last executing test programs: 5m39.059919199s ago: executing program 2 (id=3): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800030000000000000000000a800000000300070000000014000100ff"], 0x30}}, 0x0) 5m38.108941756s ago: executing program 2 (id=8): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 5m22.416124213s ago: executing program 32 (id=8): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 3m41.674431648s ago: executing program 0 (id=308): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 3m40.81060805s ago: executing program 0 (id=310): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) socket$inet(0x2, 0x80001, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(0xffffffffffffffff, 0x568) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0307000000000000000008000000"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 3m39.198016957s ago: executing program 0 (id=314): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x803) connect$bt_rfcomm(r0, &(0x7f0000000380)={0x1f, @any, 0x7}, 0xa) close(r0) 3m38.490911135s ago: executing program 0 (id=319): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendfile(r0, r1, 0x0, 0x1000000201001) 3m37.512072129s ago: executing program 0 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) unshare(0x22020600) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xf000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x6, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xeeee0000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xd, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.734358527s ago: executing program 0 (id=329): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 3m31.025445769s ago: executing program 33 (id=329): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 3m22.185854281s ago: executing program 5 (id=358): ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x936a, 0x0, 0x0, 0x81, 0x47, 0x6, 0x101, 0x96e8, 0x2, 0xb88a, 'syz1\x00'}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)="ad9981f67cbb70b7c3eb98234e2f338c3615fbf2e05abdf470d46d22fbc37d0f47f00002880b6434dfa4f813643ae6149d4b", 0x0, 0xffffff31, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x6, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x100000000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m20.382223875s ago: executing program 5 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000001c0002801800038010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m18.871202751s ago: executing program 5 (id=366): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000004bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 3m7.428087485s ago: executing program 5 (id=386): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x448, &(0x7f0000000780)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x18) 3m6.013000868s ago: executing program 5 (id=391): setresuid(0x0, 0xee00, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 3m4.678725189s ago: executing program 5 (id=404): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZz+0V7pzK/X3LpzJw7nGd6+/Sce3rO3AAqazD9pxaxPyKmk4j+ZH6xrDOywsGF5z3486Oz6SOJev2135NIsmP585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTVbH949tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb3g2Omb777f/8nYm9989Vcy8u0vY0mcjJezJy69jq0yGION70mysqjvxFZXVpKO7Odk6UucdJYYEBuSv35dEfFE9EdHPHzx+uPjV0oNDthW9SSiDlRUIv+hovJ+QP7efvn74FopvRKgHe6fWhgAWJn/nQtjg9HTGBvY/SCJpcM6SURsbmSu2Z6IuHtn7Oa5O2M3Y5vG4YBi8zci4smi/E8a+T8QPTHQyP9aU/6n/YIz2df0+KubrH/5ULH8h/ZZyP+eVfM/WuT/W0vy/+1N1j/4cPOd3qb8793sJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMktqH9w2f7Kv//X7m1BNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+KNeNxBx/0bEU4Xzf5PF9j8paP/T3wfT66xj37O3zrQqWzv/ge1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63q32z+u8UEPLq0/d+9ev4PJEvv1zOz8TqOznXWW5Vttv/fnbzeuOVMd3bsg/HZ2asjEd3J6Y70aNPx0Y3HDI+jPB/yfEnz/9Azq4//FfX/eyNiftn/nfzRvKY49/+/+35tFY/+P5Qnzf+JDbX/G98YvTXwfav619f+H2u09YeyI8b/YMEXeZp2Nx8vSMfOoqJ2xwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj4NaROyJpDa0uF2rDQ1F9EXE/2J3berKzOxz5668d3kiLWt8/n8t/6Tf/oX9JP/8/4El+6PL9o9GxN6I+Lyjt7E/dPbK1ETZFw8AAAAAAAAAAAAAAAAAAAA7RF+L9f+p3zrKjg7Ydp1lBwCUpiD/fyojDqD9tP9QXfIfqkv+Q3XJf6iudeb/ye2OA2g/7T9Ul/yH6pL/AAAAAADwWNl74PbPSUTMv9jbeKS6s7KuUiMDtlut7ACA0rjFD1SXqT9QXd7jA8ka5T0tT1rrzNVMn32EkwEAAAAAAAAAAACgcg7ut/4fqsr6f6gu6/+huvL1/wdKjgNoP+/xgVhjJX/h+v81zwIAAAAAAAAAAAAAttLM3LWL41NTk1dtvLEzwmjnRr1ev57+FOyUeP7lG/lU+J0Sz7KNfK3f+s4q73cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7J8AAAD//yTpJQU=") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80602, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x40, 0x8, 0x0, 0xfffffffffdffffff}) 3m1.175513069s ago: executing program 34 (id=404): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80602, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x40, 0x8, 0x0, 0xfffffffffdffffff}) 13.220426746s ago: executing program 7 (id=1005): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)=""/278, 0x116}, {&(0x7f0000000e00)=""/4059, 0xfdb}, {&(0x7f0000000d00)=""/216, 0xd8}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000003340)=""/4074, 0xfea}, {&(0x7f0000000780)=""/186, 0xba}, {&(0x7f0000000940)=""/188, 0xbc}], 0x7}, 0x40012100) 12.160913022s ago: executing program 7 (id=1010): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) 11.547675655s ago: executing program 7 (id=1013): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x42, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@s}, @alu={0x7, 0x0, 0xa, 0x2, 0x9, 0x2, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5ca}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe76b}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f0000000000)=[{0x40, 0x8, 0x1, 0x8}, {0x81, 0x9, 0x81, 0x8}, {0x9, 0x6, 0xfa, 0x5}, {0xc000, 0x0, 0x54, 0x7}, {0x5, 0x83, 0x40, 0x3}, {0x3c, 0xd, 0x14, 0x4}, {0xd1, 0xf9, 0xb3, 0xe1f}, {0x8, 0x5, 0x8, 0x1}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, &(0x7f0000000140), &(0x7f0000000180)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x50) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r6, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2d, &(0x7f0000000180)=r6, 0x1a) unlink(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 9.839556276s ago: executing program 7 (id=1022): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) 9.151862979s ago: executing program 7 (id=1026): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x220000c, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@redirect_dir_on}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) 5.427907025s ago: executing program 4 (id=1044): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) 5.322628418s ago: executing program 6 (id=1045): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.784466237s ago: executing program 3 (id=1047): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022, 0x1}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}, 0xfee1, 0x0}, 0x2008a0c1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2101) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0xfe33) 4.560914609s ago: executing program 4 (id=1048): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001840)=""/187, 0xbb}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f0000000780)=""/4112, 0x1010}, {&(0x7f0000000680)=""/121, 0x79}], 0x5}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.460532804s ago: executing program 6 (id=1049): socket$kcm(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f00000048c0)=""/4115, 0x1013}, {&(0x7f0000003800)=""/158, 0x9e}, {&(0x7f00000002c0)=""/129, 0x81}], 0x5}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.10015174s ago: executing program 1 (id=1050): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 3.999897908s ago: executing program 3 (id=1051): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r1 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 3.616355773s ago: executing program 6 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e4601000e0001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.616085242s ago: executing program 4 (id=1053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) bind$vsock_stream(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x9, 0x9, 0x82}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xca, 0x8, 0x4, 0xff, 0x81, 0x0, 0x800000000000000}, {0xffffff01, 0x0, 0x7, 0x4, 0x4, 0x5, 0x7, 0x8, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x40003}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x7, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0xbb, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x6, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x7fc4, 0x6) socket$inet6(0xa, 0x6, 0x4b130000) recvmmsg(r5, 0x0, 0x0, 0x2002, 0x0) 3.445666404s ago: executing program 1 (id=1054): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(0x3) 3.112612496s ago: executing program 3 (id=1055): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="240000006400ed"], 0xfe33) 2.714984294s ago: executing program 6 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd2(0x400006, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x7, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setreuid(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) syz_fuse_handle_req(r7, &(0x7f0000000a40)="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", 0x2000, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) 2.654835095s ago: executing program 1 (id=1057): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x6}, 0x28) 2.235176799s ago: executing program 3 (id=1058): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0) 1.988659516s ago: executing program 4 (id=1059): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) 1.861814772s ago: executing program 1 (id=1060): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) eventfd2(0x400006, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setreuid(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) syz_fuse_handle_req(r6, &(0x7f0000000a40)="a5927dbb95453fc7311e5bd9099be45a7103cfa7ccab75b218a5ded396ffc44af5894561b2b1113471ad4a334b62ad65c7b92d0de12b42a813896d26ab5e5527e10a95a479c12716595220a19835d96a4c2680e2bf0ecd085937f8e1e039201257815ef699ddec508a33646c95e4bb2d969633ae5801fd526573610a5947b356106c7e0ebfc934200061d7f394a2b6f63c76f30d176141d194fdbeebb926c74eb1711058dba99c7347b76326c8a1243dabac5c35fa097ef433efb1ddb7cbb10415f867156d2f5f3b8b2b28215f36f4aca8505396b5eb3ec9729237089af5df0cfd3864f7ea4ad2eab3b501d8810ecd5e47a884a9e8cb98683a722ff83631eef52b414361b415b51f1be63b880717d26a0d7f5c3c7a8f088bcb925539741f618249a3136f389fc4720c79fce85f2d1eed2c0762ced67715676ff3fde1562364622dd3501f01780eeab74a583b793117e172d9dd0ecd483e14cef7f193b159511a2d8d1a521f1a742e8f539204b0d9dc47dbd6bd53f8a558f0871fc4b0618ecc92a3c89fa27970346645e63c66117bc4448c9149a6d070be6d53d4a7dc28a0acd211ecf4b4784a5ae2726a180243c8b5819e4e0f3338b8344041d9f13a6e8b72a5138334fd649584f025a4d8513391ceae4c774067992b053b3442a3bec25687f06be39ee1d76c713e6e38bfc2ece4a59c17fef3968dc7d64a99dbbccc8fc58878bc96170a28a06e0028edc4b92a9537443a3f3b5e33d2de163afd9525d3a28542c675ed6d4c44b00dbea9b6bcb2944b5b7a19f975321354a5fb7a51a93c5a8ce8ad61108b7ba1f8078564425f09070f55f4ea9204288d44334bfe8e13e8f4a7bd74f09473540c106f322ad0fa2e96b3c21efc34e7fd95cc8cd36e2628047523d1d121376f0509d9ca9ed15310130ef3944cd1d581cdbb1948efb20de8c566a3a54f2135c268f78718bf74763f12020af8f992cfb4c34652b41a6b4bf93c63da0c03fc44a9112508be74a645861e2ab9093c47328cfe61e7ea6386af3198e7e8df1acb860030cd4c069c0b353760784dc3665ff0b642193e063c2c2379e8b432570d2856cf402a3b1e01fc01856db302342419cc1114a695a1efdaca7c84dc9a4d3da254a98d920d6a41621ff55bc84f2d93190ba2598b0d229ff6b250b291a14994de11e4bf05fe075bfd53d2b70ab9d491310bf9571309337ab55c7891f7fd3b96384b4619dead5f198786952abb5fb53cd02c0f025c97dc028863451a9018fd66316b6d87c207d905d0578655236350d934f00ee71a7149bd9bb2a934777121689cf0d6f9dba5d09347ee8619dc48157f2c30030aa60c5610b0072799631c388613e4eece3774e208ac70fcd218abb6e3c14f3d4e69168fde3956a715ebbc5dd1dbe9abfd33c72cd0a0ecc0ad5d2c757163715670ef3b9fda44e85ed80d4b5eb05b1369009dfcb171542f66419e35d1a61d5b8e88746a7df7f2366f11e05916b7581630a69896ba46c82bfe0d538ae7c57d09eed593ce41ace521e14ce2b9ba1032fbe30fcaca7b5b5fb89e35582eb84788759fab954f97e317c9e2974082766aa83c3399c51332203e6e870ec93c387ad2967e18f8f4e75dafac5a38affe252a2a3e7953b26a5685b84515da65eb93165fa69d80db680354567993e0e20c10b2eabf6bafdf21f7adfffbbcb143cc650bfaa119643d0ef1ce225bd77bc19abc05139f840f1b163f80e0ab35bd4c263b34bbfbe2839ac348512fd47472f6ea7dd71b3055472833b461314a69b50980092ea65cb767167bb6dfdd88b22750027b96a626da4ef807fa135084fa60e30544f17f0fd7b05352161cbc4e6bca1cab39cdebc66db49133df233d79559acae9955ee9e514918d82fa40f6fac4e5f633a4b24b7e3abc21996b4de21d825a99a5201901e83efc4dd106a87ed8a05368af3ce09d58b5c9e7b45093e49d37969a74a68f37b950d92e67030cebbaf363a81679dacf7c2311266236497ca4072387dd923f36cd970460d5094c3809f7a77bae8072284366a37ee2c301a728319d9ab69d42bde3177fb9129bac0a788db3ae7e639e5741baf7119d287855b78592da76d78c3222a2e1a7f818c7e326c5c5d64a8c6ca02982a58b74c818a8b52a98d546c3b1c82a1770b871f05014da7ee1272ae8a61f7d56920ce60ffece64a28e6f6582a8c7a930805a4e17aa1a781d5e7d1b8c58d66ede0e24365ac28cb9208375d28efa1d2815d6ca21111879e48e415627bb704794e24759ba539a2db7a721126ba40824a2ef29f7c174af3540f58fa5f8557b2d6be9dbf8ff425bd8e5193f893955593c2ce1293364ab43ca54ae18efb12cffa5675fe970e9aecc37e9c847ed8fdbf7e4be51b7df680f1b6b5ef1e9dc42eec43a19dc62cfdc306805d63e4fd534f609e7c7effcf215c6dbcb89c072201021457ef07ddc93eb33da1b928656f0e6f93634d55ab2ecf9fbd724aff0359100a001caab76554bfd7dd00cf9002bb16a61eb133ea95d0d8fc81e923c950da5e5f9ae7133d9f791af1ff04cd08cc1ad8d36e34738e194a1feb43159a5df63292b6b95474bb94c9699cef85650366a84b84f4853b9f179d16d878997012b176df2aaaa2b726f3d097e834263e39a98c15f5562cdfefbf8c3109a3123dfdef7248d024b2efef1e730f1d4c53330a1d895eae9d48b041b3d2e0f1bffa943af36eac2064120a9e0725c1387e8bc1fee7802840f15e4b9f9ed6c6a29a4c6fbcfbe7a924227751f7a72504ab5f239edb98a8ffc5cf0ad78162a33d585af41a62aa6ff121593619c90d6b042a9aa78021f5ae7c6a058ffcecaac4497f81e940ff62f6d6ac1c8b258e780152243787c2cd37813233fd7cf62b0d62b544ab5da04a17cd932dc892f7ae12840d0916f46c3da30c34227b69188b3930a2d5c2a68d9843a40112b8d24012ff332ca770ae9df38bada00b79eb8ea2d6044ae61b21e1b160db41125f071d55e7ded9a852f3ec199005d31a472d443e228affacf971de1c4c1c2a90675df249108dfd20e6895c56e4d5da635c9f55f7e4c35489cef3d508f1ef32142c0426912407389d1a7b8cac7250878bd24693580aa936d2c01cd4b6045a0bdf556aac70152a7bf05575b6d1de12a1f9b66ca65487133c5faeb322e7c5f82e478895b96540f2976315d945be5b3e0556b52c042c6c43b5b8673ff261b0f0b13c645c05eb83b95f2632f085c56e3bf4962a686030fc6e8243eaed66e16afbb01e779f1acc47fb35cbd4f8c195377b1d03bc3501e76d33e06ab5cf90736fa40e588a6a70f64467f3d0778bdee2f742139475f637fb41ced2da29cbad915c9ba7b0282492e3f785ec27f6dac1f46c87715fd392e1a336b0db5b8186cd4ce3ee656df15a6ae3a74d7cfea1b68a9a2714ff98d4dadc1b933079404680d75299779c83c7d15aeab15e60440f24074bb14d74369957934e2e4adfa1269a8e3e13518b323e897d9728a2916b08fe467e322a5f51fc355a6c0c46342f128363a65416f2c6ac964bb4c7963088a2d1cd40711496cb9048e77d3821e4575daa04491cf76e6968bfca0b522d7c2444293ee9f1d931a29abffba4c24a5be962a2bd71bd1760170d8c5017660119e16779b8ff8a5ac17f194f207d6f855380bfef5b6c05389c6639c60e1f42616e8b1245f19611dc0e13e877572bba9dd775c9c87b31e9cdfe301f9b84b00c93f31a51ec88d5228ecfa52d1e4fa056acda9785a714d9c20fa539f2cb31043733c9e24ffdc460492810e0d719d594145a234fa53f5ece4e2837a86b14fddb5ebfe7e9eed48453003983167f467420ff0c447b75f0d57816f25fd34db6bd7b2d07e332a512a42e43f66bc26f72b7a012284f8aecd70a829a6cbab6bffe8e7af9f9671aa86eea488c2e8a4f65f29e30782c100f8c87eabf3fb338b2dfb6da1b7460bf0ec2da5676a9a48330a00c17c4a499003c4118df4333fda8971d372010cf4e4ab15f29748b945f011683b3d0e73a9250b8949a618ef7b8925a14c2b4617006e8695a05ada6aa0a9f51823df26a530829c5cb04a7a286d308727fee62dad509b41a764f9dd97dde6418a88fdc712e9ee7ddf7c8dde3d0d29d473437da979b8c68af90473c5c44df03517f04a2ae3817ae8fa1e061240457809b4b58001a0c183aaacb7422561061ccadaea3103f9a219a01a58c75d0eea7f9bb3b023a7bb6eb243b5637f541ff885223662f59e43bf85374b9626f981cb9646d1cca566eed9f16f141676131a789f58f818c0a11bb6339adab8fc183c018b24220b0ed5f9ed8602f2383c39bfca3f9d21a630508565411e599411869c824d6b1ca2d9340673604093a8797116d935fa4cc77a33c57036d5d34c2cfc8a28715adbcdf68987d6b2af39a61dad2a38e843292fc3fec93545e46136e4ebaae0873f8115c494497df2c7dfef9fe997bc88593226b83252530f316bd33c14af0ddf56194f897327238704f57b0c8583ea241b68664b54a1cef0d289efbb33194d1454d277d13f51fa692b0c5937682f0126b69029273caa7e39df46336a60c240e91ec4923532cd38d4bfbfe2e51986fbe4d16c98ab281188182b9d27b01c75194b244fea7238127f5eaa3628dd2b8c02d9a3b86e26e7ab910decc209035af69df3260a48f6758d1935d28823fd2c1bd532f219894e1dc5bd353e62008fbda9e5c873788c7ee22104986c7084d6f6c5033f7362471cdb568b6c0e0e0351a317e285a0f935af2ad35ce1e05cc2f1b4bf73cd67ba04b1fe0c49d7aa77b75111a95ec4153f97d07b45d5263212069e4f85f214923f42910eddd981b6d96de3d2287245f92da427c52637fe2523031cf55a9f1f4791565dfd1c4d2f114e9c94fb010d0fc56794ad625510558672e3ca26d4c2432d78b19d776fd497c5dc56d45fd560884db47657d58c46