last executing test programs: 13m55.25242554s ago: executing program 2 (id=13): unshare(0x2040400) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) read(r2, &(0x7f0000000180)=""/36, 0x24) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) 13m54.984953006s ago: executing program 2 (id=15): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4, 0x4) 13m54.855222194s ago: executing program 2 (id=16): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 13m54.456324477s ago: executing program 2 (id=17): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) ptrace$cont(0x9, r1, 0x2000804006, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000000c0)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) mount$bpf(0x0, 0x0, 0x0, 0x3918474, &(0x7f0000000440)=ANY=[@ANYBLOB='u', @ANYRESHEX=r3, @ANYBLOB]) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 13m53.545074771s ago: executing program 2 (id=21): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)={[{@errors_remount}, {@usrquota}]}, 0x1, 0x489, &(0x7f0000000d40)="$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") 13m52.577368887s ago: executing program 2 (id=26): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x574, &(0x7f0000000640)="$eJzs3VFonVcdAPD/9yVpsi6z2dZJHYJRhy3KkvamW1ufWmV7qg/WgSLWGsxtGnrTrk1ml4AjZQgFH1RE8WV1WgWnPvRFRPdSEJwP+jJE0MFeFOYGRVARfbpy7v1uvEtubLZk99v6/X5wuOec7/Y753+/7+s591zICaCyxiNiJSJ2RMSpiNhV1GdFiqPtlN53aer6mZSyaDY/9besdXxm6vqZ6Po3yZ1FYU9EfOzRLM5+ZX27C0vLZ6cbjfrFojy5OP/45MLS8oNz89Oz9dn6uVrt8MMP1Q4dPHJw22L9yQML3z75nU+8dPU/lw//+tOf+VLq72hxrDuO7TIe46ufSbfBLOL4djdWkoEUT0SMdNVlgyV2iE373SvfHckj4p6I+EDr+d8VA9G+eK99+HN/3xWvfL7sPgIA26/ZbGbN15cBgNtc3loDy/KJiGjn83xior2Gtzt25o3zC4sfOX3+iXMz7bWysRjKT8816vuLtcKxGMpS+UAr/79ybU15KiLujogrw3e0yhNfPN+YKXHeAwBVNBrx8p/2f/zZO9eM/38dbo//AMDtJ43/N1689lzK/3O47N4AAP2Qxv9TTz7zrTD+A0BlGP8BoHqM/wBQPcZ/AKge4z8AVI/xHwCqp3v8BwCq5e733fhjFhErH72jlaLYCyQZKrVnwFstL7sDQGkGyu4AUBpbtUF1+Y4P9NqnttvIRge+vv19Afpj73us/0NVWf+H6rL+D9Vl/R+qq9nM7PkPABVjjR/w+z8AAAAAAAAAALzzLCwtn51uNOoX38JM2TECAAAAAAAAAAAAAAAAAADA291oK2X5RLEX+Gjk+cRExF0RMRZD2em5Rn1/RLwrIn47PDScygfK7jQA8KaMRrx84blHrvTj7//IyMi80zJl/w8F9MvM1PUzndSvNleO9Kuljd081t7cNMV9qUjtI4Mx2HodiaGI2PmPrCi3ZRExsMW27386YjxOvfsvN3+0lFIU12GLp31DVi5HxJ5e1z9rrQ2NFTu/ro0/xX7XFtv+wbEU/77fdNe9fePPXxd/3jrWfk33wr1vou36v1L8z3+yu67f8Zfpvr1l96BcL8yV3YPi/v/C2Hiv+39wi+cevcXxXz2Q7v+odddV6f6/90Nl96BcJ99bdg/K9bUTZfcg4kaa/xztNf7l6dlc3fl97fg/0pohbc0fltLzf+yn3XX9fv47879L6+Z/+er8b2CD+d/4Jtt44sJnn+9V//QL6RyvvtSZ/6WU2u/MBfvh5uWI+wd7xZ+txp9tEP/7N9nG8aGvvtqr/tKjKf4zJzqx77vnmeV+x9/8XkSahvSKvyPlJhfnH59cWFp+cG5+erY+Wz9Xqx1++KHaoYNHDk62fiOd7PxSut6Vb/z8sV71v7+a4j/xbNnXf+cG8d/q/t/s8PWLH/74xV71y4+l+P881on96LX5p9bHn7+2I2t/fDuKmienFxcvHojYkR1fX1/7/33pvKdzjhT/vg/2fv53F/FnPeb/qW5v8ZrqdxffBdJndd+aNueu/fL7vfpybirFf3L1+9+/n1r6chnXf+YW1z/f4Prv2WQbV3/2yDd71c8fSvFfmE3PfSf1O34AAACoArv0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/w0AAP//bms0EQ==") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 13m51.695438839s ago: executing program 32 (id=26): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x574, &(0x7f0000000640)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 13m18.714874799s ago: executing program 1 (id=132): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, 0x0, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r4) 13m17.459885962s ago: executing program 1 (id=134): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902"], 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 13m15.61507927s ago: executing program 0 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f00000001c0)={0xd4, 0x0, 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m15.532860855s ago: executing program 1 (id=144): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 13m15.400428523s ago: executing program 1 (id=145): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) ptrace$cont(0x9, r1, 0x2000804006, 0x106) 13m15.201120154s ago: executing program 0 (id=146): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000018"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x26, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f583"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@generic={0xff}, @pad1]}}}], 0xd0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200), 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}, {&(0x7f0000002840)="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", 0xe69}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m14.948531299s ago: executing program 1 (id=148): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 13m13.864315463s ago: executing program 1 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c00000400428014"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13m12.189821001s ago: executing program 33 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c00000400428014"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13m12.159377372s ago: executing program 0 (id=154): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 13m11.800252633s ago: executing program 0 (id=156): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) ptrace$cont(0x9, r1, 0x2000804006, 0x106) 13m10.988289881s ago: executing program 0 (id=160): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvfrom$inet6(r0, &(0x7f00000016c0)=""/4096, 0x1000, 0x2100, &(0x7f0000000880)={0xa, 0x4e22, 0x3, @empty, 0xcb9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 13m9.98021236s ago: executing program 0 (id=163): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 13m9.30284746s ago: executing program 34 (id=163): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 2m23.636035963s ago: executing program 5 (id=2093): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) 2m23.324617371s ago: executing program 5 (id=2095): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m22.983400361s ago: executing program 5 (id=2098): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) 2m22.762930094s ago: executing program 5 (id=2100): creat(&(0x7f00000000c0)='./file0\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600) io_uring_enter(r1, 0x2e06, 0x3071, 0x0, 0x0, 0xa5) 2m22.059332815s ago: executing program 5 (id=2107): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) 2m21.81459911s ago: executing program 5 (id=2111): syz_usbip_server_init(0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 2m5.804972567s ago: executing program 35 (id=2111): syz_usbip_server_init(0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) io_setup(0x1ff, &(0x7f00000001c0)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 11.063636873s ago: executing program 4 (id=2509): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x31, 0x1a, {0x1a, 0x23, "473b2e26af9d3d0d3ee0a3f607909516f354d663ad0bc8e0"}}, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.044927633s ago: executing program 4 (id=2512): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}]}}, 0x0, 0x42}, 0x28) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)="cf", 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f00000000c0)=0x812) 5.214817186s ago: executing program 4 (id=2516): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xa, 0x0, 0x85c}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x143042, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) 5.213677466s ago: executing program 7 (id=2517): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1501, &(0x7f0000002a80)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='.\x00', 0x80a5, &(0x7f00000008c0)=ANY=[], 0x10, 0x0, &(0x7f0000000000)) 4.604432091s ago: executing program 3 (id=2519): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {0xffff}, 0xfffffff7, 0x1, 0xd, 0xc, "42e1beff3e483621fe2fce79a8b6f462f13fa2333342133a00e81020291b7de4a8e4e5083ce54c1c0d25b13baf2410c48846dd7688dc0065a2a827668015cfcd", "3b104f6cf5ee85214d6568cf295dcc0f3ca3e43024bf4b477b756634adc4a844", [0x449, 0xb3]}) 4.467434299s ago: executing program 7 (id=2520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x7}, 0x1c}}, 0x400040c0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x8) 4.444988771s ago: executing program 4 (id=2521): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 4.142351688s ago: executing program 7 (id=2522): socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 3.980365118s ago: executing program 3 (id=2523): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) pipe2(&(0x7f0000000200), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3.94592631s ago: executing program 6 (id=2482): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.688343395s ago: executing program 6 (id=2524): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(r3, 0x0, 0x0, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000380), 0x0, 0x480c1, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x10) socket$inet6(0x10, 0x2, 0x4) syz_read_part_table(0x5cc, &(0x7f0000000680)="$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") r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000700)={0x1a}) 2.694803393s ago: executing program 4 (id=2525): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x400000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x4e23, 0x0, @empty}, 0x2, {[0x20, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x4]}}, 0x5c) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) r3 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) futex(0x0, 0xb, 0x200000, &(0x7f00000005c0), &(0x7f0000048000), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000016000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x6db01000) fsmount(0xffffffffffffffff, 0x0, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f00000000c0)={&(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000000440)=""/133, 0x85}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000002b40)=ANY=[], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.37279639s ago: executing program 6 (id=2526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000780)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x10}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.314383024s ago: executing program 3 (id=2527): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xffff, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xffffffffffffffc6, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.03328321s ago: executing program 7 (id=2528): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x64000600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 933.533956ms ago: executing program 6 (id=2529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x7}, 0x1c}}, 0x400040c0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[], 0x8) 868.50876ms ago: executing program 3 (id=2530): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000003600000085000000080000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x739d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 800.678474ms ago: executing program 4 (id=2531): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002e0000/0x3000)=nil, 0x3000, 0x1000001, 0xa7, 0x8333551ff23432a3) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f61636c2c6e6f666c7573685f6d657267652c61636c2c636865636b706f696e745e64697361626c652c696e6c69ff655f78617474722c636f6d70726573735f63616368652c6e6f696e6c4e6e655f78617474722c6e6f646973636172642c6e6f61636c2c6e6f71756f74612c6673796e635f6d6f64653d7374726963742c696e6c696e6563727970742c67635f6d657267652c6661756c745f747970653d30303030303030303030303030303030303030322c00"], 0xfd, 0x551b, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(0x0, 0x0) symlink(0x0, 0x0) rename(0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) 753.270226ms ago: executing program 6 (id=2532): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 636.443604ms ago: executing program 3 (id=2533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7e, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 533.734869ms ago: executing program 6 (id=2534): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm], 0x5) sendto$inet(r3, 0x0, 0x0, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000380), 0x0, 0x480c1, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x10) socket$inet6(0x10, 0x2, 0x4) syz_read_part_table(0x5cc, &(0x7f0000000680)="$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") r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000700)={0x1a}) 503.551241ms ago: executing program 3 (id=2535): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',']) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) socket$key(0xf, 0x3, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) 362.740449ms ago: executing program 7 (id=2536): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) 0s ago: executing program 7 (id=2537): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x40c5, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) kernel console output (not intermixed with test programs): context [ 399.419920][ T9833] EXT4-fs warning (device loop5): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 400.185583][ T6565] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.504925][ T9844] loop5: detected capacity change from 0 to 1024 [ 400.552908][ T9844] EXT4-fs: Ignoring removed orlov option [ 400.562481][ T9844] EXT4-fs: Ignoring removed bh option [ 400.811068][ T9844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.441544][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 403.336323][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 406.401084][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.461514][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 410.407063][ T9918] loop5: detected capacity change from 0 to 1024 [ 410.459558][ T9918] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 410.580068][ T9918] hfsplus: filesystem is marked journaled, leaving read-only. [ 410.853857][ T9924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 410.968694][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.006114][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.014421][ T9928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.392825][ T9938] loop3: detected capacity change from 0 to 8 [ 411.578631][ T9938] SQUASHFS error: Unable to read inode 0x11f [ 414.456996][ T9961] loop3: detected capacity change from 0 to 128 [ 414.647940][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 414.820001][ T9965] loop5: detected capacity change from 0 to 1024 [ 414.842361][ T9965] EXT4-fs: Ignoring removed oldalloc option [ 414.858814][ T9965] EXT4-fs: Ignoring removed bh option [ 414.868315][ T9965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.588710][ T9965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.772150][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.965618][ T9993] loop5: detected capacity change from 0 to 1024 [ 417.985090][ T9993] EXT4-fs: Ignoring removed orlov option [ 418.008559][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 