last executing test programs: 15m34.64489192s ago: executing program 0 (id=1911): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0) 15m23.467638585s ago: executing program 0 (id=1929): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) fsmount(r1, 0x0, 0xc) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0x9e54, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9cd6, 0x2000, 0x3, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x4000, 0xfffffffe, 0x26d}}], 0x1, 0x0, 0x0) 15m19.753361262s ago: executing program 0 (id=1932): mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5350d675) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x80000004}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000640)={0x50, 0x0, r2, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x5) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, &(0x7f00000009c0)='1', 0x47f, 0xf, 0x0, 0x0, r3}]) 15m15.391890825s ago: executing program 0 (id=1940): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x100000003, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000019640)={@remote, 0x4, 0x0, 0x2, 0x0, 0x9}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000019680)='net/anycast6\x00') preadv(r4, &(0x7f00000196c0)=[{&(0x7f0000019700)=""/63, 0x3f}], 0x1, 0x9, 0xd) 15m13.047467003s ago: executing program 0 (id=1942): memfd_create(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000dc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000e00), 0x0, 0x0) read$msr(r3, &(0x7f0000000e40)=""/102392, 0x18ff8) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000019fc0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0x5, 0x0, 0x0, 0x5, 0xb, 0x0, 0x8, 0xabaa, 0x0}) sched_setaffinity(r2, 0x47, &(0x7f000001a000)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f000001a040)={0x0, 0x0, 0x80}, 0x28) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f000001a140)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f000001a180)=[{{&(0x7f000001a1c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f000001a200)=[{&(0x7f000001a240)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15m11.537555256s ago: executing program 0 (id=1946): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/net\x00') openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x142000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0xdd, 0x0}, &(0x7f0000000240)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 14m56.181845825s ago: executing program 32 (id=1946): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/net\x00') openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x142000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0xdd, 0x0}, &(0x7f0000000240)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 5m6.623939915s ago: executing program 3 (id=2919): ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, r2, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000005c0)=""/10, 0x5b) 5m5.608154438s ago: executing program 3 (id=2923): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f00000002c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000a40)={r4, &(0x7f0000000a80), &(0x7f0000000ac0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x0, 0x0, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TCFLSH(r3, 0x80047456, 0x800000000003) 4m56.215455433s ago: executing program 3 (id=2946): ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, r2, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000005c0)=""/10, 0x5b) 4m55.16212118s ago: executing program 3 (id=2949): pread64(0xffffffffffffffff, &(0x7f0000000380)=""/9, 0xfdc5, 0x4ac) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000940)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000000b80)="$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") open(&(0x7f0000000e80)='./bus\x00', 0x14927e, 0x48) open(&(0x7f0000000180)='./file2\x00', 0x18b243, 0x124) mount(&(0x7f0000000f40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000f80)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000fc0)='./bus\x00', 0x0, 0xa27b734c1a0bc97) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file2\x00', 0x109141, 0xd6) pwrite64(r0, &(0x7f0000001140)="da0400", 0x3, 0x5d5) 4m53.007582379s ago: executing program 3 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc17}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4890) 4m50.023456372s ago: executing program 3 (id=2954): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsmount(r1, 0x0, 0xc) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0x9e54, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9cd6, 0x2000, 0x3, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x4000, 0xfffffffe, 0x26d}}], 0x1, 0x0, 0x0) 4m49.593786955s ago: executing program 33 (id=2954): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsmount(r1, 0x0, 0xc) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0x9e54, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9cd6, 0x2000, 0x3, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x4000, 0xfffffffe, 0x26d}}], 0x1, 0x0, 0x0) 4m30.365548729s ago: executing program 5 (id=2981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x10, 0x38, &(0x7f0000000400)="0000000000000002", &(0x7f0000000440)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m30.295143696s ago: executing program 5 (id=2982): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r3, 0x0, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sec/tomoyo/query\x00', 0xa00c0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) r7 = add_key$user(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000006c0)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r1) keyctl$revoke(0x3, r7) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), 0x0) 4m30.090007587s ago: executing program 5 (id=2984): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f00000002c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000a40)={r4, &(0x7f0000000a80), &(0x7f0000000ac0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x0, 0x0, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TCFLSH(r3, 0x80047456, 0x800000000003) 4m27.074751523s ago: executing program 5 (id=2989): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x14552, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x1, 0x1204, &(0x7f0000000700)="$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") mount$bind(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001a00)='.\x00', &(0x7f0000001a40)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000001a80)='./file0/../file0\x00', &(0x7f0000001ac0)='./file0/../file0\x00') 4m24.859641308s ago: executing program 5 (id=2992): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r3, 0x0, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sec/tomoyo/query\x00', 0xa00c0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) r7 = add_key$user(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000006c0)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r1) keyctl$revoke(0x3, r7) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), 0x0) 4m17.481739328s ago: executing program 5 (id=3002): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) socketpair(0x1, 0x1, 0x0, &(0x7f0000000940)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000a00)=0x0) io_submit(r5, 0x1, &(0x7f0000000a40)=[&(0x7f0000000a80)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000ac0), 0x0, 0x1000000, 0x0, 0x10}]) 4m16.980627008s ago: executing program 34 (id=3002): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) socketpair(0x1, 0x1, 0x0, &(0x7f0000000940)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000a00)=0x0) io_submit(r5, 0x1, &(0x7f0000000a40)=[&(0x7f0000000a80)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000ac0), 0x0, 0x1000000, 0x0, 0x10}]) 2m5.852740984s ago: executing program 2 (id=3276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_sec\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000280)=""/9, 0xfffffd87) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0xffe) 2m1.775631118s ago: executing program 2 (id=3283): r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m1.659536399s ago: executing program 2 (id=3286): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x2c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f0000001640)) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000001980)=""/214, &(0x7f0000001a80)=0xd6) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000af4ca8631526b68792b50ddf545006bdbf758ef00d4f5aff37760f245af4", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x0) read(r6, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x200008d5}, 0x1) 1m51.277324514s ago: executing program 1 (id=3303): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x4) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) writev(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xc) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0x9e54, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9cd6, 0x2000, 0x3, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x4000, 0xfffffffe, 0x26d}}], 0x1, 0x0, 0x0) 1m48.600268916s ago: executing program 1 (id=3306): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x40) 1m46.586498651s ago: executing program 1 (id=3310): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x2c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x1, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f0000001640)) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000001980)=""/214, &(0x7f0000001a80)=0xd6) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000af4ca8631526b68792b50ddf545006bdbf758ef00d4f5aff37760f245af4", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) read(r6, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x200008d5}, 0x1) 1m46.165509244s ago: executing program 1 (id=3311): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x14552, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x1, 0x1204, &(0x7f0000000700)="$eJzs3E+LW1UYB+B3xtoZp84ftVZbEA+60c2lMws3uhlkCtKA0naEVhBunTsack1CbhiIiNWVWz+HCCK4E8SdbmbjNxDczcZlBfHKJNo2ki5SpbeU59nkhXN+h3NOSOCEnHv02hcfdvarbD8fxuLCQiz2I9LNFCkW4x+fxsuv/vjTc5evXru43WrtXErpwvaVzVdSSmvPf//Ox1+98MPw1Nvfrn23FIcb7x79tvXr4ZnDs0d/XvmgXaV2lbq9YcrT9V5vmF8vi7TXrjpZSm+VRV4Vqd2tisFU+37Z6/dHKe/ura70B0VVpbw7Sp1ilIa9NByMUv5+3u6mLMvS6kowvxO3qt0vb9Z1HVHXj8bJqOu6fixW4lQ8HquxFuuxEU/Ek/FUnI6n40w8E8/GN798PTpOAAAAAAAAAAAAAAAAAAAAAP+fee//nx33anrWAAAAAAAAAAAAAAAAAAAA8HC5fPXaxe1Wa+dSSssR5ecHuwe7k9dJ+/Z+tKOMIs7HevwR49v/E5P6whutnfNpbCM+K2/8nb9xsPvIdH5z/DiBmfnNST5N55di5c78VqzH6dn5rZn55XjpxTvyWazHz+9FL8rYi+Ps7fwnmym9/mbrX/lz434AAADwMMjSLTPP71l2t/ZJfo7fB6bO18fZcycaXToRUY0+6uRlWQwUD3xxstlp/F7XdfObcC9FLEf8x3Hu/klZioh7HnkhIprfn5lF099M3A+33/SmZwIAAAAAAAAAAMA87sffCZteIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//ykHRgQ==") mount$bind(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001a00)='.\x00', &(0x7f0000001a40)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000001a80)='./file0/../file0\x00', &(0x7f0000001ac0)='./file0/../file0\x00') 1m42.479423468s ago: executing program 1 (id=3316): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) writev(r2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0x9e54, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9cd6, 0x2000, 0x3, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x4000, 0xfffffffe, 0x26d}}], 0x1, 0x0, 0x0) 1m37.895737414s ago: executing program 1 (id=3323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_sec\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000280)=""/9, 0xfffffd87) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0xffe) 1m34.944098904s ago: executing program 35 (id=3323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_sec\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000280)=""/9, 0xfffffd87) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0xffe) 18.271694474s ago: executing program 7 (id=3454): add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x804818, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ec0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000f00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000f80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001040), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x6) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xa, 0x6, &(0x7f00000011c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000001200)='GPL\x00', 0x5, 0x29e, &(0x7f0000001240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 17.184478205s ago: executing program 7 (id=3458): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) r3 = timerfd_create(0x0, 0x0) clock_settime(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000680)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r3, &(0x7f00000006c0)=""/8, 0x8) inotify_init1(0x80800) syz_mount_image$squashfs(&(0x7f0000000580), &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000780)={[], [{@flag='mand'}]}, 0x4, 0x1cf, &(0x7f00000007c0)="$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") 12.861259624s ago: executing program 7 (id=3461): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x40) 11.201521882s ago: executing program 7 (id=3463): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.110647833s ago: executing program 8 (id=3466): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000c00)={0xf, 0x3e, 0x6, 0x3, 0xc, "a0e1c601283700000000000000000000000008"}) 9.768303138s ago: executing program 4 (id=3467): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000c00)={0xf, 0x3e, 0x6, 0x3, 0xc, "a0e1c601283700000000000000000000000008"}) 9.768086588s ago: executing program 8 (id=3468): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x400c810) recvmmsg(r0, &(0x7f0000000940), 0x0, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00000cc000/0x1000)=nil, 0x1000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="950000ac0aa3bbca"], &(0x7f00000001c0)='syzkaller\x00', 0xc661, 0x61, &(0x7f0000000200)=""/97, 0x41100, 0x60, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000002040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./file7\x00', 0x16c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0, 0x2) renameat2(r2, &(0x7f0000002380)='./file7\x00', r2, &(0x7f00000023c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xec776000) syz_create_resource$futex(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./trace\x00', 0xd6) 9.512183994s ago: executing program 8 (id=3469): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) 8.412088385s ago: executing program 4 (id=3470): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xe, 0x0, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0x8, 0x10, &(0x7f0000001380)={0x0, 0xf}, 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000017c0)=0x10001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000001800)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f0000001840)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000001980), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 7.809019866s ago: executing program 4 (id=3471): r0 = request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) add_key$user(0x0, &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), 0x0) 6.30244317s ago: executing program 8 (id=3472): r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x2300c2, &(0x7f0000003480)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x67, 0xc54, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000fc0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001040)=@abs, 0x6e) tgkill(0x0, r1, 0x14) sendmmsg$unix(r3, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x400, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x628) connect$unix(r2, &(0x7f0000003400)=@file={0x0, './file1\x00'}, 0x6e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000003500)=@abs, 0x6e) 6.285617831s ago: executing program 8 (id=3473): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000e40), 0x0, 0x60, 0x2732bd8c) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2800, &(0x7f0000000ec0)={[{@jqfmt_vfsold}, {@nobarrier}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800000000004}}]}, 0x25, 0x756, &(0x7f00000000c0)="$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") r2 = syz_open_dev$evdev(0x0, 0x1, 0x942) ioctl$EVIOCSABS20(r2, 0x401845e0, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$ARCH_SET_GS(0x1e, r3, &(0x7f0000000080), 0x1001) syz_mount_image$squashfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='>'], 0x1, 0x1cf, &(0x7f0000000900)="$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") unshare(0x64000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001740)='./dev\x00', &(0x7f00000017c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000001840)={0x7ffffff9, 0xfcd, 0x70, 0x101, 0x8c, "388d673f088b000000020000000000001af800"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000001880)=0xb8) 6.280532892s ago: executing program 4 (id=3474): r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x2300c2, &(0x7f0000003480)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x67, 0xc54, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000fc0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001040)=@abs, 0x6e) tgkill(0x0, r1, 0x14) sendmmsg$unix(r3, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x400, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x628) connect$unix(r2, &(0x7f0000003400)=@file={0x0, './file1\x00'}, 0x6e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000034c0)='./cgroup/syz1\x00', 0x1ff) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000003500)=@abs, 0x6e) 6.10140045s ago: executing program 6 (id=3475): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24010000}, 0x10) 6.045738176s ago: executing program 7 (id=3476): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0300"}) 5.231980669s ago: executing program 4 (id=3477): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000c00)={0xf, 0x3e, 0x6, 0x3, 0xc, "a0e1c601283700000000000000000000000008"}) 5.2259533s ago: executing program 6 (id=3478): r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@discard}, {@dioread_nolock}, {@noauto_da_alloc}]}, 0x3, 0x49e, &(0x7f0000000980)="$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") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000e40)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000e80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x29, 0x4, 0xcf1) connect$unix(r3, &(0x7f0000000f00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000f80), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000fc0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000001000), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000001040)) fallocate(r0, 0x20, 0x10000, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000010c0)=0x3) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000001100)=0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 5.085373224s ago: executing program 7 (id=3479): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x4000087, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000c00)={0xf, 0x3e, 0x6, 0x3, 0xc, "a0e1c601283700000000000000000000000008"}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/152, 0x98}, 0x80}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2002, 0x0) 4.887562054s ago: executing program 4 (id=3480): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x4000087, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000480)="$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") 3.994095254s ago: executing program 6 (id=3481): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r1, 0x0, 0x0}, 0x20) setpriority(0x2, 0x0, 0x1) setsockopt(r0, 0x2, 0x0, &(0x7f0000000380)="0b05890a31979cadf3c54656f0d5b64bc43465a425a8780fe9ebf90d27613a006d5b918a325d4a", 0x27) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) setns(0xc9, 0x40000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800c000100ffffffff00000000080002"], 0x34}}, 0x0) 3.590489446s ago: executing program 6 (id=3482): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x400c810) recvmmsg(r0, &(0x7f0000000940), 0x0, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00000cc000/0x1000)=nil, 0x1000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="950000ac0aa3bbca"], &(0x7f00000001c0)='syzkaller\x00', 0xc661, 0x61, &(0x7f0000000200)=""/97, 0x41100, 0x60, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000002040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./file7\x00', 0x16c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0, 0x2) renameat2(r1, &(0x7f0000002380)='./file7\x00', r1, &(0x7f00000023c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./trace\x00', 0xd6) 3.092278346s ago: executing program 6 (id=3483): r0 = request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) add_key$user(0x0, &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), 0x0) 1.622002415s ago: executing program 6 (id=3484): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000204, &(0x7f0000000180)={[{@nodiscard}]}, 0x1, 0x4ee, &(0x7f0000000880)="$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") syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x8000, 0x50) getdents(r0, 0x0, 0x0) chdir(&(0x7f0000000f40)='./file0\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xe2242, 0xfb) fremovexattr(r1, &(0x7f0000000840)=@known='trusted.overlay.redirect\x00') 1.393855829s ago: executing program 2 (id=3290): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000004000080000000000000", @ANYBLOB="0380000000000000140012800b0001006970766c616e"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.225891326s ago: executing program 2 (id=3485): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) r3 = timerfd_create(0x0, 0x0) clock_settime(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000680)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r3, &(0x7f00000006c0)=""/8, 0x8) creat(&(0x7f0000000700)='./file0\x00', 0xdafbe5d6891b6e4) r4 = inotify_init1(0x80800) syz_mount_image$squashfs(&(0x7f0000000580), &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000780)={[], [{@flag='mand'}]}, 0x4, 0x1cf, &(0x7f00000007c0)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() inotify_add_watch(r4, &(0x7f0000000740)='./file0\x00', 0x4000261) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="180001000000000000000000000000007a0a07000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%pS \x00'}, 0x20) 1.139228674s ago: executing program 8 (id=3486): r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x2300c2, &(0x7f0000003480)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x67, 0xc54, &(0x7f00000002c0)="$eJzs3U9onOl9B/DfMyOtRtp0o80m3qTNbgdSEqPUxv9iK7gEOVbUBhxviKzQPUWjP3aGlSUjyY03bYPakhZ6Cd1L6aWIJksLOfTU7TFKs4WEUighh+RQEDRZ9tCDDoHSll2F951npJEs27Nry5LXn88y+33nnd87ev6M3nkFfmYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj47OcunDiZDroVAMDDdHn8SydOe/8HgMfKFX//AwAAAAAAAAAAAADAYZeiGkcixcBrG2myvN9Su9Scv3lrYnRs78P6U6SoRLWsL261k6dOn/nU2XPD7bz78Q/aR+KF8SsX6hd/dvzG4uzS0uxMfWK+Ob0wM9v1M7SOX7j+bo/fbagcgPr1l27OXL26VD91/PSOh28NvtH35JHB8+eOnR1u106Mjo2Nd9T09L7rn36bO63weCKq0YgUbw2+mRoRUYn7H4t7vHb2W3/ZiaGyExOjY2VH5pqN+eXiwVTJVZWIesdBI+0xeghzcV9GIlaK5hcNHiq6N36jsdiYmputf7GxuNxcbi7Mp0qrtUV/6lGJ4RSxGhHrfbc/XW9U4/lI8cqJjTQVEdX2OHyyXBh87/ZU9qGPXSjaWe+NWK08AnN2iPVFNS5Hil++fjSmizHLt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQT1fj3SLGQNtJMeT5on1cufbn++fmrCx217fPKI//+8DAd8nNTLaoxVZ7xN9K7v9gBAAAAAAAAAAAAAAAA4EHrj2p8O1L82XN/UK4rjnJd+vvPD7/vxd/tXDP+7D2ep6g9HhErle7W5PbmpcOpUvy3Dx2jK7Woxjfy+r8/OejGAAAAAAAAAAAAAAAAAAAAPNaq8WKk+Mqxo2k1Or9TvDl/rX6lMTXX+lbY9nf/tr8zfXNzc7OeWjmSczLnSs7VnGs513NGJR+fcyTnZM6VnKs513Ku54xqPj7nSM7JnCs5V3Ou5VzPGT35+JwjOSdzruRczbmWcz1nHJLv7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeC+pRDXejhTf+tpGihQRIxGT0cq1voNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQqKVqHI8Uay/WyvurlYgrEfH25uZmefvfzc3NiI1i+34ddF8BAAAAAAAAAAAAAAAAAADg0ErV+FikeOb/NlI9Im4NvtH35JHB8+eOnR2uRjVSUdJZ/8L4lQv1iwvXbyzOLi3NztQnLn7nnfy42qXm/M1bE6NjD7wjXem/vf3zzemFmdlun+Ae7e+vXVy48fJi89pXl/d8fKB2YWppebExvffD0R+ViMnOPUNlgydGx8pGzzUb8+WhqXKHBlYiRrrtDAAAAAAAAAAAAAAAAAAAAIfGQKrG5yLFz//zTGqvG+9prfn/tda96lbtq3+0/VkAc7uyrfPzA7rZTt02dKhceF+fGB0bG+/Y3dN7e2nRppSq8Wyk+MQrHy7Xw6cY2HNtfFH3VFF3/UyuG/yNom5lR1VtaGJ0rH55Yf7Yhbm5henGcmNqbrY+fqMxfdsHBzzVbYcAAAAAAAAAAAAAAAAAAABg20Cqxk8ixX//w3+k9vfO5/X/Pa17Hev/f6dcQl+qpZ25pVzb/1S5tr+1/f7zwwPPP3en/fux/r9oU0rV+Ob2xxVsrf+f3FVb1P1FpHjzuY+Wj6WoPFHUNdrdaT3j1ebc7Imi9m8jxW++1a6NsvZarn1mu/ZkUdsfKf56Y2ftV3PtB7drTxW1RyPFD/5r79oPbdeeLmp/Hin++e/r7dqBovYPc+2R7drj0wtzM/ca1mL+vxspvnP591K7z3ec/47Pf1jZlVtum/O7b3c//+127D3/gx37VvK8/nmkOP2TD5dzebf5Pxspvlv7aK5rjf1Ufvzp8v/b8/+JSPGzf9tZezXXfmC79mS33Tpoxfx/O1J8/29+utXnPP95ZLdnqHP+f71nZ269SvZt/u/++/90x77B3K7pdzgWj6Oll7/+UmNubnbxvjdqz0c8iOfpdqN4me77z8qfgRMPsV82bByGjXudOb7Xv/9nJ/Zb8f7/l5Hi/49UU/s6Jr//v691b/v673++sf3+f35Xbjmg9/8PdOw7n69aensiasvXb/Q+G1Fbevnrx5rXG9dmr83Onzp54tOfPnvyxMmzvU+0L+62t7oeu/eCYv5/FCl+/I8/3vo7Zuf1397X/wO7cssBzf8znX3acV3T9VA8lor5/7tI8fRnf7r19+bdrv/bf/8f/djO3Pr9O6D5/2DHvsHcruY7HAsAAAAAAAAAAIBHyUCqxl9Fit//099O7TVE3fz7v5ldueWA/v3XkY59Mw90XcOdN7oeZACAQ6S4/vtQpPje5g+31nLvvP6L32rXdl7/3clh+P5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB41KWoxh9HioHXNtJaX3G/pXapOX/z1sTo2N6H9adIUYlqWV/caidPnT7zqbPnhtt5qe9hduMj8cL4lQv1iwvXbyzOLi3NztQn5pvTCzOzXT/D/R6/21A5gPXrL92cuXp1qX7q+OkdD98afKPvySOD588dOzvcrp0YHRsb76jp6X3XP/026Q77n4hq/DBSvDX4Zvp+X0Ql7n8s7vHa2W/9ZSeGyk5MjI6VHZlrNuaXiwdTJVdVIuodB420x+ghzMV9GYlYKZpfNHio6N74jcZiY2putv7FxuJyc7m5MJ8qrdYW/alHJYZTxGpErO/xK9kb1fhmpHjlxEb6l76IanscPnl5/EsnTt+7PZV96GMXinbWeyNWK4/AnB1ifVGNf4oUv3z9aPygL6InWrf4eMQXinwt4tUiPxORihfGmYhfPNRTO/upJ6pxJlIspI30el9xPmifVy59uf75+asLHbXt88oj//7wMB3yc1MtqvGj8oy/kf519+/1wAE1CgAAAAAAAAAAAAAAAIByJe1qpPjKsaOpXB+8taa4OX+tfqUxNdda1tde+9deM725ublZT60cyTmZcyXnas61nOs5o5KPzzmSczLnSs7VnGs513NGNR+fcyTnZM6VnKtl9m21eD3vj558fM6RnJM5V3Ku5lzLuZ4zDsnaPQAAAAAAAAAAAAAAAAAA4L2lEtXyW9y/9bWNVC6VHomYjFau+Z7f97xfBQAA///sg2Mq") prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000fc0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001040)=@abs, 0x6e) tgkill(0x0, r1, 0x14) sendmmsg$unix(r3, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x400, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x628) connect$unix(r2, &(0x7f0000003400)=@file={0x0, './file1\x00'}, 0x6e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000034c0)='./cgroup/syz1\x00', 0x1ff) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000003500)=@abs, 0x6e) 0s ago: executing program 2 (id=3487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24010000}, 0x10) kernel console output (not intermixed with test programs): ing): Port device team_slave_0 removed [ 1409.626840][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.720421][ T14] vhci_hcd: vhci_device speed not set [ 1409.766959][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.521604][ T4471] bond0 (unregistering): Released all slaves [ 1413.466189][ T4471] team0 (unregistering): Port device team_slave_1 removed [ 1413.565335][ T4471] team0 (unregistering): Port device team_slave_0 removed [ 1413.634370][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.687665][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.970881][T16046] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1413.977430][T16046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1413.985065][T16046] vhci_hcd vhci_hcd.0: Device attached [ 1414.200446][ T14] vhci_hcd: vhci_device speed not set [ 1414.280410][ T14] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 1414.696747][T16047] vhci_hcd: connection reset by peer [ 1414.709913][ T8049] vhci_hcd: stop threads [ 1414.716060][ T8049] vhci_hcd: release socket [ 1414.736200][ T8049] vhci_hcd: disconnect device [ 1414.911839][ T4471] bond0 (unregistering): Released all slaves [ 1415.217091][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1415.242869][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1415.252031][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1415.261432][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.268531][ T4962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.276754][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1415.286149][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1415.311306][T16027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3029'. [ 1415.330783][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3031'. [ 1415.339745][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 1415.424789][T16034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3031'. [ 1415.457406][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 1415.506046][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1415.550389][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1415.752492][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1415.900739][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1415.986946][T15829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1415.997717][T15829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1416.043935][T16065] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3039'. [ 1416.093400][T16067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3039'. [ 1416.114821][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1416.130957][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1416.139715][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1416.188315][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1416.196852][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1416.206390][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1416.229573][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1416.248693][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1416.272385][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1416.330769][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1416.377199][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1416.394999][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1417.126214][T15629] device veth0_vlan entered promiscuous mode [ 1417.211564][T15629] device veth1_vlan entered promiscuous mode [ 1417.328979][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1417.342463][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1417.489142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1417.543861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1417.599093][T15629] device veth0_macvtap entered promiscuous mode [ 1417.621716][T15629] device veth1_macvtap entered promiscuous mode [ 1417.822901][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.108701][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.171776][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.208242][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.287709][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.335725][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.381791][T15629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.407057][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1418.460057][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1418.482247][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1418.502369][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1418.574922][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.700838][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.740802][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.756547][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.776967][T15629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.788622][T15629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.812386][T15629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.843759][T15629] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.854392][T15629] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.867682][T15629] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.884667][T15629] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.912578][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1418.930445][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1418.948774][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1418.964223][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1418.994086][T15829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.209524][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.223652][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.252097][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1419.282471][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.339674][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.391012][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1419.410498][ T14] vhci_hcd: vhci_device speed not set [ 1419.755695][T16103] loop4: detected capacity change from 0 to 8192 [ 1419.803881][T16111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3045'. [ 1420.125436][ T4272] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 1420.160491][ T4272] FAT-fs (loop4): Filesystem has been set read-only [ 1421.205931][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.247976][T11328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1421.257846][T11328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1421.265626][T11328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1421.274254][T11328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1421.286782][T11328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1421.294223][T11328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1421.448557][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.525922][T16137] rxe_eth0 speed is unknown, defaulting to 1000 [ 1421.556856][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1422.370938][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1422.462028][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.507948][T15829] device veth0_vlan entered promiscuous mode [ 