bfe0443f11013ea88273a6c15a471bbbb6b33b4cc12227b0cf5815ea4124e1d813112f11ec756a654f63159a1456ba8c6859c83d3a1d71040c8e583970c6a82e3bb9a3042e65611268ce103c4bef18a7b94f2a4f810c179b70e6a33c30098c7801eaa1e255aeb62e07fed66e2ac2a2a63ce403967e58c15b4a104008ae0bb548fa802584166b1cb73b7db8b9d7cae006f7bc9859da2db54a97ef73c8d9aaeb934cc9e2b4f111dce8fce5bc6fe856e087f47fc6248c3bd2d25d3034197698823e1a145f52defaac5e6c92c1a8d7ed355c0cd2715000a61dcbfafa1488e0e5d4cefc68b76c49be34e95139f52b9376989bf4b6bd57ce74075b01c4423c46e6f4629b76b57b406b1b5dbaba746da9a9289b772bb38054c00f1dff9cc33035826ba3c0ac2f47d1450d4bcb38be603fe3f3d2aa9c00eb4506c37eba22dae6da655124b874b2ffa66a1e97bb9cb780751b45e20e81ed0d65f0a64a302c60466e1828ec6678320f690707fc6cdd7e4e654291a4a39f1152fecac8025357e849a73d410051730ce0c20a5a9bff037f66ef5a9cc234bd8928df0d090fdd46c6ae2f64e415d87fdf9686f603e83cb178c2e69e6720d1afca72729af6a45b75723a52095b78f364049d1a513e1146c07850f5cd23ef4c2818b0f5f5dd31fe65c770d2ab49173d69946204bf19eb33b4ffc686ec2fab797420097df31df8fe90d0c6a6d84cbecd07bc5ba654661bed4106d44b24c0761974e4994e69dd6157e85f9c33cfe127c09b2ecf75ae602f6590f2212d52cf9ab40e48c343d3531c1133cc6cc394f449581d80ca1219c806ac33d4775d4939e9e994cb875f7bcaa6e570130f55026104c252c1ff0fa39828bed7eebb8d89d4dfa0a1c5f33290b7d75482c7c073461aa4b6d3b0fec76930186568f1fda062c9aa591ab046fd330f6629573def2d9888d77cd8c2b88d401f71dded82119e480c9d6503cf60a39d9173cee0eda9cb7217690a73911f2129c9fea231e49dfcf5b0975df7fb82f6dcad892286c9265baa151e6f72ad2f1c12ac18afb61f9f3bb3b140d4d6c26f90ba0ab1daa77cd870727f7b745b29111a59db19debaffb81c8660403e942b48967826c44c215b7d6cce62db8a78c7c293fac74af418903789682cedfa32ec2e76937a5a2a7a19d3070121cc026b7b928277bca455075e5fe35b30e9ff15754f3e1975cacaef6f1a5e52acd5609e100bf37bd985615addbdb97e9ed92f76d215bf1fc197c48207233ef82d948cd0e996393fdc820f13e307a46719c541b6bff6048ae8ea3a3f4fcb63f186811e0c1956b11ccaca03e1d8b20b727a97596ae527a8338b509e3e34f12ac735721697133968ab99fd504d2e53eb5d17ba081cc590e9ea2b1c558b7b8bda3ef5010a69d7bd8d5077ac8da1ecb980f76d4adcf99a8c3c25218a5f75654e041fc88ac0b36c486593a2466253696277d892512b3ece9bac10fd378e50f552c277ff53a54232459ad58a6d85c472504a90bdaf04a229bdb8702bc5afbc8963e2d38069578f94f0ee907fae0f29409fc036ac9a412375f9859f6fba3426cd05382f1afdf0bb711ba3a535620cd0c3bb3f1fc8c64944385e75d0dc316dc0f7108c9aa65e755e4648c3204f2628b7a435760d92e1a3d4942c698c5ceeb5dc7fa69b99b072e3c281d10fcd90941d0eb7ac159cdb7016e99479d27bc3b03a17f02db56c773de91a69f5ca415c4a278dfac17bfea7d614db8b46c91f82ee7f180ea19a0602cd8db91a8df91902908546891beea4e84f1bbab0d5f09cb7a003ca911a5209cfea229eb128cd5c97ff78e286049710bd2e8e8f140fe6f607712650fc35d58e419dc4bc5defc4750ea06972eef147720f5d4ba1c42822475facf34eebcdfb60af2d21b1d145cf6589db7ccf5bc4169314543f19fe25abf84159558b02b0113fb221f66a358f5261b94e7534deea8c987059911b040794ca6a8184684d308aa1fb523f1106cb593d1bd04afef78179b888a091618dbcdc3d7a79a1418aab3797da954d1e6717a32630b2f6143c6302cc82af875811c0ea84975b838d2916ffc1723b0f26f587f4ac00240b18d4a9ab5346a7b4bc2f29158cd921cc2fb138baa89233a6fd72c486a6a29202631fb208b3cc44844daf1f18e1043dd0d411ec0c7425065c351162f1bb67ba81db7d9c8ccda1285408c55a5c59ac353eacd3b1cccc82d4c5a1c97cba7ff457bf55a3e892ed494aba894d47d9f092632ce4fec9303d7419c7225e517899f3ec4de0086cc568aa8b26bc3e0e6af1efe850e21d5fe3df1ed407ab6263b94d3fa4acbfee7a89a490dd60c406e19f5098479f6a86a1628bec169bc4619fdd1e37f045f6b898c14750fff568cebe3c8403cb8cd361d954f921df2f25517b4d5bec89a3e1e14be1e4311bb9c217ecb613e165d8c31974921dc9736bf973b4661fe7a32b47496836c788bc7f47846b58d0dd6ee50228614351b2bb05fa04f34964b201d8716427464d8a36083a29dc51e295586e8209bb4cb825af06051ebfeca976214c88812689e7e43cf0f0aee4ddb46ca2d272093209040a8a43bdfe909cb9a3d4c3386d4faf73a296b051e7929c3d6e7470cdf73eef95bad703d4174760dc8118a9b5ffec6d198d90d478f74fee2f3af7b6dffa5a769452cd2ad8e50c6a01f067cad7e7b46fa00dad641cbb485ac0bf66f4a9f4c408cb42559abdb4cb57aef101ba8d5ccd1371e837b760ec83e63cca2b3e31c3b4f8707472b1c6ad9e24c660809ae797786d694d61f92e4bfc738fb44115a592f38b94052785ee516a4d6f615699b7aea50d03765b8f7000087ed0a16b0b7978d30a311ac7cd8613dda873a1276cdc84a219cbf2431c92b7e131c4de5343631c9cbe20e2d7546f51cd0382958b6daae50c87ce68ad0717c609438304faaf769e80e8fb23f462e678a390ded978baa61bb5854fabbe4673e7131c75da7004747128f742a7489322156d393ecf70d78f80fff2bcd93f24b2f32f29641a51ecbba10c619320e9c6e6dae80b56eabcd3337b872717bca7d5ef33416517372e149e88b381f174d34e2d9876c84e177ebb989286b15215fcdee7048dbbea111ee5b8568d0a878bb05a16b2651dda28180b469d891ca2fb9b2ef0d4188f13aeb063b8467a578c3d550d5b91044ab2336100041f1b971c7165ec8cd0f1bbe6b700c120581031fa19121ff00fdd27b6c0e762c411391b5b310f2f9c454f62ac3e2dfaceb6d99b3bab21696e0e043c1d4d813525aefe80f03b9c9a6c5c08e0e4e76d4f861f77295142d3a67bcb2c292b273042f9dfd54870b7a23be651d0736e4cbe7be3075f06380ab1b94b663078cf77b2e1699cb7758178af83bdff6750cf973ef2e14bccb8176bdf454271dfd9a08666d96ee22bf446cf10da75cab79d77f8bc2edc66858c32a1ff64d380cffb09ecfa6782ed38272388242436c034b336c2884bb2d6811b6c2919d0f62f656a3c02bbd3e5a5c3a697185f285166a09558d1def706a1141d6e70257313fd3f1a807b79874a6db51b6539a271c8a4ebc40a19280af5c828e7d9710b23a057289fade7728e1eee6c821a32d1720c74f51af2e1ff1826780aa990cee3d6dd3b6916c22cd91592462342e99ca44fb46b8194f15f6327c71839928518c18aebd7aa78413b8125fd2c2c7ba0acd143a7844afdca9733a9bacce906623885284ec4fa431596b99bff85212bf87b2744702c98f45623bb16fe055bd75859cd1fd58a02e9e55a04e9d7edd29a21c573f60b4cb563dd9a36dc78efcb26173a31f653185b9677efb3634a91ecd437f1e8724ce79d45d57af06fd8aae47ace6c1c473aa3fa7383a79a17ccb2c83df4ab4dcbc42558c9848eef7775f10657c781de45023a71f77f14a512738ec82bda154515a655635651af8f1710feeea7903888cf0a3e6d3adc88d4c09d7b7a7afcd64ff3282e1312b0cbcd2be4abf9f40dca8ce7247192cf420bec46b6af95aca52bfcd4abf5ca7cc4738f915c0c9db07f3fa900e1b8b634c752606747e3af5503eb044d5bdc93903042fca27e0e5e2794b2ccc25385ab01beb1f9f8bbf3e845387267226e9e27a68243918751d8215cd61ae595527568b542d858e0c4fc854c13f4f33a7cde6ae7d153aa8b084f1724ddf56cefc23876e08b0ddc2fbb4d373cdeba751848238cc9e3366a966ba99824dfe9aa33d97c5f6dbc885c590c8f1f66f37eefd947a1f3c90ac1997b63986be0a9d4f1903da4fef850eb675e59a0e54d26d75c530fbad8e8ef3c438178f81afacdda7a199676506c424c16110448251130b55cbe903ef2a4fd64d487971e97e6a315a646238d9850156c9fb2d0a852910c6df2dd4dc506eaa12102f3e7cacd041dcb9f10d1eb0f4bf83dfbdafe122803e922b172a5cd7dc04def5d55306fca89c60f0ea4a5837c4078a2d01b90ea9178596624d837489f9ee2bdca2070c59d79131c49455dd7b4e9d25b5823cd751a0bf97b6a9901d4095a15a5ff20f8fe8e0b64d47ede122756ac225279a8b835cbb7d0ae3814730d354078beb797fca5549a7464e3c4dc4267a1609cd2691c8cd591a0072d1b607171b690779e5a5e676777bfc19ec5644a8ad9240faa716936338ca51ccafdddf208dc9386c8e04d25c7fc8757ceaf6b6b5050d8a2a08d1364cd52ebb54dc70034bb26e733bceebce9c2f47d4cfd97618ab1754b977ca039605c8c92f1e16b6c7c571dde05e314a4d7ff1913ebb2f418bebc86ff46337682b0f6a71a62e04666344261fa88550bd8ecbab83b71f1bbb11208594922b0fad1aaeac75f160337d3b9962d0c46cdb4c789de9e43e54e494ac918e2a9cf0480cf067242a410f0f53a2854795d62ecb5306b259a4ba37b4c52b709d1ad750d4603a85492f66822d9bba5b887ee1ef5f7b6165c60699d708b991f0ef3f272b6738ae4ea8d0cdc86516303e8e9e4f12424423ee9abac859d7f91c827b38ee9586356e4b37a6cb2fb1ba3cf315b2cce9ab3c1805a1081120c8d3553d393ea70b5832d8461a6b6fd6f17d3f834348642390b37ac88ad3b96e9274360a177ae438cc87edc4fb6726d2645385554bc37e513df39a441066083821e106b74a70946633db5892425f16f3ec2aff1a7acc342c8ab6f9caac382957c77bcb7a185ae109a5953fdfeea6e983082faa4b605be1daa481968908edd065d26c46c09ab99abf89e5d191beb0b36c39c0f51b4b903acc2eb4b9c0a8f0d4420c2e04a734cb7583ceac7596f0fbcfc16201acf7757c10aca3db6ce321ba1050dc85d37e63029be3a85e1478fb5c68e76a7d439bef1b1bd922739275dfea95621e32818edbb453d15f2995d4ae326171e9e539b233d598d0a5161e5ef184fea910d42fa7b54aea57652e88c382bbeba267f9a6b944c51a107b129821ed60a99c14c593a9994d059ac56980c3d28b468b14999b41632ef4d9eeb30e5530f7711338a8fc32e78cbe2567c156c31e7232b815f111847082dd126b0627d86ab7dc01faa2dff41804f63d0db103cee9679cf5c7dab77dd89b86aff564216f17c366b2f910dac1a019c3abee3a876f52380be72c9a21c89e7b07dc09c755d332ed6be2bdb5bccd7b3003622449c414424f2ee8a87f722ac6dd40c6314d78112aa81aeb8c7332229c07972059be7a1959132a43de081f364f276f673010fc0e6d39b14d8c071ed1b67c0b53d612dac69020e9a4b5c0b7c914a1d32f2455ebff79587a26371555d6cd0b266d40df9b677e68072c44db3fa816a73a39d2d6945eca2c82f46c09fa95f86be08159196140f2bb291eb254f42247d86f57def9581b8e9ae52e84312c168a51c47b0f4d0e460bfc2722cd759c11f5b47659517fd6f7cb2f92fb8b6b2e5ab3178e2545434c4243da9ecd8f2a26233c8c3886f088799ea292c63f69fdd4def8ccc45337e3292cc64e95cb068e7616851e6b01af788ea7c56a702dd823417c3922d13ba76269a83259d1480dacd02789bf6c8e291e14605c6b96e66463e99a75a7e6f65b711d56b8042b130b26be927e8de23ba1f04782f72988fca014d8a9efe9d6f94d11b2aabf2095eb0e71125a61f1383a189fe373c77462f5d2ba77ec949a2591db99ecdceb3929dc37d41cdb42edb7da48adc2bd119ec8e3b2185992baa28ad297e75f9fab2303fd71af95d9a1043502f4eb9f312b881d474133d3cfd6aba9be7164cdf65df00cdf03cde36fec132269812dabffcb0aa54806fd1d515ce00beb87da4359b3b6c1faf53214632fdd37f947ed6539a2fd76a38312d3cf7042170df0714c5c19f92dead9054f480ded96a30636486a244751de7402b15da33333d2c2f64b9d19f812861ef9a7b1ff16354c31df3ad4500e6bdbfaeda0e82c8ffc7a4f2ced0dd7e9615ec12be1c225fc57dc5a8cd0351a2eb72433d5e86ebc4229d076395f99baf310a586d1ed6724f7b5e0c0a2e4f5881b0343a0bb4e9d9a75536c83eca435c2e66d1b6544d53ec9e55066df43ab0774f624a64f69f6b8e2da0e0188b2c72bd03bd296fbc14ea8ba2a19cae393f5bcc95c708ff490715c55ac681b25dfb23f62153cd318090cf871a9cace145d64375ec81643e46994b06b028063492c851a67d226fa1336a523f88729deb22c290", 0x2000, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 1.446705875s ago: executing program 6 (id=1061): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059f"], 0xcfa4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000"], 0x0, 0x3e, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) 1.284389844s ago: executing program 3 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}, 0xfee1, 0x0}, 0x2008a0c1) write$cgroup_subtree(r0, 0x0, 0xfe33) 1.165710831s ago: executing program 4 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.142720032s ago: executing program 1 (id=1064): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 675.402877ms ago: executing program 6 (id=1065): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x1804008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 343.941576ms ago: executing program 1 (id=1066): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4) 338.972772ms ago: executing program 4 (id=1067): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="cc05e05e", 0x4}, {&(0x7f0000000540)="7bd6dadb87", 0x5}], 0x2, 0x0, 0x0, 0x20000000}, 0x82) write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[], 0x9) 280.380214ms ago: executing program 3 (id=1068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff81", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 7 (id=1069): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) kernel console output (not intermixed with test programs): s timestamps until 2038-01-19 (0x7fffffff) [ 226.540866][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.682247][ T6052] fscrypt (loop1, inode 18): Unsupported encryption flags (0x1e) [ 226.999490][ T6053] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 227.104891][ T6062] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 227.181384][ T6063] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 227.217705][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.826282][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.027838][ T6081] loop1: detected capacity change from 0 to 512 [ 228.094073][ T6081] EXT4-fs (loop1): invalid first ino: 8 [ 228.349225][ T6084] loop0: detected capacity change from 0 to 128 [ 228.440841][ T6086] loop3: detected capacity change from 0 to 128 [ 228.516045][ T30] audit: type=1800 audit(1770102814.196:2): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.41" name="bus" dev="loop0" ino=1048607 res=0 errno=0 [ 228.557570][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.43'. [ 228.567210][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 228.715461][ T6085] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 229.686510][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.693433][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 230.142644][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 230.902782][ T6103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.237192][ T5794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.246813][ T5794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.256964][ T5794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.272024][ T5794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.289276][ T5794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.551385][ T6115] loop3: detected capacity change from 0 to 512 [ 232.615944][ T6115] EXT4-fs: Ignoring removed bh option [ 232.720702][ T6115] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 232.998948][ T6115] EXT4-fs (loop3): 1 truncate cleaned up [ 233.030731][ T6115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.257940][ T6120] loop1: detected capacity change from 0 to 512 [ 233.404843][ T6120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.413636][ T6120] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 234.206495][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.359092][ T5794] Bluetooth: hci5: command tx timeout [ 234.426665][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 235.645337][ T6129] loop0: detected capacity change from 0 to 8192 [ 236.434845][ T5794] Bluetooth: hci5: command tx timeout [ 236.662038][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.669747][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.784103][ T6112] bridge_slave_0: entered allmulticast mode [ 236.850323][ T6112] bridge_slave_0: entered promiscuous mode [ 236.909201][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.917019][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.971597][ T6112] bridge_slave_1: entered allmulticast mode [ 236.997075][ T6112] bridge_slave_1: entered promiscuous mode [ 237.525110][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.540224][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.815060][ T6112] team0: Port device team_slave_0 added [ 237.862447][ T6112] team0: Port device team_slave_1 added [ 238.251244][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.251317][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.251450][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.389744][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.389831][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.389990][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.518647][ T5794] Bluetooth: hci5: command tx timeout [ 238.963598][ T6155] loop2: detected capacity change from 0 to 7 [ 238.970612][ T6155] loop2: [ 238.970762][ T6155] loop2: partition table partially beyond EOD, truncated [ 239.312545][ T6112] hsr_slave_0: entered promiscuous mode [ 239.352230][ T6112] hsr_slave_1: entered promiscuous mode [ 239.389881][ T6112] debugfs: 'hsr0' already exists in 'hsr' [ 239.396039][ T6112] Cannot create hsr debugfs directory [ 239.630599][ T6161] loop0: detected capacity change from 0 to 512 [ 239.656226][ T6161] EXT4-fs: Ignoring removed bh option [ 239.706517][ T6161] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 239.803959][ T6161] EXT4-fs (loop0): 1 truncate cleaned up [ 240.014439][ T6161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.603691][ T5794] Bluetooth: hci5: command tx timeout [ 241.505440][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.732002][ T6171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.755642][ T6171] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 241.809564][ T6171] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 241.857285][ T6171] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.879364][ T6112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.886474][ T6171] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 241.926271][ T6171] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 241.992292][ T6171] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.001116][ T6112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.016503][ T6171] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.069860][ T6171] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.084716][ T6178] loop0: detected capacity change from 0 to 256 [ 242.134612][ T6171] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.140835][ T6171] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 242.186062][ T6171] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 242.311417][ T6171] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.341134][ T6171] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 242.347632][ T6112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.369821][ T6171] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 242.419105][ T6171] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 242.483924][ T6171] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 242.529976][ T6171] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 242.676658][ T6112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.914300][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.097293][ T6181] loop0: detected capacity change from 0 to 256 [ 243.434241][ T6181] FAT-fs (loop0): Directory bread(block 64) failed [ 243.474886][ T6181] FAT-fs (loop0): Directory bread(block 65) failed [ 243.481833][ T6181] FAT-fs (loop0): Directory bread(block 66) failed [ 243.576620][ T6181] FAT-fs (loop0): Directory bread(block 67) failed [ 243.615986][ T6181] FAT-fs (loop0): Directory bread(block 68) failed [ 243.622835][ T6181] FAT-fs (loop0): Directory bread(block 69) failed [ 243.734426][ T6181] FAT-fs (loop0): Directory bread(block 70) failed [ 243.803545][ T6181] FAT-fs (loop0): Directory bread(block 71) failed [ 243.843970][ T6181] FAT-fs (loop0): Directory bread(block 72) failed [ 243.850753][ T6181] FAT-fs (loop0): Directory bread(block 73) failed [ 243.876921][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.051398][ T5794] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.194211][ T5794] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.234127][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 244.267664][ T6187] loop4: detected capacity change from 0 to 128 [ 244.311949][ T6185] netlink: 173 bytes leftover after parsing attributes in process `syz.1.77'. [ 244.326134][ T6187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.353674][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 244.371070][ T6187] EXT4-fs: Ignoring removed nobh option [ 244.444156][ T5794] Bluetooth: hci5: command 0x0c1a tx timeout [ 244.461430][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.496335][ T6187] EXT4-fs (loop4): Test dummy encryption mode enabled [ 244.572254][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.670055][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.677695][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.725352][ T6187] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.804519][ T6187] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.871611][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.879281][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.008098][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.134131][ T6187] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 245.695418][ T5798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.966660][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.113632][ T5794] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.273642][ T5794] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.434992][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.522295][ T5794] Bluetooth: hci5: command 0x0c1a tx timeout [ 246.677362][ T6214] fuse: Unknown parameter 'fd0x0000000000000003' [ 247.085784][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.042678][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.171307][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.196764][ T5794] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.353941][ T5794] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.523385][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 248.594170][ T5794] Bluetooth: hci5: command 0x0c1a tx timeout [ 249.393795][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 249.605032][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.618289][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.628860][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.642186][ T5937] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.651569][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.786470][ T5937] usb 5-1: config 0 descriptor?? [ 250.144291][ T6249] can0: slcan on ttyS3. [ 250.331407][ T6253] can0 (unregistered): slcan off ttyS3. [ 250.355543][ T5937] usbhid 5-1:0.0: can't add hid device: -71 [ 250.362203][ T5937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 250.452753][ T5937] usb 5-1: USB disconnect, device number 2 [ 250.566220][ T6255] can0: slcan on ttyS3. [ 250.861393][ T6246] can0 (unregistered): slcan off ttyS3. [ 251.543039][ T6112] veth0_vlan: entered promiscuous mode [ 251.795287][ T6112] veth1_vlan: entered promiscuous mode [ 251.819400][ T6262] fuse: Unknown parameter 'fd0x0000000000000003' [ 251.881686][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 251.976036][ T6266] loop3: detected capacity change from 0 to 256 [ 252.014038][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 252.171601][ T6266] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 252.221544][ T6266] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 252.510511][ T6266] exFAT-fs (loop3): failed to load alloc-bitmap [ 252.517717][ T6266] exFAT-fs (loop3): failed to recognize exfat type [ 252.722875][ T6112] veth0_macvtap: entered promiscuous mode [ 252.856348][ T6112] veth1_macvtap: entered promiscuous mode [ 253.162872][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.386985][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.567498][ T1078] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.672399][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.737701][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.798243][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.680574][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.863668][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 254.884233][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.898114][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.908402][ T5937] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.917931][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.140462][ T5937] usb 5-1: config 0 descriptor?? [ 255.173692][ T5937] hub 5-1:0.0: USB hub found [ 255.435501][ T5937] hub 5-1:0.0: 1 port detected [ 256.074983][ T1960] hub 5-1:0.0: activate --> -90 [ 256.502498][ T5846] usb 5-1: USB disconnect, device number 3 [ 258.823610][ T5846] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 259.048623][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.060091][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.070559][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.088195][ T5846] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.098095][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.239918][ T5846] usb 4-1: config 0 descriptor?? [ 259.718325][ T5846] usbhid 4-1:0.0: can't add hid device: -71 [ 259.725465][ T5846] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 259.818436][ T5846] usb 4-1: USB disconnect, device number 2 [ 260.567935][ T6320] fuse: Unknown parameter 'fd0x0000000000000003' [ 260.612131][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.620587][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.005130][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.013376][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.209990][ T6324] loop1: detected capacity change from 0 to 1024 [ 261.536270][ T6324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.645100][ T6324] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.394522][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 263.051521][ T6352] loop1: detected capacity change from 0 to 128 [ 264.787407][ T6369] loop4: detected capacity change from 0 to 512 [ 265.029146][ T6369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.043202][ T1960] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 265.115157][ T6369] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.234105][ T1960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.248073][ T1960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.258391][ T1960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.278567][ T1960] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.289957][ T1960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.536002][ T1960] usb 2-1: config 0 descriptor?? [ 265.750502][ T5798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.981396][ T1960] usbhid 2-1:0.0: can't add hid device: -71 [ 265.998407][ T1960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 266.097055][ T1960] usb 2-1: USB disconnect, device number 2 [ 266.107511][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.122'. [ 266.792709][ T6379] vlan2: entered allmulticast mode [ 266.799453][ T6379] veth1: entered allmulticast mode [ 268.944627][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.132'. [ 269.108763][ T6413] netlink: 165 bytes leftover after parsing attributes in process `syz.5.132'. [ 270.217893][ T6424] loop5: detected capacity change from 0 to 1024 [ 270.265959][ T6427] loop0: detected capacity change from 0 to 1024 [ 270.276700][ T6424] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.326955][ T6424] ext4: Unknown parameter 'audit' [ 270.341043][ T6427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.512191][ T6427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.638327][ T6424] loop5: detected capacity change from 0 to 512 [ 270.874151][ T6424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.984008][ T6424] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.176543][ T6424] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.135: lblock 23 mapped to illegal pblock 18 (length 1) [ 271.306978][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.568670][ T6433] syzkaller0: entered promiscuous mode [ 271.574778][ T6433] syzkaller0: entered allmulticast mode [ 271.741234][ T6112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.210124][ T6444] loop0: detected capacity change from 0 to 512 [ 272.293337][ T6444] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.141: inode has both inline data and extents flags [ 272.308562][ T6444] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.141: couldn't read orphan inode 15 (err -117) [ 272.325755][ T6444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.835815][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.389610][ T6455] loop3: detected capacity change from 0 to 1024 [ 273.471144][ T6455] EXT4-fs: Ignoring removed orlov option [ 273.542918][ T6455] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 273.651028][ T6455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.728129][ T6465] fuse: Bad value for 'fd' [ 274.295855][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.644892][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.150'. [ 275.055675][ T6475] loop3: detected capacity change from 0 to 512 [ 275.166749][ T6475] EXT4-fs (loop3): Test dummy encryption mode enabled [ 275.174018][ T6475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 275.293891][ T6475] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.152: bad orphan inode 131083 [ 275.371512][ T6475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.446018][ T6481] loop5: detected capacity change from 0 to 16 [ 275.479912][ T6481] erofs (device loop5): mounted with root inode @ nid 36. [ 275.608333][ T6481] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 275.844277][ T6481] erofs (device loop5): read error -117 @ 43 of nid 36 [ 275.893796][ T6475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.943855][ T6475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.963456][ T6475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.975569][ T6475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.056136][ T6475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.133233][ T6475] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 276.496835][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.635642][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.955217][ T5794] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.961773][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.045526][ T5791] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.045605][ T5794] Bluetooth: hci3: command 0x0c1a tx timeout [ 278.113427][ T5791] Bluetooth: hci5: command 0x0c1a tx timeout [ 279.450467][ T6513] loop3: detected capacity change from 0 to 128 [ 279.804614][ T6513] pimreg: tun_chr_ioctl cmd 2148553947 [ 279.933781][ T6513] bio_check_eod: 8 callbacks suppressed [ 279.933861][ T6513] syz.3.165: attempt to access beyond end of device [ 279.933861][ T6513] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 280.056929][ T6513] syz.3.165: attempt to access beyond end of device [ 280.056929][ T6513] loop3: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 280.173805][ T6513] syz.3.165: attempt to access beyond end of device [ 280.173805][ T6513] loop3: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 280.243313][ T6513] syz.3.165: attempt to access beyond end of device [ 280.243313][ T6513] loop3: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 280.293290][ T6513] syz.3.165: attempt to access beyond end of device [ 280.293290][ T6513] loop3: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 280.354028][ T6516] syz.3.165: attempt to access beyond end of device [ 280.354028][ T6516] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 280.415183][ T6513] syz.3.165: attempt to access beyond end of device [ 280.415183][ T6513] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 280.433509][ T6513] Buffer I/O error on dev loop3, logical block 77, async page read [ 280.530292][ T6513] syz.3.165: attempt to access beyond end of device [ 280.530292][ T6513] loop3: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 280.545565][ T6513] Buffer I/O error on dev loop3, logical block 78, async page read [ 280.597899][ T6513] syz.3.165: attempt to access beyond end of device [ 280.597899][ T6513] loop3: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 280.601246][ T6522] loop1: detected capacity change from 0 to 256 [ 280.612297][ T6513] Buffer I/O error on dev loop3, logical block 79, async page read [ 280.683477][ T6513] syz.3.165: attempt to access beyond end of device [ 280.683477][ T6513] loop3: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 280.697786][ T6513] Buffer I/O error on dev loop3, logical block 80, async page read [ 280.750605][ T6513] Buffer I/O error on dev loop3, logical block 77, async page read [ 280.759428][ T6522] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.805015][ T6513] Buffer I/O error on dev loop3, logical block 78, async page read [ 280.856113][ T6513] Buffer I/O error on dev loop3, logical block 79, async page read [ 280.895542][ T6513] Buffer I/O error on dev loop3, logical block 80, async page read [ 280.958180][ T6513] Buffer I/O error on dev loop3, logical block 77, async page read [ 280.997929][ T6513] Buffer I/O error on dev loop3, logical block 78, async page read [ 282.238440][ T6528] loop4: detected capacity change from 0 to 512 [ 282.451659][ T6528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.582196][ T6528] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.901525][ T6526] syzkaller0: entered promiscuous mode [ 282.907663][ T6526] syzkaller0: entered allmulticast mode [ 284.585711][ T1960] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 284.602827][ T5798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.853259][ T1960] usb 4-1: Using ep0 maxpacket: 32 [ 284.937175][ T1960] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.964368][ T1960] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 284.973317][ T1960] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 284.984006][ T1960] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 284.993634][ T1960] usb 4-1: config 128 has no interface number 0 [ 285.099784][ T1960] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 285.111816][ T1960] usb 4-1: config 128 interface 127 has no altsetting 0 [ 285.230006][ T1960] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 285.247187][ T1960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.257976][ T1960] usb 4-1: Product: syz [ 285.262471][ T1960] usb 4-1: Manufacturer: syz [ 285.267454][ T1960] usb 4-1: SerialNumber: syz [ 285.418539][ T6548] loop1: detected capacity change from 0 to 1024 [ 285.434993][ T6542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 285.516773][ T6548] EXT4-fs: Ignoring removed bh option [ 285.641013][ T6548] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 285.905108][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.929532][ T1960] usb 4-1: USB disconnect, device number 3 [ 286.046917][ T30] audit: type=1800 audit(1770102871.736:3): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.177" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 286.338171][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.057223][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.222130][ T6571] syzkaller0: entered promiscuous mode [ 288.228269][ T6571] syzkaller0: entered allmulticast mode [ 289.304038][ T6590] capability: warning: `syz.0.189' uses deprecated v2 capabilities in a way that may be insecure [ 289.419435][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.699906][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.817393][ T6595] loop3: detected capacity change from 0 to 1024 [ 290.018334][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.145531][ T6595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.386501][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.398532][ T6595] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 290.496162][ T6595] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 290.510543][ T6595] EXT4-fs (loop3): This should not happen!! Data will be lost [ 290.510543][ T6595] [ 290.521762][ T6595] EXT4-fs (loop3): Total free blocks count 0 [ 290.529910][ T6595] EXT4-fs (loop3): Free/Dirty block details [ 290.537277][ T6595] EXT4-fs (loop3): free_blocks=2588934144 [ 290.544284][ T6595] EXT4-fs (loop3): dirty_blocks=32 [ 290.549606][ T6595] EXT4-fs (loop3): Block reservation details [ 290.557072][ T6595] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 290.746197][ T6594] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 291.111396][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.118504][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.550271][ T12] bridge_slave_1: left allmulticast mode [ 291.556670][ T12] bridge_slave_1: left promiscuous mode [ 291.563425][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.757013][ T12] bridge_slave_0: left allmulticast mode [ 291.764976][ T12] bridge_slave_0: left promiscuous mode [ 291.776042][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.809852][ T6620] loop0: detected capacity change from 0 to 1024 [ 292.908270][ T6620] EXT4-fs: Ignoring removed oldalloc option [ 292.914775][ T6620] EXT4-fs: inline encryption not supported [ 293.012760][ T6620] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 293.145998][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.195022][ T6620] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.201: lblock 2 mapped to illegal pblock 2 (length 1) [ 293.320259][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.345298][ T6620] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 293.411929][ T6620] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.201: lblock 0 mapped to illegal pblock 48 (length 1) [ 293.434811][ T12] bond0 (unregistering): Released all slaves [ 293.479674][ T6620] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 293.489194][ T6620] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.201: Failed to acquire dquot type 0 [ 293.518437][ T6614] tipc: Failed to obtain node identity [ 293.524364][ T6614] tipc: Enabling of bearer rejected, failed to enable media [ 293.594244][ T6620] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 293.650635][ T6620] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.201: mark_inode_dirty error [ 293.715142][ T6620] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 293.823543][ T6620] EXT4-fs (loop0): 1 orphan inode deleted [ 293.831545][ T6620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.863577][ T1089] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.948934][ T1089] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 293.958095][ T1089] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 294.252534][ T6627] loop5: detected capacity change from 0 to 1024 [ 294.308638][ T6627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.444334][ T6627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 294.463991][ T6627] System zones: 0-1, 3-36 [ 294.485339][ T6627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.532783][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.581789][ T12] hsr_slave_0: left promiscuous mode [ 294.641599][ T5783] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 294.666798][ T12] hsr_slave_1: left promiscuous mode [ 294.710257][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.718155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.729113][ T5783] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 294.739756][ T6627] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.203: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 294.806397][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.813984][ T5783] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 294.828056][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.035697][ T12] veth1_macvtap: left promiscuous mode [ 295.083441][ T12] veth0_macvtap: left promiscuous mode [ 295.089405][ T12] veth1_vlan: left promiscuous mode [ 295.144040][ T12] veth0_vlan: left promiscuous mode [ 295.246849][ T6112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.829522][ T6642] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.506623][ T12] team0 (unregistering): Port device team_slave_1 removed [ 297.651617][ T12] team0 (unregistering): Port device team_slave_0 removed [ 298.619302][ T6669] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 298.672246][ T6669] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 298.986221][ T6645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.181988][ T6681] loop5: detected capacity change from 0 to 1024 [ 300.266668][ T6681] EXT4-fs: Ignoring removed orlov option [ 300.501930][ T6681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.617210][ T6681] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.217: bit already cleared for inode 13 [ 301.003413][ T5846] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 301.147023][ T6112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.189672][ T6700] loop1: detected capacity change from 0 to 128 [ 301.257961][ T5846] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.266518][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.277042][ T5846] usb 4-1: config 0 has no interface number 0 [ 301.352419][ T5846] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.366196][ T5846] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 301.375625][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.429774][ T6700] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 301.559771][ T6700] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.626799][ T5846] usb 4-1: config 0 descriptor?? [ 301.711301][ T5846] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 302.026180][ T30] audit: type=1800 audit(1770102887.706:4): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 302.503142][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.084310][ T6728] loop4: detected capacity change from 0 to 128 [ 303.712405][ T6732] loop0: detected capacity change from 0 to 2048 [ 303.949248][ T6732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.054077][ T6732] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.269721][ T1960] usb 4-1: USB disconnect, device number 4 [ 304.867426][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.025053][ T6749] loop4: detected capacity change from 0 to 256 [ 305.147855][ T6749] exfat: Deprecated parameter 'namecase' [ 305.234269][ T6749] exfat: Deprecated parameter 'namecase' [ 305.403889][ T6749] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 305.422724][ T6752] loop3: detected capacity change from 0 to 1024 [ 305.501845][ T6752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.598786][ T6752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.274863][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.751648][ T5846] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 307.979913][ T5846] usb 4-1: config 1 has an invalid interface number: 188 but max is 0 [ 307.989544][ T5846] usb 4-1: config 1 has no interface number 0 [ 308.063417][ T5846] usb 4-1: config 1 interface 188 has no altsetting 0 [ 308.093853][ T5846] usb 4-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 308.103630][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.111910][ T5846] usb 4-1: Product: syz [ 308.116497][ T5846] usb 4-1: Manufacturer: syz [ 308.121310][ T5846] usb 4-1: SerialNumber: syz [ 308.548371][ T5846] usb 4-1: unknown interface protocol 0xc1, assuming v1 [ 308.557294][ T5846] usb 4-1: cannot find UAC_HEADER [ 308.622219][ T6790] bridge_slave_0: left allmulticast mode [ 308.628390][ T6790] bridge_slave_0: left promiscuous mode [ 308.635721][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.729733][ T5846] snd-usb-audio 4-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 308.761326][ T5794] Bluetooth: hci1: command 0x1003 tx timeout [ 308.768992][ T5791] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 308.780444][ T6790] bridge_slave_1: left allmulticast mode [ 308.786837][ T6790] bridge_slave_1: left promiscuous mode [ 308.803930][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.833428][ T5846] usb 4-1: USB disconnect, device number 5 [ 309.003136][ T6790] bond0: (slave bond_slave_0): Releasing backup interface [ 309.045758][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.152363][ T6790] bond0: (slave bond_slave_1): Releasing backup interface [ 309.511749][ T6790] team0: Port device team_slave_0 removed [ 309.650668][ T6790] team0: Port device team_slave_1 removed [ 309.681195][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.689714][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.711821][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.720513][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.844404][ T6790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.034551][ T6804] syz.1.251 uses obsolete (PF_INET,SOCK_PACKET) [ 310.821745][ T6814] netlink: 68 bytes leftover after parsing attributes in process `syz.1.255'. [ 310.874361][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 310.925463][ T6817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.255'. [ 311.125494][ T6814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.255'. [ 311.594461][ T6823] loop3: detected capacity change from 0 to 512 [ 311.639488][ T6823] EXT4-fs: Ignoring removed i_version option [ 311.679528][ T1960] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 311.724610][ T6823] EXT4-fs (loop3): Test dummy encryption mode enabled [ 311.771563][ T6826] Zero length message leads to an empty skb [ 311.907740][ T6823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.921985][ T1960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.932708][ T1960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.024527][ T1960] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.035202][ T1960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.044178][ T1960] usb 2-1: SerialNumber: syz [ 312.161610][ T30] audit: type=1800 audit(1770102897.846:5): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.256" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 312.808723][ T6817] loop1: detected capacity change from 0 to 16 [ 312.838855][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.974282][ T6817] erofs: Unknown parameter 'ÿÿÿÿt’5Æ;Àâ} ï7_cŠúÏèðÎîËN”Øü÷û"LŽõ‚öaÂm)p÷«ñ„°ƒº'6~—' [ 313.289817][ T1960] usb 2-1: 0:2 : does not exist [ 313.363104][ T1960] usb 2-1: unit 5: unexpected type 0x0a [ 313.531645][ T1960] usb 2-1: USB disconnect, device number 3 [ 313.811382][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.571171][ T6859] loop4: detected capacity change from 0 to 512 [ 315.068905][ T6859] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 315.079981][ T6859] FAT-fs (loop4): Filesystem has been set read-only [ 317.551172][ T6891] overlayfs: failed to resolve './file2': -2 [ 317.885806][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 318.741604][ T6907] loop0: detected capacity change from 0 to 256 [ 318.883387][ T1960] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 319.080299][ T1960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.091724][ T1960] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 319.101201][ T1960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.143744][ T6907] FAT-fs (loop0): Directory bread(block 64) failed [ 319.150504][ T6907] FAT-fs (loop0): Directory bread(block 65) failed [ 319.202277][ T6907] FAT-fs (loop0): Directory bread(block 66) failed [ 319.244058][ T6907] FAT-fs (loop0): Directory bread(block 67) failed [ 319.251042][ T6907] FAT-fs (loop0): Directory bread(block 68) failed [ 319.261131][ T1960] usb 5-1: config 0 descriptor?? [ 319.304377][ T6907] FAT-fs (loop0): Directory bread(block 69) failed [ 319.311547][ T6907] FAT-fs (loop0): Directory bread(block 70) failed [ 319.416721][ T6907] FAT-fs (loop0): Directory bread(block 71) failed [ 319.500046][ T6907] FAT-fs (loop0): Directory bread(block 72) failed [ 319.586416][ T6907] FAT-fs (loop0): Directory bread(block 73) failed [ 321.667623][ T1960] usbhid 5-1:0.0: can't add hid device: -71 [ 321.675473][ T1960] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.744924][ T1960] usb 5-1: USB disconnect, device number 4 [ 322.427304][ T6936] overlayfs: failed to resolve './file2': -2 [ 323.338838][ T6942] evm: overlay not supported [ 323.444619][ T6942] overlayfs: upper fs does not support file handles, falling back to index=off. [ 325.198044][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 325.380512][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 325.428574][ T10] usb 5-1: config 8 has an invalid interface number: 1 but max is 0 [ 325.437018][ T10] usb 5-1: config 8 has no interface number 0 [ 325.462513][ T10] usb 5-1: config 8 interface 1 has no altsetting 0 [ 325.514184][ T10] usb 5-1: New USB device found, idVendor=09fb, idProduct=6022, bcdDevice=65.94 [ 325.523765][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.531958][ T10] usb 5-1: Product: syz [ 325.536485][ T10] usb 5-1: Manufacturer: syz [ 325.541283][ T10] usb 5-1: SerialNumber: syz [ 325.639059][ T10] ftdi_sio 5-1:8.1: FTDI USB Serial Device converter detected [ 325.658186][ T10] ftdi_sio ttyUSB0: unknown device type: 0x6594 [ 325.845052][ T1960] usb 5-1: USB disconnect, device number 5 [ 325.874064][ T1960] ftdi_sio 5-1:8.1: device disconnected [ 326.511848][ T6958] syzkaller0: entered promiscuous mode [ 326.517685][ T6958] syzkaller0: entered allmulticast mode [ 326.740912][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 327.364325][ T6964] hsr_slave_1 (unregistering): left promiscuous mode [ 327.851299][ T6977] syzkaller0: entered promiscuous mode [ 327.857632][ T6977] syzkaller0: entered allmulticast mode [ 328.900183][ T6986] loop1: detected capacity change from 0 to 4096 [ 328.944937][ T6986] EXT4-fs: inline encryption not supported [ 329.008521][ T6986] EXT4-fs (loop1): Test dummy encryption mode enabled [ 329.077027][ T6986] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 329.095167][ T6986] System zones: 0-5 [ 329.194410][ T6986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.394435][ T6998] loop0: detected capacity change from 0 to 512 [ 329.485914][ T6998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 329.572270][ T6998] EXT4-fs (loop0): orphan cleanup on readonly fs [ 329.743425][ T6998] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.302: bg 0: block 248: padding at end of block bitmap is not set [ 329.866587][ T6998] Quota error (device loop0): write_blk: dquota write failed [ 329.877420][ T6998] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 329.895294][ T6998] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.302: Failed to acquire dquot type 1 [ 330.028193][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.055578][ T6998] EXT4-fs (loop0): 1 truncate cleaned up [ 330.122520][ T6998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.243676][ T6998] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.554920][ T6998] syz.0.302 (6998) used greatest stack depth: 2320 bytes left [ 330.948761][ T7008] loop1: detected capacity change from 0 to 128 [ 331.024785][ T7008] FAT-fs (loop1): bogus number of reserved sectors [ 331.031718][ T7008] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 331.041392][ T7008] FAT-fs (loop1): Can't find a valid FAT filesystem [ 332.454035][ T5937] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 332.657780][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 332.705486][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.716873][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.727261][ T5937] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.736683][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.916077][ T5937] usb 6-1: config 0 descriptor?? [ 332.978752][ T5937] hub 6-1:0.0: USB hub found [ 333.240546][ T5937] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 333.590583][ T5937] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 333.666672][ T5937] hid-generic 0003:046D:C31C.0001: probe with driver hid-generic failed with error -22 [ 333.805195][ T5937] usb 6-1: USB disconnect, device number 2 [ 333.974153][ T7037] syzkaller0: entered promiscuous mode [ 333.983742][ T7037] syzkaller0: entered allmulticast mode [ 335.502843][ T7062] loop0: detected capacity change from 0 to 1024 [ 335.649819][ T7062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 335.733824][ T7062] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.052296][ T5783] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /67/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 