418.155000][ T9993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.405395][ T1127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 418.801058][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.381458][ T786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 419.591463][ T786] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 419.603971][ T786] usb 4-1: config 0 has no interface number 0 [ 419.612541][ T786] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 419.644956][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.672596][ T786] usb 4-1: config 0 descriptor?? [ 419.708432][ T786] ums-realtek 4-1:0.3: USB Mass Storage device detected [ 419.850624][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 420.992815][ T5904] usb 4-1: USB disconnect, device number 9 [ 421.147602][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 421.165382][ T8] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 421.184324][ T8] usb 6-1: config 0 has no interface number 0 [ 421.197574][ T8] usb 6-1: config 0 interface 184 has no altsetting 0 [ 421.211334][ T8] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 421.226099][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.244438][ T8] usb 6-1: Product: syz [ 421.257543][ T8] usb 6-1: Manufacturer: syz [ 421.262243][ T8] usb 6-1: SerialNumber: syz [ 421.279924][ T8] usb 6-1: config 0 descriptor?? [ 421.303663][ T8] smsc75xx v1.0.0 [ 421.426542][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.923'. [ 421.918192][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 421.929569][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 422.478707][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.927'. [ 422.497684][T10048] bridge_slave_1: left allmulticast mode [ 422.503592][T10048] bridge_slave_1: left promiscuous mode [ 422.530948][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.686262][T10048] bridge_slave_0: left allmulticast mode [ 422.721221][T10048] bridge_slave_0: left promiscuous mode [ 422.737391][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.757919][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 422.769651][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 422.779338][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 422.789451][ T8] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 422.824500][ T8] usb 6-1: USB disconnect, device number 6 [ 423.703520][T10055] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 424.816483][T10065] loop3: detected capacity change from 0 to 128 [ 424.851017][T10065] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 425.784534][T10076] netlink: 'syz.3.936': attribute type 3 has an invalid length. [ 425.792364][T10076] netlink: 'syz.3.936': attribute type 1 has an invalid length. [ 426.267822][T10084] loop5: detected capacity change from 0 to 1024 [ 426.278780][T10084] EXT4-fs: Ignoring removed orlov option [ 426.308016][T10084] EXT4-fs: Ignoring removed bh option [ 426.363025][T10084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.872695][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.178095][T10140] loop3: detected capacity change from 0 to 256 [ 431.185498][T10140] exfat: Deprecated parameter 'utf8' [ 431.191063][T10140] exfat: Deprecated parameter 'namecase' [ 431.462416][T10140] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 434.933084][T10176] loop5: detected capacity change from 0 to 512 [ 435.016602][T10176] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.968: inode has both inline data and extents flags [ 435.098406][T10176] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.968: couldn't read orphan inode 15 (err -117) [ 435.126539][T10176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.299548][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.529939][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 439.097975][T10206] loop5: detected capacity change from 0 to 1024 [ 439.123335][T10206] EXT4-fs: Ignoring removed oldalloc option [ 439.440607][T10206] EXT4-fs: Ignoring removed bh option [ 439.491208][T10206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.610470][T10206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.708156][ T28] audit: type=1804 audit(2000000355.330:37): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.975" name="/newroot/185/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 439.731465][T10217] loop3: detected capacity change from 0 to 512 [ 439.765998][T10217] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.978: inode has both inline data and extents flags [ 439.938597][T10217] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.978: couldn't read orphan inode 15 (err -117) [ 439.988863][T10217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.025855][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.319101][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.326720][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.396048][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.255075][T10249] loop5: detected capacity change from 0 to 1024 [ 444.341721][T10249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 444.392911][T10249] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.565187][T10249] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: comm syz.5.988: lblock 0 mapped to illegal pblock 0 (length 6) [ 444.603604][T10249] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 444.624694][T10249] EXT4-fs (loop5): This should not happen!! Data will be lost [ 444.624694][T10249] [ 444.643422][ T28] audit: type=1804 audit(2000000360.250:38): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.988" name="/newroot/188/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 444.688299][T10249] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #15: comm syz.5.988: lblock 0 mapped to illegal pblock 0 (length 6) [ 444.836522][ T59] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 444.863887][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 445.925646][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 445.925646][ T59] [ 446.011437][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 446.583621][T10277] Bluetooth: hci1: expected 4354 bytes, got 2 bytes [ 448.427546][T10275] Bluetooth: hci3: command 0x0406 tx timeout [ 449.359958][T10317] syz.3.1010 uses obsolete (PF_INET,SOCK_PACKET) [ 449.642997][ T7203] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 451.062883][T10341] loop3: detected capacity change from 0 to 1024 [ 451.099554][T10341] EXT4-fs: Ignoring removed orlov option [ 451.105351][T10341] EXT4-fs: Ignoring removed bh option [ 451.463037][T10341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.680228][T10354] fuse: Bad value for 'rootmode' [ 452.822824][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.865582][T10372] loop5: detected capacity change from 0 to 128 [ 453.925997][T10372] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 453.969837][T10374] loop3: detected capacity change from 0 to 128 [ 453.973905][T10372] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 454.086050][T10374] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 454.544133][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1031'. [ 454.701445][T10380] EXT4-fs (loop5): shut down requested (2) [ 454.736180][T10380] fscrypt: loop5: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 454.873085][T10386] xt_TPROXY: Can be used only with -p tcp or -p udp [ 455.159491][ T6565] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.443808][T10396] loop3: detected capacity change from 0 to 1024 [ 455.449025][T10395] loop5: detected capacity change from 0 to 1024 [ 455.468790][T10396] EXT4-fs: Ignoring removed orlov option [ 455.472788][T10395] hfsplus: invalid file type 0120411 for inode 2 [ 455.474899][T10396] EXT4-fs: Ignoring removed bh option [ 455.485992][T10395] hfsplus: failed to load root directory [ 455.576726][T10396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.435349][T10407] loop5: detected capacity change from 0 to 128 [ 456.499191][T10407] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 456.727692][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 456.774247][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.287052][T10417] loop3: detected capacity change from 0 to 128 [ 457.357930][T10417] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.419963][T10417] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.405912][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 458.462235][T10428] loop5: detected capacity change from 0 to 16 [ 458.476715][T10428] erofs: (device loop5): mounted with root inode @ nid 36. [ 458.535853][T10434] EXT4-fs (loop3): shut down requested (2) [ 458.583164][T10428] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 458.613659][T10428] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 458.633273][T10428] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 458.755779][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.997413][T10449] loop3: detected capacity change from 0 to 256 [ 459.040152][T10449] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 459.064113][T10449] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 459.852935][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1060'. [ 460.067732][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 460.111327][T10471] loop3: detected capacity change from 0 to 512 [ 460.152144][T10471] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 460.173303][T10471] EXT4-fs (loop3): 1 truncate cleaned up [ 460.187040][T10471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.218941][T10471] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1064: Logical block already allocated [ 460.251283][T10471] EXT4-fs (loop3): Remounting filesystem read-only [ 460.258600][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 460.269588][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 460.278827][ T8] usb 6-1: config 1 has no interface number 0 [ 460.285177][ T8] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.297338][ T8] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 460.306502][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 460.317826][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 460.328222][ T8] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.345611][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.355406][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.373480][ T8] usb 6-1: Product: syz [ 460.382917][ T8] usb 6-1: Manufacturer: syz [ 460.388086][ T8] usb 6-1: SerialNumber: syz [ 460.451062][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.502673][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 460.591310][T10480] Illegal XDP return value 4294967274 on prog (id 65) dev syz_tun, expect packet loss! [ 460.607031][T10463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 461.789565][T10463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 461.798986][ T8] cdc_ncm 6-1:1.1: bind() failure [ 462.577684][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 462.869482][ T7779] usb 6-1: USB disconnect, device number 7 [ 463.124570][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1077'. [ 463.588096][T10524] loop5: detected capacity change from 0 to 256 [ 463.633525][T10524] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 464.947804][T10548] process 'syz.5.1092' launched './file1' with NULL argv: empty string added [ 464.988491][T10543] loop3: detected capacity change from 0 to 8 [ 465.046903][T10543] SQUASHFS error: Unable to read inode 0x11f [ 465.253009][T10555] loop5: detected capacity change from 0 to 128 [ 465.314187][T10555] syz.5.1095: attempt to access beyond end of device [ 465.314187][T10555] loop5: rw=2049, sector=145, nr_sectors = 57 limit=128 [ 465.665336][T10559] loop5: detected capacity change from 0 to 128 [ 465.759073][T10559] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.779303][T10559] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.608480][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1097'. [ 467.702267][ T6565] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.757710][T10275] Bluetooth: hci3: command 0x0406 tx timeout [ 468.821653][T10588] loop3: detected capacity change from 0 to 2048 [ 468.980871][T10588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.137683][T10597] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1106'. [ 469.172585][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.434584][T10605] loop5: detected capacity change from 0 to 512 [ 469.469861][T10605] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.1110: inode has both inline data and extents flags [ 469.491222][T10605] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1110: couldn't read orphan inode 15 (err -117) [ 469.601131][T10605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.642022][T10608] loop3: detected capacity change from 0 to 256 [ 469.679002][T10608] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 471.093203][T10608] syz.3.1111: attempt to access beyond end of device [ 471.093203][T10608] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 471.205105][T10608] syz.3.1111: attempt to access beyond end of device [ 471.205105][T10608] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 471.309481][ T28] audit: type=1800 audit(2000000386.930:39): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1111" name="file1" dev="loop3" ino=1048633 res=0 errno=0 [ 471.434709][ T6565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.647819][T10621] loop3: detected capacity change from 0 to 1024 [ 471.665012][T10621] EXT4-fs: Ignoring removed orlov option [ 471.672854][T10621] EXT4-fs: Ignoring removed bh option [ 471.751238][T10621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.767616][ T786] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 473.409637][ T786] usb 6-1: config index 0 descriptor too short (expected 65069, got 45) [ 473.433048][ T786] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 473.549144][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.684709][ T786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.695635][ T786] usb 6-1: config 0 has no interfaces? [ 473.701548][ T786] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 473.710777][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.722897][ T786] usb 6-1: config 0 descriptor?? [ 474.960064][ T786] usb 6-1: USB disconnect, device number 8 [ 475.012765][T10654] loop3: detected capacity change from 0 to 256 [ 481.078196][ T3493] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.999818][T10729] Bluetooth: hci1: expected 4354 bytes, got 2 bytes [ 485.902953][T10738] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1145'. [ 486.922253][T10746] loop3: detected capacity change from 0 to 512 [ 486.930668][T10746] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 