1422.541025][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1422.554808][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1422.724754][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.860734][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.867158][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.005802][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1423.053941][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1423.275013][T15829] device veth1_vlan entered promiscuous mode [ 1423.320905][T15591] Bluetooth: hci2: command 0x0409 tx timeout [ 1423.438349][T15829] device veth0_macvtap entered promiscuous mode [ 1423.453841][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1423.469484][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1423.513515][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1423.539905][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1423.571532][T15829] device veth1_macvtap entered promiscuous mode [ 1423.584934][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1423.615423][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1424.300053][T16173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3057'. [ 1424.490579][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.537507][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.586728][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.598934][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.609287][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.631502][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.648096][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.678716][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.709838][T15829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.729077][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1424.752124][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1425.400438][T15591] Bluetooth: hci2: command 0x041b tx timeout [ 1426.213475][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.228910][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.239222][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.249827][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.274328][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.284840][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.297188][T15829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.308386][T15829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.338966][T15829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.367076][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1426.385426][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1426.431958][T15829] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.451322][T15829] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.460053][T15829] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.485703][T15829] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.519020][T16137] chnl_net:caif_netlink_parms(): no params data found [ 1427.357451][T16210] loop1: detected capacity change from 0 to 32896 [ 1427.442281][T16210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1427.480455][T15591] Bluetooth: hci2: command 0x040f tx timeout [ 1427.499870][T16210] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1427.627982][T16137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.660812][T16137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.668842][T16137] device bridge_slave_0 entered promiscuous mode [ 1427.707218][T16137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.714368][T16137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.722407][T16137] device bridge_slave_1 entered promiscuous mode [ 1427.942778][T16221] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1427.949323][T16221] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1427.956937][T16221] vhci_hcd vhci_hcd.0: Device attached [ 1428.160454][T12612] vhci_hcd: vhci_device speed not set [ 1428.270428][T12612] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 1428.403757][T16137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.699862][T16222] vhci_hcd: connection reset by peer [ 1428.707191][ T6653] vhci_hcd: stop threads [ 1428.716658][ T6653] vhci_hcd: release socket [ 1428.784753][ T6653] vhci_hcd: disconnect device [ 1428.991505][ T6653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.082675][T16137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.160581][ T6653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.429218][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1429.560394][T15591] Bluetooth: hci2: command 0x0419 tx timeout [ 1429.573791][T16137] team0: Port device team_slave_0 added [ 1429.653864][T16137] team0: Port device team_slave_1 added [ 1429.786572][ T4962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.832713][ T4962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.892576][T16137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.899538][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.002352][T16137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.084356][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1430.258772][T16137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.276197][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.386839][T16137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.150426][T16251] usb usb8: usbfs: process 16251 (syz.7.3003) did not claim interface 0 before use [ 1431.295796][T16137] device hsr_slave_0 entered promiscuous mode [ 1431.333472][T16137] device hsr_slave_1 entered promiscuous mode [ 1431.362918][T16137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1431.381244][T16137] Cannot create hsr debugfs directory [ 1431.794487][T15589] EXT4-fs (loop1): unmounting filesystem. [ 1432.935137][T16273] FAULT_INJECTION: forcing a failure. [ 1432.935137][T16273] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.957125][T16274] netlink: 'syz.2.3075': attribute type 1 has an invalid length. [ 1432.980485][T16273] CPU: 1 PID: 16273 Comm: syz.4.3076 Not tainted syzkaller #0 [ 1432.987975][T16273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1432.998047][T16273] Call Trace: [ 1433.001409][T16273] [ 1433.004429][T16273] dump_stack_lvl+0x188/0x24e [ 1433.009262][T16273] ? show_regs_print_info+0x12/0x12 [ 1433.014540][T16273] ? load_image+0x410/0x410 [ 1433.019098][T16273] ? __might_sleep+0xd0/0xd0 [ 1433.023777][T16273] ? __lock_acquire+0x7ea0/0x7ea0 [ 1433.028852][T16273] should_fail_ex+0x390/0x4c0 [ 1433.033604][T16273] should_failslab+0x5/0x20 [ 1433.038165][T16273] slab_pre_alloc_hook+0x59/0x300 [ 1433.043289][T16273] ? create_filter_start+0x2c0/0x2c0 [ 1433.048636][T16273] ? apply_subsystem_event_filter+0x509/0x16b0 [ 1433.054817][T16273] __kmem_cache_alloc_node+0x4f/0x270 [ 1433.060216][T16273] ? apply_subsystem_event_filter+0x509/0x16b0 [ 1433.066389][T16273] kmalloc_trace+0x26/0xe0 [ 1433.070821][T16273] apply_subsystem_event_filter+0x509/0x16b0 [ 1433.076839][T16273] ? apply_event_filter+0x590/0x590 [ 1433.082055][T16273] ? __might_fault+0xa6/0x120 [ 1433.086807][T16273] ? _copy_from_user+0x10b/0x170 [ 1433.091825][T16273] subsystem_filter_write+0x95/0xf0 [ 1433.097035][T16273] ? subsystem_filter_read+0x210/0x210 [ 1433.102492][T16273] vfs_write+0x2dc/0x9a0 [ 1433.106775][T16273] ? file_end_write+0x250/0x250 [ 1433.111633][T16273] ? __fget_files+0x28/0x460 [ 1433.116293][T16273] ? __fget_files+0x3fc/0x460 [ 1433.120974][T16273] ? __fdget_pos+0x2ae/0x360 [ 1433.125561][T16273] ? ksys_write+0x70/0x260 [ 1433.129972][T16273] ksys_write+0x14d/0x260 [ 1433.134296][T16273] ? __ia32_sys_read+0x80/0x80 [ 1433.139053][T16273] ? lockdep_hardirqs_on+0x94/0x140 [ 1433.144249][T16273] do_syscall_64+0x4c/0xa0 [ 1433.148666][T16273] ? clear_bhb_loop+0x60/0xb0 [ 1433.153414][T16273] ? clear_bhb_loop+0x60/0xb0 [ 1433.158088][T16273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1433.163977][T16273] RIP: 0033:0x7fca5bfa94d9 [ 1433.168426][T16273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.188496][T16273] RSP: 002b:00007fca5ce55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1433.196940][T16273] RAX: ffffffffffffffda RBX: 00007fca5c225fa0 RCX: 00007fca5bfa94d9 [ 1433.204904][T16273] RDX: 000000000000000e RSI: 00002000000004c0 RDI: 0000000000000004 [ 1433.212865][T16273] RBP: 00007fca5c03804e R08: 0000000000000000 R09: 0000000000000000 [ 1433.220830][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.228810][T16273] R13: 00007fca5c226038 R14: 00007fca5c225fa0 R15: 00007ffda021a9c8 [ 1433.236789][T16273] [ 1433.254464][T16277] sctp: [Deprecated]: syz.2.3075 (pid 16277) Use of int in max_burst socket option. [ 1433.254464][T16277] Use struct sctp_assoc_value instead [ 1433.405868][ T11] device hsr_slave_0 left promiscuous mode [ 1433.434848][ T11] device hsr_slave_1 left promiscuous mode [ 1433.480426][T12612] vhci_hcd: vhci_device speed not set [ 1433.509318][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.520272][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.555019][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.703075][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.761867][ T11] device bridge_slave_1 left promiscuous mode [ 1433.782950][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.810467][ T11] device bridge_slave_0 left promiscuous mode [ 1433.824530][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.916023][ T11] device veth1_macvtap left promiscuous mode [ 1434.540428][T16298] usb usb8: usbfs: process 16298 (syz.1.3082) did not claim interface 0 before use [ 1434.686977][ T11] device veth0_macvtap left promiscuous mode [ 1434.700487][ T11] device veth1_vlan left promiscuous mode [ 1434.710346][ T11] device veth0_vlan left promiscuous mode [ 1435.340505][T16309] loop7: detected capacity change from 0 to 8192 [ 1435.592513][T15829] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 1435.635245][T15829] FAT-fs (loop7): Filesystem has been set read-only [ 1435.896193][T16329] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1435.902739][T16329] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1435.914714][T16329] vhci_hcd vhci_hcd.0: Device attached [ 1436.151596][ T9966] vhci_hcd: vhci_device speed not set [ 1436.220371][ T9966] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1436.727710][T16330] vhci_hcd: connection reset by peer [ 1436.733940][ T8049] vhci_hcd: stop threads [ 1436.738542][ T8049] vhci_hcd: release socket [ 1436.776004][ T8049] vhci_hcd: disconnect device [ 1438.840419][T16349] usb usb8: usbfs: process 16349 (syz.4.3095) did not claim interface 0 before use [ 1439.404513][T16358] FAULT_INJECTION: forcing a failure. [ 1439.404513][T16358] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.437038][T16358] CPU: 1 PID: 16358 Comm: syz.7.3099 Not tainted syzkaller #0 [ 1439.444548][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1439.454611][T16358] Call Trace: [ 1439.457894][T16358] [ 1439.460840][T16358] dump_stack_lvl+0x188/0x24e [ 1439.465547][T16358] ? show_regs_print_info+0x12/0x12 [ 1439.471051][T16358] ? load_image+0x410/0x410 [ 1439.475575][T16358] ? __might_sleep+0xd0/0xd0 [ 1439.480174][T16358] ? __lock_acquire+0x7ea0/0x7ea0 [ 1439.485230][T16358] should_fail_ex+0x390/0x4c0 [ 1439.489928][T16358] should_failslab+0x5/0x20 [ 1439.494444][T16358] slab_pre_alloc_hook+0x59/0x300 [ 1439.499483][T16358] ? subsystem_filter_write+0x95/0xf0 [ 1439.504868][T16358] ? vfs_write+0x2dc/0x9a0 [ 1439.509294][T16358] ? ksys_write+0x14d/0x260 [ 1439.513811][T16358] ? process_preds+0x411/0x36c0 [ 1439.518682][T16358] __kmem_cache_alloc_node+0x4f/0x270 [ 1439.524073][T16358] ? process_preds+0x411/0x36c0 [ 1439.528934][T16358] __kmalloc+0xa3/0x240 [ 1439.533113][T16358] process_preds+0x411/0x36c0 [ 1439.537827][T16358] ? create_filter_start+0x2c0/0x2c0 [ 1439.543126][T16358] ? apply_subsystem_event_filter+0x363/0x16b0 [ 1439.549334][T16358] ? rcu_is_watching+0x11/0xa0 [ 1439.554226][T16358] ? kstrdup+0x52/0x70 [ 1439.558368][T16358] ? memcpy+0x3c/0x60 [ 1439.562369][T16358] apply_subsystem_event_filter+0x3cd/0x16b0 [ 1439.568384][T16358] ? apply_event_filter+0x590/0x590 [ 1439.573592][T16358] ? __might_fault+0xa6/0x120 [ 1439.578282][T16358] ? _copy_from_user+0x10b/0x170 [ 1439.583247][T16358] subsystem_filter_write+0x95/0xf0 [ 1439.588468][T16358] ? subsystem_filter_read+0x210/0x210 [ 1439.593939][T16358] vfs_write+0x2dc/0x9a0 [ 1439.598206][T16358] ? file_end_write+0x250/0x250 [ 1439.603090][T16358] ? __fget_files+0x28/0x460 [ 1439.607707][T16358] ? __fget_files+0x3fc/0x460 [ 1439.612418][T16358] ? __fdget_pos+0x2ae/0x360 [ 1439.617027][T16358] ? ksys_write+0x70/0x260 [ 1439.621460][T16358] ksys_write+0x14d/0x260 [ 1439.625809][T16358] ? __ia32_sys_read+0x80/0x80 [ 1439.630583][T16358] ? lockdep_hardirqs_on+0x94/0x140 [ 1439.635772][T16358] do_syscall_64+0x4c/0xa0 [ 1439.640192][T16358] ? clear_bhb_loop+0x60/0xb0 [ 1439.644871][T16358] ? clear_bhb_loop+0x60/0xb0 [ 1439.649534][T16358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1439.655415][T16358] RIP: 0033:0x7f0788da94d9 [ 1439.659811][T16358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.679401][T16358] RSP: 002b:00007f0789cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1439.687800][T16358] RAX: ffffffffffffffda RBX: 00007f0789025fa0 RCX: 00007f0788da94d9 [ 1439.695757][T16358] RDX: 000000000000000e RSI: 00002000000004c0 RDI: 0000000000000004 [ 1439.703713][T16358] RBP: 00007f0788e3804e R08: 0000000000000000 R09: 0000000000000000 [ 1439.711684][T16358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.719641][T16358] R13: 00007f0789026038 R14: 00007f0789025fa0 R15: 00007ffec85ed2d8 [ 1439.727608][T16358] [ 1439.872709][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1440.393077][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1441.950392][ T9966] vhci_hcd: vhci_device speed not set [ 1442.067226][T16373] loop7: detected capacity change from 0 to 32896 [ 1442.123333][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.141145][T16373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1442.188603][T16373] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1442.353506][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.580413][T16381] usb usb8: usbfs: process 16381 (syz.4.3106) did not claim interface 0 before use [ 1444.456208][T16394] loop4: detected capacity change from 0 to 32896 [ 1444.464578][ T11] bond0 (unregistering): Released all slaves [ 1444.515799][T16394] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 1444.666439][T16321] tipc: Started in network mode [ 1444.673759][T16321] tipc: Node identity 4e7a32d402cc, cluster identity 4711 [ 1444.686871][T16321] tipc: Enabled bearer , priority 0 [ 1444.713965][T16310] device syzkaller0 entered promiscuous mode [ 1444.811824][T16306] tipc: Resetting bearer [ 1444.899888][T16306] tipc: Disabling bearer [ 1446.921644][T16407] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1446.928194][T16407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1446.935718][T16407] vhci_hcd vhci_hcd.0: Device attached [ 1447.140503][ T4346] vhci_hcd: vhci_device speed not set [ 1448.396687][T16411] vhci_hcd: connection closed [ 1448.457257][ T9] vhci_hcd: stop threads [ 1448.466394][ T4346] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 1448.500249][ T9] vhci_hcd: release socket [ 1448.533017][ T9] vhci_hcd: disconnect device [ 1449.717894][T16137] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1449.755020][T16137] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1449.773727][T15829] EXT4-fs (loop7): unmounting filesystem. [ 1449.818560][T16137] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1449.862104][T16137] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1449.971781][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 1449.971794][ T27] audit: type=1326 audit(1794699271.280:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788da94d9 code=0x7ffc0000 [ 1450.105633][ T27] audit: type=1326 audit(1794699271.280:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788da94d9 code=0x7ffc0000 [ 1450.219134][ T27] audit: type=1326 audit(1794699271.280:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788da94d9 code=0x7ffc0000 [ 1450.219450][T16137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.340201][ T27] audit: type=1326 audit(1794699271.280:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788da94d9 code=0x7ffc0000 [ 1450.348044][T16137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.410442][ T27] audit: type=1326 audit(1794699271.280:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0788da94d9 code=0x7ffc0000 [ 1450.429044][T16439] loop7: detected capacity change from 0 to 8192 [ 1450.488623][T16439] FAT-fs (loop7): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 1450.517904][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1450.536132][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1450.623800][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1450.719130][ T27] audit: type=1326 audit(1794699271.350:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0788da94d9 code=0x7ffc0000 [ 1450.760874][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1450.839982][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.847148][ T7509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.957118][ T27] audit: type=1326 audit(1794699271.350:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0788da9242 code=0x7ffc0000 [ 1450.979201][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1450.989783][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1450.998348][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.005467][ T7509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.054741][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1451.078781][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1451.095659][ T27] audit: type=1326 audit(1794699271.350:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0788da92d7 code=0x7ffc0000 [ 1451.138908][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1451.171906][T16455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3124'. [ 1451.196677][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1451.209911][ T27] audit: type=1326 audit(1794699271.350:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0788d661d1 code=0x7ffc0000 [ 1451.234271][ T27] audit: type=1326 audit(1794699271.350:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.7.