336.174546][ T5783] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /67/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 336.195802][ T5937] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 336.307821][ T5783] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 336.397843][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 336.428775][ T5783] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /67/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 336.464431][ T5937] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 336.472797][ T5937] usb 5-1: config 0 has no interface number 0 [ 336.565093][ T5937] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 336.574978][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.583522][ T5937] usb 5-1: Product: syz [ 336.587869][ T5937] usb 5-1: Manufacturer: syz [ 336.592655][ T5937] usb 5-1: SerialNumber: syz [ 336.626217][ T5783] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 336.672363][ T5783] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /67/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 336.699799][ T5937] usb 5-1: config 0 descriptor?? [ 336.734282][ T5937] smsc95xx v2.0.0 [ 336.767675][ T7075] syzkaller0: entered promiscuous mode [ 336.773647][ T7075] syzkaller0: entered allmulticast mode [ 336.798971][ T5783] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 336.889919][ T5783] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /67/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 337.015161][ T5783] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 337.095227][ T5783] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /67/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 337.141827][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 337.190927][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 338.130804][ T7087] loop3: detected capacity change from 0 to 256 [ 338.293902][ T7087] FAT-fs (loop3): Directory bread(block 517) failed [ 338.329191][ T7087] FAT-fs (loop3): Directory bread(block 518) failed [ 338.373288][ T7087] FAT-fs (loop3): Directory bread(block 519) failed [ 338.416598][ T7087] FAT-fs (loop3): Directory bread(block 520) failed [ 338.441129][ T7087] FAT-fs (loop3): Directory bread(block 521) failed [ 338.496126][ T7087] FAT-fs (loop3): Directory bread(block 522) failed [ 338.523622][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 338.537830][ T7087] FAT-fs (loop3): Directory bread(block 523) failed [ 338.551116][ T7087] FAT-fs (loop3): Directory bread(block 524) failed [ 338.560398][ T7087] FAT-fs (loop3): Directory bread(block 525) failed [ 338.572498][ T7087] FAT-fs (loop3): Directory bread(block 526) failed [ 338.620563][ T5937] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 338.733379][ T5937] usb 5-1: USB disconnect, device number 6 [ 339.105750][ T7091] syzkaller0: entered promiscuous mode [ 339.111587][ T7091] syzkaller0: entered allmulticast mode [ 340.195795][ T7101] loop3: detected capacity change from 0 to 256 [ 340.304730][ T7101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2752775651 (2752775651 ns) > initial count (556844065 ns). Using initial count to start timer. [ 340.484713][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 342.802794][ T7129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4024515526 (257568993664 ns) > initial count (251645396224 ns). Using initial count to start timer. [ 342.859763][ T7132] loop5: detected capacity change from 0 to 512 [ 343.025765][ T7134] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.056001][ T7132] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.333: corrupted in-inode xattr: invalid ea_ino [ 343.177710][ T7132] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.333: couldn't read orphan inode 15 (err -117) [ 343.258127][ T7132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.689989][ T7142] loop4: detected capacity change from 0 to 128 [ 343.766369][ T7142] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.795800][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.818768][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.830537][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.857100][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.884733][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.950269][ T7142] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 344.038861][ T6112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.953407][ T5794] Bluetooth: hci0: command tx timeout [ 346.199971][ T7168] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 347.670865][ T7184] overlayfs: failed to resolve './file0': -2 [ 348.033377][ T5794] Bluetooth: hci0: command tx timeout [ 348.177256][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 348.514619][ T7192] loop3: detected capacity change from 0 to 256 [ 348.994234][ T7192] FAT-fs (loop3): Directory bread(block 64) failed [ 349.041685][ T7192] FAT-fs (loop3): Directory bread(block 65) failed [ 349.087316][ T7192] FAT-fs (loop3): Directory bread(block 66) failed [ 349.124914][ T7192] FAT-fs (loop3): Directory bread(block 67) failed [ 349.131872][ T7192] FAT-fs (loop3): Directory bread(block 68) failed [ 349.203255][ T7192] FAT-fs (loop3): Directory bread(block 69) failed [ 349.213481][ T7192] FAT-fs (loop3): Directory bread(block 70) failed [ 349.220399][ T7192] FAT-fs (loop3): Directory bread(block 71) failed [ 349.259061][ T7192] FAT-fs (loop3): Directory bread(block 72) failed [ 349.270449][ T7192] FAT-fs (loop3): Directory bread(block 73) failed [ 349.316891][ T7203] overlayfs: failed to resolve './bus': -2 [ 349.560685][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.568497][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.590274][ T7144] bridge_slave_0: entered allmulticast mode [ 349.603335][ T7144] bridge_slave_0: entered promiscuous mode [ 349.624653][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.632461][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.641607][ T7144] bridge_slave_1: entered allmulticast mode [ 349.671210][ T7144] bridge_slave_1: entered promiscuous mode [ 350.012386][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.113497][ T5794] Bluetooth: hci0: command tx timeout [ 350.149414][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.418997][ T7144] team0: Port device team_slave_0 added [ 350.513207][ T7144] team0: Port device team_slave_1 added [ 350.736510][ T7216] loop1: detected capacity change from 0 to 128 [ 350.868711][ T7216] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.933987][ T7216] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.951705][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.959253][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.988945][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.063630][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.070996][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.100633][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.578576][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.193251][ T5794] Bluetooth: hci0: command tx timeout [ 352.584179][ T7230] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 352.597395][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.615857][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.588038][ T7144] hsr_slave_0: entered promiscuous mode [ 353.607967][ T7144] hsr_slave_1: entered promiscuous mode [ 353.673574][ T7144] debugfs: 'hsr0' already exists in 'hsr' [ 353.679631][ T7144] Cannot create hsr debugfs directory [ 355.354010][ T30] audit: type=1326 audit(1770102941.016:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000 [ 355.376527][ T30] audit: type=1326 audit(1770102941.016:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000 [ 355.401108][ T30] audit: type=1326 audit(1770102941.016:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73dd539 code=0x7ffc0000 [ 355.424030][ T30] audit: type=1326 audit(1770102941.016:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000 [ 355.446150][ T30] audit: type=1326 audit(1770102941.026:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000 [ 355.468643][ T30] audit: type=1326 audit(1770102941.026:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf73dd539 code=0x7ffc0000 [ 355.493626][ T30] audit: type=1326 audit(1770102941.026:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf714572b code=0x7ffc0000 [ 355.516179][ T30] audit: type=1326 audit(1770102941.026:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf714572b code=0x7ffc0000 [ 355.539675][ T30] audit: type=1326 audit(1770102941.026:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf714572b code=0x7ffc0000 [ 355.561924][ T30] audit: type=1326 audit(1770102941.026:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf714572b code=0x7ffc0000 [ 355.854710][ T7251] tipc: Started in network mode [ 355.859984][ T7251] tipc: Node identity 7f000001, cluster identity 4711 [ 355.876784][ T7251] tipc: Enabled bearer , priority 10 [ 355.914552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 356.043141][ T7251] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:04bb [ 356.053130][ T7251] tipc: Enabled bearer , priority 10 [ 356.433426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 356.442638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 356.454992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 356.483850][ T7144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 356.564831][ T7144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 356.701749][ T7144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 356.802042][ T7144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.053415][ T10] tipc: Node number set to 2130706433 [ 357.423519][ T1960] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 357.663461][ T1960] usb 4-1: Using ep0 maxpacket: 16 [ 357.690982][ T1960] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 357.700172][ T1960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.710655][ T1960] usb 4-1: config 0 has no interface number 0 [ 357.803355][ T1960] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 357.812739][ T1960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.821144][ T1960] usb 4-1: Product: syz [ 357.825999][ T1960] usb 4-1: Manufacturer: syz [ 357.830715][ T1960] usb 4-1: SerialNumber: syz [ 357.917457][ T1960] usb 4-1: config 0 descriptor?? [ 357.967961][ T1960] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 357.975996][ T1960] uvcvideo 4-1:0.105: No valid video chain found. [ 358.188758][ T5937] usb 4-1: USB disconnect, device number 6 [ 358.556145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.685627][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.812579][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.820621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.959875][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.967483][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.239972][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.247540][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.431521][ T7284] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 360.462537][ T7283] loop4: detected capacity change from 0 to 256 [ 360.913558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 361.016476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 361.323883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 361.733664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 362.280385][ T7283] FAT-fs (loop4): Directory bread(block 64) failed [ 362.324191][ T7283] FAT-fs (loop4): Directory bread(block 65) failed [ 362.331189][ T7283] FAT-fs (loop4): Directory bread(block 66) failed [ 362.408121][ T7283] FAT-fs (loop4): Directory bread(block 67) failed [ 362.479277][ T7283] FAT-fs (loop4): Directory bread(block 68) failed [ 362.531565][ T7283] FAT-fs (loop4): Directory bread(block 69) failed [ 362.574197][ T7283] FAT-fs (loop4): Directory bread(block 70) failed [ 362.623734][ T7283] FAT-fs (loop4): Directory bread(block 71) failed [ 362.636464][ T7283] FAT-fs (loop4): Directory bread(block 72) failed [ 362.683507][ T7283] FAT-fs (loop4): Directory bread(block 73) failed [ 363.305503][ T7297] loop1: detected capacity change from 0 to 128 [ 363.341621][ T7297] EXT4-fs (loop1): Test dummy encryption mode enabled [ 363.444031][ T7297] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.468716][ T7297] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.527676][ T7297] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 364.793723][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.828815][ T7313] loop3: detected capacity change from 0 to 256 [ 364.881371][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.974108][ T7313] FAT-fs (loop3): Directory bread(block 517) failed [ 364.994893][ T7313] FAT-fs (loop3): Directory bread(block 518) failed [ 365.001734][ T7313] FAT-fs (loop3): Directory bread(block 519) failed [ 365.082089][ T7313] FAT-fs (loop3): Directory bread(block 520) failed [ 365.136311][ T7313] FAT-fs (loop3): Directory bread(block 521) failed [ 365.183405][ T7313] FAT-fs (loop3): Directory bread(block 522) failed [ 365.190253][ T7313] FAT-fs (loop3): Directory bread(block 523) failed [ 365.266120][ T7313] FAT-fs (loop3): Directory bread(block 524) failed [ 365.274906][ T7313] FAT-fs (loop3): Directory bread(block 525) failed [ 365.303638][ T7313] FAT-fs (loop3): Directory bread(block 526) failed [ 365.404234][ T7316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 365.936566][ T7322] overlayfs: missing 'lowerdir' [ 366.159705][ T7324] 9pnet_fd: Insufficient options for proto=fd [ 366.684856][ T7331] loop5: detected capacity change from 0 to 512 [ 366.730976][ T7331] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 366.874624][ T7331] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.386: corrupted in-inode xattr: invalid ea_ino [ 366.915581][ T7333] loop4: detected capacity change from 0 to 512 [ 366.939010][ T7331] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.386: couldn't read orphan inode 15 (err -117) [ 366.980343][ T7331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.635975][ T6112] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 367.709120][ T6112] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 367.738702][ T7144] veth0_vlan: entered promiscuous mode [ 367.811431][ T6112] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 367.911888][ T6112] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 367.964028][ T7144] veth1_vlan: entered promiscuous mode [ 368.604467][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.640854][ T6112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.768095][ T7144] veth0_macvtap: entered promiscuous mode [ 368.888895][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.944444][ T7352] loop4: detected capacity change from 0 to 256 [ 369.043355][ T7352] FAT-fs (loop4): Directory bread(block 517) failed [ 369.050378][ T7352] FAT-fs (loop4): Directory bread(block 518) failed [ 369.085571][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.137267][ T7352] FAT-fs (loop4): Directory bread(block 519) failed [ 369.154237][ T7144] veth1_macvtap: entered promiscuous mode [ 369.163576][ T7352] FAT-fs (loop4): Directory bread(block 520) failed [ 369.170402][ T7352] FAT-fs (loop4): Directory bread(block 521) failed [ 369.240561][ T7352] FAT-fs (loop4): Directory bread(block 522) failed [ 369.291078][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.293718][ T7352] FAT-fs (loop4): Directory bread(block 523) failed [ 369.424731][ T7352] FAT-fs (loop4): Directory bread(block 524) failed [ 369.457064][ T7352] FAT-fs (loop4): Directory bread(block 525) failed [ 369.539304][ T7352] FAT-fs (loop4): Directory bread(block 526) failed [ 369.661762][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 369.661840][ T30] audit: type=1326 audit(1770102955.326:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 369.691123][ T30] audit: type=1326 audit(1770102955.326:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 369.713405][ T30] audit: type=1326 audit(1770102955.326:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 369.741073][ T30] audit: type=1326 audit(1770102955.336:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 369.764884][ T30] audit: type=1326 audit(1770102955.336:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 369.787138][ T30] audit: type=1326 audit(1770102955.336:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 369.811549][ T30] audit: type=1326 audit(1770102955.336:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 369.838838][ T30] audit: type=1326 audit(1770102955.336:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 369.862259][ T30] audit: type=1326 audit(1770102955.346:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 369.884290][ T30] audit: type=1326 audit(1770102955.346:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 