486.983403][T10746] EXT4-fs (loop3): 1 truncate cleaned up [ 488.756249][T10746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.204757][T10777] loop5: detected capacity change from 0 to 2048 [ 492.305079][T10777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.186619][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.400189][T10787] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1158'. [ 494.151301][T10795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'. [ 494.331843][T10799] loop3: detected capacity change from 0 to 128 [ 494.397944][T10799] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 499.396831][T10845] loop3: detected capacity change from 0 to 512 [ 499.484901][T10845] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 499.525666][T10845] UDF-fs: Scanning with blocksize 512 failed [ 499.662422][T10845] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 499.682486][T10845] UDF-fs: Scanning with blocksize 1024 failed [ 499.702258][T10845] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 499.725186][T10845] UDF-fs: Scanning with blocksize 2048 failed [ 499.766172][T10845] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 499.794137][T10845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.502693][T10866] fuse: Unknown parameter 'Óž %;ៗeOÎ\º rejected, failed to enable media [ 663.539503][T12367] capability: warning: `syz.3.1658' uses 32-bit capabilities (legacy support in use) [ 665.387737][T12403] syz_tun: entered allmulticast mode [ 665.443349][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1673'. [ 665.797195][T12403] syz_tun (unregistering): left allmulticast mode [ 666.921243][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1681'. [ 669.362651][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 669.362671][ T28] audit: type=1326 audit(2000000584.970:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 669.551088][ T28] audit: type=1326 audit(2000000584.970:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 669.692234][ T28] audit: type=1326 audit(2000000585.020:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 669.714851][ T28] audit: type=1326 audit(2000000585.020:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 669.747443][ T28] audit: type=1326 audit(2000000585.020:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 669.789542][T12480] IPv6: NLM_F_CREATE should be specified when creating new route [ 672.487445][ T28] audit: type=1326 audit(2000000588.100:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddd9aeb9 code=0x7ffc0000 [ 672.567279][ T28] audit: type=1326 audit(2000000588.100:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddd9aeb9 code=0x7ffc0000 [ 672.590459][ T28] audit: type=1326 audit(2000000588.140:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cddd9aeb9 code=0x7ffc0000 [ 672.613532][ T28] audit: type=1326 audit(2000000588.150:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddd9aeb9 code=0x7ffc0000 [ 672.636320][ T28] audit: type=1326 audit(2000000588.150:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12519 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cddd9aeb9 code=0x7ffc0000 [ 686.865773][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.872427][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.099324][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 687.099342][ T28] audit: type=1326 audit(2000000602.720:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 687.171119][ T28] audit: type=1326 audit(2000000602.750:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 687.237416][ T28] audit: type=1326 audit(2000000602.760:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 687.283377][ T28] audit: type=1326 audit(2000000602.800:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 687.337077][ T28] audit: type=1326 audit(2000000602.810:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f16bdb5b78e code=0x7ffc0000 [ 687.397482][ T28] audit: type=1326 audit(2000000602.810:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 687.455581][ T28] audit: type=1326 audit(2000000602.810:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 687.510300][ T28] audit: type=1326 audit(2000000602.810:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 687.836994][ T28] audit: type=1326 audit(2000000602.810:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16bdb3c2d9 code=0x7ffc0000 [ 688.397548][ T28] audit: type=1326 audit(2000000602.820:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bdb9aeb9 code=0x7ffc0000 [ 693.096156][T12733] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 695.203105][T12765] netlink: 4580 bytes leftover after parsing attributes in process `syz.6.1800'. [ 696.476176][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 698.494297][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 698.494318][ T28] audit: type=1326 audit(2000000614.110:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 698.577661][ T28] audit: type=1326 audit(2000000614.140:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 698.640962][ T28] audit: type=1326 audit(2000000614.140:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 698.697274][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1820'. [ 698.716614][ T28] audit: type=1326 audit(2000000614.140:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 698.769769][ T28] audit: type=1326 audit(2000000614.150:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 698.837419][ T28] audit: type=1326 audit(2000000614.150:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 699.075294][ T28] audit: type=1326 audit(2000000614.150:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 699.214247][ T28] audit: type=1326 audit(2000000614.150:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 699.327503][ T28] audit: type=1326 audit(2000000614.150:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 699.405749][ T28] audit: type=1326 audit(2000000614.150:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 700.574955][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 704.890876][T12876] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1841'. [ 704.977571][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 711.222800][T12929] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1858'. [ 728.165749][T13109] netlink: 'syz.5.1907': attribute type 83 has an invalid length. [ 732.584208][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 732.584226][ T28] audit: type=1326 audit(2000000648.200:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13142 comm="syz.3.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cddd9aeb9 code=0x0 [ 737.193397][T13183] mmap: syz.5.1929 (13183) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 744.897166][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 746.623804][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1966'. [ 747.621855][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.628959][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.195078][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1972'. [ 748.620836][T13320] lo: entered allmulticast mode [ 748.630100][T13319] lo: left allmulticast mode [ 748.795720][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1976'. [ 751.524044][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1986'. [ 751.928307][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 755.621101][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 758.226117][T13457] batadv_slave_1: entered promiscuous mode [ 758.268873][T13455] batadv_slave_1: left promiscuous mode [ 758.605816][T13460] syz_tun: entered allmulticast mode [ 758.659399][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 758.916166][T13460] syz_tun (unregistering): left allmulticast mode [ 760.617921][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2029'. [ 761.969113][T13498] syz_tun: entered allmulticast mode [ 761.976742][T13495] syz_tun: left allmulticast mode [ 777.974627][T13687] 9pnet_fd: Insufficient options for proto=fd [ 780.461494][T13707] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 780.735608][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 785.819285][T13703] syz.5.2111: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 785.987918][T13703] CPU: 0 PID: 13703 Comm: syz.5.2111 Not tainted syzkaller #0 [ 785.995476][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 786.005566][T13703] Call Trace: [ 786.008875][T13703] [ 786.011833][T13703] dump_stack_lvl+0x18c/0x250 [ 786.016803][T13703] ? show_regs_print_info+0x20/0x20 [ 786.022044][T13703] ? load_image+0x400/0x400 [ 786.026610][T13703] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 786.033120][T13703] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 786.039660][T13703] warn_alloc+0x246/0x340 [ 786.044060][T13703] ? zone_watermark_ok_safe+0x230/0x230 [ 786.049652][T13703] ? _raw_spin_unlock+0x28/0x40 [ 786.054613][T13703] __vmalloc_node_range+0x662/0x1330 [ 786.059974][T13703] ? free_vm_area+0x50/0x50 [ 786.064519][T13703] ? _raw_spin_unlock+0x28/0x40 [ 786.069410][T13703] ? __kasan_kmalloc+0x8f/0xa0 [ 786.074257][T13703] __vmalloc_node_range+0x568/0x1330 [ 786.079583][T13703] ? hash_netiface_create+0x361/0xfe0 [ 786.085072][T13703] ? __asan_memset+0x22/0x40 [ 786.089729][T13703] ? free_vm_area+0x50/0x50 [ 786.094265][T13703] ? kvmalloc_node+0x70/0x180 [ 786.098974][T13703] ? rcu_is_watching+0x15/0xb0 [ 786.103789][T13703] ? kvmalloc_node+0x70/0x180 [ 786.108499][T13703] ? trace_kmalloc+0x1f/0x90 [ 786.113141][T13703] kvmalloc_node+0x13f/0x180 [ 786.117770][T13703] ? hash_netiface_create+0x361/0xfe0 [ 786.123184][T13703] hash_netiface_create+0x361/0xfe0 [ 786.128417][T13703] ? __lock_acquire+0x7d40/0x7d40 [ 786.133497][T13703] ? __nla_parse+0x40/0x50 [ 786.137999][T13703] ? hash_netport6_gc+0x560/0x560 [ 786.143058][T13703] ip_set_create+0xad3/0x1970 [ 786.147811][T13703] ? ip_set_create+0x4fe/0x1970 [ 786.152708][T13703] ? ip_set_protocol+0x5b0/0x5b0 [ 786.157672][T13703] ? trace_contention_end+0x39/0xe0 [ 786.162947][T13703] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 786.168089][T13703] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.174226][T13703] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 786.179487][T13703] ? nfnetlink_unbind+0x160/0x160 [ 786.184581][T13703] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 786.189884][T13703] ? __netlink_deliver_tap+0x5ab/0x830 [ 786.195425][T13703] ? netlink_deliver_tap+0x19c/0x1b0 [ 786.200752][T13703] ? netlink_unicast+0x72c/0x8d0 [ 786.205813][T13703] ? netlink_sendmsg+0x8d0/0xbf0 [ 786.210784][T13703] ? ____sys_sendmsg+0x5ba/0x960 [ 786.215806][T13703] ? ___sys_sendmsg+0x2a6/0x360 [ 786.220680][T13703] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 786.225730][T13703] ? do_syscall_64+0x55/0xa0 [ 786.230382][T13703] netlink_rcv_skb+0x241/0x4d0 [ 786.235187][T13703] ? nfnetlink_unbind+0x160/0x160 [ 786.240248][T13703] ? netlink_ack+0x1180/0x1180 [ 786.245066][T13703] ? apparmor_capable+0x137/0x1a0 [ 786.250165][T13703] ? bpf_lsm_capable+0x9/0x10 [ 786.254890][T13703] ? security_capable+0x89/0xb0 [ 786.259788][T13703] nfnetlink_rcv+0x2c9/0x24a0 [ 786.264517][T13703] ? __local_bh_enable_ip+0x13a/0x1c0 [ 786.269942][T13703] ? lockdep_hardirqs_on+0x98/0x150 [ 786.275172][T13703] ? __local_bh_enable_ip+0x13a/0x1c0 [ 786.280576][T13703] ? _local_bh_enable+0xa0/0xa0 [ 786.285469][T13703] ? __dev_queue_xmit+0x26b/0x36b0 [ 786.290620][T13703] ? __dev_queue_xmit+0x26b/0x36b0 [ 786.295768][T13703] ? __dev_queue_xmit+0x124f/0x36b0 [ 786.301005][T13703] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 786.306594][T13703] ? __dev_queue_xmit+0x26b/0x36b0 [ 786.311772][T13703] ? ref_tracker_free+0x690/0x840 [ 786.316844][T13703] ? refcount_inc+0x70/0x70 [ 786.321393][T13703] ? __asan_memcpy+0x40/0x70 [ 786.326031][T13703] ? __skb_clone+0x63/0x790 [ 786.330600][T13703] ? __skb_clone+0x480/0x790 [ 786.335243][T13703] ? __netlink_deliver_tap+0x7e8/0x830 [ 786.340777][T13703] ? netlink_deliver_tap+0x2e/0x1b0 [ 786.346033][T13703] ? __lock_acquire+0x7d40/0x7d40 [ 786.351122][T13703] ? netlink_deliver_tap+0x2e/0x1b0 [ 786.356375][T13703] netlink_unicast+0x751/0x8d0 [ 786.361201][T13703] netlink_sendmsg+0x8d0/0xbf0 [ 786.366028][T13703] ? netlink_getsockopt+0x590/0x590 [ 786.371283][T13703] ? aa_sock_msg_perm+0x94/0x150 [ 786.376275][T13703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 786.381611][T13703] ? security_socket_sendmsg+0x80/0xa0 [ 786.387111][T13703] ? netlink_getsockopt+0x590/0x590 [ 786.392392][T13703] ____sys_sendmsg+0x5ba/0x960 [ 786.397218][T13703] ? __asan_memset+0x22/0x40 [ 786.401861][T13703] ? __sys_sendmsg_sock+0x30/0x30 [ 786.406931][T13703] ? __import_iovec+0x5f2/0x850 [ 786.411861][T13703] ? import_iovec+0x73/0xa0 [ 786.416425][T13703] ___sys_sendmsg+0x2a6/0x360 [ 786.421160][T13703] ? __sys_sendmsg+0x2a0/0x2a0 [ 786.425977][T13703] __se_sys_sendmsg+0x1c2/0x2b0 [ 786.430858][T13703] ? __x64_sys_sendmsg+0x80/0x80 [ 786.435855][T13703] ? lockdep_hardirqs_on+0x98/0x150 [ 786.441094][T13703] do_syscall_64+0x55/0xa0 [ 786.445555][T13703] ? clear_bhb_loop+0x40/0x90 [ 786.450270][T13703] ? clear_bhb_loop+0x40/0x90 [ 786.454999][T13703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.460939][T13703] RIP: 0033:0x7f16bdb9aeb9 [ 786.465384][T13703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.485007][T13703] RSP: 002b:00007f16bbdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.493427][T13703] RAX: ffffffffffffffda RBX: 00007f16bde15fa0 RCX: 00007f16bdb9aeb9 [ 786.501419][T13703] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 786.509410][T13703] RBP: 00007f16bdc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 786.517414][T13703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.525408][T13703] R13: 00007f16bde16038 R14: 00007f16bde15fa0 R15: 00007ffc4b653398 [ 786.533392][T13703] [ 786.587533][T13703] Mem-Info: [ 786.590723][T13703] active_anon:9409 inactive_anon:0 isolated_anon:0 [ 786.590723][T13703] active_file:859 inactive_file:56637 isolated_file:0 [ 786.590723][T13703] unevictable:768 dirty:87 writeback:0 [ 786.590723][T13703] slab_reclaimable:11154 slab_unreclaimable:94476 [ 786.590723][T13703] mapped:24165 shmem:4086 pagetables:790 [ 786.590723][T13703] sec_pagetables:0 bounce:0 [ 786.590723][T13703] kernel_misc_reclaimable:0 [ 786.590723][T13703] free:1305606 free_pcp:9868 free_cma:0 [ 786.716480][T13703] Node 0 active_anon:26836kB inactive_anon:0kB active_file:3436kB inactive_file:226348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96660kB dirty:348kB writeback:0kB shmem:4308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12096kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 786.876836][T13703] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 787.250904][T13703] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 788.098562][T13703] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 