last executing test programs: 14.940902949s ago: executing program 3 (id=650): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x65, 0x4, 0x0, 0x0, 0x0, @empty}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) unlink(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4db) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x6a, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '\x00\x00', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0xfffffffe}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null]}, 0x48) 11.892017626s ago: executing program 3 (id=660): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) epoll_create(0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x207, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x64, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xf0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb773}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000000)=ANY=[], 0x4, 0x67b, &(0x7f00000010c0)="$eJzs3c1rHOcdB/DvrFay5IKjJHbilkBFDGmpqa0XlFalELeHokMowT2EQi/ClmPhtRIkpSihFPX92kP+gPSgQ6GnQu+GFHpqe8tVp5JS6CUnneoys7PSyvLKu7JerPbzMaN9Zp7X+c3Mszu7mAnwf2v+apoPUmT+6pvr5frW5kxra3PmXJ3dSlKmG0mz/ZJiOSk+SW6kveSL5ca6fNGrn4+W5m5++vnWZ+21Zr1U5RsH1evPRr1kIslQ/brf8KHau9WzvYMt7KSKnT0sA3alEzg4bQ/32Rik+lNet8CzoGi/b+4znpxPMlp/Dkg9OzROdnRHb6BZDgAAAM6o57aznfVcOO1xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFlSP/+/qJdGJz2RovP8/5F6W+r0zcYpj/lpPDjtAQAAAAAAAADAEfjydrazngud9YfVL/v/ebVauVj9/ULez2oWs5JrWc9C1rKWlUwlGe9qaGR9YW1tZSpPrjn92JrTJ7K7AAAAAAAAAPC/6ueZ3/39HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngVFMtR+qZaLnfR4Gs0ko0lGynIbyd876TOieNzGByc/DgAAAHgqo4eo89x2trOeC531h0V1z/9Sdb88mveznLUsZS2tLOZ2fQ9d3vU3tjZnWlubM/e3Nmeqjn/0sK3dznf+PdAwqhbT/u7h8T1frkqM5U6Wqi3XcqsazO00qpqly/V4dpa9nfysHNPYG7U+R3a7fi07+22vbxGOQmPQCuNVpeGdiEzWYysbev7gSDzx6DQP7GkqjZ1vfi4e0FNnl4oBY36+Uy/Jrx+J+Rv/+P0P+2zmGOxEopEqEtNdZ99LB8c8+cqf/vD23dbyvbt3Vq8e22l0Uh49J2a6IvHymY5Ec8Dyk1UkLu2sz+d7+UGuZiJvZSVL+XEWspbF1DNjFurzufw73hWlZF+kbuxZe+tJIxmpj0t7Fu1nTBM5V6UW8mpV90KWUuTd3M5iXq/+TWcq38hsZjPXdYQv9TzC1b5VM21jsKv+yleze6n/ppyp+6uX/KXfgoNrv6WWcX2+K67dc+54lde9ZTdKL/TxfjTg3Nj8Up0o+/jFYd42js2jkZjqisSLB0fid9W1sdpavrdyd+G9Hu1vPLL+2vBu+lfH+c48sPJ8eSGj9Uyy9+wo817cmWX2xmuk/sWlndfYl3epyiuKzpX6/Z5X6kj9GW5/S9NV3sv784Y6I7/clbfn81be/evpxBOAAZ3/2vmRsX+N/W3s47Ffjt0de3P0u+e+ee6VkQz/efhbzcmh1xqvFH/Mx/np7v0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweKsffHhvodVaXHl8otE762gTRf0gn15lmhnLCQzjJBNFsnHkLedIGxw+pn3vPETwadt5+8azcSjPcmIoSWfLUHaz6kN0mIeLAmfC9bX7711f/eDDry/dX3hn8Z3F5eHZ2bnJudnXZ67fWWotTrb/nvYogeOw+3ngtEcCAAAAAAAAAAAA9OsI/hfBt//Zbqpnma7uJk5rPwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICza/5qmsMpMjV5bbJc39qcaZVLJ71bspmk0UiKnyTFJ8mNtJeMdzVX9Orno6W5m59+vvXZblvNTvnGQfX6s1EvmUgyVL/uM3K49m71aq9vxc4elgG70gkcnLb/BgAA///sygN+") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3886f31be662c690}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10.827791842s ago: executing program 3 (id=662): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x40449426, &(0x7f0000000800)={0x0, 0xfffffffffffffffe, @start={0x0, 0x0, "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", "9ef4870c42508a8fff33a0920e7241a33e428dd1ccc8247a28b8e62db4798869c7a1b82ca4fc6c035f0cd4c54d4c28b0705e99d9779aa9a7ac52a4b0cbbee3a2d75537d2fb354d6845fe6424cf36e4b23117ae399f57255e1c7177d6784d80b1e556f4deb711baf01557c6f871384a49bc669f432161f6ad51e16d93dbec01dec16b14e7674f0e0c14d3f9adb1ba6601ae069d5e3c80fe96fca92b412ee6c99a3d715c8a646bf2c1603a440beedf42ae712f8720e447db163edd602df26dbe806a4f2da6f556dacf9bc951dbeda8e00fd32c919a5ae2025d1fe245a4fc0cb5fa756752673783976b14e8a029d83ff08d0c92795e1999db57c64b6896f2a45f02f1817fd086dfa94b97eac44d8d43973357e6d9f99376a525645ffb7ea7dd9a86dc7ad1ff2487af44698684f210e1be0ca9a19637a046601fae57f7f9c14a1e5782a65328c0722b34a00571884166be2ba8d7ba828b25ba6bc263c829dfcbfd473979c74954905705d96d7a0468c743033b8f1c892b3c682e4549632a84daff9f6e649002695b902973112b4a349e8aaa95d5a0966cfb9778ea399854e665742e3e946c4dae2f9156620247dd642e3dd224f89da4959b7772561e6543bc1285bd33def3e8bf6990ea9b694ff699a185c864559bd628f690f51212ad8feaef77646849a9953850502ded04854fdbb9276870d9031e85ff5d4ce72a053b2ee8e22319e87afa68756c749de84b25362e13984eb87e698cbfbc51b5fb5be33dd40845ad218d5cd9c3ce3735143441f6df2641b751af0d90d2b81ddf2264f92f3132b62e30d56cbb02ca0ae7bf9c365dc3856d3c52ed412c95d9a4a42ac437917b925c2030e3fdd315b4ba9f63f6d69b216e3c8ac64b9412790a7fbdbf9b2f7df1300aa5f4bbc0859840c73a190eb077ac8b70fd083d089c13023d7b17c2f608174162ffcda89bcbba63dc764f5e678bca18a646ecce0ba4d48daec7d9d8bf2be4df232919d655b6508b8dc91d17d67c065c4124d322144ab516e1cb08fd2ae39a804634793c02253602a5c80cc05f4951f0256a06a8e51636e64dd71945b336a45365dacc64678977c1bd862c36f41b71975353a1095e41448bab51fd163e93f4af7de87c5e74c0668f571a07d7488b1de3dc713ebbe83fdb21ed1a7ab8304dabd99ba809b9e691273dcd067f4c3c3920bf3e49a88eef059759905550568fdbbdc577eebb227321d5e0718e6877517a28afea43fa297773793a19199ae29db436a84bb65bc56f1bc2bd740642b1ac103cfddaac3b2b5c06e5b8ef1f3213d0fb95030e165130fe7bc748a242ec9f035dc743ea39ba4f33c1862625403e783e328812511f0d35229cfcd9661c42dd41866ee81bb245a202921e7ed0d62d479bb17ca6caa6b4d58c70dadf8af3f65331c96e45151bd50fa9fdbdafecde6061a6c4be7f2eb9"}, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffff7ffffff, 0x0, 0x4, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20]}) 9.842646572s ago: executing program 0 (id=664): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLL', 0x3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1, 0x0, 0xff0f000000000000}) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x2000c0c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 8.993561361s ago: executing program 0 (id=665): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011000100"/101], 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 8.063322827s ago: executing program 0 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x1, 0x7, 0x10000004, 0x400, 0xcc7, 0xfff, 0x1, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x16, 0x9, 0x0, 0x1a449, 0x3, 0x9, 0x3, 0xfffffffd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}}, 0x20}, 0x1, 0xba01}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 7.592106505s ago: executing program 3 (id=669): socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, 0x0, r3}, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x18) 7.222332725s ago: executing program 2 (id=670): bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYBLOB="77f70548a55bdd3bd8d3a236fa05308456714ac378c5541001648422b60d722f7664d44e4c1f68ca2d97f06448e733600b94f21fe39018f32e470771bd94eefb5c8c6fc001871ed145f00fd653fc86240659d4eaaba452e10d55888f0ef53c81cb61055a79440ef9388cbd9bbf3d53499421848f74bdb491d0dab14875f11075087d684cabcc753e124688f9fed8e56a", @ANYRES64], 0x1, 0x608, &(0x7f0000000940)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) creat(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400200100"/169], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lgetxattr(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="757365722e6b837972696e6700eec742d2cb9fb6fbd8340a259d340ff3e0613a8aabf452f8a7b69983a78a14f130f0c27f1991387cf0e6eae2c125d690949a09e3065543e12f88ea0938f27065227604f74d0758f8d13949b19c364fdd933890de55e4969220a3f992"], 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, 0x0, 0x1400) close(0xffffffffffffffff) 6.770076291s ago: executing program 0 (id=671): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000240)='%pS \x00'}, 0x20) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[], 0x1, 0x553b, &(0x7f0000000dc0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) open(0x0, 0x145142, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x163) 5.454410068s ago: executing program 2 (id=672): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000080)={0x9, 0x0}) 5.18022417s ago: executing program 2 (id=673): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000380)={0x67, 0x0, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 4.971525487s ago: executing program 2 (id=674): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLL', 0x3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1, 0x0, 0xff0f000000000000}) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x2000c0c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 4.060363571s ago: executing program 2 (id=675): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011000100"/101], 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 3.94399587s ago: executing program 1 (id=676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x20000001, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0xf}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() 3.604839088s ago: executing program 0 (id=677): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x720, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0x3}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x40}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a000100"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.823018801s ago: executing program 2 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$cdc_ecm(0x4, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x7, 0x80, 0xae, [{{0x9, 0x4, 0x0, 0x58, 0x8, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "a2e02f"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xe9cf, 0x3, 0x2, 0xfd}, [@country_functional={0x6, 0x24, 0x7, 0xc2, 0xab40}, @mbim_extended={0x8, 0x24, 0x1c, 0x4c8, 0xfe, 0xf6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x365, 0x3, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x1, 0xff, 0xf, 0x1, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x0, 0xf1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xf3, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x5, 0xff}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x68, 0x28, 0x9, 0x8, 0xba}, 0x45, &(0x7f0000000200)={0x5, 0xf, 0x45, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x6, 0xf0f, 0x1, [0xff3f0f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x49, "9ec5a7d1f84455a8472194d14799327d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0xa, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xf0, 0xf5, 0x6, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0xd2, &(0x7f0000000280)=@string={0xd2, 0x3, "f80f51face6197f878d063f7381a02552c50e65f0d6836c77623e8094ab1f0106fccc4b6198e4d25390bc1f93ce4590c81e0be4bf6422381a8374c18ce7f9f9303690df30f4fc9e2bc0c98530d3e2fe41428b1ee3effb7dd98c81a7171ad657483b9eb5cf4d232b5cf4a6aa24d2493ca8022c6a0eec9a449e034670da8244dbbd2b9f0a606813b68922a08de19613e3264faa69ef448f85e6989e5502b4d8a138b9b0fe047a87e0f3dd7d279a6180a7c6a03f8502dcb6f735674a6ecd1a8478fa6fdfbfac19759bcce65672a618cfc84"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x21, 0x57, {0x57, 0x0, "f80f5419ecfa782e575df3879dcfdbe874cd0dc2f45b477094d3dcb91955de7a7083930ff78c0fe41676a44847400cf6c16e1670e2532b14d7880ccea0e13bb67ae420128813963f960967216d5d5db86de56d9480"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$FITRIM(r5, 0xc4009420, &(0x7f0000000180)={0x5}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, 0x0, 0x0, 0xcb, &(0x7f0000000640)={0x0, 0x989680}) 2.801471833s ago: executing program 1 (id=679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x20000001, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0xf}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() 1.720643691s ago: executing program 1 (id=680): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c02600004100070100000000ff000000017c00000400fc80a72601"], 0x26c0}}, 0x4c000) 1.613652059s ago: executing program 3 (id=681): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.526716596s ago: executing program 1 (id=682): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000380)={[{@umask={'umask', 0x3d, 0x20004}}, {}, {@nls={'nls', 0x3d, 'maccyrillic'}}, {@uid}, {@nobarrier}, {@nobarrier}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 1.10804121s ago: executing program 1 (id=683): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x99}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffef2, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40805}, 0x0) 522.327507ms ago: executing program 3 (id=684): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x65, 0x4, 0x0, 0x0, 0x0, @empty}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) unlink(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4db) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x6a, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '\x00\x00', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0xfffffffe}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null]}, 0x48) 177.164056ms ago: executing program 0 (id=685): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'pcl726\x00', [0x4f27, 0xfffffffc, 0x4, 0x4, 0x3, 0x2, 0x4, 0x7, 0x54c6cff3, 0xfd, 0xfffffffe, 0x1, 0xfffffffe, 0x1, 0x3, 0x101, 0x2, 0x7e, 0x3, 0x40000005, 0x61998000, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x1000003, 0x100008, 0x4086, 0x0, 0xfffffff8]}) 0s ago: executing program 1 (id=686): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011000100"/101], 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 81.560727][ T5776] cgroup: Unknown subsys name 'net' [ 81.701191][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.515607][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.703122][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.713988][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.731564][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.740217][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.748521][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.768240][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.778725][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.787830][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.795929][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.804601][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.813079][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.820132][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.820819][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.831975][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.852440][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.873184][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.882408][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.892701][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.945523][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.956502][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.964967][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.983203][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.992722][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.000584][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.455513][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.559298][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.620786][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.660947][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.669898][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.678015][ T5789] bridge_slave_0: entered allmulticast mode [ 86.686180][ T5789] bridge_slave_0: entered promiscuous mode [ 86.699173][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.706481][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.713852][ T5789] bridge_slave_1: entered allmulticast mode [ 86.721055][ T5789] bridge_slave_1: entered promiscuous mode [ 86.751429][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 86.856641][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.869702][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.942652][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.949819][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.957827][ T5785] bridge_slave_0: entered allmulticast mode [ 86.965479][ T5785] bridge_slave_0: entered promiscuous mode [ 86.974933][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.982247][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.989443][ T5785] bridge_slave_1: entered allmulticast mode [ 86.996979][ T5785] bridge_slave_1: entered promiscuous mode [ 87.056705][ T5789] team0: Port device team_slave_0 added [ 87.064050][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.071737][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.079642][ T5790] bridge_slave_0: entered allmulticast mode [ 87.087114][ T5790] bridge_slave_0: entered promiscuous mode [ 87.141297][ T5789] team0: Port device team_slave_1 added [ 87.161979][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.169237][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.176802][ T5790] bridge_slave_1: entered allmulticast mode [ 87.184371][ T5790] bridge_slave_1: entered promiscuous mode [ 87.191086][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.198412][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.206301][ T5797] bridge_slave_0: entered allmulticast mode [ 87.214318][ T5797] bridge_slave_0: entered promiscuous mode [ 87.224639][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.258215][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.265694][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.273040][ T5797] bridge_slave_1: entered allmulticast mode [ 87.280135][ T5797] bridge_slave_1: entered promiscuous mode [ 87.289914][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.312235][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.319242][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.345232][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.394909][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.402729][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.429585][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.448344][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.461456][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.485970][ T5785] team0: Port device team_slave_0 added [ 87.500521][ T5785] team0: Port device team_slave_1 added [ 87.521425][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.534703][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.614759][ T5790] team0: Port device team_slave_0 added [ 87.624162][ T5790] team0: Port device team_slave_1 added [ 87.645487][ T5797] team0: Port device team_slave_0 added [ 87.652394][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.659416][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.686566][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.724473][ T5797] team0: Port device team_slave_1 added [ 87.731066][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.738138][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.764233][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.793849][ T5789] hsr_slave_0: entered promiscuous mode [ 87.800410][ T5789] hsr_slave_1: entered promiscuous mode [ 87.842814][ T5795] Bluetooth: hci2: command tx timeout [ 87.856935][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.864317][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.890369][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.907479][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.914755][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.940768][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.953805][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.960803][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.986749][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.999395][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.006626][ T5795] Bluetooth: hci1: command tx timeout [ 88.006980][ T5796] Bluetooth: hci0: command tx timeout [ 88.012794][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.043926][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.082045][ T5796] Bluetooth: hci3: command tx timeout [ 88.126250][ T5797] hsr_slave_0: entered promiscuous mode [ 88.134286][ T5797] hsr_slave_1: entered promiscuous mode [ 88.140963][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.149016][ T5797] Cannot create hsr debugfs directory [ 88.194779][ T5785] hsr_slave_0: entered promiscuous mode [ 88.201363][ T5785] hsr_slave_1: entered promiscuous mode [ 88.207818][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.216255][ T5785] Cannot create hsr debugfs directory [ 88.300623][ T5790] hsr_slave_0: entered promiscuous mode [ 88.307547][ T5790] hsr_slave_1: entered promiscuous mode [ 88.314943][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.322646][ T5790] Cannot create hsr debugfs directory [ 88.675889][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.688386][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.705407][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.715667][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.794447][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.804943][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.818199][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.829738][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.916477][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.936034][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.965162][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.977238][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.054147][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.080899][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.100742][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.121371][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.134011][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.186461][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.223401][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.230756][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.261667][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.294520][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.301661][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.324371][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.351098][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.358304][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.394455][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.401570][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.445052][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.485700][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.526413][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.533650][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.546445][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.553599][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.661131][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.747848][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.784430][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.791618][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.837545][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.844768][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.923383][ T5796] Bluetooth: hci2: command tx timeout [ 90.006541][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.086874][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.093263][ T5796] Bluetooth: hci0: command tx timeout [ 90.096233][ T5795] Bluetooth: hci1: command tx timeout [ 90.145739][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.163685][ T5795] Bluetooth: hci3: command tx timeout [ 90.166608][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.336887][ T5797] veth0_vlan: entered promiscuous mode [ 90.346809][ T5785] veth0_vlan: entered promiscuous mode [ 90.361389][ T5789] veth0_vlan: entered promiscuous mode [ 90.377228][ T5797] veth1_vlan: entered promiscuous mode [ 90.398894][ T5789] veth1_vlan: entered promiscuous mode [ 90.412998][ T5785] veth1_vlan: entered promiscuous mode [ 90.438430][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.495174][ T5789] veth0_macvtap: entered promiscuous mode [ 90.523471][ T5797] veth0_macvtap: entered promiscuous mode [ 90.536638][ T5797] veth1_macvtap: entered promiscuous mode [ 90.546324][ T5789] veth1_macvtap: entered promiscuous mode [ 90.590757][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.615452][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.626561][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.640010][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.652867][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.662514][ T5785] veth0_macvtap: entered promiscuous mode [ 90.683116][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.692503][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.701221][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.710594][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.725360][ T5785] veth1_macvtap: entered promiscuous mode [ 90.737958][ T5790] veth0_vlan: entered promiscuous mode [ 90.746200][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.757738][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.769682][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.781476][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.790685][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.799516][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.808332][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.867653][ T5790] veth1_vlan: entered promiscuous mode [ 90.881693][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.896387][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.906993][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.917633][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.929252][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.963528][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.975376][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.985618][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.996453][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.008344][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.058954][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.062663][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.067744][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.082477][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.094654][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.104163][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.178300][ T5790] veth0_macvtap: entered promiscuous mode [ 91.203946][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.211770][ T5790] veth1_macvtap: entered promiscuous mode [ 91.220513][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.228771][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.237977][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.313791][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.323600][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.340321][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.359153][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.376367][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.387291][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.397250][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.407767][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.420435][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.470274][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.481153][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.495205][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.515485][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.528011][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.542054][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.568122][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.624317][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.636438][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647320][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.656611][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.676760][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.695823][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.760935][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.880187][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.004866][ T5795] Bluetooth: hci2: command tx timeout [ 92.054411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.135116][ T5884] block device autoloading is deprecated and will be removed. [ 92.206088][ T5795] Bluetooth: hci0: command tx timeout [ 92.212828][ T5795] Bluetooth: hci1: command tx timeout [ 92.285178][ T5796] Bluetooth: hci3: command tx timeout [ 92.302473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.362720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 92.382424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.509355][ T23] cfg80211: failed to load regulatory.db [ 92.652984][ T5887] syz.3.5[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.675871][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.705620][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.860869][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.896916][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.094109][ T5889] loop1: detected capacity change from 0 to 4096 [ 93.767086][ T5893] loop2: detected capacity change from 0 to 512 [ 94.144640][ T5893] EXT4-fs (loop2): unsupported inode size: 22272 [ 94.151167][ T5893] EXT4-fs (loop2): blocksize: 1024 [ 94.172095][ T5796] Bluetooth: hci2: command tx timeout [ 94.242166][ T5796] Bluetooth: hci1: command tx timeout [ 94.247733][ T5796] Bluetooth: hci0: command tx timeout [ 94.322495][ T5795] Bluetooth: hci3: command tx timeout [ 94.731838][ C0] sched: RT throttling activated [ 96.459816][ T5902] netlink: 165 bytes leftover after parsing attributes in process `syz.2.8'. [ 96.696289][ T5906] loop0: detected capacity change from 0 to 764 [ 96.853240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.862118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.962294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.971426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.072260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.080670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.697239][ T5911] Symlink component flag not implemented [ 97.704549][ T5911] Symlink component flag not implemented [ 97.711458][ T5916] Symlink component flag not implemented (128) [ 97.741255][ T5916] Symlink component flag not implemented (122) [ 97.759570][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.878373][ T5919] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 100.406222][ T5931] loop2: detected capacity change from 0 to 32768 [ 100.463874][ T5931] ======================================================= [ 100.463874][ T5931] WARNING: The mand mount option has been deprecated and [ 100.463874][ T5931] and is ignored by this kernel. Remove the mand [ 100.463874][ T5931] option from the mount to silence this warning. [ 100.463874][ T5931] ======================================================= [ 100.867906][ T5937] process 'syz.0.17' launched './file0' with NULL argv: empty string added [ 100.893523][ T5937] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 101.674193][ T5931] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.866495][ T5933] loop3: detected capacity change from 0 to 32768 [ 101.887935][ T5933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.16 (5933) [ 101.995641][ T5933] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.059542][ T5933] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 102.084462][ T5933] BTRFS info (device loop3): using free space tree [ 102.093267][ T5945] loop0: detected capacity change from 0 to 1024 [ 102.095893][ T5931] syz.2.15 (5931) used greatest stack depth: 17712 bytes left [ 102.234879][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.366485][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 102.461537][ T5965] QAT: failed to copy from user cfg_data. [ 103.336632][ T5933] BTRFS error (device loop3): open_ctree failed: -4 [ 103.616246][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.485465][ T5980] loop2: detected capacity change from 0 to 1024 [ 104.548180][ T5980] EXT4-fs: Ignoring removed bh option [ 104.580224][ T5980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.644887][ T5980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.722695][ T5791] IPVS: starting estimator thread 0... [ 104.872090][ T5990] IPVS: using max 25 ests per chain, 60000 per kthread [ 105.252799][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.263132][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.562010][ T5981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.623746][ T5981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.715463][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.733474][ T5981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.773060][ T5981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.781143][ T5981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.859059][ T5981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.113165][ T5981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.134090][ T5981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.231632][ T6013] loop3: detected capacity change from 0 to 128 [ 108.249135][ T6013] qnx6: invalid mount options. [ 108.889648][ T5981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.895980][ T5943] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.526263][ T6009] loop2: detected capacity change from 0 to 32768 [ 109.555696][ T6009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.31 (6009) [ 109.762232][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.841943][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.172202][ T5795] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.342179][ T6009] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.362063][ T6009] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 110.370861][ T6009] BTRFS info (device loop2): metadata ratio 2 [ 110.394606][ T6009] BTRFS info (device loop2): allowing degraded mounts [ 110.429955][ T6009] BTRFS info (device loop2): force zlib compression, level 3 [ 110.464161][ T6009] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.521686][ T6009] BTRFS info (device loop2): use zstd compression, level 3 [ 110.574201][ T6009] BTRFS info (device loop2): force clearing of disk cache [ 110.581455][ T6009] BTRFS info (device loop2): max_inline at 0 [ 110.585750][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.616733][ T6009] BTRFS info (device loop2): using free space tree [ 110.731964][ T6009] BTRFS info (device loop2): enabling ssd optimizations [ 110.788380][ T6009] BTRFS info (device loop2): rebuilding free space tree [ 110.794128][ T5876] usb 4-1: device descriptor read/64, error -71 [ 110.832050][ T6035] loop1: detected capacity change from 0 to 4096 [ 110.996666][ T5790] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.022206][ T6035] ntfs3: loop1: ino=b, Correct links count -> 1. [ 111.032571][ T6035] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 111.092090][ T5876] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.282466][ T5876] usb 4-1: device descriptor read/64, error -71 [ 111.402284][ T5876] usb usb4-port1: attempt power cycle [ 111.566426][ T6039] loop0: detected capacity change from 0 to 32768 [ 111.602148][ T6039] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.35 (6039) [ 111.650753][ T6039] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.673898][ T6039] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 111.694545][ T6039] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.712463][ T6039] BTRFS info (device loop0): use zstd compression, level 3 [ 111.721736][ T6039] BTRFS info (device loop0): setting nodatacow, compression disabled [ 111.732681][ T6039] BTRFS error (device loop0): unrecognized mount option 'max_inline=' [ 111.744837][ T6039] BTRFS error (device loop0): open_ctree failed: -22 [ 111.843737][ T5943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5943) [ 111.852208][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.856093][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.212076][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.322404][ T5795] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.775634][ T5876] usb 4-1: device not accepting address 4, error -71 [ 114.532887][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.539135][ T5795] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.891186][ T6054] loop3: detected capacity change from 0 to 764 [ 118.072787][ T6060] Symlink component flag not implemented [ 118.078699][ T6060] Symlink component flag not implemented [ 118.183509][ T6060] Symlink component flag not implemented (128) [ 118.262061][ T6060] Symlink component flag not implemented (122) [ 118.662613][ T6061] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 118.760665][ T6058] loop1: detected capacity change from 0 to 4096 [ 118.827878][ T6058] ntfs3: loop1: ino=3, Correct links count -> 2. [ 119.051298][ T28] audit: type=1800 audit(1754476703.487:2): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.42" name="bus" dev="overlay" ino=98 res=0 errno=0 [ 119.134984][ T28] audit: type=1804 audit(1754476703.487:3): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.42" name="/newroot/13/bus/bus" dev="overlay" ino=98 res=1 errno=0 [ 119.198058][ T28] audit: type=1800 audit(1754476703.487:4): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.42" name="bus" dev="overlay" ino=98 res=0 errno=0 [ 120.831940][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.232271][ T5837] usb 2-1: device descriptor read/64, error -71 [ 122.522011][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.373559][ T6102] loop1: detected capacity change from 0 to 512 [ 126.436020][ T6102] EXT4-fs (loop1): unsupported inode size: 22272 [ 126.442604][ T6102] EXT4-fs (loop1): blocksize: 1024 [ 130.804712][ T6114] loop1: detected capacity change from 0 to 8192 [ 130.828391][ T6114] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.704976][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.711584][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.775063][ T6146] loop1: detected capacity change from 0 to 512 [ 135.182854][ T6146] EXT4-fs (loop1): unsupported inode size: 22272 [ 135.189320][ T6146] EXT4-fs (loop1): blocksize: 1024 [ 136.464124][ T5943] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.641746][ T6151] Failed to get privilege flags for destination (handle=0x2:0x4) [ 137.132416][ T6155] loop2: detected capacity change from 0 to 32768 [ 137.843662][ T6155] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.265320][ T6155] XFS (loop2): Ending clean mount [ 138.281364][ T6155] XFS (loop2): Quotacheck needed: Please wait. [ 139.042539][ T5837] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.290827][ T6155] XFS (loop2): Quotacheck: Done. [ 139.358757][ T5837] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.556974][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.299098][ T6184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.74'. [ 140.338963][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.380531][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.669534][ T5830] IPVS: starting estimator thread 0... [ 141.729589][ T5837] usb 4-1: string descriptor 0 read error: -71 [ 141.736097][ T5837] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 141.748031][ T5837] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 141.801440][ T5837] usb 4-1: config 0 descriptor?? [ 141.802196][ T6192] IPVS: using max 18 ests per chain, 43200 per kthread [ 141.817041][ T6187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.862624][ T5837] usb 4-1: can't set config #0, error -71 [ 141.910407][ T5790] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.919125][ T5837] usb 4-1: USB disconnect, device number 6 [ 142.287554][ T6196] loop3: detected capacity change from 0 to 512 [ 142.308323][ T6196] EXT4-fs (loop3): unsupported inode size: 22272 [ 142.314839][ T6196] EXT4-fs (loop3): blocksize: 1024 [ 145.922955][ T6205] Failed to get privilege flags for destination (handle=0x2:0x4) [ 149.258110][ T6231] loop3: detected capacity change from 0 to 1024 [ 149.589357][ T6236] loop1: detected capacity change from 0 to 47 [ 150.472716][ T6240] MINIX-fs: deleted inode referenced: 9 [ 150.479184][ T6240] MINIX-fs: deleted inode referenced: 9 [ 152.045526][ T6256] Failed to get privilege flags for destination (handle=0x2:0x4) [ 152.132063][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 152.302046][ T23] usb 3-1: device descriptor read/64, error -71 [ 152.344956][ T6246] loop3: detected capacity change from 0 to 32768 [ 152.357406][ T6246] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.89 (6246) [ 152.406603][ T6246] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.418061][ T6246] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 152.428316][ T6246] BTRFS info (device loop3): turning on async discard [ 152.436465][ T6246] BTRFS info (device loop3): using free space tree [ 152.518375][ T6246] BTRFS info (device loop3): enabling ssd optimizations [ 152.582486][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.698441][ T5797] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.752153][ T23] usb 3-1: device descriptor read/64, error -71 [ 152.915219][ T23] usb usb3-port1: attempt power cycle [ 154.062127][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.354633][ T23] usb 3-1: device descriptor read/8, error -71 [ 157.230101][ T6300] loop2: detected capacity change from 0 to 47 [ 158.646304][ T6309] Failed to get privilege flags for destination (handle=0x2:0x4) [ 160.069793][ T5830] IPVS: starting estimator thread 0... [ 160.079190][ T5796] Bluetooth: hci3: unexpected event for opcode 0x080b [ 160.191926][ T6319] IPVS: using max 17 ests per chain, 40800 per kthread [ 160.821925][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.901924][ T23] usb 2-1: device descriptor read/64, error -71 [ 162.317886][ T6335] loop3: detected capacity change from 0 to 47 [ 162.521978][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.704212][ T23] usb 2-1: device descriptor read/64, error -71 [ 163.511472][ T23] usb usb2-port1: attempt power cycle [ 163.763333][ T6355] Failed to get privilege flags for destination (handle=0x2:0x4) [ 163.993320][ T6360] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.083551][ T5796] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 164.092266][ T5796] Bluetooth: hci3: Injecting HCI hardware error event [ 164.100725][ T5796] Bluetooth: hci3: hardware error 0x00 [ 164.791911][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.902850][ T23] usb 2-1: device descriptor read/8, error -71 [ 165.182356][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.826656][ T23] usb 2-1: device descriptor read/8, error -71 [ 165.952173][ T23] usb usb2-port1: unable to enumerate USB device [ 166.162342][ T5796] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 168.258348][ T6375] loop2: detected capacity change from 0 to 32768 [ 169.151044][ T6375] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 169.151487][ T6375] (syz.2.120,6375,1):ocfs2_initialize_super:2287 ERROR: status = -12 [ 169.368664][ T6375] (syz.2.120,6375,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 171.803318][ T6397] Failed to get privilege flags for destination (handle=0x2:0x4) [ 171.934860][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.126'. [ 172.701921][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.921918][ T27] usb 2-1: device descriptor read/64, error -71 [ 173.248946][ T5830] IPVS: starting estimator thread 0... [ 173.995480][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 174.048457][ T6414] IPVS: using max 19 ests per chain, 45600 per kthread [ 174.313720][ T27] usb 2-1: device descriptor read/64, error -71 [ 174.443163][ T27] usb usb2-port1: attempt power cycle [ 174.891942][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 175.231405][ T6416] loop0: detected capacity change from 0 to 32768 [ 175.301667][ T6416] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.445123][ T27] usb 2-1: device descriptor read/8, error -71 [ 175.583289][ T6416] XFS (loop0): Ending clean mount [ 175.625478][ T6416] XFS (loop0): Quotacheck needed: Please wait. [ 175.727269][ T6416] XFS (loop0): Quotacheck: Done. [ 176.861601][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.292701][ T6445] loop3: detected capacity change from 0 to 1024 [ 177.300258][ T6445] EXT4-fs: Ignoring removed orlov option [ 177.376835][ T6445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.442402][ T6452] loop2: detected capacity change from 0 to 2048 [ 177.506899][ T6445] EXT4-fs (loop3): shut down requested (1) [ 177.649639][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.148744][ T6460] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 179.545969][ T6470] loop3: detected capacity change from 0 to 64 [ 180.451926][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 180.822580][ T27] usb 1-1: device descriptor read/64, error -71 [ 181.092264][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.532136][ T27] usb 1-1: device descriptor read/64, error -71 [ 181.719524][ T27] usb usb1-port1: attempt power cycle [ 182.172523][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.212272][ T27] usb 1-1: device descriptor read/8, error -71 [ 182.541924][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.791459][ T6499] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 183.615121][ T27] usb 1-1: device descriptor read/8, error -71 [ 183.763482][ T27] usb usb1-port1: unable to enumerate USB device [ 184.135691][ T6513] loop0: detected capacity change from 0 to 1024 [ 187.345952][ T6538] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 187.890988][ T6540] Failed to get privilege flags for destination (handle=0x2:0x4) [ 188.098621][ T6543] loop0: detected capacity change from 0 to 4096 [ 188.148964][ T6543] ntfs3: loop0: ino=3, Correct links count -> 2. [ 190.621037][ T6556] loop2: detected capacity change from 0 to 1024 [ 190.652922][ T6556] EXT4-fs: Ignoring removed bh option [ 190.701675][ T6556] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.841996][ T5830] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.880429][ T6556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.042061][ T5830] usb 2-1: device descriptor read/64, error -71 [ 191.057416][ T6563] loop0: detected