369.949701][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.097834][ T7356] tipc: Started in network mode [ 370.103374][ T7356] tipc: Node identity 7f000001, cluster identity 4711 [ 370.177113][ T7356] tipc: Enabled bearer , priority 10 [ 370.875423][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.057307][ T58] bond0 (unregistering): Released all slaves [ 372.088546][ T6203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.102813][ T6203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.147634][ T6203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.171496][ T5846] tipc: Node number set to 2130706433 [ 372.217504][ T6203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.305271][ T58] tipc: Disabling bearer [ 372.311215][ T58] tipc: Disabling bearer [ 372.317661][ T58] tipc: Left network mode [ 372.712558][ T7367] loop1: detected capacity change from 0 to 128 [ 372.837435][ T7367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.940746][ T7367] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.012452][ T7373] overlayfs: missing 'lowerdir' [ 373.173845][ T58] hsr_slave_0: left promiscuous mode [ 373.224415][ T58] hsr_slave_1: left promiscuous mode [ 373.247059][ T7374] 9pnet_fd: Insufficient options for proto=fd [ 373.391944][ T58] veth1_macvtap: left promiscuous mode [ 373.431817][ T58] veth0_macvtap: left promiscuous mode [ 373.473991][ T58] veth1_vlan: left promiscuous mode [ 373.479566][ T58] veth0_vlan: left promiscuous mode [ 373.525448][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.554648][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.569361][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.625422][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.640005][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.027319][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.754310][ T7384] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 375.794770][ T5791] Bluetooth: hci1: command tx timeout [ 376.248772][ T7395] loop1: detected capacity change from 0 to 256 [ 376.338394][ T7395] exfat: Deprecated parameter 'utf8' [ 376.602587][ T7395] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 377.883745][ T5791] Bluetooth: hci1: command tx timeout [ 379.371992][ T7425] overlayfs: missing 'lowerdir' [ 379.518224][ T7426] 9pnet_fd: Insufficient options for proto=fd [ 379.759256][ T7375] chnl_net:caif_netlink_parms(): no params data found [ 379.856375][ T7433] loop4: detected capacity change from 0 to 16 [ 379.895161][ T7433] erofs (device loop4): negative i_size @ nid 36 [ 379.953292][ T5791] Bluetooth: hci1: command tx timeout [ 381.551780][ T7457] kvm: pic: non byte read [ 381.582627][ T7457] kvm: pic: level sensitive irq not supported [ 381.583253][ T7457] kvm: pic: non byte read [ 381.640580][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.648824][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.731883][ T7375] bridge_slave_0: entered allmulticast mode [ 381.813709][ T7375] bridge_slave_0: entered promiscuous mode [ 381.886086][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.893695][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.954230][ T7375] bridge_slave_1: entered allmulticast mode [ 382.029909][ T7375] bridge_slave_1: entered promiscuous mode [ 382.034092][ T5791] Bluetooth: hci1: command tx timeout [ 382.528999][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.648512][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.793958][ T7468] binder: 7467:7468 unknown command 1 [ 382.799639][ T7468] binder: 7467:7468 ioctl c0306201 80000080 returned -22 [ 383.150581][ T7375] team0: Port device team_slave_0 added [ 383.215327][ T7375] team0: Port device team_slave_1 added [ 383.416118][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 383.416189][ T30] audit: type=1326 audit(1770102969.096:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 383.563489][ T30] audit: type=1326 audit(1770102969.196:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 383.586089][ T30] audit: type=1326 audit(1770102969.206:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 383.608552][ T30] audit: type=1326 audit(1770102969.226:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 383.631368][ T30] audit: type=1326 audit(1770102969.246:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 383.763204][ T30] audit: type=1326 audit(1770102969.346:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 383.786589][ T30] audit: type=1326 audit(1770102969.346:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 383.808914][ T30] audit: type=1326 audit(1770102969.346:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 384.030823][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.038041][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.068378][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.317000][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.324247][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.350727][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.947907][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.956115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.035963][ T7375] hsr_slave_0: entered promiscuous mode [ 385.065180][ T7375] hsr_slave_1: entered promiscuous mode [ 385.118055][ T7375] debugfs: 'hsr0' already exists in 'hsr' [ 385.124289][ T7375] Cannot create hsr debugfs directory [ 385.443346][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.451571][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.105746][ T5846] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 387.343459][ T5846] usb 7-1: Using ep0 maxpacket: 32 [ 387.466518][ T5846] usb 7-1: unable to get BOS descriptor or descriptor too short [ 387.508961][ T5846] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 387.517875][ T5846] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 387.528964][ T5846] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 387.542445][ T5846] usb 7-1: config 128 has no interface number 0 [ 387.627807][ T7375] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 387.679244][ T5846] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 387.690955][ T5846] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.701785][ T5846] usb 7-1: config 128 interface 127 has no altsetting 0 [ 387.730568][ T7375] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 387.815880][ T5846] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 387.825606][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.834449][ T5846] usb 7-1: Product: syz [ 387.838838][ T5846] usb 7-1: Manufacturer: syz [ 387.846930][ T5846] usb 7-1: SerialNumber: syz [ 387.900894][ T7375] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 388.000269][ T7375] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 388.507737][ T5846] usb 7-1: USB disconnect, device number 2 [ 388.675382][ T7505] overlayfs: missing 'lowerdir' [ 388.755784][ T7501] 9pnet_fd: Insufficient options for proto=fd [ 388.838987][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.047967][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.360295][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.531483][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.539037][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.729200][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.736641][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.543672][ T5937] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 393.689162][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.733203][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 393.788367][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 393.830089][ T5937] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 393.838979][ T5937] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 393.849637][ T5937] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 393.859038][ T5937] usb 5-1: config 128 has no interface number 0 [ 393.973231][ T5937] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 393.992659][ T5937] usb 5-1: config 128 interface 127 has no altsetting 0 [ 394.081517][ T5937] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 394.097128][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.107190][ T5937] usb 5-1: Product: syz [ 394.111579][ T5937] usb 5-1: Manufacturer: syz [ 394.116677][ T5937] usb 5-1: SerialNumber: syz [ 394.207435][ T7542] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 394.793313][ T5937] usb 5-1: USB disconnect, device number 7 [ 395.060128][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.283342][ T7570] netlink: 'syz.6.435': attribute type 3 has an invalid length. [ 396.759296][ T7375] veth0_vlan: entered promiscuous mode [ 396.959538][ T7375] veth1_vlan: entered promiscuous mode [ 397.494218][ T7375] veth0_macvtap: entered promiscuous mode [ 397.618978][ T7375] veth1_macvtap: entered promiscuous mode [ 397.840819][ T30] audit: type=1326 audit(1770102983.436:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 397.863239][ T30] audit: type=1326 audit(1770102983.436:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 397.890755][ T30] audit: type=1326 audit(1770102983.436:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 397.914497][ T30] audit: type=1326 audit(1770102983.436:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 397.936737][ T30] audit: type=1326 audit(1770102983.446:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 397.958803][ T30] audit: type=1326 audit(1770102983.446:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 397.985058][ T30] audit: type=1326 audit(1770102983.446:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71c572b code=0x7ffc0000 [ 398.008884][ T30] audit: type=1326 audit(1770102983.446:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71c572b code=0x7ffc0000 [ 398.030900][ T30] audit: type=1326 audit(1770102983.446:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71c572b code=0x7ffc0000 [ 398.053202][ T30] audit: type=1326 audit(1770102983.446:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71c572b code=0x7ffc0000 [ 398.510220][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.682032][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.847373][ T1096] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.906860][ T1154] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.941769][ T1154] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.033461][ T1154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.199534][ T7601] loop6: detected capacity change from 0 to 256 [ 406.280086][ T40] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 406.492835][ T40] usb 4-1: Using ep0 maxpacket: 32 [ 406.527902][ T40] usb 4-1: unable to get BOS descriptor or descriptor too short [ 406.587300][ T40] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 406.598455][ T40] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 406.609182][ T40] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 406.618578][ T40] usb 4-1: config 128 has no interface number 0 [ 406.663340][ T40] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 406.675365][ T40] usb 4-1: config 128 interface 127 has no altsetting 0 [ 406.779811][ T40] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 406.794401][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.802631][ T40] usb 4-1: Product: syz [ 406.809125][ T40] usb 4-1: Manufacturer: syz [ 406.813998][ T40] usb 4-1: SerialNumber: syz [ 406.986106][ T7646] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 407.325690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.334130][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.663513][ T40] usb 4-1: USB disconnect, device number 7 [ 407.730991][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.739807][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.106422][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.538651][ T7671] loop6: detected capacity change from 0 to 1764 [ 408.819737][ T7676] loop4: detected capacity change from 0 to 128 [ 408.954374][ T7676] vfat: Unknown parameter '18446744073709551615ÿÿÿ' [ 410.559497][ T7691] syzkaller0: entered promiscuous mode [ 410.565385][ T7691] syzkaller0: entered allmulticast mode [ 411.973489][ T5937] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 412.192387][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 412.246831][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.310957][ T5937] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 412.326743][ T5937] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 412.340145][ T5937] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 412.349815][ T5937] usb 4-1: config 128 has no interface number 0 [ 412.463201][ T5937] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 412.475435][ T5937] usb 4-1: config 128 interface 127 has no altsetting 0 [ 412.546779][ T5937] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 412.559149][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.567616][ T5937] usb 4-1: Product: syz [ 412.571990][ T5937] usb 4-1: Manufacturer: syz [ 412.577051][ T5937] usb 4-1: SerialNumber: syz [ 412.698413][ T7717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 413.280640][ T5937] usb 4-1: USB disconnect, device number 8 [ 413.478005][ T5840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 413.654806][ T5840] usb 8-1: device descriptor read/64, error -71 [ 413.740987][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.923559][ T5840] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 413.990318][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.997084][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.143411][ T5840] usb 8-1: device descriptor read/64, error -71 [ 414.258380][ T5840] usb usb8-port1: attempt power cycle [ 414.687299][ T5840] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 414.803418][ T5840] usb 8-1: device descriptor read/8, error -71 [ 415.103369][ T5840] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 415.133436][ T5840] usb 8-1: device descriptor read/8, error -71 [ 415.239859][ T7757] loop6: detected capacity change from 0 to 256 [ 415.276715][ T5840] usb usb8-port1: unable to enumerate USB device [ 415.373441][ T7757] FAT-fs (loop6): Directory bread(block 517) failed [ 415.415798][ T7757] FAT-fs (loop6): Directory bread(block 518) failed [ 415.441478][ T7757] FAT-fs (loop6): Directory bread(block 519) failed [ 415.482525][ T7757] FAT-fs (loop6): Directory bread(block 520) failed [ 415.534097][ T7757] FAT-fs (loop6): Directory bread(block 521) failed [ 415.541132][ T7757] FAT-fs (loop6): Directory bread(block 522) failed [ 415.646090][ T7757] FAT-fs (loop6): Directory bread(block 523) failed [ 415.714230][ T7757] FAT-fs (loop6): Directory bread(block 524) failed [ 415.721086][ T7757] FAT-fs (loop6): Directory bread(block 525) failed [ 415.793594][ T7757] FAT-fs (loop6): Directory bread(block 526) failed [ 417.193354][ T5840] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 417.428708][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 417.515055][ T5840] usb 8-1: unable to get BOS descriptor or descriptor too short [ 417.588236][ T5840] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 417.597178][ T5840] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 417.608065][ T5840] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 417.617941][ T5840] usb 8-1: config 128 has no interface number 0 [ 417.856127][ T5840] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 417.868393][ T5840] usb 8-1: config 128 interface 127 has no altsetting 0 [ 417.932057][ T5840] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 417.941708][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.957555][ T5840] usb 8-1: Product: syz [ 417.962050][ T5840] usb 8-1: Manufacturer: syz [ 417.969054][ T5840] usb 8-1: SerialNumber: syz [ 418.141547][ T7772] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 418.363161][ T7793] overlayfs: overlapping lowerdir path [ 418.552580][ T5840] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.836570][ T5840] usb 8-1: USB disconnect, device number 6 [ 419.530237][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.283457][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 420.451556][ T9] usb 8-1: device descriptor read/64, error -71 [ 420.733208][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 420.936384][ T9] usb 8-1: device descriptor read/64, error -71 [ 421.055302][ T9] usb usb8-port1: attempt power cycle [ 421.463389][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 421.569656][ T9] usb 8-1: device descriptor read/8, error -71 [ 421.833568][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 421.955420][ T9] usb 8-1: device descriptor read/8, error -71 [ 422.085093][ T9] usb usb8-port1: unable to enumerate USB device [ 423.245292][ T7851] syzkaller0: entered promiscuous mode [ 423.251006][ T7851] syzkaller0: entered allmulticast mode [ 