788.104423][T13703] Node 0 DMA32 free:1264196kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:86620kB inactive_anon:0kB active_file:3436kB inactive_file:225524kB unevictable:1536kB writepending:360kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:22736kB local_pcp:21500kB free_cma:0kB [ 789.527416][T13703] lowmem_reserve[]: 0 0 0 0 0 [ 789.542469][T13703] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 789.727640][T13703] lowmem_reserve[]: 0 0 0 0 0 [ 789.738323][T13703] Node 1 Normal free:3893052kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16768kB local_pcp:8928kB free_cma:0kB [ 789.804116][T13703] lowmem_reserve[]: 0 0 0 0 0 [ 789.821751][T13703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 789.853388][T13703] Node 0 DMA32: 4*4kB (UE) 32*8kB (UME) 334*16kB (UME) 201*32kB (UM) 90*64kB (ME) 87*128kB (UME) 83*256kB (ME) 30*512kB (ME) 20*1024kB (ME) 11*2048kB (UME) 295*4096kB (M) = 1316880kB [ 789.872404][T13703] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 789.884053][T13703] Node 1 Normal: 259*4kB (UME) 58*8kB (UME) 42*16kB (UME) 74*32kB (UME) 34*64kB (UME) 8*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3893052kB [ 789.902132][T13703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 789.913121][T13703] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 789.980369][T13703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 789.990134][T13703] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 790.036553][T13703] 63689 total pagecache pages [ 790.064360][T13703] 0 pages in swap cache [ 790.087077][T13703] Free swap = 124668kB [ 790.106173][T13703] Total swap = 124996kB [ 790.139848][T13703] 2097051 pages RAM [ 790.165295][T13703] 0 pages HighMem/MovableOnly [ 790.399700][T13703] 416922 pages reserved [ 790.428614][T13703] 0 pages cma reserved [ 795.955565][T13703] warn_alloc: 1 callbacks suppressed [ 795.955587][T13703] syz.5.2111: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 796.087488][T13703] CPU: 0 PID: 13703 Comm: syz.5.2111 Not tainted syzkaller #0 [ 796.095028][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 796.096291][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.105102][T13703] Call Trace: [ 796.105148][T13703] [ 796.105159][T13703] dump_stack_lvl+0x18c/0x250 [ 796.105199][T13703] ? show_regs_print_info+0x20/0x20 [ 796.105227][T13703] ? load_image+0x400/0x400 [ 796.105258][T13703] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 796.105286][T13703] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 796.105315][T13703] warn_alloc+0x246/0x340 [ 796.105361][T13703] ? zone_watermark_ok_safe+0x230/0x230 [ 796.105402][T13703] ? _raw_spin_unlock+0x28/0x40 [ 796.105434][T13703] __vmalloc_node_range+0x662/0x1330 [ 796.105493][T13703] ? free_vm_area+0x50/0x50 [ 796.126561][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.128787][T13703] ? _raw_spin_unlock+0x28/0x40 [ 796.128822][T13703] ? __kmem_cache_free+0xba/0x1e0 [ 796.128855][T13703] __vmalloc_node_range+0x568/0x1330 [ 796.128884][T13703] ? hash_netiface_create+0x361/0xfe0 [ 796.128913][T13703] ? __asan_memset+0x22/0x40 [ 796.128966][T13703] ? free_vm_area+0x50/0x50 [ 796.128990][T13703] ? kvmalloc_node+0x70/0x180 [ 796.135221][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.139921][T13703] ? rcu_is_watching+0x15/0xb0 [ 796.139955][T13703] ? kvmalloc_node+0x70/0x180 [ 796.139979][T13703] ? trace_kmalloc+0x1f/0x90 [ 796.140010][T13703] kvmalloc_node+0x13f/0x180 [ 796.140038][T13703] ? hash_netiface_create+0x361/0xfe0 [ 796.149227][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.150884][T13703] hash_netiface_create+0x361/0xfe0 [ 796.158561][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 796.161371][T13703] ? __lock_acquire+0x7d40/0x7d40 [ 796.167170][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.171166][T13703] ? __nla_parse+0x40/0x50 [ 796.171204][T13703] ? hash_netport6_gc+0x560/0x560 [ 796.171233][T13703] ip_set_create+0xad3/0x1970 [ 796.171258][T13703] ? ip_set_create+0x4fe/0x1970 [ 796.171291][T13703] ? ip_set_protocol+0x5b0/0x5b0 [ 796.171309][T13703] ? trace_contention_end+0x39/0xe0 [ 796.171377][T13703] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 796.308895][T13703] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.314990][T13703] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 796.320327][T13703] ? nfnetlink_unbind+0x160/0x160 [ 796.325419][T13703] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 796.330654][T13703] ? __netlink_deliver_tap+0x5ab/0x830 [ 796.336144][T13703] ? netlink_deliver_tap+0x19c/0x1b0 [ 796.341448][T13703] ? netlink_unicast+0x72c/0x8d0 [ 796.346403][T13703] ? netlink_sendmsg+0x8d0/0xbf0 [ 796.351448][T13703] ? ____sys_sendmsg+0x5ba/0x960 [ 796.356488][T13703] ? ___sys_sendmsg+0x2a6/0x360 [ 796.361347][T13703] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 796.366389][T13703] ? do_syscall_64+0x55/0xa0 [ 796.371011][T13703] netlink_rcv_skb+0x241/0x4d0 [ 796.375792][T13703] ? nfnetlink_unbind+0x160/0x160 [ 796.380837][T13703] ? netlink_ack+0x1180/0x1180 [ 796.385624][T13703] ? apparmor_capable+0x137/0x1a0 [ 796.390662][T13703] ? bpf_lsm_capable+0x9/0x10 [ 796.395358][T13703] ? security_capable+0x89/0xb0 [ 796.400231][T13703] nfnetlink_rcv+0x2c9/0x24a0 [ 796.404933][T13703] ? __local_bh_enable_ip+0x13a/0x1c0 [ 796.410320][T13703] ? lockdep_hardirqs_on+0x98/0x150 [ 796.415542][T13703] ? __local_bh_enable_ip+0x13a/0x1c0 [ 796.420928][T13703] ? _local_bh_enable+0xa0/0xa0 [ 796.425795][T13703] ? __dev_queue_xmit+0x26b/0x36b0 [ 796.431098][T13703] ? __dev_queue_xmit+0x26b/0x36b0 [ 796.436231][T13703] ? __dev_queue_xmit+0x124f/0x36b0 [ 796.441442][T13703] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 796.447000][T13703] ? __dev_queue_xmit+0x26b/0x36b0 [ 796.452146][T13703] ? ref_tracker_free+0x690/0x840 [ 796.457184][T13703] ? refcount_inc+0x70/0x70 [ 796.461709][T13703] ? __asan_memcpy+0x40/0x70 [ 796.466321][T13703] ? __skb_clone+0x63/0x790 [ 796.470846][T13703] ? __skb_clone+0x480/0x790 [ 796.475460][T13703] ? __netlink_deliver_tap+0x7e8/0x830 [ 796.480933][T13703] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.486168][T13703] ? __lock_acquire+0x7d40/0x7d40 [ 796.491213][T13703] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.496435][T13703] netlink_unicast+0x751/0x8d0 [ 796.501225][T13703] netlink_sendmsg+0x8d0/0xbf0 [ 796.506017][T13703] ? netlink_getsockopt+0x590/0x590 [ 796.511233][T13703] ? aa_sock_msg_perm+0x94/0x150 [ 796.516187][T13703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 796.521482][T13703] ? security_socket_sendmsg+0x80/0xa0 [ 796.526950][T13703] ? netlink_getsockopt+0x590/0x590 [ 796.532167][T13703] ____sys_sendmsg+0x5ba/0x960 [ 796.536955][T13703] ? __asan_memset+0x22/0x40 [ 796.541561][T13703] ? __sys_sendmsg_sock+0x30/0x30 [ 796.546598][T13703] ? __import_iovec+0x5f2/0x850 [ 796.551474][T13703] ? import_iovec+0x73/0xa0 [ 796.555995][T13703] ___sys_sendmsg+0x2a6/0x360 [ 796.560687][T13703] ? __sys_sendmsg+0x2a0/0x2a0 [ 796.565592][T13703] __se_sys_sendmsg+0x1c2/0x2b0 [ 796.570466][T13703] ? __x64_sys_sendmsg+0x80/0x80 [ 796.575516][T13703] ? lockdep_hardirqs_on+0x98/0x150 [ 796.580729][T13703] do_syscall_64+0x55/0xa0 [ 796.585163][T13703] ? clear_bhb_loop+0x40/0x90 [ 796.589851][T13703] ? clear_bhb_loop+0x40/0x90 [ 796.594548][T13703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.600454][T13703] RIP: 0033:0x7f16bdb9aeb9 [ 796.604881][T13703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.624590][T13703] RSP: 002b:00007f16bbdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.633046][T13703] RAX: ffffffffffffffda RBX: 00007f16bde15fa0 RCX: 00007f16bdb9aeb9 [ 796.641032][T13703] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 796.649014][T13703] RBP: 00007f16bdc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 796.656996][T13703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.664976][T13703] R13: 00007f16bde16038 R14: 00007f16bde15fa0 R15: 00007ffc4b653398 [ 796.672977][T13703] [ 796.834519][T13703] Mem-Info: [ 796.846270][T13703] active_anon:25941 inactive_anon:0 isolated_anon:0 [ 796.846270][T13703] active_file:859 inactive_file:56642 isolated_file:0 [ 796.846270][T13703] unevictable:768 dirty:48 writeback:0 [ 796.846270][T13703] slab_reclaimable:11210 slab_unreclaimable:94902 [ 796.846270][T13703] mapped:35229 shmem:20186 pagetables:844 [ 796.846270][T13703] sec_pagetables:0 bounce:0 [ 796.846270][T13703] kernel_misc_reclaimable:0 [ 796.846270][T13703] free:1280148 free_pcp:7119 free_cma:0 [ 797.654280][T13703] Node 0 active_anon:51964kB inactive_anon:0kB active_file:3436kB inactive_file:226368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160716kB dirty:192kB writeback:0kB shmem:27108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12448kB pagetables:3476kB sec_pagetables:0kB all_unreclaimable? no [ 797.978503][T13703] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 798.058169][T13703] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 798.086408][T13703] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 798.093641][T13703] Node 0 DMA32 free:1268420kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:40152kB inactive_anon:0kB active_file:3436kB inactive_file:225544kB unevictable:1536kB writepending:188kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:19796kB local_pcp:17796kB free_cma:0kB [ 798.124370][T13703] lowmem_reserve[]: 0 0 0 0 0 [ 798.129235][T13703] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 798.156089][T13703] lowmem_reserve[]: 0 0 0 0 0 [ 798.161070][T13703] Node 1 Normal free:3893052kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16768kB local_pcp:7840kB free_cma:0kB [ 798.191112][T13703] lowmem_reserve[]: 0 0 0 0 0 [ 798.195909][T13703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 798.208851][T13703] Node 0 DMA32: 7*4kB (ME) 33*8kB (UME) 96*16kB (UME) 365*32kB (UME) 172*64kB (UME) 90*128kB (UME) 82*256kB (ME) 20*512kB (UME) 21*1024kB (UME) 10*2048kB (ME) 283*4096kB (M) = 1268420kB [ 798.233588][T13703] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 798.245302][T13703] Node 1 Normal: 259*4kB (UME) 58*8kB (UME) 42*16kB (UME) 74*32kB (UME) 34*64kB (UME) 8*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3893052kB [ 798.263372][T13703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.263383][ T5783] Bluetooth: hci4: command tx timeout [ 798.278396][T13703] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 798.303284][T13703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.319456][T13703] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 798.357192][T13703] 61792 total pagecache pages [ 798.379885][T13703] 0 pages in swap cache [ 798.384100][T13703] Free swap = 124668kB [ 798.415080][T13824] chnl_net:caif_netlink_parms(): no params data found [ 798.427628][T13703] Total swap = 124996kB [ 798.431840][T13703] 2097051 pages RAM [ 798.446657][T13703] 0 pages HighMem/MovableOnly [ 798.476339][T13703] 416922 pages reserved [ 798.486622][T13703] 0 pages cma reserved [ 798.691600][T13824] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.719724][T13824] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.742231][T13824] bridge_slave_0: entered allmulticast mode [ 798.775953][T13824] bridge_slave_0: entered promiscuous mode [ 798.799166][T13824] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.806509][T13824] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.814845][T13824] bridge_slave_1: entered allmulticast mode [ 798.822959][T13824] bridge_slave_1: entered promiscuous mode [ 798.887596][T13824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.902925][T13824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.016724][T13824] team0: Port device team_slave_0 added [ 799.055789][T13824] team0: Port device team_slave_1 added [ 799.123855][T13824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.134482][T13824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.167098][T13824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.187063][T13824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.204776][T13824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.257371][T13824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.373957][T13824] hsr_slave_0: entered promiscuous mode [ 799.391338][T13824] hsr_slave_1: entered promiscuous mode [ 800.219896][T13824] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 800.267909][T13824] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 800.296716][T13824] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 800.327992][ T5783] Bluetooth: hci4: command tx timeout [ 800.362369][T13824] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 800.628639][T13824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.712935][T13824] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.746605][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.753838][ T7223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.838821][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.846129][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.036370][ T7239] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.240089][ T7239] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.390025][ T7239] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.521956][ T7239] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.403966][T13824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.411714][ T5783] Bluetooth: hci4: command tx timeout [ 803.576893][T13824] veth0_vlan: entered promiscuous mode [ 804.289242][T13824] veth1_vlan: entered promiscuous mode [ 804.488054][ T5783] Bluetooth: hci4: command tx timeout [ 804.659164][ T7239] hsr_slave_0: left promiscuous mode [ 804.665494][ T7239] hsr_slave_1: left promiscuous mode [ 804.694039][ T7239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.719709][ T7239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.743150][ T7239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.762582][ T7239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.824351][ T7239] bridge_slave_1: left allmulticast mode [ 804.851736][ T7239] bridge_slave_1: left promiscuous mode [ 804.860067][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.954360][ T7239] bridge_slave_0: left allmulticast mode [ 804.967416][ T7239] bridge_slave_0: left promiscuous mode [ 804.973256][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.165594][ T7239] veth1_macvtap: left promiscuous mode [ 805.171331][ T7239] veth0_macvtap: left promiscuous mode [ 805.177026][ T7239] veth1_vlan: left promiscuous mode [ 805.204980][ T7239] veth0_vlan: left promiscuous mode [ 806.304924][T13849] warn_alloc: 3 callbacks suppressed [ 806.304946][T13849] syz.3.2153: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 806.361355][T13849] CPU: 0 PID: 13849 Comm: syz.3.2153 Not tainted syzkaller #0 [ 806.368891][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 806.378982][T13849] Call