd7000fe", @ANYRES32, @ANYBLOB="0c0001800800010004000300100001800ca67f6a1d6c68aece00048008000100030000000c000180dbfd62f22d143b925afcb8933ecde0b63de5302f24f16b184d42b6b41cbef778469652d6400527f7783c3c2a8ba2b664f4701fff19b91789605258111322ea0ba07d9963a643853c7b2e654fa0c7f5493ab77a1147bd70f7ad53e9315ab973ecb1b9868a0654c2c05ad5346c587cad9f408e42b61483ac72342cd290342c95c7500d6919455e54ad0d4496"], 0x40}}, 0x20004080) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) 12.523185619s ago: executing program 2 (id=274): socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) connect$vsock_stream(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) lstat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = getgid() keyctl$chown(0x4, r1, 0x0, r2) setgroups(0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='ecryptfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 11.512411757s ago: executing program 2 (id=278): mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040020, 0x0) 11.084492587s ago: executing program 37 (id=278): mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040020, 0x0) 9.076272404s ago: executing program 6 (id=291): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r5, &(0x7f0000000480), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r6}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) 8.875247724s ago: executing program 8 (id=293): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c6, &(0x7f0000000cc0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x12000000, 0x1000f4) 7.823174502s ago: executing program 6 (id=295): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x6, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.595890252s ago: executing program 8 (id=297): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='wchan\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 6.64937895s ago: executing program 6 (id=299): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 6.56311696s ago: executing program 9 (id=300): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgid(0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 6.44036566s ago: executing program 8 (id=301): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x3d) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1cc, &(0x7f00000001c0)="$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") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f0000000640)={[{@quota}]}, 0xf8, 0x49f, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 5.664025839s ago: executing program 9 (id=302): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) write(0xffffffffffffffff, &(0x7f0000000240)="240000001ab739ecd081563c18ea488fa745c7ef88bb56fb6f27300be996a20239e9077fe2cc7582f7227d887f25b8", 0x2f) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) r1 = getpid() mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mount$bpf(0x200000000000, 0x0, 0x0, 0x206002, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 4.718139447s ago: executing program 8 (id=304): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16], 0x1, 0x242, &(0x7f0000000380)="$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") chdir(&(0x7f0000000040)='./file0\x00') 4.672413657s ago: executing program 9 (id=305): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0xf0, 0x3}]}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000340)={0x0, 0x0}) 4.536207947s ago: executing program 9 (id=306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4.324626547s ago: executing program 8 (id=307): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x101542) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x1) 3.556314526s ago: executing program 7 (id=309): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10) 3.461209706s ago: executing program 9 (id=310): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000180), 0x1, 0x42e, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101242, 0x4b) pwrite64(r0, &(0x7f0000000000)="7f", 0x1, 0x24fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101a42, 0x0) pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 3.456784095s ago: executing program 6 (id=311): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_read_part_table(0x5d1, &(0x7f0000000600)="$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") 2.680628764s ago: executing program 9 (id=312): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.653663214s ago: executing program 7 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000080), 0xfffffe13) 1.724198963s ago: executing program 7 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0xb0, 0x8, 0x1, 0x7, 0x22, 0x1, 0x5, 0xef, 0xff, 0xfd, 0xa4, 0x7f, 0xf, 0x3, 0xd, 0x45}}) openat(0xffffffffffffffff, 0x0, 0x2a2603, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x7, 0x5, 0x180, 0x7, 0x0, 0x80, 0x1000000000009, 0x1c6, 0x5, 0x0, 0x7, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.293734642s ago: executing program 7 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000a00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)={0x4c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000, 0x77}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) 1.144382952s ago: executing program 7 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe13) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1e8640, 0x0) 280.381231ms ago: executing program 6 (id=317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003400)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000100)) 237.512511ms ago: executing program 7 (id=318): setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001d40)={'filter\x00', 0x4}, 0x68) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001dc0)={0x8f, 0x0, 0x1}) fadvise64(r0, 0xfcff, 0x20000, 0x3) setuid(0xee01) 209.59µs ago: executing program 8 (id=319): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x40102, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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") prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000345000/0x3000)=nil, 0x3000, 0xa) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r3 = eventfd2(0x800007, 0x80800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000060100"}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 0s ago: executing program 6 (id=320): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) kernel console output (not intermixed with test programs): sb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.592721][ T4574] loop0: detected capacity change from 0 to 1024 [ 74.716097][ T4183] hfsplus: bad catalog entry type [ 74.729375][ T4183] hfsplus: bad catalog entry type [ 74.805555][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 74.951032][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.974618][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.014473][ T4327] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 75.045925][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.087358][ T4327] usb 4-1: config 0 descriptor?? [ 75.149520][ T4183] syz-executor (4183) used greatest stack depth: 21184 bytes left [ 75.222078][ T1322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.377358][ T4592] loop4: detected capacity change from 0 to 256 [ 75.397598][ T1322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.411637][ T144] attempt to access beyond end of device [ 75.411637][ T144] loop2: rw=1, want=780, limit=128 [ 75.485567][ T1322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.578741][ T4267] usb 5-1: USB disconnect, device number 4 [ 75.597386][ T1322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.608619][ T4327] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 75.914382][ T4316] usb 4-1: USB disconnect, device number 4 [ 76.443212][ T4626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.884622][ T1326] cfg80211: failed to load regulatory.db [ 77.231613][ T4637] loop3: detected capacity change from 0 to 256 [ 77.243843][ T4607] 9pnet: p9_fd_create_tcp (4607): problem connecting socket to 127.0.0.1 [ 77.293585][ T4637] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.433214][ T4646] loop1: detected capacity change from 0 to 128 [ 77.501670][ T4637] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 77.502115][ T26] audit: type=1800 audit(1762572058.553:3): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.98" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 77.556495][ T4646] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.595073][ T4637] FAT-fs (loop3): Filesystem has been set read-only [ 77.650620][ T4608] chnl_net:caif_netlink_parms(): no params data found [ 77.845670][ T4232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.063490][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.068114][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 78.085801][ T4232] usb 5-1: device descriptor read/64, error -71 [ 78.087266][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.110895][ T4608] device bridge_slave_0 entered promiscuous mode [ 78.131317][ T4608] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.154817][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.211614][ T4608] device bridge_slave_1 entered promiscuous mode [ 78.367536][ T4232] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.482756][ T4439] attempt to access beyond end of device [ 78.482756][ T4439] loop1: rw=1, want=540, limit=128 [ 78.496554][ T4608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.536893][ T4608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.576157][ T4232] usb 5-1: device descriptor read/64, error -71 [ 78.701160][ T4608] team0: Port device team_slave_0 added [ 78.752371][ T4608] team0: Port device team_slave_1 added [ 78.791482][ T4232] usb usb5-port1: attempt power cycle [ 78.826149][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.833221][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.859832][ T4608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.315665][ T4232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.452795][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.481439][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.517780][ T4608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.619169][ T4232] usb 5-1: device descriptor read/8, error -71 [ 79.655190][ T4687] loop3: detected capacity change from 0 to 1024 [ 79.854237][ T4608] device hsr_slave_0 entered promiscuous mode [ 79.863398][ T4608] device hsr_slave_1 entered promiscuous mode [ 79.888486][ T4608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.906588][ T4608] Cannot create hsr debugfs directory [ 79.943542][ T4185] hfsplus: bad catalog entry type [ 79.960599][ T4185] hfsplus: bad catalog entry type [ 80.071404][ T1322] device hsr_slave_0 left promiscuous mode [ 80.145530][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 80.156408][ T1322] device hsr_slave_1 left promiscuous mode [ 80.210297][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.285763][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.348042][ T4232] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.384205][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.403347][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.454172][ T1322] device bridge_slave_1 left promiscuous mode [ 80.469308][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.516916][ T1322] device bridge_slave_0 left promiscuous mode [ 80.523206][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.562419][ T4696] 9pnet: p9_fd_create_tcp (4696): problem connecting socket to 127.0.0.1 [ 80.605743][ T4232] usb 5-1: device not accepting address 8, error -71 [ 80.615980][ T4232] usb usb5-port1: unable to enumerate USB device [ 80.655745][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.696646][ T1322] device veth1_macvtap left promiscuous mode [ 80.716965][ T1322] device veth0_macvtap left promiscuous mode [ 80.723084][ T1322] device veth1_vlan left promiscuous mode [ 80.742384][ T1322] device veth0_vlan left promiscuous mode [ 81.015866][ T4264] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 81.024956][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.064378][ T4264] usb 3-1: config 0 descriptor?? [ 81.116919][ T4264] cp210x 3-1:0.0: cp210x converter detected [ 81.599832][ T4723] loop1: detected capacity change from 0 to 256 [ 81.689653][ T4723] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9034413b, utbl_chksum : 0xe619d30d) [ 81.775584][ T4264] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 81.783367][ T4264] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 81.827916][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 81.843399][ T4264] usb 3-1: cp210x converter now attached to ttyUSB0 [ 81.880800][ T4264] usb 3-1: USB disconnect, device number 4 [ 81.897640][ T4264] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 81.910274][ T4264] cp210x 3-1:0.0: device disconnected [ 81.938528][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 81.985336][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.034586][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.131094][ T1322] bond0 (unregistering): Released all slaves [ 82.235878][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 82.338044][ T4734] loop1: detected capacity change from 0 to 128 [ 82.606466][ T4734] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.926372][ T4734] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.402367][ T4608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.440566][ T4608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.489964][ T4608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.526175][ T4608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.846680][ T4764] loop2: detected capacity change from 0 to 