capacity change from 0 to 1024 [ 192.207571][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.493761][ T5830] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 193.131250][ T6583] Failed to get privilege flags for destination (handle=0x2:0x4) [ 193.663179][ T6587] loop0: detected capacity change from 0 to 4096 [ 194.298435][ T6587] ntfs3: loop0: ino=3, Correct links count -> 2. [ 194.566324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.577020][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.875316][ T6595] loop3: detected capacity change from 0 to 1024 [ 199.506316][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.608457][ T6616] Failed to get privilege flags for destination (handle=0x2:0x4) [ 199.692036][ T8] usb 1-1: device descriptor read/64, error -71 [ 199.699515][ T6614] loop1: detected capacity change from 0 to 4096 [ 199.961998][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.602959][ T6638] loop3: detected capacity change from 0 to 1024 [ 202.655840][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 202.685556][ T6647] netlink: 'syz.1.191': attribute type 5 has an invalid length. [ 203.052080][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.744554][ T6662] loop1: detected capacity change from 0 to 1024 [ 207.661897][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.431856][ T5857] usb 4-1: device descriptor read/64, error -71 [ 209.793027][ T5857] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.982309][ T5857] usb 4-1: device descriptor read/64, error -71 [ 210.143952][ T5857] usb usb4-port1: attempt power cycle [ 210.213871][ T6680] loop1: detected capacity change from 0 to 1024 [ 211.472775][ T6684] loop1: detected capacity change from 0 to 764 [ 211.548955][ T6685] Symlink component flag not implemented [ 211.556040][ T6685] Symlink component flag not implemented [ 211.563259][ T6685] Symlink component flag not implemented (128) [ 211.569542][ T6685] Symlink component flag not implemented (122) [ 212.372636][ T6687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.561906][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.973008][ T27] usb 1-1: device descriptor read/64, error -71 [ 213.342010][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.558655][ T6700] loop3: detected capacity change from 0 to 512 [ 213.592787][ T6700] EXT4-fs (loop3): unsupported inode size: 22272 [ 213.599440][ T6700] EXT4-fs (loop3): blocksize: 1024 [ 213.770377][ T27] usb 1-1: device descriptor read/64, error -71 [ 214.274005][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 214.285624][ T6704] netlink: 'syz.2.207': attribute type 5 has an invalid length. [ 215.061889][ T27] usb usb1-port1: attempt power cycle [ 217.250582][ T6720] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 218.022685][ T6723] loop0: detected capacity change from 0 to 64 [ 218.282726][ T6726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.002739][ T6732] loop3: detected capacity change from 0 to 1024 [ 219.038479][ T6732] EXT4-fs: Ignoring removed bh option [ 219.287735][ T6732] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.413405][ T6732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.507612][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.059814][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.939195][ T6756] loop2: detected capacity change from 0 to 764 [ 224.043814][ T6758] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 224.729129][ T6759] Symlink component flag not implemented [ 224.735124][ T6759] Symlink component flag not implemented [ 224.746344][ T6759] Symlink component flag not implemented (128) [ 224.753037][ T6759] Symlink component flag not implemented (122) [ 225.482663][ T6760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.126261][ T6773] loop1: detected capacity change from 0 to 64 [ 231.647766][ T6801] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 231.668656][ T5830] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 232.629545][ T5830] usb 1-1: device descriptor read/64, error -71 [ 233.571404][ T5830] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 233.624939][ T6810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.585769][ T6819] loop3: detected capacity change from 0 to 764 [ 234.836797][ T6821] Symlink component flag not implemented [ 234.842767][ T6821] Symlink component flag not implemented [ 234.850152][ T6821] Symlink component flag not implemented (128) [ 234.856857][ T6821] Symlink component flag not implemented (122) [ 235.501479][ T6817] loop0: detected capacity change from 0 to 64 [ 235.848381][ T6832] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 238.041718][ T6849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.042033][ T5791] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 239.103991][ T5791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.114475][ T5791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.145407][ T5791] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.160763][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.174184][ T5791] usb 1-1: SerialNumber: syz [ 239.206648][ T6856] loop1: detected capacity change from 0 to 1024 [ 239.499819][ T5791] usb 1-1: skipping empty audio interface (v1) [ 240.256501][ T6860] loop0: detected capacity change from 0 to 764 [ 240.341902][ T6861] Symlink component flag not implemented [ 240.347753][ T6861] Symlink component flag not implemented [ 240.354042][ T6861] Symlink component flag not implemented (128) [ 240.360398][ T6861] Symlink component flag not implemented (122) [ 240.906490][ T5791] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 241.102094][ T5791] usb 1-1: USB disconnect, device number 13 [ 241.418509][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.509483][ T6867] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 242.209262][ T6866] loop2: detected capacity change from 0 to 1024 [ 242.403278][ T6866] EXT4-fs: Ignoring removed bh option [ 243.182181][ T6866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.231538][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.256390][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.528894][ T6886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.844273][ T6878] loop1: detected capacity change from 0 to 64 [ 245.041989][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.224275][ T5857] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.271932][ T5857] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.303922][ T5857] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 245.343689][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.371852][ T5857] usb 4-1: SerialNumber: syz [ 245.606612][ T5857] usb 4-1: skipping empty audio interface (v1) [ 245.692873][ T5857] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 245.747700][ T5857] usb 4-1: USB disconnect, device number 10 [ 246.692557][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.972220][ T6901] loop3: detected capacity change from 0 to 1024 [ 249.488491][ T6920] loop0: detected capacity change from 0 to 4096 [ 249.506782][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.524197][ T6920] ntfs3: loop0: ino=3, Correct links count -> 2. [ 249.533739][ T6928] loop2: detected capacity change from 0 to 1024 [ 249.541489][ T6928] EXT4-fs: Ignoring removed bh option [ 249.566145][ T6928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.614496][ T6928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.837171][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.624369][ T6944] loop0: detected capacity change from 0 to 64 [ 252.225808][ T6942] loop2: detected capacity change from 0 to 512 [ 252.283320][ T6942] EXT4-fs (loop2): unsupported inode size: 22272 [ 252.289773][ T6942] EXT4-fs (loop2): blocksize: 1024 [ 256.017549][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.024256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.501145][ T6959] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 258.041679][ T6970] loop2: detected capacity change from 0 to 1024 [ 258.053036][ T6971] loop1: detected capacity change from 0 to 1024 [ 258.083199][ T6970] EXT4-fs: Ignoring removed bh option [ 258.106356][ T6970] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.114811][ T6972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.040758][ T6970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.231336][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.413963][ T6990] loop0: detected capacity change from 0 to 64 [ 262.599482][ T7014] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 263.327518][ T7015] loop1: detected capacity change from 0 to 64 [ 263.627065][ T7020] Zero length message leads to an empty skb [ 264.269892][ T7006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.292330][ T7006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.468703][ T7022] loop3: detected capacity change from 0 to 1024 [ 264.482170][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.740833][ T7023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.322276][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.755730][ T7053] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 270.077123][ T7056] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 270.906417][ T28] audit: type=1800 audit(1754476855.347:5): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.299" name="bus" dev="overlay" ino=392 res=0 errno=0 [ 270.939925][ T7060] loop0: detected capacity change from 0 to 1024 [ 270.990879][ T28] audit: type=1804 audit(1754476855.407:6): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.299" name="/newroot/66/bus/bus" dev="overlay" ino=392 res=1 errno=0 [ 271.942061][ T28] audit: type=1800 audit(1754476855.407:7): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.299" name="bus" dev="overlay" ino=392 res=0 errno=0 [ 272.168171][ T7066] loop0: detected capacity change from 0 to 1024 [ 274.154000][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 274.163791][ T7081] netlink: set zone limit has 8 unknown bytes [ 274.868222][ T7076] loop3: detected capacity change from 0 to 764 [ 275.037349][ T7080] Symlink component flag not implemented [ 275.044824][ T7080] Symlink component flag not implemented [ 275.051251][ T7080] Symlink component flag not implemented (128) [ 275.057826][ T7080] Symlink component flag not implemented (122) [ 276.498774][ T7093] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 277.448419][ T7100] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 278.326055][ T7108] loop2: detected capacity change from 0 to 1024 [ 279.291988][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.313267][ T7094] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 279.320053][ T7094] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.873608][ T7118] netlink: set zone limit has 8 unknown bytes [ 281.362084][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.435162][ T7123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.635758][ T7130] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 283.751060][ T7133] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 284.685741][ T7136] loop3: detected capacity change from 0 to 1024 [ 284.714517][ T7136] EXT4-fs: Ignoring removed bh option [ 284.768439][ T7136] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.793765][ T7142] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 284.821178][ T7143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 284.865016][ T28] audit: type=1800 audit(1754476869.307:8): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="bus" dev="overlay" ino=418 res=0 errno=0 [ 284.926325][ T28] audit: type=1804 audit(1754476869.367:9): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.318" name="/newroot/75/bus/bus" dev="overlay" ino=418 res=1 errno=0 [ 284.948588][ T28] audit: type=1800 audit(1754476869.397:10): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="bus" dev="overlay" ino=418 res=0 errno=0 [ 284.992762][ T7136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.427963][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.811844][ T5837] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 288.211961][ T7157] netlink: set zone limit has 8 unknown bytes [ 288.264107][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.646311][ T5837] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.673433][ T5837] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.171080][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.217971][ T5837] usb 1-1: SerialNumber: syz [ 289.302973][ T7164] loop2: detected capacity change from 0 to 764 [ 289.475467][ T5837] usb 1-1: 0:2 : does not exist [ 289.495640][ T7167] Symlink component flag not implemented [ 289.501326][ T7167] Symlink component flag not implemented [ 289.532618][ T7167] Symlink component flag not implemented (128) [ 289.538995][ T7167] Symlink component flag not implemented (122) [ 289.972632][ T5837] usb 1-1: USB disconnect, device number 14 [ 290.158813][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.370112][ T7177] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 290.640775][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.158218][ T7184] loop3: detected capacity change from 0 to 1024 [ 291.172845][ T7184] EXT4-fs: Ignoring removed bh option [ 291.603202][ T7184] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.036016][ T7180] netlink: 'syz.2.331': attribute type 1 has an invalid length. [ 292.222083][ T7184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.249512][ T7191] loop0: detected capacity change from 0 to 1024 [ 292.551633][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.228469][ T7202] netlink: set zone limit has 8 unknown bytes [ 295.449734][ T7211] loop3: detected capacity change from 0 to 764 [ 296.290182][ T6524] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 296.306470][ T7215] Symlink component flag not implemented [ 296.314390][ T7215] Symlink component flag not implemented [ 296.332380][ T7215] Symlink component flag not implemented (128) [ 296.338741][ T7215] Symlink component flag not implemented (122) [ 296.442044][ T6524] usb 3-1: device descriptor read/64, error -71 [ 296.712176][ T6524] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 297.358170][ T7221] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 298.306742][ T7230] loop0: detected capacity change from 0 to 1024 [ 298.357373][ T7230] EXT4-fs: Ignoring removed bh option [ 298.507252][ T7230] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.778128][ T7226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.939342][ T7230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.138710][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.197805][ T7237] loop3: detected capacity change from 0 to 1024 [ 299.405794][ T7242] loop1: detected capacity change from 0 to 64 [ 302.500006][ T7257] loop3: detected capacity change from 0 to 1024 [ 304.251914][ T6524] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 305.732050][ T6524] usb 4-1: device descriptor read/64, error -71 [ 306.002053][ T6524] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 306.172059][ T6524] usb 4-1: device descriptor read/64, error -71 [ 306.463198][ T6524] usb usb4-port1: attempt power cycle [ 307.582377][ T6524] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 307.608749][ T7278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.817999][ T6524] usb 4-1: device not accepting address 13, error -71 [ 308.277889][ T7288] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 308.488311][ T7291] overlayfs: failed to resolve './file0': -2 [ 308.568638][ T7295] netlink: set zone limit has 8 unknown bytes [ 311.510984][ T7309] loop3: detected capacity change from 0 to 64 [ 312.421825][ T5857] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 313.231889][ T5857] usb 3-1: device descriptor read/64, error -71 [ 314.149541][ T5857] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 314.321942][ T5857] usb 3-1: device descriptor read/64, error -71 [ 314.463409][ T5857] usb usb3-port1: attempt power cycle [ 314.784251][ T7326] loop1: detected capacity change from 0 to 64 [ 314.911852][ T5857] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 315.291961][ T5857] usb 3-1: device not accepting address 11, error -71 [ 315.576174][ T7331] loop0: detected capacity change from 0 to 2048 [ 315.621074][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.650050][ T7331] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.963734][ T7331] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 315.971669][ T7331] overlayfs: failed to verify index dir 'upper' xattr [ 315.991844][ T7331] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 316.125500][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.205681][ T7344] netlink: set zone limit has 8 unknown bytes [ 317.466407][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.473119][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.486801][ T7353] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 317.637471][ T7353] overlayfs: failed to resolve './file0': -2 [ 319.961859][ T5857] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 320.661819][ T5857] usb 2-1: device descriptor read/64, error -71 [ 320.942678][ T5857] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 321.242332][ T5857] usb 2-1: device descriptor read/64, error -71 [ 321.373657][ T5857] usb usb2-port1: attempt power cycle [ 321.801886][ T5857] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 321.912513][ T5857] usb 2-1: device descriptor read/8, error -71 [ 322.272065][ T5857] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 322.641876][ T7362] netlink: 'syz.2.376': attribute type 12 has an invalid length. [ 322.704059][ T5857] usb 2-1: device descriptor read/8, error -71 [ 322.908699][ T5857] usb usb2-port1: unable to enumerate USB device [ 322.962520][ T7369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.008709][ T7369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.391895][ T7403] netlink: set zone limit has 8 unknown bytes [ 325.042641][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 325.052118][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.398008][ T7411] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 326.583777][ T7411] overlayfs: failed to resolve './file0': -2 [ 326.774628][ T7415] loop0: detected capacity change from 0 to 1024 [ 328.285334][ T7424] loop2: detected capacity change from 0 to 1024 [ 328.682465][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 328.745342][ T7428] netlink: 'syz.0.392': attribute type 5 has an invalid length. [ 328.909001][ T7428] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.918431][ T7428] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.927338][ T7428] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.936132][ T7428] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.948961][ T7428] vxlan0: entered promiscuous mode [ 331.084132][ T7445] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 331.864692][ T7447] netlink: set zone limit has 8 unknown bytes [ 334.160386][ T7456] loop1: detected capacity change from 0 to 1024 [ 335.527172][ T7462] loop1: detected capacity change from 0 to 1024 [ 337.992876][ T7475] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 338.248168][ T7479] overlayfs: failed to resolve './file1': -2 [ 338.625671][ T7483] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 339.548464][ T7488] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 340.434241][ T7490] netlink: set zone limit has 8 unknown bytes [ 341.535549][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.821318][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 342.982035][ T7502] netlink: 'syz.3.412': attribute type 5 has an invalid length. [ 343.359959][ T7502] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.369018][ T7502] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.378114][ T7502] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.386961][ T7502] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.862394][ T7502] vxlan0: entered promiscuous mode [ 344.129072][ T7510] loop2: detected capacity change from 0 to 1024 [ 344.422408][ T7515] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 346.145580][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 346.160582][ T7526] loop1: detected capacity change from 0 to 256 [ 346.168085][ T7526] exfat: Deprecated parameter 'namecase' [ 347.801161][ T7526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 348.171316][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 348.832232][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.852635][ T27] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.926710][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.946240][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.962622][ T27] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 348.985377][ T27] usb 3-1: Product: syz [ 348.989714][ T27] usb 3-1: Manufacturer: syz [ 348.997607][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.002009][ T27] usb 3-1: SerialNumber: syz [ 349.163940][ T27] usb 3-1: config 0 descriptor?? [ 349.199750][ T27] usb 3-1: can't set config #0, error -71 [ 349.216933][ T27] usb 3-1: USB disconnect, device number 13 [ 350.391610][ T7550] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.408390][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 351.890321][ T7558] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 352.000187][ T7561] overlayfs: failed to resolve './file1': -2 [ 352.508774][ T7565] loop0: detected capacity change from 0 to 64 [ 354.463421][ T7573] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 357.621349][ T7596] loop1: detected capacity change from 0 to 764 [ 357.853179][ T7598] loop3: detected capacity change from 0 to 512 [ 359.293742][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.463934][ T7598] EXT4-fs (loop3): unsupported inode size: 22272 [ 359.470432][ T7598] EXT4-fs (loop3): blocksize: 1024 [ 361.008623][ T7606] loop2: detected capacity change from 0 to 1024 [ 361.075388][ T7606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.139912][ T7606] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.126745][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.539713][ T7628] loop3: detected capacity change from 0 to 2048 [ 364.967739][ T7629] loop2: detected capacity change from 0 to 128 [ 364.991865][ T7628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.983766][ T7633] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 366.034935][ T7634] overlayfs: failed to resolve './file1': -2 [ 366.173713][ T7639] loop0: detected capacity change from 0 to 764 [ 366.408746][ T7642] Symlink component flag not implemented [ 366.414727][ T7642] Symlink component flag not implemented [ 366.422194][ T7642] Symlink component flag not implemented (128) [ 366.428496][ T7642] Symlink component flag not implemented (122) [ 366.739857][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'. [ 367.225472][ T7648] loop1: detected capacity change from 0 to 4096 [ 367.372742][ T7654] loop3: detected capacity change from 0 to 512 [ 368.673260][ T7654] EXT4-fs (loop3): unsupported inode size: 22272 [ 368.679725][ T7654] EXT4-fs (loop3): blocksize: 