last executing test programs: 15m56.984577954s ago: executing program 32 (id=385): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) io_uring_setup(0x2987, &(0x7f0000000240)={0x0, 0x40000000, 0x800, 0x4, 0x4}) 15m9.205443611s ago: executing program 33 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) 13m53.783031563s ago: executing program 34 (id=535): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) 13m27.019220231s ago: executing program 7 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a300000"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) 13m11.483400171s ago: executing program 35 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a300000"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) 12m26.148854646s ago: executing program 6 (id=663): r0 = socket$inet6(0xa, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0xb0, 0xc, 0x1000, 0x62344291e5a16f, @loopback, @mcast2, 0x7, 0x7800, 0xd, 0x25}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x55) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 12m24.712144704s ago: executing program 6 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 12m22.709966613s ago: executing program 6 (id=671): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$hidraw(r1, 0x0, 0x0) 12m19.422035659s ago: executing program 6 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x5, 0x1, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$media(0x0, 0x1, 0x8000) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) 12m15.230947661s ago: executing program 6 (id=685): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001600)=@newtfilter={0x2c, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000014c0), 0x3, 0x2) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x14444, &(0x7f0000001080)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRES8=r0], 0xfe, 0xc17, &(0x7f0000001180)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 12m11.786336199s ago: executing program 6 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) 11m56.608505132s ago: executing program 36 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) 10m54.636162799s ago: executing program 8 (id=818): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x56555958}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write(r0, &(0x7f0000000040)="240000001a005f3814f9dc07000904018000200000000000000000000800080040000000", 0x24) 10m53.318340028s ago: executing program 8 (id=820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1a00040, &(0x7f0000001a40)=ANY=[@ANYBLOB="756e695f786c6174653d302c696f636861727365743d6e6f6e652c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c6e6f6e756d7461696c3d302c696f636861727365743d63703835372c726f6469722c757466383d302c00189555df42b1141775c531868af55e17edbec4cd599f47b73182eec725af355530ad29f7141ad762a4152d5b834faac27b8f45cd8000cbb6242218cf85f70ab6631c21042a0bd43a925e9dbbed4656b9fd919fd84c7446724b9b9ff20b3fdad123ce3a7ad0a406"], 0x3, 0x350, &(0x7f0000000ac0)="$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") 10m47.66071161s ago: executing program 8 (id=827): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(0x0, 0x0, 0x0) 10m43.641249581s ago: executing program 8 (id=832): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m41.364231701s ago: executing program 8 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000c5030000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2081, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m39.941829567s ago: executing program 8 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7c) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) open(&(0x7f00000000c0)='.\x00', 0x40, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x4, 0x2, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 10m24.63103577s ago: executing program 37 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7c) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) open(&(0x7f00000000c0)='.\x00', 0x40, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x4, 0x2, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 9m2.728267185s ago: executing program 9 (id=1022): syz_emit_ethernet(0x46, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x10, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "716a01", 0x0, "cc1978"}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8m54.678773686s ago: executing program 9 (id=1036): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$mice(0xffffffffffffff9c, 0x0, 0x82) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @private0, @loopback, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0xa, 0x0, &(0x7f0000000080)) r3 = getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x59c, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5710, 0x80}) 8m51.855532117s ago: executing program 9 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x14, r1, 0x6a98047402e98331, 0x0, 0x80000, {0x15}}, 0x14}}, 0x4880) 8m51.714430288s ago: executing program 9 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES64], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e22}}) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 8m50.455911172s ago: executing program 9 (id=1045): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff0802030109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m47.211273634s ago: executing program 9 (id=1052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7c) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x4, 0x2, 0x0, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 8m31.578184141s ago: executing program 38 (id=1052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7c) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x4, 0x2, 0x0, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 2m52.836893556s ago: executing program 5 (id=1833): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) 2m52.556756807s ago: executing program 5 (id=1834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$mice(0xffffffffffffff9c, 0x0, 0x82) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getpid() r1 = getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m46.2268766s ago: executing program 5 (id=1847): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m41.307418588s ago: executing program 5 (id=1855): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@minixdf}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4ba, &(0x7f0000002cc0)="$eJzs3cFvVFsZAPDv3nZoKYUWZaFGBRFFQ5hpB2gIK9xoDCExElcuoLZD03Sm03SmSCuL8j+YSOJK/wQXJi5MWLl3pzs3uDBBJRr6kreYl3tnWkrptH2P0iGd3y+5uefcMzPfd5jcc4bTdk4AfetCRKxHxImIeBARY53rSeeI2+0je9zrV09mNl49mUmi1br3nyRvz67FtueknXL2msMR8dMfRfwieTduY3VtYbparSx36qVmbanUWF27Ol+bnqvMVRbL5anJqYmb126UD62v52t/ePnD+Ts/+/OfvvHir+vf/1WW1minbXs/DlO764WtOJnBiLjzIYL1wECnPyd6nQhfSHa/fikiLub3/1gM5O8mAHCctVpj0RrbXn9jcEcdADge0nwNLEmLnbWA0UjTYjHiVESci5G0Wm80rzysryzOttfKxqOQPpyvViY6a4XjUUiy+mReflMv76hfi4izEfHroZN5vThTr8728oMPAPSxUzvm//8Pted/AOCYG+51AgDAkTP/A0D/Mf8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNAX/nJ3bvZ0drofP/17KPVlYX6o6uzlcZCsbYyU5ypLy8V5+r1ufw7e2r7vV61Xl+avB4rj0vNSqNZaqyu3a/VVxab9/Pv9b5fKRxJrwCAvZw9//zvSUSs3zqZH7FtLwdzNRxvaa8TAHpmoNcJAD1jty/oX/6PD+yyRe9buv6K0LPDzwU4Gpe/av0f+pX1f+hf1v+hf1n/h/7VaiX2+AeAPmONH/DzfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj8RvMjSYudvcBHI02LxYjTETEeheThfLUyERFnIuJvQ4WhrD7Z66QBgPeU/ivp7P91eezS6M7WE8knQ/k5In7523u/eTzdbC5PZtf/u3W9+axzvdyL/AGA/WzO05vz+KbXr57MbB5Hmc/LH7Q3F83ibnSOdstgDObn4ShExMj/kk69Lfu8MnAI8defRsRXdut/kq+NjHd2Pt0ZP4t9+kjjp2/FT/O29jn7t/jyIeQC/eZ5Nv7c3u3+S+NCft79/h/OR6j3tzn+bbwz/qVb499Al/HvwkFjXP/Lj7u2PY342uBu8ZOt+EmX+JcOGP8fX//mxW5trd9FXI7d42+PVWrWlkqN1bWr87XpucpcZbFcnpqcmrh57Ua5lK9RlzZXqt/171tXzuzV/5Eu8Yf36f93Dtj/33/64Off2iP+9769+/t/bo/42Zz43QPGnx75Y9ftu7P4s136v9/7f+WA8V/8c232gA8FAI5AY3VtYbparSwr9Kgw8HGkobB/IbthPoI0DloovNfTez0yAR/am5u+15kAAAAAAAAAAAAAAADdHMVfI/W6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxfnwUAAP//pQ3SzQ==") ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0xd23, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xf}, {0x8}}}, 0x24}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8000, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}, 0x2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x69a1, &(0x7f00000005c0)={0x0, 0x80a5, 0x8000, 0x0, 0x279}, 0x0, &(0x7f0000000440)) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) 2m38.049312012s ago: executing program 5 (id=1859): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$mice(0xffffffffffffff9c, 0x0, 0x82) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @private0, @loopback, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = getpid() prlimit64(r2, 0xa, 0x0, &(0x7f0000000080)) r3 = getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x59c, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5710, 0x80}) 2m33.12332317s ago: executing program 5 (id=1869): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000040)) r1 = syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x5, 0x30e, &(0x7f0000000900)="$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") socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000052000000040000c667a5da5ad69753d400f2000800"/35], 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat(r1, 0x0, 0x400080, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00') 2m16.973692927s ago: executing program 39 (id=1869): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000040)) r1 = syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x5, 0x30e, &(0x7f0000000900)="$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") socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000052000000040000c667a5da5ad69753d400f2000800"/35], 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat(r1, 0x0, 0x400080, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00') 16.609619278s ago: executing program 1 (id=2318): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 11.254980969s ago: executing program 2 (id=2336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0xc, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80004000}]}}]}, 0x38}}, 0x0) 10.465532918s ago: executing program 2 (id=2340): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r0, 0x0, 0x0) 9.301468304s ago: executing program 4 (id=2342): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.517268473s ago: executing program 1 (id=2345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000840)={r4, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 8.172954739s ago: executing program 1 (id=2347): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) mount$afs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x2210022, &(0x7f0000000440)={[{@flock_local}, {@flock_write}, {@flock_local}]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=@tcp=r1}, 0x20) sendmmsg$inet(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0007030000000000000000070000", @ANYRES32], 0x28}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) 8.166008239s ago: executing program 4 (id=2348): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, 0x0, 0x0) close(r1) 8.042719658s ago: executing program 0 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0xc, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80004000}]}}]}, 