128 [ 84.014705][ T4768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.108141][ T4764] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.370002][ T4764] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.452032][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 84.466823][ T4764] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.126: No space for directory leaf checksum. Please run e2fsck -D. [ 84.514503][ T4764] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.126: checksumming directory block 0 [ 84.721655][ T4608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.758827][ T4778] loop1: detected capacity change from 0 to 1024 [ 84.781827][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.840846][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.864980][ T4779] loop4: detected capacity change from 0 to 1024 [ 84.889351][ T4778] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,bsddf,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 84.949158][ T4608] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.966490][ T4785] loop2: detected capacity change from 0 to 164 [ 85.030111][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.071929][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.096252][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.103392][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.218550][ T4779] EXT4-fs (loop4): Ignoring removed orlov option [ 85.260554][ T4779] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 85.309667][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.329128][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.384682][ T4779] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,auto_da_alloc,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 85.418620][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.466880][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.473968][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.489011][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.502461][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.561881][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.608072][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.642365][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.784010][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.811643][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.889504][ T4608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.952228][ T4608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.076571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.105298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.144329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.164147][ T4811] loop4: detected capacity change from 0 to 512 [ 86.243396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.720475][ T4812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.135'. [ 86.734302][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.785566][ T4232] Bluetooth: hci4: command 0x0409 tx timeout [ 86.832156][ T4811] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.137: invalid block [ 86.863183][ T4811] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.137: invalid indirect mapped block 10 (level 1) [ 86.947439][ T4811] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.137: invalid indirect mapped block 8 (level 1) [ 86.968725][ T4811] EXT4-fs (loop4): 1 truncate cleaned up [ 86.974581][ T4811] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.131251][ T26] audit: type=1326 audit(1762572068.183:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505acfa6c9 code=0x7ffc0000 [ 87.170811][ T4773] chnl_net:caif_netlink_parms(): no params data found [ 87.239034][ T26] audit: type=1326 audit(1762572068.243:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505acfa6c9 code=0x7ffc0000 [ 87.320131][ T26] audit: type=1326 audit(1762572068.243:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505acfa6c9 code=0x7ffc0000 [ 87.352831][ T26] audit: type=1326 audit(1762572068.243:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505acfa6c9 code=0x7ffc0000 [ 87.454730][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.463880][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.513114][ T26] audit: type=1326 audit(1762572068.243:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505acfa6c9 code=0x7ffc0000 [ 87.553722][ T26] audit: type=1326 audit(1762572068.243:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505acfc5e7 code=0x7ffc0000 [ 87.568473][ T4608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.583694][ T26] audit: type=1326 audit(1762572068.243:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f505acfc55c code=0x7ffc0000 [ 87.704458][ T4849] ODEBUG: Out of memory. ODEBUG disabled [ 88.322802][ T26] audit: type=1326 audit(1762572068.243:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f505acfc494 code=0x7ffc0000 [ 88.381723][ T26] audit: type=1326 audit(1762572068.243:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f505acfc494 code=0x7ffc0000 [ 88.467554][ T26] audit: type=1326 audit(1762572068.243:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f505acf932a code=0x7ffc0000 [ 88.536452][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.564138][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.595581][ T4224] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 88.613018][ T4773] device bridge_slave_0 entered promiscuous mode [ 88.665582][ T4325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.675263][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.714402][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.724945][ T4773] device bridge_slave_1 entered promiscuous mode [ 88.788021][ T4773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.812031][ T4224] usb 2-1: device descriptor read/64, error -71 [ 88.820428][ T4773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.888739][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 88.935619][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 88.959349][ T4773] team0: Port device team_slave_0 added [ 88.983902][ T4773] team0: Port device team_slave_1 added [ 89.072062][ T4325] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.085602][ T4325] usb 3-1: config 0 has no interface number 0 [ 89.095516][ T4224] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.101579][ T4325] usb 3-1: config 0 interface 184 has no altsetting 0 [ 89.151071][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.167068][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.200357][ T4773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.214975][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.222366][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.249452][ T4773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.285498][ T4224] usb 2-1: device descriptor read/64, error -71 [ 89.294245][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.318549][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.327727][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.341386][ T4325] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.355461][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.363509][ T4325] usb 3-1: Product: syz [ 89.368256][ T4325] usb 3-1: Manufacturer: syz [ 89.372969][ T4325] usb 3-1: SerialNumber: syz [ 89.402444][ T4325] usb 3-1: config 0 descriptor?? [ 89.414384][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.425794][ T4224] usb usb2-port1: attempt power cycle [ 89.432233][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.446766][ T4325] smsc75xx v1.0.0 [ 89.451019][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.468774][ T4608] device veth0_vlan entered promiscuous mode [ 89.491508][ T4773] device hsr_slave_0 entered promiscuous mode [ 89.503518][ T4773] device hsr_slave_1 entered promiscuous mode [ 89.511852][ T4773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.525780][ T4773] Cannot create hsr debugfs directory [ 89.532188][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.540986][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.567192][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.614932][ T4608] device veth1_vlan entered promiscuous mode [ 89.653831][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.709172][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.726487][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.764596][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.773880][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.795034][ T4608] device veth0_macvtap entered promiscuous mode [ 89.835571][ T4224] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 89.845784][ T4608] device veth1_macvtap entered promiscuous mode [ 89.937759][ T4224] usb 2-1: device descriptor read/8, error -71 [ 89.963260][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.995521][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.033663][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.055593][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.075452][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.106739][ T4325] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 90.123874][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.144286][ T4325] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.160231][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.209153][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.220979][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.246812][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.266026][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.367933][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.412327][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.598579][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.669986][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.819825][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.883034][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.894293][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.905061][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.915025][ T4608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.925615][ T4608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.936888][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.946156][ T4883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 90.958418][ T4608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.967714][ T4608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.996685][ T4608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.027684][ T4316] Bluetooth: hci4: command 0x040f tx timeout [ 91.036831][ T4608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.067362][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.091379][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.226944][ T4773] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.291239][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.310955][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.329954][ T4773] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 91.340690][ T4773] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.359222][ T4773] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.369942][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.428179][ T4224] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 91.446764][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.467765][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.509926][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.661248][ T4773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.685591][ T4224] usb 2-1: Using ep0 maxpacket: 32 [ 91.720146][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.742902][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.767523][ T4325] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 91.772039][ T4773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.785445][ T4325] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 91.799584][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.811901][ T4224] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 91.816055][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.820565][ T4224] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 91.838276][ T4325] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 91.862562][ T4224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 91.866575][ T4325] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 91.871944][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.885091][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.888527][ T4224] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.895296][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.906014][ T4224] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.926439][ T4224] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 91.935926][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.956420][ T4224] usb 2-1: config 0 descriptor?? [ 91.973822][ T4325] usb 3-1: USB disconnect, device number 5 [ 92.014719][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.038447][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.067656][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.086133][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.093269][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.095524][ T4231] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 92.130919][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.150443][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.207455][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.219617][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.230407][ T4224] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 92.254189][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.271439][ T4224] usb 2-1: USB disconnect, device number 10 [ 92.284531][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.307358][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.326552][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.326612][ T4224] usblp0: removed [ 92.349416][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.359605][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.383047][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.422653][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.475810][ T4231] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 92.493600][ T4231] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 92.505214][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.556923][ T4231] usb 6-1: config 0 descriptor?? [ 92.574302][ T1322] device hsr_slave_0 left promiscuous mode [ 92.585775][ T4906] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.594315][ T1322] device hsr_slave_1 left promiscuous mode [ 92.609755][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.641924][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.662204][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.686546][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.714643][ T1322] device bridge_slave_1 left promiscuous mode [ 92.734455][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.755940][ T1322] device bridge_slave_0 left promiscuous mode [ 92.762159][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.787453][ T4224] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 92.797614][ T1322] device veth1_macvtap left promiscuous mode [ 92.813865][ T1322] device veth0_macvtap left promiscuous mode [ 92.825901][ T1322] device veth1_vlan left promiscuous mode [ 92.831707][ T1322] device veth0_vlan left promiscuous mode [ 93.035470][ T4224] usb 2-1: Using ep0 maxpacket: 32 [ 93.050884][ T4231] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 93.107467][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 93.122644][ T4936] loop2: detected capacity change from 0 to 512 [ 93.157576][ T4224] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 93.175270][ T4224] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 93.214832][ T4224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 93.242902][ T4936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.244047][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 93.279482][ T4936] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.302110][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.333823][ T4224] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.357294][ T4224] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.401643][ T4224] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 93.432564][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.460350][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 93.467978][ T4231] usb 6-1: USB disconnect, device number 2 [ 93.480994][ T4224] usb 2-1: config 0 descriptor?? [ 93.511733][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.562027][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.627159][ T4943] loop2: detected capacity change from 0 to 512 [ 93.745218][ T4943] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 93.760526][ T4224] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.778026][ T4943] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.881756][ T1322] bond0 (unregistering): Released all slaves [ 94.128846][ T4953] loop5: detected capacity change from 0 to 256 [ 94.204926][ T4948] loop2: detected capacity change from 0 to 8192 [ 94.207074][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.223989][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.259665][ T4953] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 94.303506][ T4773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.316784][ T4224] usb 2-1: USB disconnect, device number 11 [ 94.356936][ T4224] usblp0: removed [ 94.878263][ T4971] netlink: 36 bytes leftover after parsing attributes in process `syz.5.155'. [ 95.742074][ T4978] loop1: detected capacity change from 0 to 2048 [ 95.776701][ T4984] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.845445][ T4978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.912749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.933522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.034075][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.079943][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.107493][ T4989] loop5: detected capacity change from 0 to 512 [ 96.125049][ T4773] device veth0_vlan entered promiscuous mode [ 96.147781][ T4989] EXT4-fs (loop5): Ignoring removed oldalloc option [ 96.159487][ T4993] loop1: detected capacity change from 0 to 512 [ 96.172822][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.196340][ T4989] EXT4-fs (loop5): 1 truncate cleaned up [ 96.202023][ T4989] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 96.221319][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.381931][ T4773] device veth1_vlan entered promiscuous mode [ 96.405593][ T4993] EXT4-fs (loop1): Ignoring removed bh option [ 96.414865][ T4993] EXT4-fs (loop1): Ignoring removed oldalloc option [ 96.554230][ T4993] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 96.581019][ T5000] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz.5.160: Invalid inode table block 5 in block_group 0 [ 96.624916][ T4993] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 96.727014][ T4989] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz.5.160: Invalid inode table block 5 in block_group 0 [ 96.740172][ T4993] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 96.765423][ T4773] device veth0_macvtap entered promiscuous mode [ 96.825105][ T4773] device veth1_macvtap entered promiscuous mode [ 96.841480][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.853480][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.863362][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.873876][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.883803][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.894194][ T4993] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.894275][ T4993] EXT4-fs (loop1): failed to initialize system zone (-117) [ 96.894347][ T4993] EXT4-fs (loop1): mount failed [ 96.902204][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.902236][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.902257][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.903609][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.923162][ T5000] EXT4-fs (loop5): Remounting filesystem read-only [ 96.976981][ T5009] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.989528][ T5009] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.000877][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 97.013474][ T5009] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.024924][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 97.034632][ T5009] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 97.042397][ T5009] UDF-fs: Scanning with blocksize 512 failed [ 97.051665][ T5009] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.063862][ T5009] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.075235][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 97.085994][ T5009] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.097571][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 97.107271][ T5009] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 97.115018][ T5009] UDF-fs: Scanning with blocksize 1024 failed [ 97.123350][ T5009] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.135375][ T5009] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.146939][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 97.157439][ T5009] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.168921][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 97.178608][ T5009] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 97.186380][ T5009] UDF-fs: Scanning with blocksize 2048 failed [ 97.194302][ T5009] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.206517][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 97.216989][ T5009] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 97.226704][ T5009] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 97.234490][ T5009] UDF-fs: Scanning with blocksize 4096 failed [ 97.240607][ T5009] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 97.298967][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.304909][ T4989] EXT4-fs (loop5): Remounting filesystem read-only [ 97.326453][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.337797][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.347269][ T5000] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 97.360598][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.381326][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.396587][ T5000] EXT4-fs (loop5): Remounting filesystem read-only [ 97.410651][ T5000] EXT4-fs error (device loop5): ext4_setattr:5563: inode #13: comm syz.5.160: mark_inode_dirty error [ 97.436782][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.460764][ T5000] EXT4-fs (loop5): Remounting filesystem read-only [ 97.473413][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.487024][ T5000] EXT4-fs error (device loop5) in ext4_setattr:5622: Corrupt filesystem [ 97.622575][ T5000] EXT4-fs (loop5): Remounting filesystem read-only [ 97.624997][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.756457][ T4608] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 97.808568][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.822820][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.833487][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.844711][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.854698][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.880980][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.044855][ T4608] EXT4-fs (loop5): Remounting filesystem read-only [ 98.099206][ T4608] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 98.244419][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.437756][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.501409][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.581722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.616290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.732376][ T4773] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.770100][ T4773] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.778984][ T4773] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.795445][ T4773] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.628886][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.676160][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.688674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.716324][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.756226][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.793145][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.803591][ T5013] loop1: detected capacity change from 0 to 512 [ 99.865771][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.945357][ T5013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.163: inode #7: comm syz.1.163: iget: illegal inode # [ 100.039842][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 100.082699][ T5013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.163: error while reading EA inode 7 err=-117 [ 100.109258][ T5042] loop6: detected capacity change from 0 to 2048 [ 100.152662][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 100.160493][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 100.217448][ T5013] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.227749][ T5042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.265892][ T5013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.163: inode #7: comm syz.1.163: iget: illegal inode # [ 100.311541][ T1108] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.334072][ T1108] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.336440][ T5044] chnl_net:caif_netlink_parms(): no params data found [ 100.373712][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 100.424304][ T1108] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.435494][ T5013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.163: error while reading EA inode 7 err=-117 [ 100.472943][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.507587][ T1108] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.524986][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 100.531723][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.551419][ T5013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.163: inode #1: comm syz.1.163: iget: illegal inode # [ 100.570834][ T1108] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.586777][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 100.593566][ T5013] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.163: error while reading EA inode 1 err=-117 [ 100.613268][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.630299][ T1108] usb 3-1: config 0 descriptor?? [ 100.645939][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 100.652805][ T5013] EXT4-fs (loop1): 1 orphan inode deleted [ 100.666874][ T5013] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,data_err=abort,errors=remount-ro,. Quota mode: none. [ 100.864121][ T5062] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.897823][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.926051][ T1108] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.945520][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.993633][ T1108] usb 3-1: USB disconnect, device number 6 [ 101.009930][ T5044] device bridge_slave_0 entered promiscuous mode [ 101.054602][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.070470][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.086995][ T5044] device bridge_slave_1 entered promiscuous mode [ 101.101449][ T1108] usblp0: removed [ 101.259329][ T5044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.297561][ T5044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.374226][ T5070] loop1: detected capacity change from 0 to 1024 [ 101.418337][ T5074] loop6: detected capacity change from 0 to 512 [ 101.432993][ T5044] team0: Port device team_slave_0 added [ 101.461626][ T5044] team0: Port device team_slave_1 added [ 101.491690][ T5070] EXT4-fs (loop1): Ignoring removed bh option [ 101.501368][ T5070] EXT4-fs (loop1): inline encryption not supported [ 101.535615][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.551180][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.585048][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.594506][ T5070] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #3: block 1: comm syz.1.172: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.611958][ T5044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.633024][ T5074] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,bsddf,,errors=continue. Quota mode: writeback. [ 101.646549][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.688500][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.720971][ T5074] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.731954][ T5070] __quota_error: 4 callbacks suppressed [ 101.731969][ T5070] Quota error (device loop1): write_blk: dquota write failed [ 101.747086][ T5070] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 101.763720][ T5070] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.172: Failed to acquire dquot type 0 [ 101.815505][ T5044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.826056][ T5070] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.172: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.839990][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 101.885199][ T5070] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.172: Invalid inode bitmap blk 0 in block_group 0 [ 101.900184][ T4563] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.954888][ T4563] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 101.967114][ T1108] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 101.975731][ T5070] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 101.997357][ T1108] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.007080][ T4563] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:10: Failed to release dquot type 0 [ 102.025182][ T5070] EXT4-fs (loop1): 1 orphan inode deleted [ 102.031431][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; usrquota,sb=0x0000000080000001,bh,max_batch_time=0x00000000000008c9,sb=0x0000000000010000,inlinecrypt,,errors=continue. Quota mode: writeback. [ 102.053015][ T1108] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.064659][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.081732][ T1108] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.129009][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.149693][ T1108] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.161842][ T5070] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 102.170318][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.204220][ T1108] usb 3-1: config 0 descriptor?? [ 102.227180][ T1326] Bluetooth: hci1: command 0x0409 tx timeout [ 102.258635][ T5044] device hsr_slave_0 entered promiscuous mode [ 102.286746][ T5044] device hsr_slave_1 entered promiscuous mode [ 102.293858][ T5044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.301803][ T5044] Cannot create hsr debugfs directory [ 102.308448][ T5098] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.368128][ T1322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.383862][ T5100] loop1: detected capacity change from 0 to 512 [ 102.424433][ T5100] EXT4-fs (loop1): Ignoring removed oldalloc option [ 102.425132][ T5096] 9pnet: Insufficient options for proto=fd [ 102.453665][ T1322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.484044][ T1108] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 102.506530][ T5100] EXT4-fs (loop1): 1 truncate cleaned up [ 102.512296][ T5100] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 102.750358][ T1322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.315278][ T1322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.352438][ T4267] usb 3-1: USB disconnect, device number 7 [ 103.361669][ T4267] usblp0: removed [ 103.377688][ T5100] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 103.429052][ T5100] EXT4-fs (loop1): Remounting filesystem read-only [ 103.446229][ T5100] EXT4-fs error (device loop1): ext4_setattr:5563: inode #13: comm syz.1.176: mark_inode_dirty error [ 103.466019][ T5100] EXT4-fs (loop1): Remounting filesystem read-only [ 103.505752][ T5100] EXT4-fs error (device loop1) in ext4_setattr:5622: Corrupt filesystem [ 103.517356][ T5100] EXT4-fs (loop1): Remounting filesystem read-only [ 103.602301][ T4182] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /38/file1: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=1024 fake=1 [ 103.635844][ T4182] EXT4-fs (loop1): Remounting filesystem read-only [ 103.778025][ T5044] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 103.811264][ T5044] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.003164][ T5044] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.092462][ T5044] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.116867][ T5128] loop2: detected capacity change from 0 to 512 [ 104.156637][ T4182] syz-executor (4182) used greatest stack depth: 21152 bytes left [ 104.173586][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.186316][ T5128] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.264771][ T4188] syz-executor (4188) used greatest stack depth: 21088 bytes left [ 104.274665][ T26] audit: type=1800 audit(1762572085.323:18): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 104.305610][ T1326] Bluetooth: hci1: command 0x041b tx timeout [ 104.597269][ T5151] loop2: detected capacity change from 0 to 1764 [ 104.642456][ T5044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.698223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.714956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.726915][ T5044] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.738041][ T5130] chnl_net:caif_netlink_parms(): no params data found [ 104.823605][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.840476][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.849798][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.856927][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.909878][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.926909][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.942189][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.953762][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.960928][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.981833][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.006076][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.059374][ T5146] chnl_net:caif_netlink_parms(): no params data found [ 105.069328][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.083101][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.092196][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.101290][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.110735][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.120067][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.128512][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.153705][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.161996][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.170689][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.179240][ T5130] device bridge_slave_0 entered promiscuous mode [ 105.200078][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.217135][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.231977][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.242654][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.252617][ T5130] device bridge_slave_1 entered promiscuous mode [ 105.303321][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.335111][ T5130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.358102][ T5130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.377826][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.384915][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.416840][ T5146] device bridge_slave_0 entered promiscuous mode [ 105.441682][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 105.457015][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.464200][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.486694][ T5146] device bridge_slave_1 entered promiscuous mode [ 105.563212][ T5146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.590242][ T5130] team0: Port device team_slave_0 added [ 105.608635][ T5130] team0: Port device team_slave_1 added [ 105.613563][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.631052][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.652029][ T5146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.661340][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 105.661376][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.663044][ T7] usb 3-1: config 0 descriptor?? [ 105.730124][ T1322] device hsr_slave_0 left promiscuous mode [ 105.739455][ T1322] device hsr_slave_1 left promiscuous mode [ 105.747105][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.754600][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.762833][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.771000][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.780098][ T1322] device bridge_slave_1 left promiscuous mode [ 105.780627][ T7] hub 3-1:0.0: USB hub found [ 105.793596][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.802539][ T1322] device bridge_slave_0 left promiscuous mode [ 105.810603][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.821774][ T1322] device veth1_macvtap left promiscuous mode [ 105.830076][ T1322] device veth0_macvtap left promiscuous mode [ 105.837344][ T1322] device veth1_vlan left promiscuous mode [ 105.843244][ T1322] device veth0_vlan left promiscuous mode [ 105.990195][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 105.998988][ T7] hub 3-1:0.0: 9 ports detected [ 106.008897][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 106.023058][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.025604][ T7] hub 3-1:0.0: insufficient power available to use all downstream ports [ 106.048766][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.066002][ T4375] Bluetooth: hci0: command 0x0409 tx timeout [ 106.107186][ T1322] bond0 (unregistering): Released all slaves [ 106.170017][ T5146] team0: Port device team_slave_0 added [ 106.178814][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.186026][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.212271][ T5130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.215870][ T7] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 106.230457][ T7] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 106.253155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.261159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.271349][ T7] usb 3-1: USB disconnect, device number 8 [ 106.278691][ T5146] team0: Port device team_slave_1 added [ 106.296359][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.303343][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.331766][ T5130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.391089][ T1326] Bluetooth: hci1: command 0x040f tx timeout [ 106.403777][ T5146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.413636][ T5146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.439973][ T5146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.466961][ T1326] Bluetooth: hci3: command 0x0409 tx timeout [ 106.469680][ T5130] device hsr_slave_0 entered promiscuous mode [ 106.480571][ T5130] device hsr_slave_1 entered promiscuous mode [ 106.487718][ T5130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.495291][ T5130] Cannot create hsr debugfs directory [ 106.502705][ T5044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.510901][ T5146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.519217][ T5146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.549062][ T5146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.929815][ T5146] device hsr_slave_0 entered promiscuous mode [ 107.088116][ T5146] device hsr_slave_1 entered promiscuous mode [ 107.229928][ T5146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.313771][ T5146] Cannot create hsr debugfs directory [ 108.145500][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 108.466350][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 108.558930][ T1326] Bluetooth: hci3: command 0x041b tx timeout [ 108.565345][ T5212] loop6: detected capacity change from 0 to 8192 [ 108.658092][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.698542][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.724845][ T5044] device veth0_vlan entered promiscuous mode [ 108.742186][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.782221][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.804102][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.814773][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.825616][ T4231] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.869445][ T5044] device veth1_vlan entered promiscuous mode [ 108.926669][ T5146] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 108.966873][ T5146] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 109.015944][ T5146] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 109.060349][ T5146] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 109.065586][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 109.104364][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.114296][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.124953][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.133903][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.157192][ T5044] device veth0_macvtap entered promiscuous mode [ 109.185669][ T4231] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.202432][ T5130] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 109.203405][ T4231] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.239928][ T5044] device veth1_macvtap entered promiscuous mode [ 109.255512][ T4231] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.264818][ T5130] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 109.281976][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.314604][ T4231] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.335171][ T5130] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 109.347770][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.362856][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.375483][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.399538][ T4231] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.425890][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.445546][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.451529][ T4231] usb 3-1: config 0 descriptor?? [ 109.475446][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.497536][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.535889][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.573002][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.593534][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.634330][ T5044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.657856][ T5130] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 109.678561][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.696820][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.726616][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.745791][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.748398][ T4231] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.770005][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.785045][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.805329][ T4231] usb 3-1: USB disconnect, device number 9 [ 109.811907][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.828767][ T4231] usblp0: removed [ 109.847411][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.857596][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.868325][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.878501][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.889356][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.900785][ T5044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.944047][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.963760][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.978192][ T5044] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.987517][ T5044] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.996295][ T5044] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.005162][ T5044] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.101822][ T5146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.188923][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.219148][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.227862][ T1326] Bluetooth: hci0: command 0x040f tx timeout [ 110.235278][ T5146] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.249006][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.257152][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.289490][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.346128][ T4231] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 110.368033][ T5130] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.376792][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.394665][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.437702][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.474855][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.482216][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.509049][ T5275] input: syz1 as /devices/virtual/input/input9 [ 110.523658][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.536540][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.569617][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.585574][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 110.594768][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.606571][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.613649][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.625823][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 110.647582][ T4564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.662771][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.674074][ T4564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.686317][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.705758][ T4231] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.718312][ T4231] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.727936][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.753021][ T4231] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.764873][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.772075][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.784958][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.811608][ T4231] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.811731][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.845589][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.876578][ T4231] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 110.890418][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.895599][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.923976][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.926371][ T4231] usb 3-1: config 0 descriptor?? [ 110.938656][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.956949][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.964075][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.981264][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.990905][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.016810][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.036911][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.052951][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.062525][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.078980][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.092707][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.148043][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.166641][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.190732][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.204026][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.223082][ T4231] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.235341][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.281424][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.305584][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.318516][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.369595][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.378341][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.400512][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.421534][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.442916][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.469711][ T5130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.521978][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.560359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.582097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.757077][ T1108] usb 3-1: USB disconnect, device number 10 [ 111.796081][ T1108] usblp0: removed [ 111.916799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.924400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.953144][ T5146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.076151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 112.095430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 112.104410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 112.113427][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 112.122500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 112.131490][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 112.140471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 112.149461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 112.158444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 112.559636][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 112.571652][ T1322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.705819][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 112.767591][ T1322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.959489][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.978397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.002191][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.676584][ T1322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.837659][ T1322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.927449][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.937524][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.955886][ T5343] loop7: detected capacity change from 0 to 512 [ 114.064696][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.072802][ T5125] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 114.084197][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.090288][ T5343] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.110884][ T1322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.122658][ T5343] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.139077][ T5146] device veth0_vlan entered promiscuous mode [ 114.147978][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.159233][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.173416][ T1322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.206752][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.228603][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.249143][ T5146] device veth1_vlan entered promiscuous mode [ 114.267146][ T26] audit: type=1800 audit(1762572095.323:19): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.201" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 114.292928][ T1322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.354312][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.365761][ T5125] usb 3-1: Using ep0 maxpacket: 32 [ 114.395636][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.421319][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.439655][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.452910][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.464589][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.478081][ T5130] device veth0_vlan entered promiscuous mode [ 114.488932][ T5146] device veth0_macvtap entered promiscuous mode [ 114.495614][ T5125] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.509819][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.516947][ T5125] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.530358][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.556941][ T1322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.575073][ T5130] device veth1_vlan entered promiscuous mode [ 114.586367][ T5146] device veth1_macvtap entered promiscuous mode [ 114.594332][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.603242][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.663221][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.692528][ T5125] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.732999][ T5125] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 114.749005][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.763406][ T5125] usb 3-1: Product: syz [ 114.769843][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.779777][ T5125] usb 3-1: Manufacturer: syz [ 114.781108][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.797127][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.807238][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.818952][ T5125] hub 3-1:4.0: USB hub found [ 114.822808][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.833574][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.844642][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.854601][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.865130][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.877416][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.888855][ T5130] device veth0_macvtap entered promiscuous mode [ 114.901431][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.910086][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.919487][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.928496][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.938429][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.948155][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.966660][ T5130] device veth1_macvtap entered promiscuous mode [ 114.975493][ T4232] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 