Trace: [ 806.382300][T13849] [ 806.385261][T13849] dump_stack_lvl+0x18c/0x250 [ 806.390004][T13849] ? show_regs_print_info+0x20/0x20 [ 806.395255][T13849] ? load_image+0x400/0x400 [ 806.399805][T13849] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 806.406252][T13849] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 806.412777][T13849] warn_alloc+0x246/0x340 [ 806.417133][T13849] ? zone_watermark_ok_safe+0x230/0x230 [ 806.422704][T13849] ? _raw_spin_unlock+0x28/0x40 [ 806.427582][T13849] __vmalloc_node_range+0x662/0x1330 [ 806.432906][T13849] ? free_vm_area+0x50/0x50 [ 806.437429][T13849] ? _raw_spin_unlock+0x28/0x40 [ 806.442299][T13849] ? __kmem_cache_free+0xba/0x1e0 [ 806.447352][T13849] __vmalloc_node_range+0x568/0x1330 [ 806.452653][T13849] ? hash_netiface_create+0x361/0xfe0 [ 806.458043][T13849] ? __asan_memset+0x22/0x40 [ 806.462669][T13849] ? free_vm_area+0x50/0x50 [ 806.467187][T13849] ? kvmalloc_node+0x70/0x180 [ 806.471876][T13849] ? rcu_is_watching+0x15/0xb0 [ 806.476655][T13849] ? kvmalloc_node+0x70/0x180 [ 806.481344][T13849] ? trace_kmalloc+0x1f/0x90 [ 806.485951][T13849] kvmalloc_node+0x13f/0x180 [ 806.490558][T13849] ? hash_netiface_create+0x361/0xfe0 [ 806.495955][T13849] hash_netiface_create+0x361/0xfe0 [ 806.501168][T13849] ? __lock_acquire+0x7d40/0x7d40 [ 806.506211][T13849] ? __nla_parse+0x40/0x50 [ 806.510652][T13849] ? hash_netport6_gc+0x560/0x560 [ 806.515690][T13849] ip_set_create+0xad3/0x1970 [ 806.520378][T13849] ? ip_set_create+0x4fe/0x1970 [ 806.525247][T13849] ? ip_set_protocol+0x5b0/0x5b0 [ 806.530232][T13849] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 806.535269][T13849] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.541355][T13849] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 806.546587][T13849] ? nfnetlink_unbind+0x160/0x160 [ 806.551650][T13849] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 806.556861][T13849] ? __netlink_deliver_tap+0x5ab/0x830 [ 806.562336][T13849] ? netlink_deliver_tap+0x19c/0x1b0 [ 806.567634][T13849] ? netlink_unicast+0x72c/0x8d0 [ 806.572586][T13849] ? netlink_sendmsg+0x8d0/0xbf0 [ 806.577566][T13849] ? ____sys_sendmsg+0x5ba/0x960 [ 806.582517][T13849] ? ___sys_sendmsg+0x2a6/0x360 [ 806.587377][T13849] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 806.592407][T13849] ? do_syscall_64+0x55/0xa0 [ 806.597026][T13849] netlink_rcv_skb+0x241/0x4d0 [ 806.601806][T13849] ? nfnetlink_unbind+0x160/0x160 [ 806.606854][T13849] ? netlink_ack+0x1180/0x1180 [ 806.611654][T13849] ? apparmor_capable+0x137/0x1a0 [ 806.616690][T13849] ? bpf_lsm_capable+0x9/0x10 [ 806.621401][T13849] ? security_capable+0x89/0xb0 [ 806.626274][T13849] nfnetlink_rcv+0x2c9/0x24a0 [ 806.630983][T13849] ? __local_bh_enable_ip+0x13a/0x1c0 [ 806.636367][T13849] ? lockdep_hardirqs_on+0x98/0x150 [ 806.641759][T13849] ? __local_bh_enable_ip+0x13a/0x1c0 [ 806.647145][T13849] ? _local_bh_enable+0xa0/0xa0 [ 806.652101][T13849] ? __dev_queue_xmit+0x26b/0x36b0 [ 806.657279][T13849] ? __dev_queue_xmit+0x26b/0x36b0 [ 806.662431][T13849] ? __dev_queue_xmit+0x124f/0x36b0 [ 806.667648][T13849] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 806.673212][T13849] ? __dev_queue_xmit+0x26b/0x36b0 [ 806.678444][T13849] ? ref_tracker_free+0x690/0x840 [ 806.683482][T13849] ? refcount_inc+0x70/0x70 [ 806.687993][T13849] ? __asan_memcpy+0x40/0x70 [ 806.692605][T13849] ? __skb_clone+0x63/0x790 [ 806.697120][T13849] ? __skb_clone+0x480/0x790 [ 806.701733][T13849] ? __netlink_deliver_tap+0x7e8/0x830 [ 806.707207][T13849] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.712425][T13849] ? __lock_acquire+0x7d40/0x7d40 [ 806.717469][T13849] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.722687][T13849] netlink_unicast+0x751/0x8d0 [ 806.727476][T13849] netlink_sendmsg+0x8d0/0xbf0 [ 806.732266][T13849] ? netlink_getsockopt+0x590/0x590 [ 806.737505][T13849] ? aa_sock_msg_perm+0x94/0x150 [ 806.742486][T13849] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 806.747790][T13849] ? security_socket_sendmsg+0x80/0xa0 [ 806.753305][T13849] ? netlink_getsockopt+0x590/0x590 [ 806.758519][T13849] ____sys_sendmsg+0x5ba/0x960 [ 806.763315][T13849] ? __asan_memset+0x22/0x40 [ 806.767929][T13849] ? __sys_sendmsg_sock+0x30/0x30 [ 806.772970][T13849] ? __import_iovec+0x5f2/0x850 [ 806.777940][T13849] ? import_iovec+0x73/0xa0 [ 806.782468][T13849] ___sys_sendmsg+0x2a6/0x360 [ 806.787160][T13849] ? __sys_sendmsg+0x2a0/0x2a0 [ 806.791976][T13849] __se_sys_sendmsg+0x1c2/0x2b0 [ 806.796842][T13849] ? __x64_sys_sendmsg+0x80/0x80 [ 806.801803][T13849] ? lockdep_hardirqs_on+0x98/0x150 [ 806.807015][T13849] do_syscall_64+0x55/0xa0 [ 806.811448][T13849] ? clear_bhb_loop+0x40/0x90 [ 806.816137][T13849] ? clear_bhb_loop+0x40/0x90 [ 806.820829][T13849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.826737][T13849] RIP: 0033:0x7f9cddd9aeb9 [ 806.831171][T13849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.850808][T13849] RSP: 002b:00007f9cdbff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.859248][T13849] RAX: ffffffffffffffda RBX: 00007f9cde015fa0 RCX: 00007f9cddd9aeb9 [ 806.867229][T13849] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 806.875245][T13849] RBP: 00007f9cdde08c1f R08: 0000000000000000 R09: 0000000000000000 [ 806.883224][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.891208][T13849] R13: 00007f9cde016038 R14: 00007f9cde015fa0 R15: 00007fff2f2da688 [ 806.899207][T13849] [ 806.967443][T13849] Mem-Info: [ 806.977397][T13849] active_anon:11945 inactive_anon:0 isolated_anon:0 [ 806.977397][T13849] active_file:859 inactive_file:56637 isolated_file:0 [ 806.977397][T13849] unevictable:768 dirty:74 writeback:0 [ 806.977397][T13849] slab_reclaimable:11182 slab_unreclaimable:95863 [ 806.977397][T13849] mapped:28055 shmem:4308 pagetables:814 [ 806.977397][T13849] sec_pagetables:0 bounce:0 [ 806.977397][T13849] kernel_misc_reclaimable:0 [ 806.977397][T13849] free:1302720 free_pcp:9088 free_cma:0 [ 807.072194][T13849] Node 0 active_anon:47680kB inactive_anon:0kB active_file:3436kB inactive_file:226348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112220kB dirty:296kB writeback:0kB shmem:15696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12500kB pagetables:3156kB sec_pagetables:0kB all_unreclaimable? no [ 807.128890][T13849] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 807.213075][T13849] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 807.251339][T13849] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 807.259799][T13849] Node 0 DMA32 free:1300420kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:42576kB inactive_anon:0kB active_file:3436kB inactive_file:225524kB unevictable:1536kB writepending:292kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:25564kB local_pcp:13964kB free_cma:0kB [ 807.292495][T13849] lowmem_reserve[]: 0 0 0 0 0 [ 807.297485][T13849] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 807.324487][T13849] lowmem_reserve[]: 0 0 0 0 0 [ 807.348267][T13849] Node 1 Normal free:3893052kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16768kB local_pcp:8928kB free_cma:0kB [ 807.388564][T13849] lowmem_reserve[]: 0 0 0 0 0 [ 807.394183][T13849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 807.411590][T13849] Node 0 DMA32: 3*4kB (E) 31*8kB (UE) 4*16kB (ME) 246*32kB (ME) 171*64kB (ME) 90*128kB (UME) 134*256kB (UME) 61*512kB (UME) 26*1024kB (UME) 11*2048kB (UME) 282*4096kB (M) = 1300420kB [ 807.449738][T13849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 807.462737][T13849] Node 1 Normal: 259*4kB (UME) 58*8kB (UME) 42*16kB (UME) 74*32kB (UME) 34*64kB (UME) 8*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3893052kB [ 807.481238][T13849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 807.491456][T13849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 807.505188][T13849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 807.515293][T13849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 807.544217][T13849] 58937 total pagecache pages [ 807.574377][T13849] 0 pages in swap cache [ 807.579060][T13849] Free swap = 124668kB [ 807.583270][T13849] Total swap = 124996kB [ 807.616251][T13849] 2097051 pages RAM [ 807.633940][T13849] 0 pages HighMem/MovableOnly [ 807.643126][T13849] 416922 pages reserved [ 807.649782][T13849] 0 pages cma reserved [ 807.986715][ T7239] team0 (unregistering): Port device team_slave_1 removed [ 808.142320][ T7239] team0 (unregistering): Port device team_slave_0 removed [ 808.766356][ T7239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.892499][ T7239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.053727][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.061944][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.559528][ T7239] bond0 (unregistering): Released all slaves [ 809.786715][T13824] veth0_macvtap: entered promiscuous mode [ 809.871019][T13824] veth1_macvtap: entered promiscuous mode [ 809.952867][T13824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.976447][T13824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.005690][T13824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.047538][T13824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.061113][T13824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.078848][T13824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.097423][T13824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.135135][T13824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.168357][T13824] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.193357][T13824] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.218708][T13824] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.235462][T13824] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.504964][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.544898][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.572320][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.614786][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.891607][T14006] loop7: detected capacity change from 0 to 1024 [ 810.909039][T14006] EXT4-fs: Ignoring removed orlov option [ 810.914824][T14006] EXT4-fs: Ignoring removed bh option [ 810.988947][T14006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.071255][T14035] netlink: 4620 bytes leftover after parsing attributes in process `syz.4.2194'. [ 812.816983][T13824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.951911][T14053] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2199'. [ 814.337380][ T28] audit: type=1326 audit(2000000729.940:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.417433][ T28] audit: type=1326 audit(2000000729.950:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.476729][ T28] audit: type=1326 audit(2000000729.950:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.515574][ T28] audit: type=1326 audit(2000000729.940:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.544283][ T28] audit: type=1326 audit(2000000729.960:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.612326][ T28] audit: type=1326 audit(2000000729.960:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.684096][ T28] audit: type=1326 audit(2000000729.960:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.758865][ T28] audit: type=1326 audit(2000000729.960:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 814.846306][ T28] audit: type=1326 audit(2000000729.960:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.7.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa74d9aeb9 code=0x7ffc0000 [ 815.097710][T14097] x_tables: unsorted entry at hook 2 [ 816.623988][T14128] loop7: detected capacity change from 0 to 512 [ 816.731180][T14128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.835579][T14128] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.016054][T13824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.040851][ T28] audit: type=1326 audit(2000000732.650:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.6.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d339aeb9 code=0x7ffc0000 [ 817.594704][T14156] loop7: detected capacity change from 0 to 512 [ 817.780679][T14156] EXT4-fs error (device loop7): ext4_orphan_get:1398: inode #15: comm syz.7.2227: inode has both inline data and extents flags [ 817.863535][T14156] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.2227: couldn't read orphan inode 15 (err -117) [ 817.959918][T14156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.188534][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 819.179642][T13824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.337997][T14189] 9pnet_fd: Insufficient options for proto=fd [ 820.759680][T14211] lo: entered allmulticast mode [ 820.834333][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 820.935762][T14218] loop7: detected capacity change from 0 to 128 [ 821.190289][T14218] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.274881][T14218] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 821.327512][T14210] lo: left allmulticast mode [ 821.670667][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2243'. [ 821.877213][T14237] EXT4-fs (loop7): shut down requested (2) [ 823.538215][T14237] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 823.618886][T14237] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 823.660674][T14237] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 823.712174][T14237] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 823.765825][T14237] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 824.113773][T13824] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 825.046573][T14264] lo: entered allmulticast mode [ 825.128976][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 825.665673][T14263] lo: left allmulticast mode [ 828.871818][T14313] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2266'. [ 829.358641][T14320] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2268'. [ 829.605948][T14327] loop7: detected capacity change from 0 to 128 [ 829.698474][T14327] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 829.753846][T14327] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 830.055090][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2269'. [ 830.186312][T14339] EXT4-fs (loop7): shut down requested (2) [ 830.220067][T14333] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 830.298321][T14333] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 830.313834][T14333] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 830.347494][T14333] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 830.373980][T14333] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 830.589324][T13824] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 830.619748][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 831.620413][T14361] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2275'. [ 831.927156][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 831.927174][ T28] audit: type=1326 audit(2000000747.540:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14368 comm="syz.4.