0x38}}, 0x0) 7.204433651s ago: executing program 4 (id=2351): socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r1}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) 7.106998318s ago: executing program 1 (id=2352): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000040)) r1 = syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x5, 0x30e, &(0x7f0000000900)="$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") socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000052000000040000c667a5da5ad69753d400f2000800"/35], 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat(r1, 0x0, 0x400080, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00') poll(&(0x7f0000000140)=[{r5, 0x19f23}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.877505836s ago: executing program 0 (id=2353): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 5.520904797s ago: executing program 0 (id=2354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x82) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getpid() r1 = getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 4.498431844s ago: executing program 1 (id=2355): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 4.489743464s ago: executing program 4 (id=2356): r0 = socket(0xa, 0x3, 0x3a) creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x5b) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='i2c_read\x00', r2, 0x0, 0x1}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r8, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x800) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000fc0)="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", 0x1000, 0x8000, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x64a, r3, &(0x7f0000000440)="764daa9a65f8321ab881522844a4bfec644dd88abe856e0ba24adff64c1111c52b007886b0dca7a968eb1a0aff2fe2682d4ce101b78ea66b9f398d7fe50dde107f1e624d8c", 0x45, 0x4, 0x0, 0x2, r6}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDADDIO(r9, 0x4b34, 0x7) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020540af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000308050000ea000000000000050000000500030021000000240004"], 0x48}}, 0x40) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 4.044658947s ago: executing program 3 (id=2358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x4, 0x0, 0x1}}, 0x2e) 3.649557967s ago: executing program 3 (id=2359): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x474c, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x1f, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.358901109s ago: executing program 3 (id=2360): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.249007407s ago: executing program 4 (id=2361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, 0x0, &(0x7f0000000a40)=@tcp6=r0}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0) shutdown(r0, 0x0) 2.848938717s ago: executing program 4 (id=2362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = open(0x0, 0x145142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(0x0, 0x100000000000600d, 0x1) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='nodiscard,lazytime,acl,background_gc=off,inline_xattr,disable_roll_forward,data_flush,flush_merge,noflush_merge,lazytime,fsync_mode=strict,no_heap,jqfm\a\x00vfsold,nobarrier,nolazytime,active_logs=4,heap,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") 2.67770099s ago: executing program 2 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0xc, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80004000}]}}]}, 0x38}}, 0x0) 1.902140228s ago: executing program 2 (id=2364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) 1.87067138s ago: executing program 0 (id=2365): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001300)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') io_submit(0x0, 0x0, &(0x7f00000000c0)) io_getevents(0x0, 0x3, 0x5, &(0x7f0000001140)=[{}, {}, {}, {}, {}], &(0x7f0000001200)={0x0, 0x3938700}) ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1.73195778s ago: executing program 3 (id=2366): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 1.573089882s ago: executing program 2 (id=2367): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x5d, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 502.380852ms ago: executing program 0 (id=2368): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x100}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0xddd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x490}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 373.126872ms ago: executing program 3 (id=2369): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffad, 0x400c4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 271.78726ms ago: executing program 2 (id=2370): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r2) 186.835496ms ago: executing program 0 (id=2371): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xf0}, 0x1, 0x0, 0x0, 0x4c004}, 0x200000d0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'veth0_to_hsr\x00', @local}) bind$inet6(r1, &(0x7f0000000640)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0xf0}}, 0x28008004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 85.352194ms ago: executing program 3 (id=2372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @remote, 0xc}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 0s ago: executing program 1 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000}, 0x4000810) kernel console output (not intermixed with test programs): USB device number 7 using dummy_hcd [ 660.902626][ T5382] usb 6-1: Using ep0 maxpacket: 8 [ 660.905114][ T5382] usb 6-1: no configurations [ 660.905170][ T5382] usb 6-1: can't read configurations, error -22 [ 661.073083][ T5382] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 661.363394][ T5382] usb 6-1: Using ep0 maxpacket: 8 [ 661.369478][ T5382] usb 6-1: no configurations [ 661.416068][ T5382] usb 6-1: can't read configurations, error -22 [ 661.458262][ T5382] usb usb6-port1: attempt power cycle [ 661.902371][ T5382] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 661.953100][ T5382] usb 6-1: Using ep0 maxpacket: 8 [ 661.968902][ T5382] usb 6-1: no configurations [ 661.991706][ T5382] usb 6-1: can't read configurations, error -22 [ 662.073724][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1008'. [ 662.172796][ T5382] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 662.233939][ T5382] usb 6-1: Using ep0 maxpacket: 8 [ 662.245249][ T5382] usb 6-1: no configurations [ 662.269724][ T5382] usb 6-1: can't read configurations, error -22 [ 662.312881][ T5382] usb usb6-port1: unable to enumerate USB device [ 663.936958][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1013'. [ 663.958210][ T4438] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 663.983554][ T4438] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 664.372407][ T4436] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 664.572382][ T4436] usb 4-1: Using ep0 maxpacket: 16 [ 664.884251][ T4436] usb 4-1: config 0 has no interfaces? [ 664.889810][ T4436] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 664.899555][ T4436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.911873][ T4436] usb 4-1: config 0 descriptor?? [ 665.131504][ T4436] usb 4-1: USB disconnect, device number 2 [ 668.659516][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1023'. [ 671.992004][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 672.023640][ T4264] Bluetooth: hci3: command 0x0411 tx timeout [ 672.331627][ T9908] netlink: 'syz.5.1029': attribute type 10 has an invalid length. [ 674.338709][ T9928] loop5: detected capacity change from 0 to 512 [ 674.415678][ T9928] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 674.462457][ T9928] EXT4-fs (loop5): 1 truncate cleaned up [ 674.468331][ T9928] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 674.565836][ T26] audit: type=1800 audit(1739246492.573:274): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1032" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 675.671985][ T9943] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.758727][ T9943] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.787208][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 675.858569][ T9943] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.931525][ T9943] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.237428][ T4434] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 676.265788][ T4434] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 676.266791][ T9943] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.552541][ T4438] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 677.102710][ T4438] usb 4-1: Using ep0 maxpacket: 16 [ 677.117427][ T4438] usb 4-1: config 0 has no interfaces? [ 677.123512][ T4438] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 677.132703][ T4438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.157535][ T4438] usb 4-1: config 0 descriptor?? [ 677.321597][ T9943] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.375929][ T9943] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.396780][ T4438] usb 4-1: USB disconnect, device number 3 [ 677.470940][ T9943] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.240694][ T7298] EXT4-fs (loop5): unmounting filesystem. [ 679.137010][ T4438] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 679.267821][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1044'. [ 679.279999][ T9995] netlink: 'syz.4.1043': attribute type 10 has an invalid length. [ 679.442215][ T4438] usb 4-1: Using ep0 maxpacket: 8 [ 679.460518][ T4438] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.486965][ T4438] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 680.456214][ T4438] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 680.465579][ T4438] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 680.498985][ T4438] usb 4-1: Product: syz [ 680.509096][ T4438] usb 4-1: Manufacturer: syz [ 680.520562][ T4438] usb 4-1: SerialNumber: syz [ 680.534682][ T4438] usb 4-1: config 0 descriptor?? [ 680.832383][ T4436] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 681.012259][ T4436] usb 10-1: Using ep0 maxpacket: 8 [ 681.020337][ T4436] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.037523][ T4436] usb 10-1: config 0 has no interfaces? [ 681.047544][ T4436] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 681.063880][ T4436] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 681.079036][ T4436] usb 10-1: Product: syz [ 681.086945][ T4436] usb 10-1: Manufacturer: syz [ 681.092038][ T4436] usb 10-1: SerialNumber: syz [ 681.128215][ T4436] usb 10-1: config 0 descriptor?? [ 682.084166][ T5382] usb 4-1: USB disconnect, device number 4 [ 682.209446][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 682.430634][T10045] loop3: detected capacity change from 0 to 512 [ 683.410979][T10045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 683.450405][T10045] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.619905][ T4890] usb 10-1: USB disconnect, device number 11 [ 