114.986630][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.999259][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.009427][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.021156][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.032241][ T5125] hub 3-1:4.0: 2 ports detected [ 115.037633][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.048581][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.058610][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.069251][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.079366][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.089841][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.101204][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.116576][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.127416][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.140935][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.153279][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.170415][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.181200][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.191835][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.202897][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.213484][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.225162][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.225596][ T4232] usb 8-1: Using ep0 maxpacket: 16 [ 115.243449][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.261443][ T5125] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 115.271490][ T5125] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 115.285465][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.295369][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.323763][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.341600][ T5125] usb 3-1: USB disconnect, device number 11 [ 115.349877][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.365763][ T4232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.378282][ T5146] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.391777][ T5146] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.395068][ T4232] usb 8-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 115.403749][ T5146] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.412824][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.439344][ T4232] usb 8-1: config 0 descriptor?? [ 115.445693][ T5146] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.480444][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.491602][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.506395][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.531653][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.542527][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.558394][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.568642][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.579602][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.590167][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.600799][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.610827][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.621347][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.631432][ T5130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.642141][ T5130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.654447][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.674554][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.688793][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.702496][ T5130] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.711989][ T5130] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.721203][ T5130] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.729974][ T5130] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.898690][ T5390] loop6: detected capacity change from 0 to 1024 [ 115.908384][ T5391] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 115.920976][ T4232] wacom 0003:056A:00FA.000B: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.7-1/input0 [ 115.974579][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.064719][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.157662][ T1326] usb 8-1: USB disconnect, device number 2 [ 116.468164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.526374][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.554591][ T5397] fido_id[5397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 116.609614][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.619622][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.749408][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.770466][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.783521][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.801597][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.988351][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.025677][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.483250][ T4375] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 117.635104][ T5424] loop9: detected capacity change from 0 to 1024 [ 117.712875][ T5429] loop7: detected capacity change from 0 to 256 [ 117.770726][ T5429] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 117.792321][ T5424] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 117.800004][ T4375] usb 3-1: Using ep0 maxpacket: 32 [ 117.808872][ T5424] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.891970][ T5424] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 118.083483][ T4375] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 118.091760][ T4375] usb 3-1: config 0 has no interface number 0 [ 118.098329][ T4375] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.109828][ T4375] usb 3-1: config 0 interface 85 has no altsetting 0 [ 118.415939][ T4375] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 118.487985][ T4375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.565260][ T4375] usb 3-1: Product: syz [ 118.601449][ T4375] usb 3-1: Manufacturer: syz [ 118.672712][ T4375] usb 3-1: SerialNumber: syz [ 118.733027][ T4375] usb 3-1: config 0 descriptor?? [ 118.745608][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.7.216'. [ 119.386902][ T5464] loop7: detected capacity change from 0 to 1024 [ 119.856355][ T4375] appletouch 3-1:0.85: Geyser mode initialized. [ 119.864161][ T4375] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input13 [ 119.929021][ T5478] netlink: 16 bytes leftover after parsing attributes in process `syz.6.223'. [ 120.053404][ T5460] netlink: 36 bytes leftover after parsing attributes in process `syz.9.217'. [ 120.092361][ T4224] usb 3-1: USB disconnect, device number 12 [ 120.149851][ T4224] appletouch 3-1:0.85: input: appletouch disconnected [ 121.213530][ T5497] loop6: detected capacity change from 0 to 512 [ 121.311187][ T1322] device hsr_slave_0 left promiscuous mode [ 121.334125][ T1322] device hsr_slave_1 left promiscuous mode [ 121.348191][ T5497] EXT4-fs (loop6): Test dummy encryption mode enabled [ 121.365333][ T5497] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.405221][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.423070][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.441437][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.452440][ T5497] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 121.481101][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.506422][ T1322] device bridge_slave_1 left promiscuous mode [ 121.534809][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.556109][ T5497] EXT4-fs (loop6): 1 truncate cleaned up [ 121.562191][ T5497] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000066,user_xattr,nodiscard,test_dummy_encryption=v1,. Quota mode: none. [ 121.595784][ T5497] EXT4-fs error (device loop6): ext4_lookup:1858: inode #16: comm syz.6.226: iget: bad i_size value: 5497558147880 [ 121.660745][ T1322] device bridge_slave_0 left promiscuous mode [ 121.688307][ T5497] EXT4-fs (loop6): Remounting filesystem read-only [ 121.695218][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.779319][ T1322] device hsr_slave_0 left promiscuous mode [ 121.852749][ T1322] device hsr_slave_1 left promiscuous mode [ 121.972865][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.002570][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.006096][ T5522] loop8: detected capacity change from 0 to 256 [ 122.034258][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.052450][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.088623][ T1322] device bridge_slave_1 left promiscuous mode [ 122.113242][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.161669][ T1322] device bridge_slave_0 left promiscuous mode [ 122.208884][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.282046][ T1322] device veth1_macvtap left promiscuous mode [ 122.315750][ T1322] device veth0_macvtap left promiscuous mode [ 122.339112][ T1322] device veth1_vlan left promiscuous mode [ 122.359463][ T1322] device veth0_vlan left promiscuous mode [ 122.409857][ T1322] device veth1_macvtap left promiscuous mode [ 122.427062][ T1322] device veth0_macvtap left promiscuous mode [ 122.433162][ T1322] device veth1_vlan left promiscuous mode [ 122.471145][ T1322] device veth0_vlan left promiscuous mode [ 122.497934][ T5522] exFAT-fs (loop8): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 122.535586][ T5522] exFAT-fs (loop8): Filesystem has been set read-only [ 122.553438][ T5522] exFAT-fs (loop8): error, failed to bmap (inode : ffff88807474aee0 iblock : 16, err : -5) [ 122.644746][ T5522] exFAT-fs (loop8): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 122.774308][ T5535] print_req_error: 2 callbacks suppressed [ 122.774346][ T5535] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.792570][ T5535] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.803988][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 122.814718][ T5535] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.826719][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 122.836971][ T5535] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 122.844857][ T5535] UDF-fs: Scanning with blocksize 512 failed [ 122.853722][ T5535] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.866027][ T5535] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.877439][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 122.888091][ T5535] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.900035][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 122.909801][ T5535] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 122.917557][ T5535] UDF-fs: Scanning with blocksize 1024 failed [ 122.925723][ T5535] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.937771][ T5535] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.949246][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 122.959746][ T5535] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.971239][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 122.980920][ T5535] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 122.988707][ T5535] UDF-fs: Scanning with blocksize 2048 failed [ 122.996737][ T5535] blk_update_request: I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.008767][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 123.019610][ T5535] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 123.029336][ T5535] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 123.037094][ T5535] UDF-fs: Scanning with blocksize 4096 failed [ 123.043278][ T5535] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 123.650006][ T5542] tmpfs: Unknown parameter '9' [ 124.262701][ T5552] loop9: detected capacity change from 0 to 128 [ 124.566114][ T4327] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 124.666092][ T5556] loop8: detected capacity change from 0 to 512 [ 124.845697][ T4327] usb 8-1: Using ep0 maxpacket: 32 [ 124.962380][ T5556] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 124.976812][ T4327] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 125.124390][ T4327] usb 8-1: config 0 has no interface number 0 [ 125.134555][ T4327] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.159214][ T4327] usb 8-1: config 0 interface 85 has no altsetting 0 [ 125.212363][ T5556] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.240: bg 0: block 384: padding at end of block bitmap is not set [ 125.249574][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 125.294094][ T5556] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 125.325859][ T4327] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 125.330436][ T5568] ptrace attach of "./syz-executor exec"[5146] was attempted by ""[5568] [ 125.342288][ T4327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.343569][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 125.359812][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 125.373462][ T5556] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.240: attempt to clear invalid blocks 983260 len 1 [ 125.387745][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 125.402786][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.417383][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 125.431856][ T5556] EXT4-fs error (device loop8): __ext4_get_inode_loc:4327: comm syz.8.240: Invalid inode table block 0 in block_group 0 [ 125.491138][ T4327] usb 8-1: Product: syz [ 125.491851][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.495824][ T4327] usb 8-1: Manufacturer: syz [ 125.511807][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 125.518579][ T4327] usb 8-1: SerialNumber: syz [ 125.524841][ T4327] usb 8-1: config 0 descriptor?? [ 125.530154][ T5556] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 125.545314][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 125.552023][ T5556] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 125.559003][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.9.245'. [ 125.567291][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 125.603121][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.9.245'. [ 125.656908][ T5556] EXT4-fs error (device loop8): __ext4_get_inode_loc:4327: comm syz.8.240: Invalid inode table block 0 in block_group 0 [ 125.718503][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.9.245'. [ 125.753843][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 125.821131][ T5556] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 125.993130][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 126.087652][ T5556] EXT4-fs error (device loop8): ext4_truncate:4279: inode #11: comm syz.8.240: mark_inode_dirty error [ 126.237226][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 126.243809][ T5556] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 126.263660][ T1322] bond0 (unregistering): Released all slaves [ 126.297332][ T5556] EXT4-fs (loop8): Remounting filesystem read-only [ 126.304098][ T5556] EXT4-fs (loop8): 1 truncate cleaned up [ 126.353205][ T5556] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 126.851210][ T4327] appletouch 8-1:0.85: Geyser mode initialized. [ 126.867460][ T4327] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input15 [ 126.914141][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 126.931604][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 126.954336][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.978982][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.990712][ T4327] usb 8-1: USB disconnect, device number 3 [ 127.015579][ T4327] appletouch 8-1:0.85: input: appletouch disconnected [ 127.135293][ T5586] loop8: detected capacity change from 0 to 1024 [ 127.284828][ T5586] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 127.292361][ T5586] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.481753][ T5586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 127.491157][ T5586] System zones: 0-1, 3-36 [ 127.510661][ T5586] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 127.682395][ T1322] bond0 (unregistering): Released all slaves [ 127.754488][ T5550] netlink: 'syz.6.236': attribute type 4 has an invalid length. [ 127.793545][ T5581] netlink: 36 bytes leftover after parsing attributes in process `syz.9.246'. [ 128.040510][ T5550] syz.6.236 (5550) used greatest stack depth: 20480 bytes left [ 128.478274][ T5605] hub 2-0:1.0: USB hub found [ 128.486237][ T5605] hub 2-0:1.0: 1 port detected [ 128.836911][ T5600] loop2: detected capacity change from 0 to 4096 [ 129.007899][ T5608] loop7: detected capacity change from 0 to 512 [ 129.131665][ T5612] loop6: detected capacity change from 0 to 1024 [ 129.183107][ T5600] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.214180][ T5608] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.254: invalid block [ 129.258138][ T5608] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.254: invalid indirect mapped block 10 (level 1) [ 129.359018][ T5608] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.254: invalid indirect mapped block 8 (level 1) [ 129.412847][ T5608] EXT4-fs (loop7): 1 truncate cleaned up [ 129.418909][ T5608] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 129.435576][ T5629] loop6: detected capacity change from 0 to 1024 [ 129.505628][ T4224] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 129.525726][ T5629] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.337924][ T4224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.358457][ T4224] usb 10-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 130.381850][ T4224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.484508][ T4224] usb 10-1: config 0 descriptor?? [ 130.512010][ T5649] loop2: detected capacity change from 0 to 764 [ 130.707950][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.8.264'. [ 130.839682][ T5660] loop6: detected capacity change from 0 to 1024 [ 131.077803][ T4224] cherry 0003:046A:0023.000C: unknown main item tag 0x0 [ 131.130586][ T4224] cherry 0003:046A:0023.000C: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.9-1/input0 [ 131.374723][ T5660] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 131.382113][ T5660] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.402180][ T4264] usb 10-1: USB disconnect, device number 2 [ 131.403252][ T5660] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 131.416742][ T5660] System zones: 0-1, 3-36 [ 131.437207][ T5660] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 131.513407][ T5668] loop2: detected capacity change from 0 to 256 [ 131.592866][ T5669] fido_id[5669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 131.810412][ T13] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 132.046609][ T5682] loop6: detected capacity change from 0 to 1024 [ 132.066311][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.076509][ T13] usb 9-1: Using ep0 maxpacket: 32 [ 132.093766][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.117830][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.187145][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.215649][ T13] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 132.217318][ T5687] binder: 5686:5687 ioctl c0306201 200000000080 returned -14 [ 132.232997][ T26] audit: type=1800 audit(1762572113.283:20): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.268" name="file1" dev="loop6" ino=26 res=0 errno=0 [ 132.254055][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.263386][ T13] usb 9-1: config 0 has no interface number 0 [ 132.276048][ T13] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.304701][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.314310][ T13] usb 9-1: config 0 interface 85 has no altsetting 0 [ 132.329460][ T5687] binder: BINDER_SET_CONTEXT_MGR already set [ 132.345289][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.347411][ T5687] binder: 5686:5687 ioctl 4018620d 200000000040 returned -16 [ 132.365583][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.386739][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.435673][ T5689] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 132.485540][ T5668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.515752][ T13] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 132.534829][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.566216][ T13] usb 9-1: Product: syz [ 132.570429][ T13] usb 9-1: Manufacturer: syz [ 132.585335][ T13] usb 9-1: SerialNumber: syz [ 132.616548][ T26] audit: type=1800 audit(1762572113.673:21): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.275" name="file1" dev="loop2" ino=1048627 res=0 errno=0 [ 132.631716][ T13] usb 9-1: config 0 descriptor?? [ 132.662117][ T5668] syz.2.275 (5668) used greatest stack depth: 20400 bytes left [ 132.682234][ T5693] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.694228][ T5705] loop6: detected capacity change from 0 to 1024 [ 132.701414][ T26] audit: type=1800 audit(1762572113.703:22): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.275" name="file1" dev="loop2" ino=1048627 res=0 errno=0 [ 132.783486][ T4184] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 132.795810][ T5705] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 132.800779][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803257][ T5705] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.809847][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.834505][ T4184] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 132.846159][ T5707] loop9: detected capacity change from 0 to 1024 [ 132.874709][ T5705] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 132.942524][ T5707] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.680560][ T13] appletouch 9-1:0.85: Geyser mode initialized. [ 133.712061][ T13] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input16 [ 133.942851][ T5725] loop7: detected capacity change from 0 to 512 [ 133.959706][ T4224] usb 9-1: USB disconnect, device number 2 [ 134.014222][ T4224] appletouch 9-1:0.85: input: appletouch disconnected [ 134.050296][ T5725] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 134.087929][ T5725] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 134.193591][ T5725] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 134.215592][ T5725] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.279: attempt to clear invalid blocks 33619980 len 1 [ 134.306067][ T5725] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.279: invalid indirect mapped block 1819239214 (level 0) [ 134.355898][ T5739] loop9: detected capacity change from 0 to 128 [ 134.386897][ T5725] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.279: invalid indirect mapped block 1819239214 (level 1) [ 134.402393][ T5739] UDF-fs: bad mount option "x" or missing value [ 134.456751][ T5725] EXT4-fs (loop7): 1 truncate cleaned up [ 134.462444][ T5725] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,noblock_validity,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 134.595789][ T5725] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work [ 134.772574][ T5739] loop9: detected capacity change from 0 to 8192 [ 135.233427][ T5762] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.401573][ T5746] chnl_net:caif_netlink_parms(): no params data found [ 135.414239][ T5767] loop7: detected capacity change from 0 to 1024 [ 135.531602][ T5767] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.643279][ T5773] loop8: detected capacity change from 0 to 1024 [ 135.702977][ T5773] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.784443][ T5773] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 136.150851][ T5773] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.232016][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.291746][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.322189][ T5746] device bridge_slave_0 entered promiscuous mode [ 136.383902][ T5783] loop6: detected capacity change from 0 to 128 [ 136.395214][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.413038][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.427181][ T4282] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 136.442992][ T4282] EXT4-fs (loop8): This should not happen!! Data will be lost [ 136.442992][ T4282] [ 136.454206][ T5746] device bridge_slave_1 entered promiscuous mode [ 136.482485][ T4282] EXT4-fs (loop8): Total free blocks count 0 [ 136.491800][ T4282] EXT4-fs (loop8): Free/Dirty block details [ 136.498104][ T4282] EXT4-fs (loop8): free_blocks=20480 [ 136.503546][ T4282] EXT4-fs (loop8): dirty_blocks=320 [ 136.509192][ T4282] EXT4-fs (loop8): Block reservation details [ 136.515297][ T4282] EXT4-fs (loop8): i_reserved_data_blocks=20 [ 137.015706][ T4224] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 137.060507][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.361438][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 137.414910][ T5791] loop8: detected capacity change from 0 to 256 [ 137.463579][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.483288][ T5791] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.506456][ T5791] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.525494][ T4224] usb 8-1: Using ep0 maxpacket: 8 [ 137.645514][ T4224] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.653994][ T4224] usb 8-1: config 179 has no interface number 0 [ 137.657799][ T5746] team0: Port device team_slave_0 added [ 137.660358][ T4224] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 137.723108][ T4224] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 137.723698][ T5746] team0: Port device team_slave_1 added [ 137.741606][ T4224] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.753327][ T4224] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 137.806738][ T4224] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.827560][ T4224] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 137.836840][ T4224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.915759][ T5788] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.676517][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.683679][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.796316][ T5788] loop7: detected capacity change from 0 to 2048 [ 138.798893][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.831833][ T1322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.842298][ T5811] loop8: detected capacity change from 0 to 8 [ 139.070184][ T5811] SQUASHFS error: zlib decompression failed, data probably corrupt [ 139.084143][ T5788] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.198568][ T5811] SQUASHFS error: Failed to read block 0x9b: -5 [ 139.353229][ T5811] SQUASHFS error: Unable to read metadata cache entry [99] [ 139.451004][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.466703][ T4375] Bluetooth: hci2: command 0x041b tx timeout [ 139.473547][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.507420][ T5811] SQUASHFS error: Unable to read inode 0x127 [ 139.523385][ T4375] usb 8-1: USB disconnect, device number 4 [ 139.535438][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 139.564668][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.590056][ T1322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.645199][ T5811] loop8: detected capacity change from 0 to 512 [ 139.759143][ T5811] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.301: invalid indirect mapped block 10 (level 1) [ 139.779341][ T5811] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.301: invalid indirect mapped block 8 (level 1) [ 139.795796][ T5811] EXT4-fs (loop8): 1 truncate cleaned up [ 139.801474][ T5811] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 139.857594][ T5811] EXT4-fs (loop8): shut down requested (2) [ 139.877956][ T1322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.592826][ T5746] device hsr_slave_0 entered promiscuous mode [ 140.696174][ T5826] loop8: detected capacity change from 0 to 16 [ 140.723087][ T5746] device hsr_slave_1 entered promiscuous mode [ 140.754224][ T5826] erofs: (device loop8): mounted with root inode @ nid 36. [ 140.781302][ T5746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.794907][ T5746] Cannot create hsr debugfs directory [ 140.856615][ T1322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.966497][ T5824] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.110256][ T5832] hub 2-0:1.0: USB hub found [ 141.115738][ T5832] hub 2-0:1.0: 1 port detected [ 141.655330][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 141.904121][ T5839] loop9: detected capacity change from 0 to 512 [ 142.202594][ T5839] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 142.455265][ T5839] EXT4-fs (loop9): 1 truncate cleaned up [ 142.465613][ T5839] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.525661][ T13] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 142.985703][ T13] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 143.018289][ T13] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 143.627105][ T13] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.678052][ T13] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.694319][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.711201][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 143.729283][ T5853] kvm: pic: level sensitive irq not supported [ 143.729464][ T5853] kvm: pic: non byte read [ 143.765577][ T13] usb 9-1: config 0 descriptor?? [ 143.796048][ T5853] kvm: pic: single mode not supported [ 143.796068][ T5853] kvm: pic: level sensitive irq not supported [ 143.802206][ T5853] kvm: pic: non byte read [ 143.805747][ T5835] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.823356][ T5853] kvm: pic: non byte read [ 143.831804][ T5853] kvm: pic: non byte read [ 143.839613][ T5853] kvm: pic: non byte read [ 143.848600][ T13] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 143.854841][ T5853] kvm: pic: non byte read [ 143.867463][ T5853] kvm: pic: non byte read [ 143.872207][ T5853] kvm: pic: non byte read [ 143.881010][ T5853] kvm: pic: non byte read [ 143.903062][ T5853] kvm: pic: level sensitive irq not supported [ 143.903121][ T5853] kvm: pic: non byte read [ 144.023122][ T5859] debugfs: Directory 'netdev:nicvf0' with parent 'phy17' already present! [ 145.137150][ T5869] loop7: detected capacity change from 0 to 16 [ 145.171871][ T5869] erofs: (device loop7): mounted with root inode @ nid 36. [ 145.218056][ T5869] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 145.242006][ T13] usb 9-1: USB disconnect, device number 3 [ 145.284315][ T5869] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 145.345252][ T5879] loop8: detected capacity change from 0 to 128 [ 145.380181][ T5876] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 145.429909][ T5869] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 145.453127][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 145.472829][ T5879] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 145.509969][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 145.515639][ T5879] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.519525][ T5876] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 145.542619][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 145.554023][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 145.563692][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 145.575184][ T5876] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 145.585035][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 145.596651][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 145.628146][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 145.640304][ T5876] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 145.653418][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 145.681958][ T1322] device hsr_slave_0 left promiscuous mode [ 145.688573][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 145.700474][ T1322] device hsr_slave_1 left promiscuous mode [ 145.701763][ T5876] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 145.726442][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 145.739301][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.749279][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.751901][ T5876] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 145.770668][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 145.781218][ T5876] attempt to access beyond end of device [ 145.781218][ T5876] loop7: rw=524288, want=848, limit=16 [ 145.781713][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.799282][ T5876] attempt to access beyond end of device [ 145.799282][ T5876] loop7: rw=524288, want=13478624104, limit=16 [ 145.818165][ T5876] attempt to access beyond end of device [ 145.818165][ T5876] loop7: rw=524288, want=13478624080, limit=16 [ 145.841497][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 145.854599][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.854720][ T5876] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 145.876684][ T5876] erofs: (device loop7): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 145.889968][ T5876] attempt to access beyond end of device [ 145.889968][ T5876] loop7: rw=524288, want=32, limit=16 [ 145.890335][ T1322] device bridge_slave_1 left promiscuous mode [ 145.901639][ T5876] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[3537] [ 145.919341][ T5876] ================================================================== [ 145.927606][ T5876] BUG: KASAN: vmalloc-out-of-bounds in hex_dump_to_buffer+0x3c0/0xd50 [ 145.935755][ T5876] Read of size 1 at addr ffffc900015e0000 by task syz.7.318/5876 [ 145.943448][ T5876] [ 145.945749][ T5876] CPU: 0 PID: 5876 Comm: syz.7.318 Not tainted syzkaller #0 [ 145.953091][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.963144][ T5876] Call Trace: [ 145.966428][ T5876] [ 145.969339][ T5876] dump_stack_lvl+0x168/0x230 [ 145.973999][ T5876] ? show_regs_print_info+0x20/0x20 [ 145.979174][ T5876] ? _printk+0xcc/0x110 [ 145.983306][ T5876] ? hex_dump_to_buffer+0x3c0/0xd50 [ 145.988484][ T5876] ? load_image+0x3b0/0x3b0 [ 145.992972][ T5876] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 145.998323][ T5876] print_address_description+0x60/0x2d0 [ 146.003845][ T5876] ? hex_dump_to_buffer+0x3c0/0xd50 [ 146.009022][ T5876] kasan_report+0xdf/0x130 [ 146.013426][ T5876] ? hex_dump_to_buffer+0x3c0/0xd50 [ 146.018602][ T5876] hex_dump_to_buffer+0x3c0/0xd50 [ 146.023613][ T5876] print_hex_dump+0x136/0x260 [ 146.028270][ T5876] ? hex_dump_to_buffer+0xd50/0xd50 [ 146.033459][ T5876] z_erofs_lz4_decompress+0xc7f/0x1180 [ 146.038916][ T5876] z_erofs_decompress+0x767/0xde0 [ 146.043932][ T5876] ? lock_chain_count+0x20/0x20 [ 146.048787][ T5876] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 146.054657][ T5876] z_erofs_decompress_queue+0x11a6/0x1990 [ 146.060380][ T5876] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 146.066201][ T5876] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 146.072069][ T5876] ? submit_bio+0x2be/0x560 [ 146.076552][ T5876] ? submit_bio_noacct+0x6d0/0x6d0 [ 146.081648][ T5876] ? bio_add_page+0x2d6/0x460 [ 146.086308][ T5876] z_erofs_runqueue+0x164c/0x1890 [ 146.091332][ T5876] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 146.096873][ T5876] ? mutex_unlock+0x10/0x10 [ 146.101371][ T5876] z_erofs_readahead+0xb81/0x10c0 [ 146.106381][ T5876] ? z_erofs_readpage+0x6c0/0x6c0 [ 146.111389][ T5876] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 146.117365][ T5876] ? local_lock_release+0x97/0x170 [ 146.122469][ T5876] read_pages+0x165/0x920 [ 146.126784][ T5876] ? page_cache_ra_unbounded+0x930/0x930 [ 146.132403][ T5876] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 146.137863][ T5876] page_cache_ra_unbounded+0x830/0x930 [ 146.143330][ T5876] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 146.149833][ T5876] force_page_cache_ra+0x3e5/0x440 [ 146.154945][ T5876] generic_fadvise+0x520/0x7d0 [ 146.159704][ T5876] ? dump_task+0x600/0x600 [ 146.164113][ T5876] ? __fdget+0x18b/0x210 [ 146.168344][ T5876] __x64_sys_fadvise64+0x139/0x180 [ 146.173452][ T5876] do_syscall_64+0x4c/0xa0 [ 146.177847][ T5876] ? clear_bhb_loop+0x30/0x80 [ 146.182505][ T5876] ? clear_bhb_loop+0x30/0x80 [ 146.187157][ T5876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.193037][ T5876] RIP: 0033:0x7f14d2fb86c9 [ 146.197429][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.217018][ T5876] RSP: 002b:00007f14d11fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 146.225412][ T5876] RAX: ffffffffffffffda RBX: 00007f14d320f090 RCX: 00007f14d2fb86c9 [ 146.233382][ T5876] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 146.241345][ T5876] RBP: 00007f14d303af91 R08: 0000000000000000 R09: 0000000000000000 [ 146.249646][ T5876] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 146.257611][ T5876] R13: 00007f14d320f128 R14: 00007f14d320f090 R15: 00007fff74427a98 [ 146.265578][ T5876] [ 146.268578][ T5876] [ 146.270882][ T5876] [ 146.273181][ T5876] Memory state around the buggy address: [ 146.278785][ T5876] ffffc900015dff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.286834][ T5876] ffffc900015dff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.295152][ T5876] >ffffc900015e0000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 146.303321][ T5876] ^ [ 146.307377][ T5876] ffffc900015e0080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 146.315420][ T5876] ffffc900015e0100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 146.323484][ T5876] ================================================================== [ 146.331522][ T5876] Disabling lock debugging due to kernel taint [ 146.338326][ T5876] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.345518][ T5876] CPU: 0 PID: 5876 Comm: syz.7.318 Tainted: G B syzkaller #0 [ 146.354254][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.364287][ T5876] Call Trace: [ 146.367546][ T5876] [ 146.370552][ T5876] dump_stack_lvl+0x168/0x230 [ 146.375224][ T5876] ? show_regs_print_info+0x20/0x20 [ 146.380406][ T5876] ? load_image+0x3b0/0x3b0 [ 146.384896][ T5876] panic+0x2c9/0x7f0 [ 146.388773][ T5876] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 146.394909][ T5876] ? bpf_jit_dump+0xd0/0xd0 [ 146.399393][ T5876] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 146.405412][ T5876] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 146.411569][ T5876] ? _raw_spin_unlock+0x40/0x40 [ 146.416410][ T5876] ? hex_dump_to_buffer+0x3c0/0xd50 [ 146.421604][ T5876] check_panic_on_warn+0x80/0xa0 [ 146.426525][ T5876] ? hex_dump_to_buffer+0x3c0/0xd50 [ 146.431707][ T5876] end_report+0x6d/0xf0 [ 146.435843][ T5876] kasan_report+0x102/0x130 [ 146.440330][ T5876] ? hex_dump_to_buffer+0x3c0/0xd50 [ 146.445506][ T5876] hex_dump_to_buffer+0x3c0/0xd50 [ 146.450514][ T5876] print_hex_dump+0x136/0x260 [ 146.455185][ T5876] ? hex_dump_to_buffer+0xd50/0xd50 [ 146.460371][ T5876] z_erofs_lz4_decompress+0xc7f/0x1180 [ 146.465910][ T5876] z_erofs_decompress+0x767/0xde0 [ 146.470926][ T5876] ? lock_chain_count+0x20/0x20 [ 146.475750][ T5876] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 146.481626][ T5876] z_erofs_decompress_queue+0x11a6/0x1990 [ 146.487321][ T5876] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 146.493115][ T5876] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 146.498990][ T5876] ? submit_bio+0x2be/0x560 [ 146.503470][ T5876] ? submit_bio_noacct+0x6d0/0x6d0 [ 146.508575][ T5876] ? bio_add_page+0x2d6/0x460 [ 146.513246][ T5876] z_erofs_runqueue+0x164c/0x1890 [ 146.518271][ T5876] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 146.523851][ T5876] ? mutex_unlock+0x10/0x10 [ 146.528351][ T5876] z_erofs_readahead+0xb81/0x10c0 [ 146.533361][ T5876] ? z_erofs_readpage+0x6c0/0x6c0 [ 146.538390][ T5876] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 146.544357][ T5876] ? local_lock_release+0x97/0x170 [ 146.549453][ T5876] read_pages+0x165/0x920 [ 146.553764][ T5876] ? page_cache_ra_unbounded+0x930/0x930 [ 146.559387][ T5876] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 146.564825][ T5876] page_cache_ra_unbounded+0x830/0x930 [ 146.570267][ T5876] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 146.576748][ T5876] force_page_cache_ra+0x3e5/0x440 [ 146.581848][ T5876] generic_fadvise+0x520/0x7d0 [ 146.586592][ T5876] ? dump_task+0x600/0x600 [ 146.590987][ T5876] ? __fdget+0x18b/0x210 [ 146.595207][ T5876] __x64_sys_fadvise64+0x139/0x180 [ 146.600295][ T5876] do_syscall_64+0x4c/0xa0 [ 146.604692][ T5876] ? clear_bhb_loop+0x30/0x80 [ 146.609345][ T5876] ? clear_bhb_loop+0x30/0x80 [ 146.614028][ T5876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.620003][ T5876] RIP: 0033:0x7f14d2fb86c9 [ 146.624398][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.643983][ T5876] RSP: 002b:00007f14d11fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 146.652464][ T5876] RAX: ffffffffffffffda RBX: 00007f14d320f090 RCX: 00007f14d2fb86c9 [ 146.660441][ T5876] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 146.668390][ T5876] RBP: 00007f14d303af91 R08: 0000000000000000 R09: 0000000000000000 [ 146.676357][ T5876] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 146.684404][ T5876] R13: 00007f14d320f128 R14: 00007f14d320f090 R15: 00007fff74427a98 [ 146.692357][ T5876] [ 146.695629][ T5876] Kernel Offset: disabled [ 146.704510][ T5876] Rebooting in 86400 seconds..