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0788daa2c9 code=0x7ffc0000 [ 1451.291108][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1451.400730][T16458] device syzkaller0 entered promiscuous mode [ 1451.446808][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1451.476081][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1451.636719][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1451.795965][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1451.959401][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1452.001593][T16471] netlink: 'syz.1.3127': attribute type 1 has an invalid length. [ 1452.074724][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1452.222166][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1452.383937][T16137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1453.640304][ T4346] vhci_hcd: vhci_device speed not set [ 1455.204046][T16486] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1455.210595][T16486] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1455.218302][T16486] vhci_hcd vhci_hcd.0: Device attached [ 1455.428837][ T8605] vhci_hcd: vhci_device speed not set [ 1455.511552][ T8605] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 1456.042506][T16487] vhci_hcd: connection reset by peer [ 1456.048604][ T6088] vhci_hcd: stop threads [ 1456.055049][ T6088] vhci_hcd: release socket [ 1456.081388][ T6088] vhci_hcd: disconnect device [ 1456.693755][T16491] loop1: detected capacity change from 0 to 32896 [ 1456.742154][T16491] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1456.784484][T16491] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1457.200203][T16498] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1457.206747][T16498] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1457.214215][T16498] vhci_hcd vhci_hcd.0: Device attached [ 1457.257383][T16499] vhci_hcd: connection closed [ 1457.257569][T11715] vhci_hcd: stop threads [ 1457.280277][T11715] vhci_hcd: release socket [ 1457.284754][T11715] vhci_hcd: disconnect device [ 1458.604685][T15589] EXT4-fs (loop1): unmounting filesystem. [ 1461.362895][ T8605] vhci_hcd: vhci_device speed not set [ 1461.953312][T16503] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3136'. [ 1462.168031][T16520] tipc: Enabled bearer , priority 0 [ 1462.243982][T16519] tipc: Disabling bearer [ 1462.302734][T16536] device syzkaller0 entered promiscuous mode [ 1462.467263][T16541] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1462.473812][T16541] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1462.481541][T16541] vhci_hcd vhci_hcd.0: Device attached [ 1462.710346][T16371] vhci_hcd: vhci_device speed not set [ 1462.780730][T16371] usb 35-1: new full-speed USB device number 10 using vhci_hcd [ 1463.248926][T16542] vhci_hcd: connection reset by peer [ 1463.254928][T13995] vhci_hcd: stop threads [ 1463.259398][T13995] vhci_hcd: release socket [ 1463.319313][T13995] vhci_hcd: disconnect device [ 1463.862290][T16549] device syzkaller0 entered promiscuous mode [ 1463.983538][T16554] loop4: detected capacity change from 0 to 32896 [ 1464.087122][T16554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1464.142427][T16554] ext4 filesystem being mounted at /653/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1465.595361][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1465.605317][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1465.648662][T16137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.701278][T16573] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 1465.772173][T16576] sctp: [Deprecated]: syz.1.3152 (pid 16576) Use of int in max_burst socket option. [ 1465.772173][T16576] Use struct sctp_assoc_value instead [ 1466.824137][T16592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3156'. [ 1466.866568][T16592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3156'. [ 1466.886023][T16593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3153'. [ 1468.069847][T16371] vhci_hcd: vhci_device speed not set [ 1471.135167][T16637] loop1: detected capacity change from 0 to 2048 [ 1473.208620][T16644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1473.219193][T16644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1473.438164][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1473.462519][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1473.575963][T16651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 1473.684751][T16137] device veth0_vlan entered promiscuous mode [ 1473.735693][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1473.754862][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1473.803750][T16137] device veth1_vlan entered promiscuous mode [ 1473.836605][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1473.855546][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1473.894726][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1474.008510][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1474.036183][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1474.086134][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1474.135869][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1474.181086][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1474.237362][T16137] device veth0_macvtap entered promiscuous mode [ 1474.277179][T16137] device veth1_macvtap entered promiscuous mode [ 1474.336118][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 1474.415145][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.515552][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.576877][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.648249][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.714463][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.776068][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.836911][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.930632][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.391748][T16137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.472567][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1475.637182][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1475.651203][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1475.663788][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1475.715992][T16673] fuse: Bad value for 'fd' [ 1476.276816][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.313192][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.433640][T16679] loop7: detected capacity change from 0 to 2048 [ 1476.470661][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.635955][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.653505][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.682766][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.692750][T16137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.734205][T16684] FAULT_INJECTION: forcing a failure. [ 1476.734205][T16684] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1476.794448][T16684] CPU: 0 PID: 16684 Comm: syz.2.3176 Not tainted syzkaller #0 [ 1476.801939][T16684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1476.812002][T16684] Call Trace: [ 1476.815288][T16684] [ 1476.818224][T16684] dump_stack_lvl+0x188/0x24e [ 1476.822919][T16684] ? unwind_get_return_address+0x49/0x80 [ 1476.828593][T16684] ? stack_trace_save+0xf0/0xf0 [ 1476.833542][T16684] ? show_regs_print_info+0x12/0x12 [ 1476.838763][T16684] ? load_image+0x410/0x410 [ 1476.843283][T16684] ? stack_trace_save+0xa6/0xf0 [ 1476.848152][T16684] should_fail_ex+0x390/0x4c0 [ 1476.852843][T16684] get_futex_key+0x1a6/0xe70 [ 1476.857488][T16684] ? kasan_set_track+0x4b/0x70 [ 1476.862267][T16684] ? kasan_save_free_info+0x27/0x40 [ 1476.867472][T16684] ? ____kasan_slab_free+0x126/0x1f0 [ 1476.872780][T16684] ? do_mkdirat+0x400/0x440 [ 1476.877299][T16684] ? futex_setup_timer+0xc0/0xc0 [ 1476.882252][T16684] futex_wake+0x123/0x4f0 [ 1476.886603][T16684] ? futex_wake_mark+0x150/0x150 [ 1476.891553][T16684] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1476.897552][T16684] ? lock_chain_count+0x20/0x20 [ 1476.902428][T16684] do_futex+0x2e2/0x320 [ 1476.906601][T16684] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1476.912501][T16684] ? slab_free_freelist_hook+0x133/0x1b0 [ 1476.918153][T16684] __se_sys_futex+0x381/0x410 [ 1476.922845][T16684] ? __x64_sys_futex+0xf0/0xf0 [ 1476.927623][T16684] ? __x64_sys_futex+0x1d/0xf0 [ 1476.932398][T16684] do_syscall_64+0x4c/0xa0 [ 1476.936830][T16684] ? clear_bhb_loop+0x60/0xb0 [ 1476.941520][T16684] ? clear_bhb_loop+0x60/0xb0 [ 1476.946211][T16684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1476.952118][T16684] RIP: 0033:0x7fdeb27a94d9 [ 1476.956541][T16684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.976156][T16684] RSP: 002b:00007fdeb35ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1476.984580][T16684] RAX: ffffffffffffffda RBX: 00007fdeb2a25fa8 RCX: 00007fdeb27a94d9 [ 1476.992562][T16684] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdeb2a25fac [ 1477.000543][T16684] RBP: 00007fdeb2a25fa0 R08: 00296816c5b37996 R09: 0000000000000000 [ 1477.008520][T16684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.016501][T16684] R13: 00007fdeb2a26038 R14: 00007ffda97922d0 R15: 00007ffda97923b8 [ 1477.024505][T16684] [ 1477.145923][T16137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.212373][T16137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.241316][T16137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.287321][T16137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.318155][T16137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.366038][T16137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.607845][ T5309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.636235][ T5309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.734176][ T9801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.761211][ T9801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.785993][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1477.819970][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1477.930783][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1477.946656][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1478.604214][T16702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3180'. [ 1479.064537][T16711] loop6: detected capacity change from 0 to 32896 [ 1479.072329][T16711] EXT4-fs: Ignoring removed nobh option [ 1479.121785][T16711] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1479.137153][T16711] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.341695][T16720] loop7: detected capacity change from 0 to 2048 [ 1481.240184][T11328] Bluetooth: hci0: command 0x0406 tx timeout [ 1481.264493][T16137] EXT4-fs (loop6): unmounting filesystem. [ 1481.390328][T16729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1481.396871][T16729] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1481.489360][T16729] vhci_hcd vhci_hcd.0: Device attached [ 1481.648751][T16731] vhci_hcd: connection closed [ 1481.648988][ T33] vhci_hcd: stop threads [ 1481.673240][ T33] vhci_hcd: release socket [ 1481.690928][ T33] vhci_hcd: disconnect device [ 1481.700330][ T4397] vhci_hcd: vhci_device speed not set [ 1481.806434][T16738] netlink: 'syz.6.3188': attribute type 1 has an invalid length. [ 1481.866017][T15591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1481.876647][T15591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1481.877626][T16738] sctp: [Deprecated]: syz.6.3188 (pid 16738) Use of int in max_burst socket option. [ 1481.877626][T16738] Use struct sctp_assoc_value instead [ 1481.917549][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1481.928801][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1481.940320][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1481.947539][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1482.076646][T16740] rxe_eth0 speed is unknown, defaulting to 1000 [ 1482.796800][T16754] loop1: detected capacity change from 0 to 2048 [ 1484.770178][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 1484.786131][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.796872][T16754] loop1: p1 < > p4 [ 1484.796872][T16754] p4: [ 1484.806127][T16754] loop1: p4 size 722688 extends beyond EOD, truncated [ 1484.818690][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.185842][ T4472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.867249][T16768] loop2: detected capacity change from 0 to 2048 [ 1486.774890][ T4472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.850254][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 1487.654660][T16773] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1487.661203][T16773] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1487.668811][T16773] vhci_hcd vhci_hcd.0: Device attached [ 1487.785658][ T4472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.960238][ T4397] vhci_hcd: vhci_device speed not set [ 1487.965774][T16775] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3195'. [ 1488.061102][ T4397] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 1488.108514][T16780] vhci_hcd: connection reset by peer [ 1488.119878][ T9801] vhci_hcd: stop threads [ 1488.128350][ T9801] vhci_hcd: release socket [ 1488.144610][ T9801] vhci_hcd: disconnect device [ 1488.216303][ T4472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.920399][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 1489.259853][T16740] chnl_net:caif_netlink_parms(): no params data found [ 1489.434194][T16806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1489.440747][T16806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1489.651079][ T4472] tipc: Left network mode [ 1489.799653][T16806] vhci_hcd vhci_hcd.0: Device attached [ 1489.990272][ T4347] vhci_hcd: vhci_device speed not set [ 1490.030903][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.060497][ T4347] usb 35-1: new full-speed USB device number 11 using vhci_hcd [ 1490.126156][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.196927][T16740] device bridge_slave_0 entered promiscuous mode [ 1490.287093][T16807] vhci_hcd: connection reset by peer [ 1490.292817][T11715] vhci_hcd: stop threads [ 1490.297204][T11715] vhci_hcd: release socket [ 1490.339992][T11715] vhci_hcd: disconnect device [ 1490.415935][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.434461][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.499841][T16740] device bridge_slave_1 entered promiscuous mode [ 1490.893225][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.963130][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.000352][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 1491.236731][T16842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3207'. [ 1492.122764][T16740] team0: Port device team_slave_0 added [ 1492.215186][T16740] team0: Port device team_slave_1 added [ 1492.475474][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.483587][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.009410][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.178430][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.191516][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.260478][ T4397] vhci_hcd: vhci_device speed not set [ 1493.742029][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.955070][T16740] device hsr_slave_0 entered promiscuous mode [ 1493.971054][T16740] device hsr_slave_1 entered promiscuous mode [ 