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 832.002999][ T28] audit: type=1326 audit(2000000747.580:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14368 comm="syz.4.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 832.098629][ T28] audit: type=1326 audit(2000000747.590:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14368 comm="syz.4.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 832.121517][ T28] audit: type=1326 audit(2000000747.590:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14368 comm="syz.4.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 832.174844][ T28] audit: type=1326 audit(2000000747.590:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14368 comm="syz.4.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 832.285047][ T28] audit: type=1326 audit(2000000747.590:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14368 comm="syz.4.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84179aeb9 code=0x7ffc0000 [ 832.590294][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 833.952011][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 834.213948][T14427] loop7: detected capacity change from 0 to 128 [ 834.336805][T14427] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 834.375500][T14427] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 834.595191][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2297'. [ 834.712198][T14434] EXT4-fs (loop7): shut down requested (2) [ 834.764460][T14434] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 834.803821][T14434] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 834.821716][T14434] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 834.835098][T14434] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 834.846266][T14434] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 835.533820][T13824] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 835.721877][T14448] loop7: detected capacity change from 0 to 128 [ 835.879143][T14448] syz.7.2302: attempt to access beyond end of device [ 835.879143][T14448] loop7: rw=2049, sector=145, nr_sectors = 93 limit=128 [ 836.763721][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 838.334678][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 839.228969][T14536] pim6reg1: entered promiscuous mode [ 839.272983][T14536] pim6reg1: entered allmulticast mode [ 843.849219][T14599] netlink: 4580 bytes leftover after parsing attributes in process `syz.7.2348'. [ 846.133727][T14631] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.2359'. [ 849.036006][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 850.123383][T10275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 850.139967][T10275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 850.150787][T10275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 850.174094][T10275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 850.184616][T10275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 850.193099][T10275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.759415][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2382'. [ 851.896176][T14692] chnl_net:caif_netlink_parms(): no params data found [ 852.156945][T14692] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.169442][T14692] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.183305][T14692] bridge_slave_0: entered allmulticast mode [ 852.195869][T14692] bridge_slave_0: entered promiscuous mode [ 852.226437][T14692] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.241284][T14692] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.248056][T10275] Bluetooth: hci1: command tx timeout [ 852.272338][T14692] bridge_slave_1: entered allmulticast mode [ 852.290902][T14692] bridge_slave_1: entered promiscuous mode [ 852.495729][T14692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.552087][T14692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.707987][T14692] team0: Port device team_slave_0 added [ 852.739085][T14692] team0: Port device team_slave_1 added [ 852.821102][T14692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.840681][T14692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.904997][T14692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.087742][T14692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.217709][T14692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.856063][T14692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.923754][T14767] loop7: detected capacity change from 0 to 128 [ 853.984805][T14692] hsr_slave_0: entered promiscuous mode [ 853.997701][T14692] hsr_slave_1: entered promiscuous mode [ 854.013736][T14767] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 854.035121][T14692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 854.043119][T14692] Cannot create hsr debugfs directory [ 854.147765][T14767] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 854.337417][T10275] Bluetooth: hci1: command tx timeout [ 854.522406][T14692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.580182][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2392'. [ 854.595201][T14788] EXT4-fs (loop7): shut down requested (2) [ 854.613379][T14785] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 854.664206][T14785] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 854.704425][T14785] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 854.721967][T14692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.741030][T14788] fscrypt (loop7, inode 13): Error -5 getting encryption context [ 854.760614][T14788] EXT4-fs warning (device loop7): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 854.950717][T14692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.000667][T13824] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.175432][T14692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.554092][T14692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 855.578915][T14692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 855.602398][T14692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 855.631948][T14692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 855.893765][T14692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.962959][T14692] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.030494][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.037795][ T7239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.064770][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.072068][ T7239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.439313][T10275] Bluetooth: hci1: command tx timeout [ 857.054104][T14692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.577528][T10275] Bluetooth: hci1: command tx timeout [ 858.765584][T14692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.161838][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2404'. [ 859.205115][T14692] veth0_vlan: entered promiscuous mode [ 860.110493][T14692] veth1_vlan: entered promiscuous mode [ 860.265975][T14692] veth0_macvtap: entered promiscuous mode [ 860.299095][T14692] veth1_macvtap: entered promiscuous mode [ 860.360974][T14692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.375979][T14870] loop7: detected capacity change from 0 to 16 [ 860.401973][T14870] erofs: (device loop7): mounted with root inode @ nid 36. [ 860.407527][T14692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.442051][T14692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.471428][T14692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.635360][T14692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.912472][T14692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.105149][T14692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.335790][T14692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.393532][T14692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.456139][T14692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.466970][T14692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.478870][T14692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.644222][T14692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.707354][T14692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.730145][T14692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.750698][T14692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.023844][ T7239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.070031][ T7239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.225540][ T7239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.266094][ T7239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.726515][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 867.034483][T14929] loop3: detected capacity change from 0 to 512 [ 867.069263][T14929] EXT4-fs: Ignoring removed mblk_io_submit option [ 867.109883][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.121886][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.180383][T14929] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 867.280563][T14929] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2423: attempt to clear invalid blocks 2 len 1 [ 867.300018][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.309166][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.317332][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 867.325284][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 867.390687][T14929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 867.411861][T14929] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2423: invalid indirect mapped block 1819239214 (level 0) [ 867.426892][T14929] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2423: invalid indirect mapped block 1819239214 (level 1) [ 867.617605][T14929] EXT4-fs (loop3): 1 truncate cleaned up [ 867.831950][T14929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.626380][ T7203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.942904][ T7203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.117903][ T7203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.364129][ T7203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.396327][T14692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.448023][ T5783] Bluetooth: hci2: command tx timeout [ 869.961146][T14930] chnl_net:caif_netlink_parms(): no params data found [ 870.096078][T14952] loop3: detected capacity change from 0 to 4096 [ 870.495294][T14952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 870.510094][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.516450][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.789021][T14692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.817178][T14930] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.847446][T14930] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.854814][T14930] bridge_slave_0: entered allmulticast mode [ 870.926958][T14930] bridge_slave_0: entered promiscuous mode [ 870.974514][T14930] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.998834][T14930] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.046789][T14930] bridge_slave_1: entered allmulticast mode [ 871.079182][T14930] bridge_slave_1: entered promiscuous mode [ 871.233109][T14930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.473966][T14930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.532084][ T5783] Bluetooth: hci2: command tx timeout [ 871.936587][T14930] team0: Port device team_slave_0 added [ 872.221962][T14930] team0: Port device team_slave_1 added [ 872.987687][T14984] loop3: detected capacity change from 0 to 512 [ 873.016809][T14930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.051847][T14930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.082047][T14984] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.2431: inode has both inline data and extents flags [ 873.157062][T14984] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2431: couldn't read orphan inode 15 (err -117) [ 873.201239][T14930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.216274][T14984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.476241][T14930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.520661][T14930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.595108][T14930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.619413][ T5783] Bluetooth: hci2: command tx timeout [ 874.118603][T14930] hsr_slave_0: entered promiscuous mode [ 874.136627][T14930] hsr_slave_1: entered promiscuous mode [ 874.158423][T14930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.170392][T14930] Cannot create hsr debugfs directory [ 874.390864][T14989] loop7: detected capacity change from 0 to 40427 [ 874.448345][T14989] F2FS-fs (loop7): invalid crc value [ 874.477700][T14989] F2FS-fs (loop7): Found nat_bits in checkpoint [ 874.623360][T14989] F2FS-fs (loop7): Start checkpoint disabled! [ 874.673561][T14989] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 875.163650][ T59] kworker/u4:4: attempt to access beyond end of device [ 875.163650][ T59] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 875.242261][ T59] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 875.255197][ T59] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 875.266328][ T7203] hsr_slave_0: left promiscuous mode [ 875.268593][ T59] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 875.286315][ T7203] hsr_slave_1: left promiscuous mode [ 875.321600][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.353856][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.381114][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.395114][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.444122][ T7203] bridge_slave_1: left allmulticast mode [ 875.457950][ T7203] bridge_slave_1: left promiscuous mode [ 875.463790][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.568507][ T7203] bridge_slave_0: left allmulticast mode [ 875.570095][T14692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.574379][ T7203] bridge_slave_0: left promiscuous mode [ 875.667833][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.687474][ T5783] Bluetooth: hci2: command tx timeout [ 876.522724][ T7203] veth1_macvtap: left promiscuous mode [ 876.899120][ T7203] veth0_macvtap: left promiscuous mode [ 876.981514][ T7203] veth1_vlan: left promiscuous mode [ 876.997196][ T7203] veth0_vlan: left promiscuous mode [ 880.884287][ T7203] team0 (unregistering): Port device team_slave_1 removed [ 880.941463][ T7203] team0 (unregistering): Port device team_slave_0 removed [ 881.005142][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.053559][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.813463][T15057] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 882.864534][ T7203] bond0 (unregistering): Released all slaves [ 