1024 [ 369.437606][ T7647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.461031][ T7659] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.131948][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 370.357750][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.389185][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.419377][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 370.444364][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.484623][ T27] usb 2-1: config 0 descriptor?? [ 370.521830][ T5875] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 370.755034][ T5875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.837829][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.950714][ T5875] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 371.061276][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 371.189895][ T5875] usb 3-1: SerialNumber: syz [ 371.249782][ T27] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 371.379726][ T27] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 371.532355][ T27] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input6 [ 371.659630][ T5875] usb 3-1: 0:2 : does not exist [ 371.685114][ T5875] usb 3-1: unit 5 not found! [ 371.756187][ T27] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 371.782168][ T5875] usb 3-1: USB disconnect, device number 14 [ 371.933834][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.131615][ T5830] usb 2-1: USB disconnect, device number 18 [ 372.678879][ T7675] fido_id[7675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 372.952294][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.459'. [ 373.035477][ T7685] loop3: detected capacity change from 0 to 764 [ 373.113399][ T7686] Symlink component flag not implemented [ 373.119181][ T7686] Symlink component flag not implemented [ 373.125630][ T7686] Symlink component flag not implemented (128) [ 373.132060][ T7686] Symlink component flag not implemented (122) [ 374.072106][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.169258][ T7688] loop1: detected capacity change from 0 to 64 [ 374.943743][ T7690] loop3: detected capacity change from 0 to 32768 [ 375.001317][ T7690] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.141935][ T5830] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 375.221152][ T7690] XFS (loop3): Ending clean mount [ 375.362146][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 375.378861][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 375.404033][ T5830] usb 1-1: config 16 has an invalid interface number: 64 but max is 0 [ 375.425310][ T5830] usb 1-1: config 16 has no interface number 0 [ 375.436520][ T5830] usb 1-1: config 16 interface 64 has no altsetting 0 [ 375.482764][ T7696] loop1: detected capacity change from 0 to 32768 [ 375.487028][ T5830] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=3d.e7 [ 375.533110][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.540807][ T7696] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.558706][ T5830] usb 1-1: Product: syz [ 375.564377][ T5830] usb 1-1: Manufacturer: syz [ 375.574072][ T5830] usb 1-1: SerialNumber: syz [ 375.750434][ T7696] XFS (loop1): Ending clean mount [ 375.783073][ T7696] XFS (loop1): Quotacheck needed: Please wait. [ 375.825374][ T5830] ati_remote 1-1:16.64: ati_remote_probe: Unexpected desc.bNumEndpoints [ 375.866702][ T7696] XFS (loop1): Quotacheck: Done. [ 375.892215][ T5830] usb 1-1: USB disconnect, device number 15 [ 376.089089][ T5797] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.120295][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.870271][ T7741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.983990][ T7744] loop3: detected capacity change from 0 to 1024 [ 378.886754][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.893386][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.489904][ T7754] loop3: detected capacity change from 0 to 64 [ 380.155621][ T7758] loop2: detected capacity change from 0 to 64 [ 380.261081][ T7760] loop0: detected capacity change from 0 to 128 [ 381.671038][ T7766] loop2: detected capacity change from 0 to 512 [ 381.768706][ T7766] EXT4-fs (loop2): unsupported inode size: 22272 [ 381.775305][ T7766] EXT4-fs (loop2): blocksize: 1024 [ 384.320508][ T7776] loop0: detected capacity change from 0 to 4096 [ 384.328285][ T7776] EXT4-fs: Ignoring removed mblk_io_submit option [ 384.742771][ T7779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.046158][ T7774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.073831][ T7776] fscrypt: Error allocating hmac(sha512): -2 [ 389.562535][ T5876] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 389.741814][ T5876] usb 2-1: device descriptor read/64, error -71 [ 390.609476][ T5876] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 391.177480][ T7819] loop3: detected capacity change from 0 to 512 [ 391.505510][ T7819] EXT4-fs (loop3): unsupported inode size: 22272 [ 391.512164][ T7819] EXT4-fs (loop3): blocksize: 1024 [ 393.712791][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.221438][ T7853] loop2: detected capacity change from 0 to 512 [ 396.282576][ T7849] loop3: detected capacity change from 0 to 4096 [ 396.303391][ T7853] EXT4-fs (loop2): unsupported inode size: 22272 [ 396.309953][ T7853] EXT4-fs (loop2): blocksize: 1024 [ 396.514460][ T7855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.332163][ T5837] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 397.501094][ T7860] batman_adv: batadv0: Adding interface: dummy0 [ 397.510064][ T7860] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.556733][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.571409][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.587952][ T7860] batman_adv: batadv0: Interface activated: dummy0 [ 397.595329][ T5837] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 397.632781][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.669211][ T7861] batadv0: mtu less than device minimum [ 397.678211][ T5837] usb 4-1: config 0 descriptor?? [ 397.697971][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.711264][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.723943][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.736682][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.749341][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.762002][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.774773][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.787510][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 397.800151][ T7861] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 398.385500][ T5837] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 398.394922][ T5837] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 398.436847][ T5837] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input7 [ 398.499619][ T5837] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 400.732357][ T5876] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 401.596700][ T5837] usb 4-1: USB disconnect, device number 15 [ 402.087921][ T7876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.476995][ T7882] loop1: detected capacity change from 0 to 64 [ 403.718176][ T7893] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 404.594316][ T7892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.512'. [ 407.389413][ T7913] loop1: detected capacity change from 0 to 512 [ 410.341805][ T7913] EXT4-fs (loop1): unsupported inode size: 22272 [ 410.348288][ T7913] EXT4-fs (loop1): blocksize: 1024 [ 410.610695][ T7916] loop3: detected capacity change from 0 to 1024 [ 410.945068][ T7917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.812863][ T7945] loop0: detected capacity change from 0 to 512 [ 414.870393][ T7945] EXT4-fs (loop0): unsupported inode size: 22272 [ 414.876998][ T7945] EXT4-fs (loop0): blocksize: 1024 [ 416.302118][ T6848] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 417.316159][ T7948] loop2: detected capacity change from 0 to 4096 [ 417.410562][ T7955] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.862255][ T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 418.856569][ T7953] loop0: detected capacity change from 0 to 32768 [ 418.928270][ T7953] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.988905][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.000229][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.054969][ T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 419.087306][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.129354][ T27] usb 3-1: config 0 descriptor?? [ 419.286118][ T7953] XFS (loop0): Ending clean mount [ 419.306008][ T7953] XFS (loop0): Quotacheck needed: Please wait. [ 419.367368][ T7953] XFS (loop0): Quotacheck: Done. [ 419.556112][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.597718][ T27] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 419.615666][ T27] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 419.682502][ T27] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input8 [ 420.792656][ T27] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 421.045394][ T5837] usb 3-1: reset high-speed USB device number 15 using dummy_hcd [ 421.763608][ T7989] loop2: detected capacity change from 0 to 64 [ 421.990499][ T5876] usb 3-1: USB disconnect, device number 15 [ 422.607422][ T7992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.796640][ T7995] loop3: detected capacity change from 0 to 512 [ 422.818558][ T7995] EXT4-fs (loop3): unsupported inode size: 22272 [ 422.825172][ T7995] EXT4-fs (loop3): blocksize: 1024 [ 425.940355][ T8008] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 426.937727][ T8014] loop1: detected capacity change from 0 to 4096 [ 427.013010][ T8017] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.353234][ T8026] loop0: detected capacity change from 0 to 1024 [ 427.671824][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 428.236040][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.272264][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.311853][ T5876] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 428.332436][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.633619][ T5876] usb 2-1: config 0 descriptor?? [ 429.248188][ T5876] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 429.276550][ T5876] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 429.320585][ T5876] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0004/input/input9 [ 429.350693][ T5876] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 429.465430][ T8030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.523479][ T27] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 431.925158][ T5875] usb 2-1: USB disconnect, device number 21 [ 433.404457][ T8063] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 433.416009][ T8065] loop0: detected capacity change from 0 to 128 [ 434.575768][ T8073] loop1: detected capacity change from 0 to 1024 [ 435.899019][ T8080] loop0: detected capacity change from 0 to 764 [ 436.046436][ T8081] Symlink component flag not implemented [ 436.054234][ T8081] Symlink component flag not implemented [ 436.060451][ T8081] Symlink component flag not implemented (128) [ 436.068730][ T8081] Symlink component flag not implemented (122) [ 437.044008][ T8085] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 438.341514][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.566'. [ 438.902203][ T8100] loop0: detected capacity change from 0 to 1024 [ 440.353284][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.359917][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.580043][ T8112] loop1: detected capacity change from 0 to 512 [ 440.613328][ T8112] EXT4-fs (loop1): unsupported inode size: 22272 [ 440.619799][ T8112] EXT4-fs (loop1): blocksize: 1024 [ 441.043127][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'. [ 442.003370][ T8126] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 442.924637][ T8136] loop0: detected capacity change from 0 to 64 [ 444.147133][ T8141] loop3: detected capacity change from 0 to 4096 [ 444.303356][ T8146] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.377363][ T8148] loop0: detected capacity change from 0 to 128 [ 445.851954][ T8163] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 448.290686][ T8180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.588'. [ 449.300823][ T8188] loop0: detected capacity change from 0 to 64 [ 452.287894][ T8207] loop0: detected capacity change from 0 to 32768 [ 452.338357][ T8207] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 452.599116][ T8207] XFS (loop0): Ending clean mount [ 452.665198][ T8207] XFS (loop0): Quotacheck needed: Please wait. [ 452.786449][ T8207] XFS (loop0): Quotacheck: Done. [ 454.409454][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.456353][ T8250] loop3: detected capacity change from 0 to 64 [ 458.044971][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.607'. [ 459.022852][ T8262] loop3: detected capacity change from 0 to 128 [ 460.005009][ T8264] loop2: detected capacity change from 0 to 1024 [ 462.759441][ T8275] loop3: detected capacity change from 0 to 764 [ 462.797947][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.613'. [ 462.891764][ T8279] Symlink component flag not implemented [ 462.900137][ T8279] Symlink component flag not implemented [ 462.909955][ T8279] Symlink component flag not implemented (128) [ 462.921729][ T8279] Symlink component flag not implemented (122) [ 464.595970][ T8292] loop1: detected capacity change from 0 to 64 [ 464.719470][ T8296] loop2: detected capacity change from 0 to 128 [ 465.206436][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.618'. [ 466.827003][ T8307] loop2: detected capacity change from 0 to 40427 [ 466.863650][ T8307] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 466.873679][ T8307] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 467.080802][ T8307] F2FS-fs (loop2): invalid crc value [ 467.150947][ T8307] F2FS-fs (loop2): Found nat_bits in checkpoint [ 467.387132][ T8307] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 467.414593][ T8307] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 469.920831][ T8325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.626'. [ 470.858522][ T8334] loop0: detected capacity change from 0 to 1024 [ 471.066748][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 471.102170][ T8338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.921930][ T5837] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 473.162091][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 473.169609][ T5837] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 473.248093][ T5837] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 473.304283][ T5837] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 473.334483][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.347466][ T5837] usb 2-1: Product: syz [ 473.358898][ T5837] usb 2-1: Manufacturer: syz [ 473.366053][ T5837] usb 2-1: SerialNumber: syz [ 473.602788][ T5837] cytherm 2-1:5.0: Cypress thermometer device now attached [ 473.602935][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 473.663063][ T5837] usb 2-1: USB disconnect, device number 22 [ 473.704247][ T5837] cytherm 2-1:5.0: Cypress thermometer now disconnected [ 474.294075][ T8371] loop1: detected capacity change from 0 to 1024 [ 474.741985][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 475.220916][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.334974][ T8388] loop2: detected capacity change from 0 to 128 [ 477.821383][ T8409] loop1: detected capacity change from 0 to 64 [ 478.518578][ T8406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.514781][ T8416] loop1: detected capacity change from 0 to 764 [ 479.657983][ T8418] Symlink component flag not implemented [ 479.723785][ T8418] Symlink component flag not implemented [ 479.995911][ T8418] Symlink component flag not implemented (128) [ 480.122132][ T8418] Symlink component flag not implemented (122) [ 480.339230][ T8426] loop3: detected capacity change from 0 to 1024 [ 482.140242][ T8433] loop0: detected capacity change from 0 to 764 [ 482.297203][ T8435] Symlink component flag not implemented [ 482.304734][ T8435] Symlink component flag not implemented [ 482.314018][ T8435] Symlink component flag not implemented (128) [ 482.320408][ T8435] Symlink component flag not implemented (122) [ 483.044853][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 483.077181][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.269861][ T8436] loop3: detected capacity change from 0 to 32768 [ 483.281867][ T8436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.662 (8436) [ 483.307348][ T8436] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.320924][ T8436] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 483.331827][ T8436] BTRFS info (device loop3): using free space tree [ 483.377048][ T8436] BTRFS info (device loop3): enabling ssd optimizations [ 483.384543][ T8436] BTRFS info (device loop3): auto enabling async discard [ 484.622266][ T5797] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 485.140373][ T8472] loop2: detected capacity change from 0 to 1024 [ 486.796580][ T8474] loop0: detected capacity change from 0 to 40427 [ 486.856816][ T8474] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 486.872181][ T8474] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 486.960119][ T8474] F2FS-fs (loop0): Found nat_bits in checkpoint [ 487.119264][ T8489] loop2: detected capacity change from 0 to 764 [ 487.224548][ T8490] Symlink component flag not implemented [ 487.230485][ T8490] Symlink component flag not implemented [ 487.237017][ T8490] Symlink component flag not implemented (128) [ 487.243447][ T8490] Symlink component flag not implemented (122) [ 487.725968][ T8474] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 487.767509][ T8474] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 488.036608][ T28] audit: type=1800 audit(1754477072.467:11): pid=8474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.671" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 488.197157][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.311931][ T8509] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 490.628055][ T8513] loop1: detected capacity change from 0 to 1024 [ 490.688018][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 490.755105][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 490.770253][ T991] hfsplus: b-tree write err: -5, ino 4 [ 491.162584][ T8523] netlink: 'syz.1.683': attribute type 3 has an invalid length. [ 491.170585][ T8523] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 491.182077][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'. [ 491.891146][ T8528] ================================================================================ [ 491.941103][ T8528] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 491.946670][ T8529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.968986][ T8528] shift exponent -4 is negative [ 491.987284][ T8528] CPU: 0 PID: 8528 Comm: syz.0.685 Not tainted 6.6.101-syzkaller #0 [ 491.995452][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.005648][ T8528] Call Trace: [ 492.008966][ T8528] [ 492.011925][ T8528] dump_stack_lvl+0x16c/0x230 [ 492.016635][ T8528] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 492.022294][ T8528] ? show_regs_print_info+0x20/0x20 [ 492.027664][ T8528] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 492.033373][ T8528] ? ubsan_epilogue+0x5/0x30 [ 492.038019][ T8528] ubsan_epilogue+0xa/0x30 [ 492.042477][ T8528] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 492.048954][ T8528] pcl726_attach+0xab9/0xd40 [ 492.053575][ T8528] comedi_device_attach+0x519/0x660 [ 492.058815][ T8528] comedi_unlocked_ioctl+0x68d/0xf90 [ 492.064139][ T8528] ? tomoyo_path_number_perm+0x477/0x590 [ 492.069797][ T8528] ? comedi_poll+0x8c0/0x8c0 [ 492.074452][ T8528] ? __fget_files+0x28/0x4d0 [ 492.079071][ T8528] ? bpf_lsm_file_ioctl+0x9/0x10 [ 492.084045][ T8528] ? security_file_ioctl+0x80/0xa0 [ 492.089194][ T8528] ? comedi_poll+0x8c0/0x8c0 [ 492.093811][ T8528] __se_sys_ioctl+0xfd/0x170 [ 492.098431][ T8528] do_syscall_64+0x55/0xb0 [ 492.102888][ T8528] ? clear_bhb_loop+0x40/0x90 [ 492.107599][ T8528] ? clear_bhb_loop+0x40/0x90 [ 492.112293][ T8528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.118323][ T8528] RIP: 0033:0x7f98faf8ebe9 [ 492.122770][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.142454][ T8528] RSP: 002b:00007f98fbe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.150923][ T8528] RAX: ffffffffffffffda RBX: 00007f98fb1b6090 RCX: 00007f98faf8ebe9 [ 492.159033][ T8528] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 492.167114][ T8528] RBP: 00007f98fb011e19 R08: 0000000000000000 R09: 0000000000000000 [ 492.175107][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.183097][ T8528] R13: 00007f98fb1b6128 R14: 00007f98fb1b6090 R15: 00007ffcd4868aa8 [ 492.191110][ T8528] [ 492.315366][ T8528] ================================================================================ [ 492.330590][ T8528] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 492.337853][ T8528] CPU: 0 PID: 8528 Comm: syz.0.685 Not tainted 6.6.101-syzkaller #0 [ 492.345857][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.355933][ T8528] Call Trace: [ 492.359225][ T8528] [ 492.362170][ T8528] dump_stack_lvl+0x16c/0x230 [ 492.366869][ T8528] ? show_regs_print_info+0x20/0x20 [ 492.372194][ T8528] ? load_image+0x3b0/0x3b0 [ 492.376767][ T8528] panic+0x2c0/0x710 [ 492.380711][ T8528] ? bpf_jit_dump+0xd0/0xd0 [ 492.385260][ T8528] ? ubsan_epilogue+0x5/0x30 [ 492.389874][ T8528] check_panic_on_warn+0x84/0xa0 [ 492.394844][ T8528] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 492.401310][ T8528] pcl726_attach+0xab9/0xd40 [ 492.405925][ T8528] comedi_device_attach+0x519/0x660 [ 492.411159][ T8528] comedi_unlocked_ioctl+0x68d/0xf90 [ 492.416486][ T8528] ? tomoyo_path_number_perm+0x477/0x590 [ 492.422175][ T8528] ? comedi_poll+0x8c0/0x8c0 [ 492.426861][ T8528] ? __fget_files+0x28/0x4d0 [ 492.431479][ T8528] ? bpf_lsm_file_ioctl+0x9/0x10 [ 492.436430][ T8528] ? security_file_ioctl+0x80/0xa0 [ 492.441565][ T8528] ? comedi_poll+0x8c0/0x8c0 [ 492.446202][ T8528] __se_sys_ioctl+0xfd/0x170 [ 492.450821][ T8528] do_syscall_64+0x55/0xb0 [ 492.455254][ T8528] ? clear_bhb_loop+0x40/0x90 [ 492.459956][ T8528] ? clear_bhb_loop+0x40/0x90 [ 492.464663][ T8528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.470588][ T8528] RIP: 0033:0x7f98faf8ebe9 [ 492.475031][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.494765][ T8528] RSP: 002b:00007f98fbe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.503246][ T8528] RAX: ffffffffffffffda RBX: 00007f98fb1b6090 RCX: 00007f98faf8ebe9 [ 492.511266][ T8528] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 492.519289][ T8528] RBP: 00007f98fb011e19 R08: 0000000000000000 R09: 0000000000000000 [ 492.527317][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.535422][ T8528] R13: 00007f98fb1b6128 R14: 00007f98fb1b6090 R15: 00007ffcd4868aa8 [ 492.543465][ T8528] [ 492.546836][ T8528] Kernel Offset: disabled [ 492.551259][ T8528] Rebooting in 86400 seconds..