1493.983392][T16870] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1493.989935][T16870] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1493.998186][T16870] vhci_hcd vhci_hcd.0: Device attached [ 1494.004521][T16740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1494.039923][T16740] Cannot create hsr debugfs directory [ 1494.056699][T16875] loop6: detected capacity change from 0 to 33280 [ 1494.108197][T16872] vhci_hcd: connection closed [ 1494.108406][ T5309] vhci_hcd: stop threads [ 1494.115690][T16875] EXT4-fs: Ignoring removed orlov option [ 1494.137779][ T5309] vhci_hcd: release socket [ 1494.213373][ T14] vhci_hcd: vhci_device speed not set [ 1494.290348][ T14] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 1494.697216][ T5309] vhci_hcd: disconnect device [ 1494.862049][T16875] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #2: comm syz.6.3214: corrupted xattr block 255 [ 1494.877018][T16875] EXT4-fs (loop6): Remounting filesystem read-only [ 1494.910386][T16875] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1494.968384][T16875] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1494.980447][T16875] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #2: comm syz.6.3214: corrupted xattr block 255 [ 1495.062638][T16875] EXT4-fs (loop6): Remounting filesystem read-only [ 1495.149676][T16890] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1495.156218][T16890] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1495.161646][ T4347] vhci_hcd: vhci_device speed not set [ 1495.229073][T16890] vhci_hcd vhci_hcd.0: Device attached [ 1495.943455][ T26] vhci_hcd: vhci_device speed not set [ 1496.970211][ T26] usb 47-1: new full-speed USB device number 4 using vhci_hcd [ 1497.201396][T16137] EXT4-fs (loop6): unmounting filesystem. [ 1497.273789][T16891] vhci_hcd: connection reset by peer [ 1497.279258][ T4962] vhci_hcd: stop threads [ 1497.283768][ T4962] vhci_hcd: release socket [ 1497.292788][ T4962] vhci_hcd: disconnect device [ 1497.781177][ T4472] device hsr_slave_0 left promiscuous mode [ 1497.917867][ T4472] device hsr_slave_1 left promiscuous mode [ 1498.081159][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.219439][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.365415][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.393281][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.474963][ T4472] device bridge_slave_1 left promiscuous mode [ 1498.484786][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.506653][ T4472] device bridge_slave_0 left promiscuous mode [ 1498.515238][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.025895][ T4472] device veth1_macvtap left promiscuous mode [ 1499.033040][ T4472] device veth0_macvtap left promiscuous mode [ 1499.046463][ T4472] device veth1_vlan left promiscuous mode [ 1499.053767][ T4472] device veth0_vlan left promiscuous mode [ 1499.401889][ T14] vhci_hcd: vhci_device speed not set [ 1499.489832][ T4472] bond3 (unregistering): Released all slaves [ 1499.604642][T16940] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 1499.666743][T16940] sctp: [Deprecated]: syz.1.3227 (pid 16940) Use of int in max_burst socket option. [ 1499.666743][T16940] Use struct sctp_assoc_value instead [ 1499.805948][T16942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1499.812505][T16942] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1499.831305][T16942] vhci_hcd vhci_hcd.0: Device attached [ 1499.886417][ T4472] bond2 (unregistering): Released all slaves [ 1500.077654][ T4472] bond1 (unregistering): Released all slaves [ 1500.156381][ T14] vhci_hcd: vhci_device speed not set [ 1500.198744][T16952] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1500.205269][T16952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1500.212865][T16952] vhci_hcd vhci_hcd.0: Device attached [ 1500.270455][ T14] usb 37-1: device descriptor read/64, error -110 [ 1500.285167][T16946] vhci_hcd: connection closed [ 1500.287211][ T33] vhci_hcd: stop threads [ 1500.291665][T16953] vhci_hcd: connection closed [ 1500.304014][ T33] vhci_hcd: release socket [ 1500.313299][ T33] vhci_hcd: disconnect device [ 1500.328375][ T33] vhci_hcd: stop threads [ 1500.332754][ T33] vhci_hcd: release socket [ 1500.337487][ T33] vhci_hcd: disconnect device [ 1500.470520][ T14] vhci_hcd: vhci_device speed not set [ 1500.724138][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 1500.763214][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 1500.798585][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.877792][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.280277][ T26] vhci_hcd: vhci_device speed not set [ 1503.178805][T16960] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1503.185364][T16960] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1503.217991][T16960] vhci_hcd vhci_hcd.0: Device attached [ 1503.710853][T16966] usb usb8: usbfs: process 16966 (syz.1.3233) did not claim interface 0 before use [ 1504.439411][T16961] vhci_hcd: connection closed [ 1504.439738][ T8049] vhci_hcd: stop threads [ 1504.452880][ T8049] vhci_hcd: release socket [ 1504.457418][ T8049] vhci_hcd: disconnect device [ 1504.467608][ T4348] vhci_hcd: vhci_device speed not set [ 1504.659213][ T4472] bond0 (unregistering): Released all slaves [ 1504.830164][T16909] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3220'. [ 1504.921737][T16935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1504.956976][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1505.021767][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1505.075106][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1509.581338][T16740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1509.773727][T16740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1509.834796][T16740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1509.867862][T16740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1511.270603][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.290961][T17039] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3248'. [ 1511.349030][T16756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1511.481850][T16756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1511.524421][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.569521][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1511.598695][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1511.727498][T17048] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1511.734045][T17048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1511.741757][T17048] vhci_hcd vhci_hcd.0: Device attached [ 1511.786883][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.794045][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1512.015939][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1512.024235][ T9966] vhci_hcd: vhci_device speed not set [ 1512.120217][ T9966] usb 35-1: new full-speed USB device number 12 using vhci_hcd [ 1512.197534][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1512.329635][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1512.402121][T17049] vhci_hcd: connection reset by peer [ 1512.408134][ T4962] vhci_hcd: stop threads [ 1512.415784][ T4962] vhci_hcd: release socket [ 1512.476152][ T4962] vhci_hcd: disconnect device [ 1512.494218][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.501339][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.952410][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1513.071700][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1513.235783][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1513.405251][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1513.569357][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1513.697650][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1513.809196][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1513.932218][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1514.037352][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1514.202615][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1514.332472][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1515.398451][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1515.474091][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1515.516372][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.738047][T17098] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3260'. [ 1516.998775][T17109] usb usb8: usbfs: process 17109 (syz.6.3262) did not claim interface 0 before use [ 1517.643517][T11328] Bluetooth: hci3: command 0x0406 tx timeout [ 1517.740163][ T9966] vhci_hcd: vhci_device speed not set [ 1517.834717][T17113] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1517.841261][T17113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1517.849135][T17113] vhci_hcd vhci_hcd.0: Device attached [ 1518.060384][ T26] vhci_hcd: vhci_device speed not set [ 1518.133508][ T26] usb 47-1: new full-speed USB device number 5 using vhci_hcd [ 1518.560437][T17114] vhci_hcd: connection reset by peer [ 1518.575339][ T4472] vhci_hcd: stop threads [ 1518.579650][ T4472] vhci_hcd: release socket [ 1518.645384][ T4472] vhci_hcd: disconnect device [ 1520.170206][T17130] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1520.176741][T17130] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1520.184223][T17130] vhci_hcd vhci_hcd.0: Device attached [ 1520.235549][T17133] vhci_hcd: connection closed [ 1520.236317][ T8049] vhci_hcd: stop threads [ 1520.245618][ T8049] vhci_hcd: release socket [ 1520.250058][ T8049] vhci_hcd: disconnect device [ 1520.353141][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1520.368776][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1520.396911][T17138] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1520.430180][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1520.471858][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1520.527639][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1520.614468][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1520.628891][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1520.652906][T16740] device veth0_vlan entered promiscuous mode [ 1520.669086][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1520.691443][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1520.719678][T16740] device veth1_vlan entered promiscuous mode [ 1520.785076][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1520.807453][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1520.843280][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1520.870627][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1520.910954][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1520.945278][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1520.967569][T16740] device veth0_macvtap entered promiscuous mode [ 1520.992059][T16740] device veth1_macvtap entered promiscuous mode [ 1521.050934][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.098898][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.114076][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.144980][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.200731][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.215620][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.236038][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.258499][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.292171][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.318253][T17157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1521.348004][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1521.366897][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1521.829886][T17162] usb usb8: usbfs: process 17162 (syz.2.3274) did not claim interface 0 before use [ 1522.504479][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1522.542339][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1522.576097][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.330628][ T26] vhci_hcd: vhci_device speed not set [ 1523.857846][T17167] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1523.864394][T17167] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1523.872040][T17167] vhci_hcd vhci_hcd.0: Device attached [ 1523.879024][T17168] vhci_hcd: connection closed [ 1523.886826][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.888504][ T4473] vhci_hcd: stop threads [ 1523.891866][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.918825][T17173] loop1: detected capacity change from 0 to 32896 [ 1523.925306][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.935153][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.956270][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.966886][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.977390][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.991268][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.999467][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1524.035660][T17173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1524.060950][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1524.071352][ T4473] vhci_hcd: release socket [ 1524.079318][ T4473] vhci_hcd: disconnect device [ 1524.097491][T17173] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.140634][T16740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.149354][T16740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.180176][ T26] vhci_hcd: vhci_device speed not set [ 1524.210595][T16740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.219307][T16740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.236271][T17179] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1524.242774][T17179] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1524.250260][T17179] vhci_hcd vhci_hcd.0: Device attached [ 1524.410799][ T26] usb usb47-port1: Cannot enable. Maybe the USB cable is bad? [ 1524.428075][T17181] vhci_hcd: connection closed [ 1524.429217][T11715] vhci_hcd: stop threads [ 1524.438864][T11715] vhci_hcd: release socket [ 1524.448491][T11715] vhci_hcd: disconnect device [ 1524.949422][ T26] vhci_hcd: vhci_device speed not set [ 1524.980659][T15589] EXT4-fs (loop1): unmounting filesystem. [ 1525.267616][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1525.291548][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1525.345920][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1525.375582][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1525.420632][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.429144][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.533099][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1526.429840][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.481096][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.488651][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1526.807206][T17224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3286'. [ 1527.266803][T17225] usb usb8: usbfs: process 17225 (syz.1.3285) did not claim interface 0 before use [ 1528.581960][T17237] loop7: detected capacity change from 0 to 32896 [ 1528.696812][T17237] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1528.739439][T17237] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1529.591656][T15829] EXT4-fs (loop7): unmounting filesystem. [ 1530.710701][T17253] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1530.717245][T17253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1530.724860][T17253] vhci_hcd vhci_hcd.0: Device attached [ 1530.735494][T17254] vhci_hcd: connection closed [ 1530.809004][T11715] vhci_hcd: stop threads [ 1531.228544][T11715] vhci_hcd: release socket [ 1531.263491][T11715] vhci_hcd: disconnect device [ 1532.118250][T17259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1532.124817][T17259] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1532.132702][T17259] vhci_hcd vhci_hcd.0: Device attached [ 1532.143894][T17260] vhci_hcd: connection closed [ 1532.340421][ T4347] vhci_hcd: vhci_device speed not set [ 1532.442249][T11715] vhci_hcd: stop threads [ 1532.660530][T11715] vhci_hcd: release socket [ 1532.730136][T11715] vhci_hcd: disconnect device [ 1532.740481][ T4347] usb 35-1: new full-speed USB device number 13 using vhci_hcd [ 1532.748134][ T4347] usb 35-1: enqueue for inactive port 0 [ 1532.752191][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1532.768304][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1532.776696][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1532.798802][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1532.806658][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1532.813946][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1533.010519][ T4347] vhci_hcd: vhci_device speed not set [ 1533.805079][T17264] rxe_eth0 speed is unknown, defaulting to 1000 [ 1534.374788][T17281] usb usb8: usbfs: process 17281 (syz.4.3297) did not claim interface 0 before use [ 1535.020681][T11328] Bluetooth: hci5: command 0x0409 tx timeout [ 1536.836649][ T8049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.081905][T15591] Bluetooth: hci5: command 0x041b tx timeout [ 1537.908095][T17303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1537.914634][T17303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1537.925491][T17303] vhci_hcd vhci_hcd.0: Device attached [ 1538.142188][ T4347] vhci_hcd: vhci_device speed not set [ 1538.167328][T17304] vhci_hcd: connection closed [ 1538.171901][ T5309] vhci_hcd: stop threads [ 1538.204140][ T8049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.239646][ T5309] vhci_hcd: release socket [ 1538.251558][ T4347] usb 35-1: new full-speed USB device number 14 using vhci_hcd [ 1538.335369][ T5309] vhci_hcd: disconnect device [ 1539.170504][T15591] Bluetooth: hci5: command 0x040f tx timeout [ 1539.656253][T17264] chnl_net:caif_netlink_parms(): no params data found [ 1539.841649][ T8049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.122123][ T8049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.960715][T17332] usb usb8: usbfs: process 17332 (syz.6.3308) did not claim interface 0 before use [ 1541.377063][T15591] Bluetooth: hci5: command 0x0419 tx timeout [ 1541.424486][T17264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.437500][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.447998][T17264] device bridge_slave_0 entered promiscuous mode [ 1541.461211][T17264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.468360][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.501784][T17264] device bridge_slave_1 entered promiscuous mode [ 1541.612304][T17264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.663697][T17264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.780706][ T8049] tipc: Left network mode [ 1541.804785][T17264] team0: Port device team_slave_0 added [ 1541.838729][T17264] team0: Port device team_slave_1 added [ 1541.942907][T17343] loop4: detected capacity change from 0 to 32896 [ 1542.036238][T17343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1542.074223][T17340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3310'. [ 1542.083700][T17343] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.328836][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 1542.328850][ T27] audit: type=1326 audit(1794699363.630:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1542.407315][T17264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.472938][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.671810][ T27] audit: type=1326 audit(1794699363.680:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1542.913788][T17264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.985274][ T27] audit: type=1326 audit(1794699363.700:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.020148][ T27] audit: type=1326 audit(1794699363.700:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.021886][T16740] EXT4-fs (loop4): unmounting filesystem. [ 1543.100579][ T27] audit: type=1326 audit(1794699363.700:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.139483][T17264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.142037][T17352] loop1: detected capacity change from 0 to 8192 [ 1543.150494][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.178914][ T27] audit: type=1326 audit(1794699363.700:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.178949][ T27] audit: type=1326 audit(1794699363.700:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.178976][ T27] audit: type=1326 audit(1794699363.720:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.179004][ T27] audit: type=1326 audit(1794699363.720:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.179034][ T27] audit: type=1326 audit(1794699363.720:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17351 comm="syz.1.3311" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd08fda94d9 code=0x7ffc0000 [ 1543.340725][T17264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.480690][ T4347] vhci_hcd: vhci_device speed not set [ 1545.726190][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.732617][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.887967][T17264] device hsr_slave_0 entered promiscuous mode [ 1545.915302][T17264] device hsr_slave_1 entered promiscuous mode [ 1545.928982][T17264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1545.938968][T17264] Cannot create hsr debugfs directory [ 1547.701359][T17381] loop6: detected capacity change from 0 to 2048 [ 1547.801298][T11328] Bluetooth: hci2: command 0x0406 tx timeout [ 1547.829810][T17380] loop7: detected capacity change from 0 to 2048 [ 1547.858558][T17381] loop6: p1 < > p4 [ 1547.858558][T17381] p4: [ 1547.888115][T17381] loop6: p4 size 722688 extends beyond EOD, truncated [ 1550.198797][T17392] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3320'. [ 1550.944588][T17395] usb usb8: usbfs: process 17395 (syz.7.3321) did not claim interface 0 before use [ 1551.687795][T17398] FAULT_INJECTION: forcing a failure. [ 1551.687795][T17398] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.286946][T17398] CPU: 1 PID: 17398 Comm: syz.6.3322 Not tainted syzkaller #0 [ 1552.294453][T17398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1552.304526][T17398] Call Trace: [ 1552.307805][T17398] [ 1552.310734][T17398] dump_stack_lvl+0x188/0x24e [ 1552.315421][T17398] ? show_regs_print_info+0x12/0x12 [ 1552.320616][T17398] ? load_image+0x410/0x410 [ 1552.325118][T17398] ? __might_sleep+0xd0/0xd0 [ 1552.329698][T17398] ? __lock_acquire+0x7ea0/0x7ea0 [ 1552.334721][T17398] should_fail_ex+0x390/0x4c0 [ 1552.339398][T17398] should_failslab+0x5/0x20 [ 1552.343912][T17398] slab_pre_alloc_hook+0x59/0x300 [ 1552.348946][T17398] ? process_preds+0x457/0x36c0 [ 1552.353812][T17398] __kmem_cache_alloc_node+0x4f/0x270 [ 1552.359188][T17398] ? process_preds+0x457/0x36c0 [ 1552.364058][T17398] __kmalloc+0xa3/0x240 [ 1552.368211][T17398] process_preds+0x457/0x36c0 [ 1552.372906][T17398] ? create_filter_start+0x2c0/0x2c0 [ 1552.378189][T17398] ? apply_subsystem_event_filter+0x363/0x16b0 [ 1552.384349][T17398] ? rcu_is_watching+0x11/0xa0 [ 1552.389120][T17398] ? kstrdup+0x52/0x70 [ 1552.393188][T17398] ? memcpy+0x3c/0x60 [ 1552.397196][T17398] apply_subsystem_event_filter+0x3cd/0x16b0 [ 1552.403183][T17398] ? apply_event_filter+0x590/0x590 [ 1552.408373][T17398] ? __might_fault+0xa6/0x120 [ 1552.413065][T17398] ? _copy_from_user+0x10b/0x170 [ 1552.418003][T17398] subsystem_filter_write+0x95/0xf0 [ 1552.423224][T17398] ? subsystem_filter_read+0x210/0x210 [ 1552.428677][T17398] vfs_write+0x2dc/0x9a0 [ 1552.432919][T17398] ? file_end_write+0x250/0x250 [ 1552.437762][T17398] ? __fget_files+0x28/0x460 [ 1552.442356][T17398] ? __fget_files+0x3fc/0x460 [ 1552.447047][T17398] ? __fdget_pos+0x2ae/0x360 [ 1552.451634][T17398] ? ksys_write+0x70/0x260 [ 1552.456046][T17398] ksys_write+0x14d/0x260 [ 1552.460370][T17398] ? __ia32_sys_read+0x80/0x80 [ 1552.465128][T17398] ? lockdep_hardirqs_on+0x94/0x140 [ 1552.470334][T17398] do_syscall_64+0x4c/0xa0 [ 1552.474748][T17398] ? clear_bhb_loop+0x60/0xb0 [ 1552.479421][T17398] ? clear_bhb_loop+0x60/0xb0 [ 1552.484098][T17398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1552.490007][T17398] RIP: 0033:0x7fa0249a94d9 [ 1552.494414][T17398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.514014][T17398] RSP: 002b:00007fa02587e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1552.522429][T17398] RAX: ffffffffffffffda RBX: 00007fa024c25fa0 RCX: 00007fa0249a94d9 [ 1552.530393][T17398] RDX: 0000000000000007 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1552.538354][T17398] RBP: 00007fa024a3804e R08: 0000000000000000 R09: 0000000000000000 [ 1552.546319][T17398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.554279][T17398] R13: 00007fa024c26038 R14: 00007fa024c25fa0 R15: 00007ffd64d683f8 [ 1552.562258][T17398] [ 1553.885362][T17406] loop6: detected capacity change from 0 to 33280 [ 1554.048494][T17406] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 1554.146203][T17406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1554.172616][T15591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1554.181992][T15591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1554.191310][T15591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1554.192567][T17406] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1554.221337][T15591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1554.254968][T15591] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1554.263190][T15591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1554.535389][T17411] rxe_eth0 speed is unknown, defaulting to 1000 [ 1554.629683][T17264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1554.745123][T17264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1554.823236][T17264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1554.908346][ T8049] device hsr_slave_0 left promiscuous mode [ 1554.971221][ T8049] device hsr_slave_1 left promiscuous mode [ 1555.088095][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.101050][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.118074][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.129342][T16137] EXT4-fs (loop6): unmounting filesystem. [ 1555.139255][T17426] loop7: detected capacity change from 0 to 33280 [ 1555.171565][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.204383][ T8049] device bridge_slave_1 left promiscuous mode [ 1555.223990][T17426] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 1555.239867][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.256512][T17426] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1555.320765][T17426] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1555.366177][ T8049] device bridge_slave_0 left promiscuous mode [ 1555.376124][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.489537][ T8049] device veth1_macvtap left promiscuous mode [ 1555.510183][ T8049] device veth0_macvtap left promiscuous mode [ 1555.515734][T15829] EXT4-fs (loop7): unmounting filesystem. [ 1555.516379][ T8049] device veth1_vlan left promiscuous mode [ 1555.565252][ T8049] device veth0_vlan left promiscuous mode [ 1556.311080][T17452] loop4: detected capacity change from 0 to 32896 [ 1556.362438][T11328] Bluetooth: hci0: command 0x0409 tx timeout [ 1556.378371][ T8049] bond1 (unregistering): Released all slaves [ 1556.393312][T17452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1556.419556][T17452] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1557.275289][T16740] EXT4-fs (loop4): unmounting filesystem. [ 1557.833044][T17458] usb usb8: usbfs: process 17458 (syz.4.3334) did not claim interface 0 before use [ 1558.474698][T11328] Bluetooth: hci0: command 0x041b tx timeout [ 1558.642914][T17461] loop6: detected capacity change from 0 to 2048 [ 1558.681616][T17461] loop6: p1 < > p4 [ 1558.681616][T17461] p4: [ 1558.691075][T17461] loop6: p4 size 722688 extends beyond EOD, truncated [ 1559.410637][ T8049] team0 (unregistering): Port device team_slave_1 removed [ 1559.753953][ T8049] team0 (unregistering): Port device team_slave_0 removed [ 1560.226957][ T8049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.289542][ T8049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.782707][T11328] Bluetooth: hci0: command 0x040f tx timeout [ 1560.799161][ T8049] bond0 (unregistering): Released all slaves [ 1561.119065][T17264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1561.143712][T17449] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3332'. [ 1561.796085][T17264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.172392][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1562.498889][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1562.638117][T17264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.686845][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1562.716211][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1562.760637][T11715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.767779][T11715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.850121][T11328] Bluetooth: hci0: command 0x0419 tx timeout [ 1562.908317][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1562.969656][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1563.016430][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1563.056065][T11715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.063230][T11715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.965768][T17498] usb usb8: usbfs: process 17498 (syz.7.3343) did not claim interface 0 before use [ 1566.371765][T17411] chnl_net:caif_netlink_parms(): no params data found [ 1566.420428][T17503] loop4: detected capacity change from 0 to 32896 [ 1566.447740][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1566.502448][T17503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1566.520858][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1566.520887][T17503] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1566.578817][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1566.603599][T17514] loop7: detected capacity change from 0 to 32896 [ 1566.670183][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1566.871022][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1567.112332][T17514] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1567.155643][T17514] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1567.418164][T16740] EXT4-fs (loop4): unmounting filesystem. [ 1567.480590][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.596613][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.605000][T17411] device bridge_slave_0 entered promiscuous mode [ 1567.655235][T17411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.679451][T17411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.707137][T17411] device bridge_slave_1 entered promiscuous mode [ 1567.737056][T17264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1567.764719][T17264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1568.487805][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1568.509881][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1568.603364][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1568.622705][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1568.676270][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1568.729462][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1570.226552][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1571.194194][T17411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.248312][T17538] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 1571.319001][T17539] sctp: [Deprecated]: syz.4.3351 (pid 17539) Use of int in max_burst socket option. [ 1571.319001][T17539] Use struct sctp_assoc_value instead [ 1571.380426][ T8049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.551670][ T8049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.580364][T17411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.645198][T17411] team0: Port device team_slave_0 added [ 1571.657224][T17411] team0: Port device team_slave_1 added [ 1572.494674][ T8049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.694965][T17551] loop6: detected capacity change from 0 to 32896 [ 1572.724842][T17411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.752744][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1572.800245][T17551] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1572.825179][T17551] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1573.079802][T17411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.789409][T16137] EXT4-fs (loop6): unmounting filesystem. [ 1573.809635][ T8049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.916024][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1573.948294][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1573.977480][T17411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.990823][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.028993][T17411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.541794][T17566] loop4: detected capacity change from 0 to 32896 [ 1574.660330][T17264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.813068][T15829] EXT4-fs (loop7): unmounting filesystem. [ 1575.854588][T17566] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1576.330697][T17566] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1576.343219][T17411] device hsr_slave_0 entered promiscuous mode [ 1576.361599][T17411] device hsr_slave_1 entered promiscuous mode [ 1576.433956][T17411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1576.510119][T17411] Cannot create hsr debugfs directory [ 1576.831454][T17575] loop7: detected capacity change from 0 to 8 [ 1577.783267][T16740] EXT4-fs (loop4): unmounting filesystem. [ 1577.831250][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1577.881875][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1578.100994][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1578.109274][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1578.205066][T17264] device