423.544314][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.520'. [ 424.415207][ T7868] team0 (unregistering): Port device team_slave_0 removed [ 424.552280][ T7868] team0 (unregistering): Port device team_slave_1 removed [ 424.577870][ T7873] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 424.656587][ T7873] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 427.160822][ T7903] overlayfs: missing 'workdir' [ 427.303283][ T5840] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 427.483798][ T5840] usb 4-1: device descriptor read/64, error -71 [ 427.773913][ T5840] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 428.008936][ T5840] usb 4-1: device descriptor read/64, error -71 [ 428.089160][ T7914] loop6: detected capacity change from 0 to 128 [ 428.130548][ T5840] usb usb4-port1: attempt power cycle [ 428.523731][ T5840] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 428.585146][ T5840] usb 4-1: device descriptor read/8, error -71 [ 428.873506][ T5840] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 428.958267][ T5840] usb 4-1: device descriptor read/8, error -71 [ 429.084729][ T5840] usb usb4-port1: unable to enumerate USB device [ 430.981096][ T7950] overlayfs: missing 'workdir' [ 431.275887][ T7952] syzkaller0: entered promiscuous mode [ 431.281939][ T7952] syzkaller0: entered allmulticast mode [ 431.818871][ T7956] overlayfs: failed to clone upperpath [ 431.940965][ T7960] overlayfs: failed to clone upperpath [ 432.837758][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.554'. [ 433.193411][ T7966] hsr_slave_1 (unregistering): left promiscuous mode [ 433.515804][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 433.744739][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.755404][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.764981][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.774468][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.895440][ T9] usb 5-1: config 0 descriptor?? [ 434.204893][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.214649][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.273979][ T7984] bridge0: entered allmulticast mode [ 434.371211][ T7988] bridge_slave_1: left allmulticast mode [ 434.377897][ T7988] bridge_slave_1: left promiscuous mode [ 434.388941][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.476549][ T7988] bridge_slave_0: left allmulticast mode [ 434.482516][ T7988] bridge_slave_0: left promiscuous mode [ 434.489859][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.775518][ T7998] syzkaller0: entered promiscuous mode [ 435.781231][ T7998] syzkaller0: entered allmulticast mode [ 436.373357][ T5840] usb 5-1: USB disconnect, device number 8 [ 437.012279][ T8009] loop6: detected capacity change from 0 to 512 [ 439.377751][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 439.581489][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.593049][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.602293][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.611870][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.709468][ T9] usb 5-1: config 0 descriptor?? [ 439.741194][ T8034] syzkaller0: entered promiscuous mode [ 439.747282][ T8034] syzkaller0: entered allmulticast mode [ 442.260712][ T5840] usb 5-1: USB disconnect, device number 9 [ 442.970035][ T8065] syzkaller0: entered promiscuous mode [ 442.975889][ T8065] syzkaller0: entered allmulticast mode [ 443.282825][ T8075] netlink: 'syz.7.594': attribute type 15 has an invalid length. [ 443.599137][ C1] hrtimer: interrupt took 315992 ns [ 444.403150][ T8083] fuse: Invalid rootmode [ 445.373251][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 445.624968][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.635823][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.645289][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.654883][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.825838][ T9] usb 5-1: config 0 descriptor?? [ 446.781554][ T8107] syzkaller0: entered promiscuous mode [ 446.787933][ T8107] syzkaller0: entered allmulticast mode [ 447.599838][ T8116] fuse: Invalid rootmode [ 448.375003][ T5840] usb 5-1: USB disconnect, device number 10 [ 448.883553][ T8131] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 449.104283][ T8134] loop7: detected capacity change from 0 to 256 [ 449.355106][ T8140] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 198) [ 449.365923][ T8140] FAT-fs (loop7): Filesystem has been set read-only [ 449.398107][ T8140] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 198) [ 449.414079][ T8140] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 449.531724][ T8140] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 198) [ 449.905201][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 449.905286][ T30] audit: type=1800 audit(1770103035.576:76): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.619" name="file1" dev="loop7" ino=1048652 res=0 errno=0 [ 450.060466][ T8144] syzkaller0: entered promiscuous mode [ 450.068160][ T8144] syzkaller0: entered allmulticast mode [ 450.797656][ T8154] fuse: Invalid rootmode [ 451.235884][ T5840] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 451.474097][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.506376][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 451.520092][ T5840] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.529541][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.377871][ T5840] usb 4-1: config 0 descriptor?? [ 452.417659][ T5840] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 453.760367][ T8190] overlayfs: missing 'lowerdir' [ 453.929715][ T8193] 9pnet_fd: Insufficient options for proto=fd [ 454.719327][ T5840] usb 4-1: USB disconnect, device number 13 [ 455.026180][ T8197] fuse: Bad value for 'rootmode' [ 456.562419][ T8215] IPv6: addrconf: prefix option has invalid lifetime [ 457.143038][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 457.417873][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 457.461674][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 457.591566][ T9] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 457.601011][ T9] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 457.612310][ T9] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 457.621653][ T9] usb 7-1: config 128 has no interface number 0 [ 457.658687][ T9] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 457.671164][ T9] usb 7-1: config 128 interface 127 has no altsetting 0 [ 457.942732][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 457.952393][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.960966][ T9] usb 7-1: Product: syz [ 457.965442][ T9] usb 7-1: Manufacturer: syz [ 457.970232][ T9] usb 7-1: SerialNumber: syz [ 458.016262][ T8234] overlayfs: missing 'lowerdir' [ 458.094912][ T8234] 9pnet_fd: Insufficient options for proto=fd [ 458.128301][ T8218] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 458.587988][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 458.591272][ T9] usb 7-1: USB disconnect, device number 3 [ 458.761031][ T8245] overlayfs: overlapping lowerdir path [ 458.811033][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.844988][ T8245] fuse: Bad value for 'fd' [ 459.224696][ T8244] bridge0: port 1(veth3) entered blocking state [ 459.231559][ T8244] bridge0: port 1(veth3) entered disabled state [ 459.288958][ T8244] veth3: entered allmulticast mode [ 459.311901][ T8244] veth3: entered promiscuous mode [ 459.519554][ T8246] vlan2: entered allmulticast mode [ 459.529438][ T8246] veth1: entered allmulticast mode [ 461.408416][ T8275] overlayfs: missing 'lowerdir' [ 461.566919][ T8278] 9pnet_fd: Insufficient options for proto=fd [ 461.623363][ T5840] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 461.803509][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 461.824399][ T5840] usb 8-1: unable to get BOS descriptor or descriptor too short [ 461.861284][ T5840] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 461.870267][ T5840] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 461.887901][ T5840] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 461.899607][ T5840] usb 8-1: config 128 has no interface number 0 [ 461.961963][ T5840] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 461.974572][ T5840] usb 8-1: config 128 interface 127 has no altsetting 0 [ 462.017770][ T5840] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 462.028543][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.037118][ T5840] usb 8-1: Product: syz [ 462.041486][ T5840] usb 8-1: Manufacturer: syz [ 462.046511][ T5840] usb 8-1: SerialNumber: syz [ 462.076811][ T8273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 462.617276][ T5840] usb 8-1: USB disconnect, device number 11 [ 462.958758][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.876365][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 463.888504][ T8305] ucma_write: process 402 (syz.4.680) changed security contexts after opening file descriptor, this is not allowed. [ 464.798869][ T8315] overlayfs: missing 'lowerdir' [ 464.936530][ T8317] 9pnet_fd: Insufficient options for proto=fd [ 465.059021][ T8318] fuse: Unknown parameter 'use00000000000000000000' [ 465.976360][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 466.180128][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 466.237476][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 466.276657][ T9] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 466.289198][ T9] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 466.301126][ T9] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 466.310557][ T9] usb 8-1: config 128 has no interface number 0 [ 466.410819][ T9] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 466.423420][ T9] usb 8-1: config 128 interface 127 has no altsetting 0 [ 466.498805][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 466.508612][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.517189][ T9] usb 8-1: Product: syz [ 466.521593][ T9] usb 8-1: Manufacturer: syz [ 466.526554][ T9] usb 8-1: SerialNumber: syz [ 466.729594][ T8326] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 467.070924][ T8339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.233385][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 467.266869][ T9] usb 8-1: USB disconnect, device number 12 [ 467.338607][ T6048] udevd[6048]: setting mode of /dev/bus/usb/008/012 to 020664 failed: No such file or directory [ 467.378986][ T6048] udevd[6048]: setting owner of /dev/bus/usb/008/012 to uid=0, gid=0 failed: No such file or directory [ 467.834563][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.871197][ T8355] fuse: Unknown parameter 'use00000000000000000000' [ 469.495841][ T8365] overlayfs: missing 'lowerdir' [ 469.676673][ T8367] 9pnet_fd: Insufficient options for proto=fd [ 471.505789][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 471.693583][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 471.771135][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 471.823018][ T9] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 471.831725][ T9] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 471.842411][ T9] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 471.851856][ T9] usb 4-1: config 128 has no interface number 0 [ 471.983381][ T9] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 471.995779][ T9] usb 4-1: config 128 interface 127 has no altsetting 0 [ 472.103446][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 472.112780][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.124863][ T9] usb 4-1: Product: syz [ 472.129229][ T9] usb 4-1: Manufacturer: syz [ 472.135294][ T9] usb 4-1: SerialNumber: syz [ 472.198365][ T8385] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 472.516160][ T8394] fuse: Unknown parameter 'use00000000000000000000' [ 472.754021][ T9] usb 4-1: USB disconnect, device number 14 [ 473.193561][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.440245][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.448392][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.464874][ T8428] fuse: Unknown parameter 'user_i00000000000000000000' [ 476.164134][ T5846] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 476.383403][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 476.430168][ T8436] overlayfs: upper fs does not support file handles, falling back to index=off. [ 476.455876][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 476.470738][ T5846] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 476.479800][ T5846] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 476.490494][ T5846] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 476.499995][ T5846] usb 5-1: config 128 has no interface number 0 [ 476.532201][ T5846] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 476.544310][ T5846] usb 5-1: config 128 interface 127 has no altsetting 0 [ 476.609645][ T5846] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 476.619329][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.631572][ T5846] usb 5-1: Product: syz [ 476.637156][ T5846] usb 5-1: Manufacturer: syz [ 476.641983][ T5846] usb 5-1: SerialNumber: syz [ 476.758038][ T8432] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.200314][ T8444] netlink: 'syz.1.736': attribute type 15 has an invalid length. [ 477.304247][ T5846] usb 5-1: USB disconnect, device number 11 [ 477.497717][ T8448] fuse: Bad value for 'fd' [ 477.701595][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.419728][ T8457] IPv6: addrconf: prefix option has invalid lifetime [ 479.145846][ T8463] fuse: Unknown parameter 'user_i00000000000000000000' [ 480.073320][ T8478] overlayfs: upper fs does not support file handles, falling back to index=off. [ 481.262843][ T8494] fuse: Bad value for 'fd' [ 481.409630][ T8499] IPv6: addrconf: prefix option has invalid lifetime [ 483.440133][ T8525] overlayfs: upper fs does not support file handles, falling back to index=off. [ 484.469244][ T8541] fuse: Bad value for 'fd' [ 485.053703][ T8547] IPv6: addrconf: prefix option has invalid lifetime [ 485.881685][ T8556] overlayfs: failed to clone upperpath [ 487.004925][ T8568] overlayfs: upper fs does not support file handles, falling back to index=off. [ 487.143735][ T5840] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 487.327432][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 487.421471][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 487.455387][ T5840] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 487.464177][ T5840] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 487.475153][ T5840] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 487.493244][ T5840] usb 5-1: config 128 has no interface number 0 [ 487.571050][ T5840] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 487.590303][ T5840] usb 5-1: config 128 interface 127 has no altsetting 0 [ 487.696981][ T5840] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 487.706506][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.715016][ T5840] usb 5-1: Product: syz [ 487.719382][ T5840] usb 5-1: Manufacturer: syz [ 487.724279][ T5840] usb 5-1: SerialNumber: syz [ 487.734126][ T8575] IPv6: addrconf: prefix option has invalid lifetime [ 487.836995][ T8567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 488.460391][ T5840] usb 5-1: USB disconnect, device number 12 [ 488.950365][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.076790][ T8604] overlayfs: failed to resolve './bus': -2 [ 490.126611][ T8604] overlayfs: failed to resolve './bus': -2 [ 493.582413][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 494.118029][ T8652] bridge1: port 1(veth3) entered blocking state [ 494.125079][ T8652] bridge1: port 1(veth3) entered disabled state [ 494.213165][ T8652] veth3: entered allmulticast mode [ 494.312552][ T8652] veth3: entered promiscuous mode [ 497.319568][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 497.884026][ T8698] vlan2: entered allmulticast mode [ 497.889581][ T8698] veth1: entered allmulticast mode [ 497.953397][ T8698] bridge1: port 1(vlan2) entered blocking state [ 497.960310][ T8698] bridge1: port 1(vlan2) entered disabled state [ 497.969072][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 498.054840][ T8698] vlan2: entered promiscuous mode [ 498.060274][ T8698] veth1: entered promiscuous mode [ 503.171068][ T8779] 9pnet_fd: Insufficient options for proto=fd [ 504.963542][ T8800] process 'syz.4.859' launched '/dev/fd/4' with NULL argv: empty string added [ 505.241141][ T8805] IPv6: addrconf: prefix option has invalid lifetime [ 506.261704][ T8820] 9pnet_fd: Insufficient options for proto=fd [ 506.754860][ T8824] syzkaller0: entered promiscuous mode [ 506.760837][ T8824] syzkaller0: entered allmulticast mode [ 508.190518][ T8842] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 508.322768][ T8842] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 508.344088][ T8848] IPv6: addrconf: prefix option