685.786022][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.799109][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 686.839851][T10096] kvm [10095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2100000f01 [ 686.905653][T10096] kvm [10095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x3000000a80 [ 687.194399][T10096] kvm [10095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7d00002321 [ 687.217952][T10096] kvm [10095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xea00002b30 [ 687.270204][T10096] kvm [10095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x17d00005b21 [ 687.329657][T10096] kvm [10095]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1ea00007330 [ 689.632387][ T7169] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 689.902245][ T7169] usb 4-1: Using ep0 maxpacket: 8 [ 689.925895][ T7169] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.982329][ T7169] usb 4-1: config 0 has no interfaces? [ 690.024977][ T7169] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 690.045610][ T7169] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 690.352969][ T7169] usb 4-1: Product: syz [ 690.392246][ T7169] usb 4-1: Manufacturer: syz [ 690.396939][ T7169] usb 4-1: SerialNumber: syz [ 690.420615][ T7169] usb 4-1: config 0 descriptor?? [ 693.342600][ T4890] usb 4-1: USB disconnect, device number 5 [ 699.583079][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 702.379267][T10242] loop2: detected capacity change from 0 to 512 [ 702.438926][T10242] EXT4-fs: Ignoring removed nobh option [ 702.476455][T10242] EXT4-fs (loop2): invalid first ino: 0 [ 703.420278][ T4264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 703.431122][ T4264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 703.445398][ T4264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 703.455276][ T4264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 703.464478][ T4264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 703.471924][ T4264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 703.993504][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 704.125894][T10257] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.242718][T10253] chnl_net:caif_netlink_parms(): no params data found [ 704.290587][T10257] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.487914][T10257] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.706079][T10257] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.737917][T10253] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.752782][T10253] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.786393][T10253] device bridge_slave_0 entered promiscuous mode [ 704.823026][T10253] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.847324][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.882456][T10253] device bridge_slave_1 entered promiscuous mode [ 705.073335][T10257] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.098194][T10253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.127583][T10257] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.163617][T10253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.184286][T10257] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.219437][T10257] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.279569][ T11] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.337824][T10253] team0: Port device team_slave_0 added [ 705.385087][T10253] team0: Port device team_slave_1 added [ 705.424011][ T11] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.542407][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 705.559384][ T11] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.622585][T10253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.635088][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.718677][T10253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.785535][ T11] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.963697][T10253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.971051][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.294206][T10253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.737978][T10253] device hsr_slave_0 entered promiscuous mode [ 706.767629][T10253] device hsr_slave_1 entered promiscuous mode [ 707.396189][ T26] audit: type=1326 audit(1739246525.423:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 707.456937][ T26] audit: type=1326 audit(1739246525.453:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 707.562630][ T26] audit: type=1326 audit(1739246525.453:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 707.622552][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 707.727932][ T26] audit: type=1326 audit(1739246525.453:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 707.852537][ T26] audit: type=1326 audit(1739246525.453:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 707.956846][ T26] audit: type=1326 audit(1739246525.453:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 708.015486][ T26] audit: type=1326 audit(1739246525.453:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 708.112405][ T26] audit: type=1326 audit(1739246525.453:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 708.135960][ T26] audit: type=1326 audit(1739246525.483:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 708.162760][ T4438] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 708.190959][ T26] audit: type=1326 audit(1739246525.483:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b478cde9 code=0x7ffc0000 [ 708.363901][ T4438] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.408629][T10320] loop3: detected capacity change