veth0_vlan entered promiscuous mode [ 1578.221281][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1578.229057][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1578.342328][T17264] device veth1_vlan entered promiscuous mode [ 1578.516270][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1578.550621][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1578.587676][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1578.635616][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1578.668215][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1578.720247][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1578.763071][T17264] device veth0_macvtap entered promiscuous mode [ 1578.845850][T17597] netlink: 'syz.6.3364': attribute type 1 has an invalid length. [ 1578.871762][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1578.896399][T17599] loop4: detected capacity change from 0 to 2048 [ 1580.793027][T17600] sctp: [Deprecated]: syz.6.3364 (pid 17600) Use of int in max_burst socket option. [ 1580.793027][T17600] Use struct sctp_assoc_value instead [ 1581.013376][T17264] device veth1_macvtap entered promiscuous mode [ 1581.067548][T17599] loop4: p1 < > p4 [ 1581.067548][T17599] p4: [ 1581.075990][T17599] loop4: p4 size 722688 extends beyond EOD, truncated [ 1581.428561][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.466317][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.506270][T17604] loop4: detected capacity change from 0 to 32896 [ 1581.510093][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.559716][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.578970][T17604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1581.580767][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.638573][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.639338][T17604] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.648883][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.648900][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.650455][T17264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.791061][T16740] EXT4-fs (loop4): unmounting filesystem. [ 1586.091527][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1586.156050][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1586.157344][T17583] udevd[17583]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1586.198560][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.206360][T17504] udevd[17504]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1586.233602][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.259320][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.296104][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.329429][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.367455][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.389683][T17264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.449207][T17264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.497022][T17264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1586.628198][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1586.647980][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1586.669255][T17264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.697246][T17264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.734216][T17264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.748425][T17264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.791968][T17638] loop4: detected capacity change from 0 to 32896 [ 1586.847320][T17638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1586.858276][T17638] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.885645][T17411] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1587.018985][T17411] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1587.083130][T17411] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1587.768628][T17411] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1587.786754][T16740] EXT4-fs (loop4): unmounting filesystem. [ 1588.067488][T17654] loop6: detected capacity change from 0 to 32896 [ 1588.158315][T17654] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1588.221575][T17658] loop7: detected capacity change from 0 to 32896 [ 1588.253837][T17654] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.302962][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.327751][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.346186][T17658] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1588.441429][T17658] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.456812][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1588.540977][T17411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.572500][ T5309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.007997][ T5309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.133862][T16137] EXT4-fs (loop6): unmounting filesystem. [ 1589.432559][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1589.448152][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1589.513888][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1589.579690][T17411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.878765][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1589.967115][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1590.023400][T17684] loop6: detected capacity change from 0 to 2048 [ 1590.249693][T14920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.256924][T14920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.791987][T17684] loop6: p1 < > p4 [ 1590.791987][T17684] p4: [ 1590.799697][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1590.808529][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1590.851614][T17684] loop6: p4 size 722688 extends beyond EOD, truncated [ 1590.998443][T14920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.005621][T14920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.690382][T17411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1591.893535][T17411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1591.960616][T17688] loop4: detected capacity change from 0 to 128 [ 1592.054813][T17688] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1592.210382][T11328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1592.219432][T11328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1592.227651][T11328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1592.236570][T11328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1592.244322][T11328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1592.253840][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1592.283039][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1592.362133][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1592.410818][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1592.442383][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1592.462233][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1592.491954][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1592.500936][ T33] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1592.548591][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1592.581917][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1592.599225][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1592.615787][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1592.634108][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1592.655420][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1592.671314][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1592.693440][ T8049] device hsr_slave_0 left promiscuous mode [ 1592.709802][ T8049] device hsr_slave_1 left promiscuous mode [ 1592.744553][T15829] EXT4-fs (loop7): unmounting filesystem. [ 1592.757455][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.767593][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.798343][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.848970][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.893860][ T8049] device bridge_slave_1 left promiscuous mode [ 1592.916833][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.967642][ T8049] device bridge_slave_0 left promiscuous mode [ 1592.983351][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.083556][ T8049] device veth1_macvtap left promiscuous mode [ 1593.090016][ T8049] device veth0_macvtap left promiscuous mode [ 1593.103838][ T8049] device veth1_vlan left promiscuous mode [ 1593.114221][ T8049] device veth0_vlan left promiscuous mode [ 1593.507948][T17716] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1593.971846][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 1593.972112][ T27] audit: type=1800 audit(1794699415.250:192): pid=17718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3386" name="UDC" dev="configfs" ino=90218 res=0 errno=0 [ 1594.281642][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 1594.447471][ T8049] team0 (unregistering): Port device team_slave_1 removed [ 1594.514979][ T8049] team0 (unregistering): Port device team_slave_0 removed [ 1594.559569][ T8049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.599461][ T8049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1594.876115][ T8049] bond0 (unregistering): Released all slaves [ 1595.088764][T17690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1595.209157][T17728] netlink: 'syz.7.3389': attribute type 1 has an invalid length. [ 1595.282522][T17730] sctp: [Deprecated]: syz.7.3389 (pid 17730) Use of int in max_burst socket option. [ 1595.282522][T17730] Use struct sctp_assoc_value instead [ 1595.384040][T17733] loop4: detected capacity change from 0 to 33280 [ 1595.464539][T17733] EXT4-fs warning (device loop4): read_mmp_block:115: Error -74 while reading MMP block 13 [ 1595.570725][T17740] loop6: detected capacity change from 0 to 8 [ 1596.371456][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 1596.434405][T17742] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1596.549719][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1596.558463][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1596.587639][T17411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.674690][T17746] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1597.797677][ T27] audit: type=1800 audit(1794699418.190:193): pid=17751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3392" name="UDC" dev="configfs" ino=90270 res=0 errno=0 [ 1598.450207][T15591] Bluetooth: hci4: command 0x040f tx timeout [ 1598.490157][ T8605] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1598.502039][ T27] audit: type=1800 audit(1794699419.580:194): pid=17753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3393" name="UDC" dev="configfs" ino=89384 res=0 errno=0 [ 1598.664147][T17762] loop6: detected capacity change from 0 to 128 [ 1598.692051][ T8049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.720962][T17762] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1598.766973][T17690] chnl_net:caif_netlink_parms(): no params data found [ 1598.794185][T17765] loop4: detected capacity change from 0 to 8 [ 1599.647016][T17765] rxe_eth0 speed is unknown, defaulting to 1000 [ 1599.787044][ T8049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.829500][ T9801] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1600.079496][ T8049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.809413][T15591] Bluetooth: hci4: command 0x0419 tx timeout [ 1602.563365][T17801] usb usb8: usbfs: process 17801 (syz.7.3400) did not claim interface 0 before use [ 1603.209751][ T8049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.248623][T17690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.267193][T17690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.294802][T17690] device bridge_slave_0 entered promiscuous mode [ 1603.324042][T17690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.362872][T17690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.395557][T17690] device bridge_slave_1 entered promiscuous mode [ 1603.501866][T17690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.569486][T17690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.596075][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1603.622010][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1603.768778][T17411] device veth0_vlan entered promiscuous mode [ 1603.809595][T17690] team0: Port device team_slave_0 added [ 1603.842517][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1603.865555][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1603.895084][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1603.915060][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1603.953404][T17411] device veth1_vlan entered promiscuous mode [ 1604.001549][T17690] team0: Port device team_slave_1 added [ 1604.120247][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1605.021592][T17690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.028620][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.080410][T17690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.128877][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1605.150786][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1605.175202][T17840] loop4: detected capacity change from 0 to 33280 [ 1605.180543][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1605.198936][T17840] EXT4-fs warning (device loop4): read_mmp_block:115: Error -74 while reading MMP block 13 [ 1605.216523][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1605.244320][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1605.290832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1605.332628][T17411] device veth0_macvtap entered promiscuous mode [ 1605.444490][T17690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.458437][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.521989][ T4346] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1605.590270][T17690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.704754][T17843] device syzkaller0 entered promiscuous mode [ 1605.719841][T17411] device veth1_macvtap entered promiscuous mode [ 1605.742118][ T4346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.760523][ T4346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1605.773154][ T4346] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1605.783185][ T4346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1605.791436][ T4346] usb 5-1: SerialNumber: syz [ 1605.827162][ T4346] usb 5-1: 0:2 : does not exist [ 1605.891887][T17860] loop6: detected capacity change from 0 to 8 [ 1606.044388][T17690] device hsr_slave_0 entered promiscuous mode [ 1606.149736][T17690] device hsr_slave_1 entered promiscuous mode [ 1606.244545][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1606.308795][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.409629][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.495176][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.610174][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.691765][ T4346] usb 5-1: USB disconnect, device number 13 [ 1606.711625][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.738639][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.776723][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.804694][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.826213][T17411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.938089][T17859] rxe_eth0 speed is unknown, defaulting to 1000 [ 1606.984909][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1607.010983][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1607.064443][T17870] loop7: detected capacity change from 0 to 33280 [ 1607.100940][T17870] EXT4-fs warning (device loop7): read_mmp_block:115: Error -74 while reading MMP block 13 [ 1607.102295][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.128151][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.154357][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.166336][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.172665][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.188065][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.198135][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.208928][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.219003][T17411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.229661][T17411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.242442][T17411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1607.848078][T17878] usb usb8: usbfs: process 17878 (syz.4.3411) did not claim interface 0 before use [ 1608.483541][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1608.494014][T11715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1608.506751][T17411] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.601623][T17411] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.612263][T17411] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.621355][T17411] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.839083][T13995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.856813][T13995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.876560][T17894] loop6: detected capacity change from 0 to 8 [ 1610.665050][ T9801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1610.695134][T17894] rxe_eth0 speed is unknown, defaulting to 1000 [ 1610.871662][T17900] loop7: detected capacity change from 0 to 8 [ 1611.556036][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.567515][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.627311][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1612.475698][T17910] usb usb8: usbfs: process 17910 (syz.6.3420) did not claim interface 0 before use [ 1615.821228][T17926] loop4: detected capacity change from 0 to 2048 [ 1616.040195][ T8049] device hsr_slave_0 left promiscuous mode [ 1616.077478][T17928] loop7: detected capacity change from 0 to 128 [ 1616.086068][ T8049] device hsr_slave_1 left promiscuous mode [ 1616.117885][T17928] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1616.129112][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.137960][T17931] loop8: detected capacity change from 0 to 128 [ 1616.149655][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.216636][T17931] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1616.257642][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.277755][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.330393][ T4471] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1616.341320][ T8049] device bridge_slave_1 left promiscuous mode [ 1616.347576][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.360916][T14920] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1616.402597][ T8049] device bridge_slave_0 left promiscuous mode [ 1616.408826][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.476757][T17934] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1616.482153][T17936] loop8: detected capacity change from 0 to 2048 [ 1616.510530][ T8049] device veth1_macvtap left promiscuous mode [ 1616.516658][ T8049] device veth0_macvtap left promiscuous mode [ 1616.523179][ T8049] device veth1_vlan left promiscuous mode [ 1616.529072][ T8049] device veth0_vlan left promiscuous mode [ 1616.665993][T17939] loop7: detected capacity change from 0 to 8 [ 1618.975697][T17950] loop7: detected capacity change from 0 to 164 [ 1619.933012][T17959] loop4: detected capacity change from 0 to 164 [ 1619.976720][T17961] loop8: detected capacity change from 0 to 2048 [ 1620.181165][T17965] loop6: detected capacity change from 0 to 8 [ 1622.144390][T17973] loop4: detected capacity change from 0 to 33280 [ 1622.155695][T17973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1622.167497][T17973] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1623.521450][T17982] loop8: detected capacity change from 0 to 2048 [ 1623.553889][T17984] loop4: detected capacity change from 0 to 128 [ 1623.586405][T17984] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1623.645446][ T8049] team0 (unregistering): Port device team_slave_1 removed [ 1623.813338][ T8049] team0 (unregistering): Port device team_slave_0 removed [ 1624.333202][ T4353] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1624.362145][ T8049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.436436][ T8049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.530542][T17997] loop8: detected capacity change from 0 to 8 [ 1627.745204][ T8049] bond0 (unregistering): Released all slaves [ 1627.843565][T17965] rxe_eth0 speed is unknown, defaulting to 1000 [ 1627.849896][T18008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1628.936827][T17690] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1629.008904][T17690] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1629.056195][T18018] Bluetooth: MGMT ver 1.22 [ 1629.064165][T17690] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1629.072586][T18018] Bluetooth: hci0: expected 65520 bytes, got 19 bytes [ 1629.108093][T18018] loop6: detected capacity change from 0 to 256 [ 1629.812848][T17690] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1629.847908][T18022] netlink: 'syz.4.3451': attribute type 1 has an invalid length. [ 1630.222357][T18034] loop7: detected capacity change from 0 to 164 [ 1630.462681][T18035] xt_TCPMSS: Only works on TCP SYN packets [ 1631.141325][T17690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.350862][T18047] loop4: detected capacity change from 0 to 2048 [ 1633.795062][T17690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.880368][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1635.183032][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1635.476434][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1635.550806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1635.559261][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.566431][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1635.609827][T18062] loop4: detected capacity change from 0 to 128 [ 1636.990199][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1637.009710][T18062] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1637.035843][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1637.045123][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1637.503978][T18070] loop6: detected capacity change from 0 to 8 [ 1637.940706][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.947860][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.027871][T18069] rxe_eth0 speed is unknown, defaulting to 1000 [ 1638.039813][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1638.077064][ T5086] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1638.166447][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1638.255840][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1638.316623][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1638.332971][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1638.363513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1638.414444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1638.478223][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1638.499547][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1638.528798][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1638.556176][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1638.593217][T17690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1638.644289][T18091] loop8: detected capacity change from 0 to 128 [ 1638.663960][T18091] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1638.829033][T14920] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1641.172997][T18108] loop8: detected capacity change from 0 to 2048 [ 1641.273383][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1641.291159][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1641.330364][T17690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.154542][T18113] loop8: detected capacity change from 0 to 34816 [ 1642.274764][T18114] loop4: detected capacity change from 0 to 2048 [ 1642.321184][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1642.345232][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1642.401271][T18113] rxe_eth0 speed is unknown, defaulting to 1000 [ 1643.085928][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1643.117862][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1643.133494][T17690] device veth0_vlan entered promiscuous mode [ 1643.172445][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1643.205617][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1643.225616][T18123] loop6: detected capacity change from 0 to 33280 [ 1643.234323][T18123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1643.255317][T17690] device veth1_vlan entered promiscuous mode [ 1643.270873][T18123] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 1643.491955][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1643.503416][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1643.525356][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1643.745789][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1643.826721][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1644.216839][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1644.360532][T18134] loop4: detected capacity change from 0 to 2048 [ 1644.410053][T17690] device veth0_macvtap entered promiscuous mode [ 1644.453687][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready syzkaller syzkaller login: [ 1644.538504][T17690] device veth1_macvtap entered promiscuous mode [ 1644.558301][T18134] loop4: p1 < > p4 [ 1644.558301][T18134] p4: [ 1644.628089][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.686767][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.718240][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.760429][T18134] loop4: p4 size 722688 extends beyond EOD, truncated [ 1644.789143][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.826065][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.870280][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.915419][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.957835][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.968876][T18146] loop6: detected capacity change from 0 to 128 [ 1645.017450][T18146] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1645.039443][T17690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1645.129820][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1645.147008][T14920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1645.212267][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.237669][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.269757][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.297238][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.337106][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.369083][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.395636][T17690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.444217][T17690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.490483][ T48] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1645.502122][T17690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.574470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1645.594545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1645.627894][T17690] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.639415][T17690] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.661564][T17690] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.676676][T17690] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.576235][ T5086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.620732][ T5086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.698112][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1646.751390][ T5086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.783468][ T5086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.803326][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1646.849773][T18163] loop6: detected capacity change from 0 to 33280 [ 1646.985167][T18163] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3484: bg 0: block 5: invalid block bitmap [ 1647.040829][T18163] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 1647.059178][T18171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3290'. [ 1647.070890][T18171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3290'. [ 1647.150958][T18163] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3484: invalid indirect mapped block 3 (level 2) [ 1647.280936][T18163] EXT4-fs (loop6): 1 orphan inode deleted [ 1647.287264][T18163] EXT4-fs (loop6): 1 truncate cleaned up [ 1647.372920][T18178] loop2: detected capacity change from 0 to 8 [ 1648.010506][T18178] rxe_eth0 speed is unknown, defaulting to 1000 [ 1648.224703][T18163] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1648.412102][T18179] loop8: detected capacity change from 0 to 2048 [ 1648.472755][ T3347] list_del corruption, ffff888077748e00->prev is LIST_POISON2 (dead000000000122) [ 1648.484359][ T3347] ------------[ cut here ]------------ [ 1648.490521][ T3347] kernel BUG at lib/list_debug.c:58! [ 1648.496384][ T3347] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1648.501533][T17819] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1648.503177][ T3347] CPU: 1 PID: 3347 Comm: krfcommd Not tainted syzkaller #0 [ 1648.521452][ T3347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1648.532503][ T3347] RIP: 0010:__list_del_entry_valid+0xf6/0x120 [ 1648.539181][ T3347] Code: 48 89 de e8 6c c6 16 06 0f 0b 48 c7 c7 80 76 fe 8a 48 89 de e8 5b c6 16 06 0f 0b 48 c7 c7 e0 76 fe 8a 48 89 de e8 4a c6 16 06 <0f> 0b 48 c7 c7 40 77 fe 8a 48 89 de 4c 89 f9 e8 36 c6 16 06 0f 0b [ 1648.560743][ T3347] RSP: 0018:ffffc9000e25f5e8 EFLAGS: 00010246 [ 1648.567420][ T3347] RAX: 000000000000004e RBX: ffff888077748e00 RCX: 6838f5328a6c6b00 [ 1648.576187][ T3347] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1648.584955][ T3347] RBP: 0000000000000001 R08: ffffc9000e25f2e7 R09: 1ffff92001c4be5c [ 1648.593726][ T3347] R10: dffffc0000000000 R11: fffff52001c4be5d R12: dffffc0000000000 [ 1648.602496][ T3347] R13: dffffc0000000000 R14: ffff8880764fa320 R15: dead000000000122 [ 1648.611270][ T3347] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1648.621090][ T3347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1648.628329][ T3347] CR2: 00007fef4941e000 CR3: 00000000686e4000 CR4: 00000000003506e0 [ 1648.637099][ T3347] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1648.645865][ T3347] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1648.654631][ T3347] Call Trace: [ 1648.658230][ T3347] [ 1648.661452][ T3347] hci_chan_del+0x6b/0x1a0 [ 1648.666403][ T3347] l2cap_chan_put+0x1f5/0x300 [ 1648.671666][ T3347] l2cap_sock_release+0x179/0x1e0 [ 1648.677197][ T3347] sock_release+0x7b/0x140 [ 1648.682106][ T3347] rfcomm_session_del+0x141/0x200 [ 1648.687711][ T3347] rfcomm_run+0x46e1/0x5f10 [ 1648.692678][ T3347] ? rfcomm_security_cfm+0x780/0x780 [ 1648.698497][ T3347] ? mark_lock+0x94/0x320 [ 1648.703266][ T3347] ? __lock_acquire+0x142d/0x7ea0 [ 1648.708803][ T3347] ? mark_lock+0x94/0x320 [ 1648.713573][ T3347] ? __lock_acquire+0x142d/0x7ea0 [ 1648.719109][ T3347] ? mark_lock+0x94/0x320 [ 1648.723872][ T3347] ? __lock_acquire+0x142d/0x7ea0 [ 1648.729440][ T3347] ? verify_lock_unused+0x140/0x140 [ 1648.735164][ T3347] ? finish_task_switch+0x25d/0x8e0 [ 1648.740889][ T3347] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1648.747468][ T3347] ? read_lock_is_recursive+0x10/0x10 [ 1648.753382][ T3347] ? lock_chain_count+0x20/0x20 [ 1648.758721][ T3347] ? finish_task_switch+0x262/0x8e0 [ 1648.764444][ T3347] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1648.771028][ T3347] ? __lock_acquire+0x7ea0/0x7ea0 [ 1648.776560][ T3347] ? lock_chain_count+0x20/0x20 [ 1648.781930][ T3347] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1648.788417][ T3347] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1648.794898][ T3347] ? wait_woken+0x1c0/0x1c0 [ 1648.799851][ T3347] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1648.806332][ T3347] ? __kthread_parkme+0x71/0x1c0 [ 1648.811855][ T3347] ? __kthread_parkme+0x15b/0x1c0 [ 1648.817386][ T3347] kthread+0x29d/0x330 [ 1648.821860][ T3347] ? rfcomm_security_cfm+0x780/0x780 [ 1648.827679][ T3347] ? kthread_blkcg+0xd0/0xd0 [ 1648.832728][ T3347] ret_from_fork+0x1f/0x30 [ 1648.837613][ T3347] [ 1648.840933][ T3347] Modules linked in: [ 1648.850985][ T3347] ---[ end trace 0000000000000000 ]--- [ 1648.857017][ T3347] RIP: 0010:__list_del_entry_valid+0xf6/0x120 [ 1648.863756][ T3347] Code: 48 89 de e8 6c c6 16 06 0f 0b 48 c7 c7 80 76 fe 8a 48 89 de e8 5b c6 16 06 0f 0b 48 c7 c7 e0 76 fe 8a 48 89 de e8 4a c6 16 06 <0f> 0b 48 c7 c7 40 77 fe 8a 48 89 de 4c 89 f9 e8 36 c6 16 06 0f 0b [ 1648.885350][ T3347] RSP: 0018:ffffc9000e25f5e8 EFLAGS: 00010246 [ 1648.887500][T16137] EXT4-fs (loop6): unmounting filesystem. [ 1648.892023][ T3347] RAX: 000000000000004e RBX: ffff888077748e00 RCX: 6838f5328a6c6b00 [ 1648.892038][ T3347] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1648.916297][ T3347] RBP: 0000000000000001 R08: ffffc9000e25f2e7 R09: 1ffff92001c4be5c [ 1648.925393][ T3347] R10: dffffc0000000000 R11: fffff52001c4be5d R12: dffffc0000000000 [ 1648.934364][ T3347] R13: dffffc0000000000 R14: ffff8880764fa320 R15: dead000000000122 [ 1648.943394][ T3347] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1648.953365][ T3347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1648.962493][ T3347] CR2: 0000001b34d1eff8 CR3: 00000000678a1000 CR4: 00000000003506e0 [ 1648.973721][ T3347] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1648.984574][ T3347] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1648.993971][ T3347] Kernel panic - not syncing: Fatal exception [ 1649.000875][ T3347] Kernel Offset: disabled [ 1649.005610][ T3347] Rebooting in 86400 seconds..