has invalid lifetime [ 508.399532][ T8842] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 511.532810][ T8888] IPv6: addrconf: prefix option has invalid lifetime [ 513.314377][ T8906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 513.954855][ T8918] syzkaller0: entered promiscuous mode [ 513.960648][ T8918] syzkaller0: entered allmulticast mode [ 515.297072][ T8935] IPv6: addrconf: prefix option has invalid lifetime [ 518.031021][ T8958] syzkaller0: entered promiscuous mode [ 518.037061][ T8958] syzkaller0: entered allmulticast mode [ 519.267323][ T8973] IPv6: addrconf: prefix option has invalid lifetime [ 519.438347][ T8967] 9pnet_fd: Insufficient options for proto=fd [ 520.416328][ T8988] fuse: Bad value for 'fd' [ 520.604762][ T30] audit: type=1326 audit(1770103106.296:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.703277][ T30] audit: type=1326 audit(1770103106.296:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.726199][ T30] audit: type=1326 audit(1770103106.296:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.748656][ T30] audit: type=1326 audit(1770103106.356:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.777323][ T30] audit: type=1326 audit(1770103106.366:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.801884][ T30] audit: type=1326 audit(1770103106.366:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.824383][ T30] audit: type=1326 audit(1770103106.366:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.847706][ T30] audit: type=1326 audit(1770103106.386:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.877397][ T30] audit: type=1326 audit(1770103106.386:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 520.901703][ T30] audit: type=1326 audit(1770103106.386:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 521.968881][ T9009] IPv6: addrconf: prefix option has invalid lifetime [ 522.929630][ T9018] overlayfs: failed to resolve './bus': -2 [ 522.978488][ T9018] overlayfs: failed to resolve './bus': -2 [ 523.186310][ T9021] overlayfs: missing 'lowerdir' [ 523.306202][ T9023] 9pnet_fd: Insufficient options for proto=fd [ 523.515591][ T9027] fuse: Bad value for 'fd' [ 524.635138][ T9043] IPv6: addrconf: prefix option has invalid lifetime [ 524.968426][ T9045] syzkaller0: entered promiscuous mode [ 524.974422][ T9045] syzkaller0: entered allmulticast mode [ 525.865457][ T9056] overlayfs: failed to resolve './bus': -2 [ 525.906832][ T9056] overlayfs: failed to resolve './bus': -2 [ 526.058367][ T9062] fuse: Bad value for 'fd' [ 526.943779][ T9073] overlayfs: missing 'lowerdir' [ 526.954526][ T9069] 9pnet_fd: Insufficient options for proto=fd [ 527.638914][ T9081] IPv6: addrconf: prefix option has invalid lifetime [ 529.711785][ T9110] fuse: Bad value for 'fd' [ 530.885159][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 530.885241][ T30] audit: type=1326 audit(1770103116.576:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 530.932311][ T9127] overlayfs: missing 'lowerdir' [ 531.071047][ T9129] 9pnet_fd: Insufficient options for proto=fd [ 531.089250][ T30] audit: type=1326 audit(1770103116.636:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.118288][ T30] audit: type=1326 audit(1770103116.636:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.143173][ T30] audit: type=1326 audit(1770103116.676:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.165775][ T30] audit: type=1326 audit(1770103116.676:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.188173][ T30] audit: type=1326 audit(1770103116.676:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.218919][ T30] audit: type=1326 audit(1770103116.696:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.242552][ T30] audit: type=1326 audit(1770103116.696:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.265156][ T30] audit: type=1326 audit(1770103116.696:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.287772][ T30] audit: type=1326 audit(1770103116.696:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.7.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 531.421151][ T9135] IPv6: addrconf: prefix option has invalid lifetime [ 531.574100][ T9137] syzkaller0: entered promiscuous mode [ 531.580123][ T9137] syzkaller0: entered allmulticast mode [ 532.808192][ T5846] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 533.013146][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 533.034597][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 533.076027][ T5846] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 533.085013][ T5846] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 533.095810][ T5846] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 533.105356][ T5846] usb 5-1: config 128 has no interface number 0 [ 533.195496][ T5846] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 533.207585][ T5846] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.218252][ T5846] usb 5-1: config 128 interface 127 has no altsetting 0 [ 533.270991][ T5846] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 533.281630][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.295842][ T5846] usb 5-1: Product: syz [ 533.300241][ T5846] usb 5-1: Manufacturer: syz [ 533.305282][ T5846] usb 5-1: SerialNumber: syz [ 533.948004][ T5846] usb 5-1: USB disconnect, device number 13 [ 534.211372][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.978734][ T9175] IPv6: addrconf: prefix option has invalid lifetime [ 535.311194][ T9182] syzkaller0: entered promiscuous mode [ 535.319203][ T9182] syzkaller0: entered allmulticast mode [ 535.328109][ T9181] overlayfs: missing 'lowerdir' [ 535.370552][ T9181] 9pnet_fd: Insufficient options for proto=fd [ 536.858234][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.865128][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.733173][ T5840] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 537.969806][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 537.993271][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 538.029090][ T5840] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 538.038133][ T5840] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 538.048813][ T5840] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 538.058754][ T5840] usb 4-1: config 128 has no interface number 0 [ 538.187120][ T5840] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 538.199146][ T5840] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.209795][ T5840] usb 4-1: config 128 interface 127 has no altsetting 0 [ 538.364336][ T5840] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 538.380491][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.391522][ T5840] usb 4-1: Product: syz [ 538.396178][ T5840] usb 4-1: Manufacturer: syz [ 538.400966][ T5840] usb 4-1: SerialNumber: syz [ 539.006624][ T5840] usb 4-1: USB disconnect, device number 15 [ 539.200894][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.319286][ T9228] overlayfs: missing 'lowerdir' [ 539.445634][ T9228] 9pnet_fd: Insufficient options for proto=fd [ 540.853656][ T9245] netlink: 'syz.7.1005': attribute type 29 has an invalid length. [ 540.925669][ T9245] netlink: 'syz.7.1005': attribute type 29 has an invalid length. [ 541.203946][ T9250] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 544.366847][ T9294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1024'. [ 544.457629][ T9294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1024'. [ 547.048017][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1037'. [ 547.100315][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1037'. [ 547.134710][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1037'. [ 548.210797][ T9340] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1042'. [ 549.416110][ T9355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1048'. [ 549.455345][ T9357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1049'. [ 549.476552][ T9355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1048'. [ 549.505662][ T9357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1049'. [ 549.557320][ T9358] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1049'. [ 549.570558][ T9355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1048'. [ 550.462114][ T9365] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 553.260428][ T9398] overlayfs: upper fs does not support file handles, falling back to index=off. [ 553.769265][ T9405] ===================================================== [ 553.776686][ T9405] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 553.784185][ T9405] batadv_get_vid+0x2ce/0x3b0 [ 553.789088][ T9405] batadv_interface_tx+0x2e8/0x1dd0 [ 553.794640][ T9405] dev_hard_start_xmit+0x22f/0xa30 [ 553.799996][ T9405] __dev_queue_xmit+0x350d/0x5890 [ 553.805371][ T9405] __bpf_redirect+0x162e/0x1760 [ 553.810475][ T9405] bpf_clone_redirect+0x4a6/0x6c0 [ 553.815875][ T9405] ___bpf_prog_run+0x12af/0xeb60 [ 553.821039][ T9405] __bpf_prog_run512+0xc5/0x100 [ 553.826233][ T9405] bpf_test_run+0x493/0xdf0 [ 553.831018][ T9405] bpf_prog_test_run_skb+0x2376/0x3200 [ 553.836837][ T9405] bpf_prog_test_run+0x5bb/0x9f0 [ 553.842005][ T9405] __sys_bpf+0x873/0xeb0 [ 553.846582][ T9405] __ia32_sys_bpf+0xa4/0xf0 [ 553.851282][ T9405] ia32_sys_call+0xa53/0x4340 [ 553.856308][ T9405] __do_fast_syscall_32+0x14a/0x310 [ 553.861735][ T9405] do_fast_syscall_32+0x37/0x80 [ 553.866920][ T9405] do_SYSENTER_32+0x1f/0x30 [ 553.871659][ T9405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.878324][ T9405] [ 553.880748][ T9405] Uninit was created at: [ 553.885363][ T9405] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 553.891543][ T9405] kmalloc_reserve+0x13c/0x4b0 [ 553.896658][ T9405] pskb_expand_head+0x205/0x1900 [ 553.901781][ T9405] skb_ensure_writable+0x44e/0x510 [ 553.907236][ T9405] bpf_clone_redirect+0x301/0x6c0 [ 553.912509][ T9405] ___bpf_prog_run+0x12af/0xeb60 [ 553.917794][ T9405] __bpf_prog_run512+0xc5/0x100 [ 553.922963][ T9405] bpf_test_run+0x493/0xdf0 [ 553.927689][ T9405] bpf_prog_test_run_skb+0x2376/0x3200 [ 553.933490][ T9405] bpf_prog_test_run+0x5bb/0x9f0 [ 553.938668][ T9405] __sys_bpf+0x873/0xeb0 [ 553.943213][ T9405] __ia32_sys_bpf+0xa4/0xf0 [ 553.947921][ T9405] ia32_sys_call+0xa53/0x4340 [ 553.952948][ T9405] __do_fast_syscall_32+0x14a/0x310 [ 553.958377][ T9405] do_fast_syscall_32+0x37/0x80 [ 553.963577][ T9405] do_SYSENTER_32+0x1f/0x30 [ 553.968301][ T9405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.974956][ T9405] [ 553.977421][ T9405] CPU: 0 UID: 0 PID: 9405 Comm: syz.3.1068 Not tainted syzkaller #0 PREEMPT(voluntary) [ 553.987491][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 553.997822][ T9405] ===================================================== [ 554.004984][ T9405] Disabling lock debugging due to kernel taint [ 554.011357][ T9405] Kernel panic - not syncing: kmsan.panic set ... [ 554.017927][ T9405] CPU: 0 UID: 0 PID: 9405 Comm: syz.3.1068 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 554.029443][ T9405] Tainted: [B]=BAD_PAGE [ 554.033793][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 554.044009][ T9405] Call Trace: [ 554.047421][ T9405] [ 554.050474][ T9405] __dump_stack+0x26/0x30 [ 554.055019][ T9405] dump_stack_lvl+0x50/0x1c0 [ 554.059822][ T9405] ? dump_stack+0x12/0x25 [ 554.064370][ T9405] dump_stack+0x1e/0x25 [ 554.068729][ T9405] vpanic+0x435/0xd40 [ 554.072943][ T9405] panic+0x15d/0x160 [ 554.077111][ T9405] kmsan_report+0x31a/0x320 [ 554.081870][ T9405] ? __msan_warning+0x1b/0x30 [ 554.086769][ T9405] ? batadv_get_vid+0x2ce/0x3b0 [ 554.091821][ T9405] ? batadv_interface_tx+0x2e8/0x1dd0 [ 554.097410][ T9405] ? dev_hard_start_xmit+0x22f/0xa30 [ 554.102967][ T9405] ? __dev_queue_xmit+0x350d/0x5890 [ 554.108409][ T9405] ? __bpf_redirect+0x162e/0x1760 [ 554.113687][ T9405] ? bpf_clone_redirect+0x4a6/0x6c0 [ 554.119129][ T9405] ? ___bpf_prog_run+0x12af/0xeb60 [ 554.124464][ T9405] ? __bpf_prog_run512+0xc5/0x100 [ 554.129786][ T9405] ? bpf_test_run+0x493/0xdf0 [ 554.134708][ T9405] ? bpf_prog_test_run_skb+0x2376/0x3200 [ 554.140596][ T9405] ? bpf_prog_test_run+0x5bb/0x9f0 [ 554.145944][ T9405] ? __sys_bpf+0x873/0xeb0 [ 554.150566][ T9405] ? __ia32_sys_bpf+0xa4/0xf0 [ 554.155440][ T9405] ? ia32_sys_call+0xa53/0x4340 [ 554.160545][ T9405] ? __do_fast_syscall_32+0x14a/0x310 [ 554.166163][ T9405] ? do_fast_syscall_32+0x37/0x80 [ 554.171401][ T9405] ? do_SYSENTER_32+0x1f/0x30 [ 554.176301][ T9405] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.183045][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.188413][ T9405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 554.194588][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.199955][ T9405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 554.206036][ T9405] ? batadv_interface_tx+0x41/0x1dd0 [ 554.211545][ T9405] ? filter_irq_stacks+0x49/0x190 [ 554.216796][ T9405] ? stack_depot_save_flags+0x35/0x790 [ 554.222460][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.227842][ T9405] __msan_warning+0x1b/0x30 [ 554.232590][ T9405] batadv_get_vid+0x2ce/0x3b0 [ 554.237497][ T9405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 554.243575][ T9405] batadv_interface_tx+0x2e8/0x1dd0 [ 554.249027][ T9405] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 554.255611][ T9405] ? __pfx_batadv_interface_tx+0x10/0x10 [ 554.261480][ T9405] dev_hard_start_xmit+0x22f/0xa30 [ 554.266872][ T9405] __dev_queue_xmit+0x350d/0x5890 [ 554.272154][ T9405] ? skb_release_data+0xc1f/0xdf0 [ 554.277419][ T9405] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 554.283922][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.289289][ T9405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 554.295355][ T9405] ? __dev_queue_xmit+0x27d/0x5890 [ 554.300733][ T9405] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 554.307320][ T9405] __bpf_redirect+0x162e/0x1760 [ 554.312446][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.317822][ T9405] bpf_clone_redirect+0x4a6/0x6c0 [ 554.323136][ T9405] ___bpf_prog_run+0x12af/0xeb60 [ 554.328361][ T9405] __bpf_prog_run512+0xc5/0x100 [ 554.333483][ T9405] ? kmsan_internal_poison_memory+0x78/0x90 [ 554.339606][ T9405] ? kmsan_internal_poison_memory+0x4a/0x90 [ 554.345754][ T9405] ? kmsan_slab_alloc+0xdc/0x160 [ 554.350932][ T9405] ? kmem_cache_alloc_noprof+0x967/0x1730 [ 554.356838][ T9405] ? slab_build_skb+0x5c/0x5a0 [ 554.361899][ T9405] ? bpf_prog_test_run_skb+0x750/0x3200 [ 554.367692][ T9405] ? bpf_prog_test_run+0x5bb/0x9f0 [ 554.373043][ T9405] ? __sys_bpf+0x873/0xeb0 [ 554.377682][ T9405] ? __ia32_sys_bpf+0xa4/0xf0 [ 554.382581][ T9405] ? ia32_sys_call+0xa53/0x4340 [ 554.387675][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.393050][ T9405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 554.399131][ T9405] ? bpf_test_run+0xc1/0xdf0 [ 554.403966][ T9405] ? filter_irq_stacks+0x49/0x190 [ 554.409204][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.414572][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.419935][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.425307][ T9405] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 554.431891][ T9405] ? kmsan_get_metadata+0x146/0x160 [ 554.437344][ T9405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 554.443425][ T9405] ? __pfx___bpf_prog_run512+0x10/0x10 [ 554.449142][ T9405] ? __pfx___bpf_prog_run512+0x10/0x10 [ 554.454837][ T9405] bpf_test_run+0x493/0xdf0 [ 554.459574][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.464930][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.470327][ T9405] ? bpf_test_run+0x2f4/0xdf0 [ 554.475277][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.480662][ T9405] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 554.486739][ T9405] bpf_prog_test_run_skb+0x2376/0x3200 [ 554.492446][ T9405] ? kmsan_get_metadata+0xf1/0x160 [ 554.497821][ T9405] ? __rcu_read_unlock+0x6c/0xd0 [ 554.503085][ T9405] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 554.509144][ T9405] bpf_prog_test_run+0x5bb/0x9f0 [ 554.514345][ T9405] __sys_bpf+0x873/0xeb0 [ 554.518880][ T9405] __ia32_sys_bpf+0xa4/0xf0 [ 554.523643][ T9405] ia32_sys_call+0xa53/0x4340 [ 554.528600][ T9405] __do_fast_syscall_32+0x14a/0x310 [ 554.534057][ T9405] do_fast_syscall_32+0x37/0x80 [ 554.539160][ T9405] do_SYSENTER_32+0x1f/0x30 [ 554.543990][ T9405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.550790][ T9405] RIP: 0023:0xf7fa3539 [ 554.555015][ T9405] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 554.574829][ T9405] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 554.583537][ T9405] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 554.591673][ T9405] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.599773][ T9405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.607885][ T9405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 554.616018][ T9405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.624171][ T9405] [ 554.627908][ T9405] Kernel Offset: disabled [ 554.632311][ T9405] Rebooting in 86400 seconds..