883.084645][T15022] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2436'. [ 883.094694][T15022] gretap0: entered promiscuous mode [ 883.105020][T15023] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2436'. [ 883.114643][T15023] 0ªX¹¦Dö»: renamed from gretap0 [ 883.175927][T15023] 0ªX¹¦Dö»: left promiscuous mode [ 883.181511][T15023] 0ªX¹¦Dö»: entered allmulticast mode [ 885.150277][T15084] loop3: detected capacity change from 0 to 512 [ 885.513144][T15084] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.2449: inode has both inline data and extents flags [ 885.880708][T15084] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2449: couldn't read orphan inode 15 (err -117) [ 885.959153][T15084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.826728][T14692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.033177][T14930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 888.184045][T14930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 888.258464][T14930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 888.348786][T14930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 888.826192][T14930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.906141][T14930] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.935234][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.942479][ T7239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.010810][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.018084][ T7239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.226446][T14930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 890.812489][T15156] loop3: detected capacity change from 0 to 16 [ 891.114747][T15156] erofs: (device loop3): mounted with root inode @ nid 36. [ 891.920275][T14930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.692964][T15175] loop7: detected capacity change from 0 to 512 [ 892.732860][ T786] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 892.887583][T15175] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.076435][T15175] EXT4-fs: journaled quota format not specified [ 893.214293][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 893.267630][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.517172][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 893.533575][ T786] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 893.544095][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.575816][ T786] usb 4-1: config 0 descriptor?? [ 893.619198][ T786] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 894.403248][ T786] usb 4-1: USB disconnect, device number 10 [ 894.694377][T14930] veth0_vlan: entered promiscuous mode [ 894.773879][T14930] veth1_vlan: entered promiscuous mode [ 894.920220][T14930] veth0_macvtap: entered promiscuous mode [ 894.945289][T14930] veth1_macvtap: entered promiscuous mode [ 895.370263][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.472657][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.540680][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.611760][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.633461][T14930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.663170][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.676126][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.693040][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.752927][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.789268][T14930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.840271][T14930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.863038][T14930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.915497][T14930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.045358][T14930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.121104][T14930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.283208][T14930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.040253][ T7223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.099116][ T7223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.321521][ T7239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.379676][ T7239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.702275][T15228] loop3: detected capacity change from 0 to 512 [ 897.797478][T15228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 897.897741][T15228] EXT4-fs (loop3): 1 truncate cleaned up [ 897.908554][T15228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.232901][T15239] loop7: detected capacity change from 0 to 512 [ 898.306738][T15239] EXT4-fs error (device loop7): ext4_orphan_get:1398: inode #15: comm syz.7.2478: inode has both inline data and extents flags [ 898.340688][T15243] loop4: detected capacity change from 0 to 256 [ 898.350470][T15243] exfat: Deprecated parameter 'namecase' [ 898.398359][T15239] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.2478: couldn't read orphan inode 15 (err -117) [ 898.406083][T15243] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 898.464578][T15239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.895338][T13824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.908655][T14692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.002299][T10275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 900.108019][T10275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 900.119824][T10275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 900.129216][T10275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 900.137346][T10275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 900.144814][T10275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 901.330103][T15278] loop4: detected capacity change from 0 to 256 [ 901.377104][T15277] loop3: detected capacity change from 0 to 1024 [ 901.389008][T15278] exfat: Deprecated parameter 'utf8' [ 901.461835][T15277] EXT4-fs: Ignoring removed orlov option [ 901.469174][T15278] exfat: Deprecated parameter 'utf8' [ 901.514540][T15277] EXT4-fs: Ignoring removed bh option [ 901.593578][T15278] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 901.680954][T15277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.177481][ T5783] Bluetooth: hci0: command tx timeout [ 902.488054][ T5783] Bluetooth: hci5: command 0x1003 tx timeout [ 902.495276][T10275] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 902.536172][T15260] chnl_net:caif_netlink_parms(): no params data found [ 902.545126][T14692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.727821][T15300] syz_tun: entered allmulticast mode [ 902.736077][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 902.916441][T15300] syz_tun (unregistering): left allmulticast mode [ 902.947999][T15308] loop7: detected capacity change from 0 to 512 [ 902.997383][T15308] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 903.044381][T15308] EXT4-fs (loop7): 1 truncate cleaned up [ 903.084563][T15308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.148820][T15260] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.156319][T15260] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.194823][T15260] bridge_slave_0: entered allmulticast mode [ 903.225934][T15260] bridge_slave_0: entered promiscuous mode [ 903.258855][T15260] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.334025][T15260] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.360345][T15260] bridge_slave_1: entered allmulticast mode [ 903.380684][T15260] bridge_slave_1: entered promiscuous mode [ 903.465883][T15260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.498104][T15260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.638252][T15260] team0: Port device team_slave_0 added [ 903.668635][T15260] team0: Port device team_slave_1 added [ 903.734815][T15260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.775247][T15260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.857311][T15260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.256357][T10275] Bluetooth: hci0: command tx timeout [ 904.313857][T13824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.370908][T15260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.387380][T15260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.475102][T15260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.970552][T15260] hsr_slave_0: entered promiscuous mode [ 906.023598][T15260] hsr_slave_1: entered promiscuous mode [ 906.059930][T15260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.087825][T15260] Cannot create hsr debugfs directory [ 906.147897][T13105] tipc: Subscription rejected, illegal request [ 906.291040][T15357] loop3: detected capacity change from 0 to 512 [ 906.327601][T10275] Bluetooth: hci0: command tx timeout [ 906.348362][T15357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 906.453176][T15357] EXT4-fs (loop3): 1 truncate cleaned up [ 906.473579][T15357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.095906][T15370] loop4: detected capacity change from 0 to 1024 [ 907.140999][T15370] EXT4-fs: Ignoring removed orlov option [ 907.182032][T15370] EXT4-fs: Ignoring removed bh option [ 907.276346][T15370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.584892][T14692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.412490][T10275] Bluetooth: hci0: command tx timeout [ 908.484915][T15381] raw_sendmsg: syz.3.2505 forgot to set AF_INET. Fix it! [ 908.607120][T14930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.966157][T15260] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 909.002342][T15260] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 909.029950][T15260] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 909.073391][T15260] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 909.396795][T15260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.471681][T15260] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.496697][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.503955][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.552907][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.560154][ T7228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.916695][T15260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.062685][T15398] loop3: detected capacity change from 0 to 40427 [ 910.071989][T15398] F2FS-fs (loop3): build fault injection attr: rate: 174, type: 0x7ffff [ 910.321849][T15414] loop4: detected capacity change from 0 to 512 [ 910.363897][T15414] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 913.115747][T15414] EXT4-fs (loop4): 1 truncate cleaned up [ 913.164153][T15414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.309319][T15423] loop7: detected capacity change from 0 to 1024 [ 913.538571][T15423] EXT4-fs: Ignoring removed orlov option [ 913.544396][T15423] EXT4-fs: Ignoring removed bh option [ 913.679768][T15423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.782679][T15260] veth0_vlan: entered promiscuous mode [ 914.911356][T15260] veth1_vlan: entered promiscuous mode [ 915.041236][T13824] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.041767][T15260] veth0_macvtap: entered promiscuous mode [ 915.066179][T14930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.082272][T15260] veth1_macvtap: entered promiscuous mode [ 915.170991][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.199279][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.245210][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.278050][T15438] loop4: detected capacity change from 0 to 512 [ 915.281529][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.292296][T15440] loop7: detected capacity change from 0 to 256 [ 915.311148][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.312781][T15440] exfat: Deprecated parameter 'namecase' [ 915.335646][T15441] loop3: detected capacity change from 0 to 512 [ 915.349393][T15438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.363398][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.375600][T15440] exfat: Deprecated parameter 'namecase' [ 915.383175][T15438] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 915.392653][T15441] EXT4-fs (loop3): invalid first ino: 8 [ 915.416725][T15260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.431139][T15438] EXT4-fs (loop4): shut down requested (0) [ 915.452377][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.464565][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.474708][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.476036][T15440] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 915.485313][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.485338][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.524685][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.535024][T15260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.566233][T15260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.623717][T15260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.665462][T15260] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.707593][T15260] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.716369][T15260] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.746537][T15260] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.750742][T15446] loop6: detected capacity change from 0 to 8 [ 915.792211][T14930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.831717][ T1143] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 915.845675][T15446] Dev loop6: unable to read RDB block 8 [ 915.867619][ T1143] Quota error (device loop4): write_blk: dquota write failed [ 915.888107][ T1143] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 915.909301][ T1143] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 915.923881][ T1143] Quota error (device loop4): write_blk: dquota write failed [ 915.933378][ T1143] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 915.944117][ T1143] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 915.956002][T15446] loop6: unable to read partition table [ 915.968164][ T7239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.976036][ T7239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.985196][T15446] loop6: partition table beyond EOD, truncated [ 915.996797][ T1143] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 916.007430][T15446] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 916.126173][T13105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.137377][T13105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.385032][ T7779] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 917.431204][T15457] loop3: detected capacity change from 0 to 8192 [ 917.483328][T15457] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 917.533899][T15461] loop6: detected capacity change from 0 to 1024 [ 917.540622][ T28] audit: type=1800 audit(2000000833.160:190): pid=15457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2523" name="file2" dev="loop3" ino=1048858 res=0 errno=0 [ 917.540832][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.587046][T15457] FAT-fs (loop3): Filesystem has been set read-only [ 917.596120][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.611514][T15461] EXT4-fs: Ignoring removed orlov option [ 917.625480][T15461] EXT4-fs: Ignoring removed bh option [ 917.632319][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.643852][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.683955][T15461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.709477][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.726257][ T7779] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.768076][ T7779] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.791439][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.808248][ T7779] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 917.837442][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.846511][ T7779] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 917.877437][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.887105][ T7779] usb 8-1: SerialNumber: syz [ 917.914807][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 917.945145][T15457] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 918.843354][ T7779] usb 8-1: 0:2 : does not exist [ 918.847030][T15260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.868804][ T7779] usb 8-1: USB disconnect, device number 2 [ 918.934405][T15074] udevd[15074]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.159185][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2527'. [ 919.896585][T15492] loop6: detected capacity change from 0 to 1024 [ 919.968797][T15492] EXT4-fs: Ignoring removed orlov option [ 919.985325][T15494] loop3: detected capacity change from 0 to 1024 [ 920.003954][T15492] EXT4-fs: Ignoring removed bh option [ 920.021871][T15494] EXT4-fs: Ignoring removed mblk_io_submit option [ 920.121373][T15494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.176207][T15492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.205261][T15486] loop4: detected capacity change from 0 to 40427 [ 920.228759][T15486] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 920.254771][T15494] ================================================================== [ 920.262907][T15494] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 920.270774][T15494] Read of size 18446744073709551588 at addr ffff88805ab28040 by task syz.3.2535/15494 [ 920.280355][T15494] [ 920.282716][T15494] CPU: 0 PID: 15494 Comm: syz.3.2535 Not tainted syzkaller #0 [ 920.290210][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 920.300294][T15494] Call Trace: [ 920.303609][T15494] [ 920.306560][T15494] dump_stack_lvl+0x18c/0x250 [ 920.311338][T15494] ? read_lock_is_recursive+0x20/0x20 [ 920.316962][T15494] ? show_regs_print_info+0x20/0x20 [ 920.322198][T15494] ? load_image+0x400/0x400 [ 920.326750][T15494] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 920.332276][T15494] ? __virt_addr_valid+0x18c/0x540 [ 920.337540][T15494] ? __virt_addr_valid+0x469/0x540 [ 920.342704][T15494] print_report+0xa8/0x210 [ 920.347157][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 920.352655][T15494] kasan_report+0x117/0x150 [ 920.357214][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 920.362721][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 920.368221][T15494] kasan_check_range+0x241/0x290 [ 920.373195][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 920.378693][T15494] __asan_memmove+0x29/0x70 [ 920.383416][T15494] ext4_xattr_set_entry+0x94b/0x1e90 [ 920.388746][T15494] ext4_xattr_block_set+0xae8/0x32b0 [ 920.394069][T15494] ? ext4_destroy_inode+0x200/0x200 [ 920.399310][T15494] ? proc_nr_inodes+0x230/0x230 [ 920.404302][T15494] ? do_raw_spin_unlock+0x121/0x230 [ 920.409586][T15494] ? _raw_spin_unlock+0x28/0x40 [ 920.414471][T15494] ? ext4_xattr_block_find+0x350/0x350 [ 920.419967][T15494] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 920.425384][T15494] ext4_xattr_set_handle+0x1280/0x14c0 [ 920.430892][T15494] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 920.436998][T15494] ? __ext4_journal_start_sb+0x259/0x560 [ 920.442714][T15494] ext4_xattr_set+0x252/0x340 [ 920.447438][T15494] ? end_current_label_crit_section+0x170/0x170 [ 920.453752][T15494] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 920.459325][T15494] ? posix_xattr_acl+0x93/0xb0 [ 920.464118][T15494] ? ext4_xattr_trusted_get+0x40/0x40 [ 920.469504][T15494] __vfs_setxattr+0x431/0x470 [ 920.474204][T15494] __vfs_setxattr_noperm+0x12d/0x5e0 [ 920.479508][T15494] vfs_setxattr+0x16b/0x2f0 [ 920.484021][T15494] ? xattr_permission+0x470/0x470 [ 920.489052][T15494] ? __mnt_want_write+0x223/0x2a0 [ 920.494090][T15494] ? path_setxattr+0x3a1/0x5d0 [ 920.498865][T15494] path_setxattr+0x3f3/0x5d0 [ 920.503467][T15494] ? simple_xattrs_free+0x150/0x150 [ 920.508690][T15494] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 920.514691][T15494] ? lock_chain_count+0x20/0x20 [ 920.519561][T15494] __x64_sys_lsetxattr+0xb8/0xd0 [ 920.524533][T15494] do_syscall_64+0x55/0xa0 [ 920.528961][T15494] ? clear_bhb_loop+0x40/0x90 [ 920.533659][T15494] ? clear_bhb_loop+0x40/0x90 [ 920.538362][T15494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 920.544290][T15494] RIP: 0033:0x7f327519aeb9 [ 920.548725][T15494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.568380][T15494] RSP: 002b:00007f32760fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 920.576823][T15494] RAX: ffffffffffffffda RBX: 00007f3275415fa0 RCX: 00007f327519aeb9 [ 920.584809][T15494] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 920.592801][T15494] RBP: 00007f3275208c1f R08: 0000000000000000 R09: 0000000000000000 [ 920.600776][T15494] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 920.608758][T15494] R13: 00007f3275416038 R14: 00007f3275415fa0 R15: 00007ffc9d9b35e8 [ 920.616745][T15494] [ 920.619769][T15494] [ 920.622094][T15494] Allocated by task 15494: [ 920.626509][T15494] kasan_set_track+0x4e/0x70 [ 920.631110][T15494] __kasan_kmalloc+0x8f/0xa0 [ 920.635707][T15494] __kmalloc_node_track_caller+0xb2/0x230 [ 920.641456][T15494] kmemdup+0x2b/0x70 [ 920.645358][T15494] ext4_xattr_block_set+0x9ea/0x32b0 [ 920.650672][T15494] ext4_xattr_set_handle+0x1280/0x14c0 [ 920.656137][T15494] ext4_xattr_set+0x252/0x340 [ 920.660831][T15494] __vfs_setxattr+0x431/0x470 [ 920.665523][T15494] __vfs_setxattr_noperm+0x12d/0x5e0 [ 920.670816][T15494] vfs_setxattr+0x16b/0x2f0 [ 920.675330][T15494] path_setxattr+0x3f3/0x5d0 [ 920.679955][T15494] __x64_sys_lsetxattr+0xb8/0xd0 [ 920.684905][T15494] do_syscall_64+0x55/0xa0 [ 920.689334][T15494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 920.695320][T15494] [ 920.697657][T15494] Last potentially related work creation: [ 920.703370][T15494] kasan_save_stack+0x3e/0x60 [ 920.708141][T15494] __kasan_record_aux_stack+0xaf/0xc0 [ 920.713519][T15494] kvfree_call_rcu+0xee/0x790 [ 920.718211][T15494] neigh_periodic_work+0x3f7/0xd70 [ 920.723415][T15494] process_scheduled_works+0xa5d/0x15d0 [ 920.728989][T15494] worker_thread+0xa55/0xfc0 [ 920.733589][T15494] kthread+0x2fa/0x390 [ 920.737668][T15494] ret_from_fork+0x48/0x80 [ 920.742092][T15494] ret_from_fork_asm+0x11/0x20 [ 920.746882][T15494] [ 920.749204][T15494] Second to last potentially related work creation: [ 920.755784][T15494] kasan_save_stack+0x3e/0x60 [ 920.760464][T15494] __kasan_record_aux_stack+0xaf/0xc0 [ 920.765843][T15494] kvfree_call_rcu+0xee/0x790 [ 920.770544][T15494] cgroup_migrate_finish+0x1a3/0x370 [ 920.775846][T15494] cgroup_attach_task+0x655/0x8e0 [ 920.780889][T15494] cgroup_attach_task_all+0x9a/0xe0 [ 920.786095][T15494] kvm_vm_worker_thread+0x38e/0x570 [ 920.791302][T15494] kthread+0x2fa/0x390 [ 920.795400][T15494] ret_from_fork+0x48/0x80 [ 920.799846][T15494] ret_from_fork_asm+0x11/0x20 [ 920.804810][T15494] [ 920.807140][T15494] The buggy address belongs to the object at ffff88805ab28000 [ 920.807140][T15494] which belongs to the cache kmalloc-1k of size 1024 [ 920.821219][T15494] The buggy address is located 64 bytes inside of [ 920.821219][T15494] 1024-byte region [ffff88805ab28000, ffff88805ab28400) [ 920.834515][T15494] [ 920.836843][T15494] The buggy address belongs to the physical page: [ 920.843253][T15494] page:ffffea00016aca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ab28 [ 920.853566][T15494] head:ffffea00016aca00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 920.862515][T15494] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 920.870501][T15494] page_type: 0xffffffff() [ 920.874835][T15494] raw: 00fff00000000840 ffff888017c41dc0 dead000000000100 dead000000000122 [ 920.883441][T15494] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 920.892026][T15494] page dumped because: kasan: bad access detected [ 920.898444][T15494] page_owner tracks the page as allocated [ 920.904162][T15494] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5789, tgid 5789 (udevd), ts 86064652602, free_ts 22174091170 [ 920.926319][T15494] post_alloc_hook+0x1c1/0x200 [ 920.931108][T15494] get_page_from_freelist+0x1951/0x19e0 [ 920.936832][T15494] __alloc_pages+0x1f0/0x460 [ 920.941426][T15494] alloc_slab_page+0x5d/0x160 [ 920.946103][T15494] new_slab+0x87/0x2d0 [ 920.950273][T15494] ___slab_alloc+0xc5d/0x12f0 [ 920.954970][T15494] __kmem_cache_alloc_node+0x19e/0x250 [ 920.960447][T15494] __kmalloc_node_track_caller+0xa2/0x230 [ 920.966174][T15494] kmalloc_reserve+0x116/0x240 [ 920.970963][T15494] __alloc_skb+0x138/0x2c0 [ 920.975393][T15494] netlink_sendmsg+0x66a/0xbf0 [ 920.980192][T15494] ____sys_sendmsg+0x5ba/0x960 [ 920.984965][T15494] ___sys_sendmsg+0x2a6/0x360 [ 920.989646][T15494] __se_sys_sendmsg+0x1c2/0x2b0 [ 920.994497][T15494] do_syscall_64+0x55/0xa0 [ 920.998926][T15494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.004828][T15494] page last free stack trace: [ 921.009505][T15494] free_unref_page_prepare+0x7b2/0x8c0 [ 921.014979][T15494] free_unref_page+0x32/0x2e0 [ 921.019669][T15494] free_contig_range+0xa1/0x150 [ 921.024522][T15494] destroy_args+0x80/0x850 [ 921.029026][T15494] debug_vm_pgtable+0x411/0x440 [ 921.033969][T15494] do_one_initcall+0x242/0x790 [ 921.038742][T15494] do_initcall_level+0x137/0x1f0 [ 921.043703][T15494] do_initcalls+0x69/0xd0 [ 921.048042][T15494] kernel_init_freeable+0x3ed/0x580 [ 921.053336][T15494] kernel_init+0x1d/0x1c0 [ 921.057688][T15494] ret_from_fork+0x48/0x80 [ 921.062133][T15494] ret_from_fork_asm+0x11/0x20 [ 921.066904][T15494] [ 921.069234][T15494] Memory state around the buggy address: [ 921.074864][T15494] ffff88805ab27f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 921.082929][T15494] ffff88805ab27f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 921.091000][T15494] >ffff88805ab28000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.099064][T15494] ^ [ 921.105216][T15494] ffff88805ab28080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.113279][T15494] ffff88805ab28100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.121342][T15494] ================================================================== [ 921.150063][T15486] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 921.169358][T15494] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 921.176622][T15494] CPU: 1 PID: 15494 Comm: syz.3.2535 Not tainted syzkaller #0 [ 921.184224][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 921.194412][T15494] Call Trace: [ 921.197819][T15494] [ 921.200785][T15494] dump_stack_lvl+0x18c/0x250 [ 921.205519][T15494] ? show_regs_print_info+0x20/0x20 [ 921.210772][T15494] ? load_image+0x400/0x400 [ 921.215328][T15494] panic+0x2dc/0x730 [ 921.217498][T15486] F2FS-fs (loop4): Unrecognized mount option "checkpoint^disable" or missing value [ 921.228548][T15494] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 921.234752][T15494] ? bpf_jit_dump+0xd0/0xd0 [ 921.239280][T15494] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 921.245298][T15494] ? _raw_spin_unlock+0x40/0x40 [ 921.250168][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 921.255644][T15494] check_panic_on_warn+0x84/0xa0 [ 921.260606][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 921.266082][T15494] end_report+0x6f/0x130 [ 921.270337][T15494] kasan_report+0x128/0x150 [ 921.274850][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 921.280327][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 921.285800][T15494] kasan_check_range+0x241/0x290 [ 921.290752][T15494] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 921.296324][T15494] __asan_memmove+0x29/0x70 [ 921.300930][T15494] ext4_xattr_set_entry+0x94b/0x1e90 [ 921.306263][T15494] ext4_xattr_block_set+0xae8/0x32b0 [ 921.311593][T15494] ? ext4_destroy_inode+0x200/0x200 [ 921.316817][T15494] ? proc_nr_inodes+0x230/0x230 [ 921.321683][T15494] ? do_raw_spin_unlock+0x121/0x230 [ 921.326901][T15494] ? _raw_spin_unlock+0x28/0x40 [ 921.331936][T15494] ? ext4_xattr_block_find+0x350/0x350 [ 921.337406][T15494] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 921.342792][T15494] ext4_xattr_set_handle+0x1280/0x14c0 [ 921.348270][T15494] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 921.354267][T15494] ? __ext4_journal_start_sb+0x259/0x560 [ 921.359913][T15494] ext4_xattr_set+0x252/0x340 [ 921.364609][T15494] ? end_current_label_crit_section+0x170/0x170 [ 921.370863][T15494] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 921.376433][T15494] ? posix_xattr_acl+0x93/0xb0 [ 921.381200][T15494] ? ext4_xattr_trusted_get+0x40/0x40 [ 921.386581][T15494] __vfs_setxattr+0x431/0x470 [ 921.391271][T15494] __vfs_setxattr_noperm+0x12d/0x5e0 [ 921.396574][T15494] vfs_setxattr+0x16b/0x2f0 [ 921.401091][T15494] ? xattr_permission+0x470/0x470 [ 921.406121][T15494] ? __mnt_want_write+0x223/0x2a0 [ 921.411159][T15494] ? path_setxattr+0x3a1/0x5d0 [ 921.415935][T15494] path_setxattr+0x3f3/0x5d0 [ 921.420535][T15494] ? simple_xattrs_free+0x150/0x150 [ 921.425753][T15494] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 921.431740][T15494] ? lock_chain_count+0x20/0x20 [ 921.436599][T15494] __x64_sys_lsetxattr+0xb8/0xd0 [ 921.441549][T15494] do_syscall_64+0x55/0xa0 [ 921.445976][T15494] ? clear_bhb_loop+0x40/0x90 [ 921.450661][T15494] ? clear_bhb_loop+0x40/0x90 [ 921.455439][T15494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.461338][T15494] RIP: 0033:0x7f327519aeb9 [ 921.465941][T15494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.485555][T15494] RSP: 002b:00007f32760fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 921.493978][T15494] RAX: ffffffffffffffda RBX: 00007f3275415fa0 RCX: 00007f327519aeb9 [ 921.501956][T15494] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 921.509936][T15494] RBP: 00007f3275208c1f R08: 0000000000000000 R09: 0000000000000000 [ 921.517914][T15494] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 921.525895][T15494] R13: 00007f3275416038 R14: 00007f3275415fa0 R15: 00007ffc9d9b35e8 [ 921.533881][T15494] [ 921.537031][T15494] Kernel Offset: disabled [ 921.541354][T15494] Rebooting in 86400 seconds..