from 0 to 256 [ 708.415042][ T4438] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 708.415076][ T4438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.508978][ T4438] usb 6-1: config 0 descriptor?? [ 708.526903][T10323] loop2: detected capacity change from 0 to 512 [ 708.550186][ T4438] pwc: Askey VC010 type 2 USB webcam detected. [ 708.580955][T10323] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 708.655273][T10323] EXT4-fs (loop2): 1 truncate cleaned up [ 708.686127][T10299] loop4: detected capacity change from 0 to 32768 [ 708.692589][T10323] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 709.201922][T10299] XFS (loop4): Mounting V5 Filesystem [ 709.224701][T10320] FAT-fs (loop3): Directory bread(block 64) failed [ 709.231838][T10320] FAT-fs (loop3): Directory bread(block 65) failed [ 709.241210][T10320] FAT-fs (loop3): Directory bread(block 66) failed [ 709.249093][T10320] FAT-fs (loop3): Directory bread(block 67) failed [ 709.256985][T10320] FAT-fs (loop3): Directory bread(block 68) failed [ 709.264661][ T4438] pwc: recv_control_msg error -32 req 02 val 2b00 [ 709.280644][T10320] FAT-fs (loop3): Directory bread(block 69) failed [ 709.311537][ T4438] pwc: recv_control_msg error -32 req 02 val 2700 [ 709.320983][ T4438] pwc: recv_control_msg error -32 req 02 val 2c00 [ 709.333204][ T4438] pwc: recv_control_msg error -32 req 04 val 1000 [ 709.343173][ T4438] pwc: recv_control_msg error -32 req 04 val 1300 [ 709.354182][ T4438] pwc: recv_control_msg error -32 req 04 val 1400 [ 709.362575][ T4438] pwc: recv_control_msg error -32 req 02 val 2000 [ 709.370122][ T4438] pwc: recv_control_msg error -32 req 02 val 2100 [ 709.377769][ T4438] pwc: recv_control_msg error -32 req 04 val 1500 [ 709.385655][ T4438] pwc: recv_control_msg error -32 req 02 val 2500 [ 709.393002][ T4438] pwc: recv_control_msg error -71 req 02 val 2400 [ 709.399961][ T4438] pwc: recv_control_msg error -71 req 02 val 2600 [ 709.407504][ T4438] pwc: recv_control_msg error -71 req 02 val 2900 [ 709.414826][ T4438] pwc: recv_control_msg error -71 req 02 val 2800 [ 709.421909][ T4438] pwc: recv_control_msg error -71 req 04 val 1100 [ 709.429387][ T4438] pwc: recv_control_msg error -71 req 04 val 1200 [ 709.447211][ T4438] pwc: Registered as video103. [ 709.451642][ T4513] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 709.468366][ T4438] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 709.478411][ T4513] XFS (loop4): Unmount and run xfs_repair [ 709.586291][T10320] FAT-fs (loop3): Directory bread(block 70) failed [ 709.594556][T10320] FAT-fs (loop3): Directory bread(block 71) failed [ 709.601463][ T4513] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 709.608963][ T4513] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 709.618025][ T4513] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 709.625395][T10320] FAT-fs (loop3): Directory bread(block 72) failed [ 709.633557][ T4513] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 709.633581][ T4513] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 709.633597][ T4513] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 709.633611][ T4513] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 709.633627][ T4513] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 709.682222][ T4513] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 709.691487][T10299] XFS (loop4): metadata I/O error in "xfs_read_agf+0x2e2/0x680" at daddr 0x1 len 1 error 74 [ 709.702335][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 709.711645][T10299] XFS (loop4): Error -117 reserving per-AG metadata reserve pool. [ 709.756421][T10299] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1d4/0x200 (fs/xfs/xfs_fsops.c:584). Shutting down filesystem. [ 709.779485][T10299] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 709.810363][T10320] FAT-fs (loop3): Directory bread(block 73) failed [ 709.817169][T10299] XFS (loop4): Ending clean mount [ 709.820401][ T4438] usb 6-1: USB disconnect, device number 11 [ 709.838960][T10299] XFS (loop4): Failed to initialize disk quotas. [ 711.120773][ T4253] XFS (loop4): Unmounting Filesystem [ 711.783009][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 711.916420][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 712.150655][T10253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 712.253535][T10253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 712.462264][ T4436] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 712.477318][T10253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 712.525153][T10253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.652694][T10350] loop5: detected capacity change from 0 to 32768 [ 712.666629][ T11] device hsr_slave_0 left promiscuous mode [ 712.667508][ T4436] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.690004][ T4436] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 712.700391][ T11] device hsr_slave_1 left promiscuous mode [ 712.701041][ T4436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.750093][ T4436] usb 3-1: config 0 descriptor?? [ 712.771634][ T4436] pwc: Askey VC010 type 2 USB webcam detected. [ 712.778266][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.802610][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.864193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.881043][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.888531][T10350] XFS (loop5): Mounting V5 Filesystem [ 712.912940][ T11] device bridge_slave_1 left promiscuous mode [ 712.921461][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.933676][ T11] device bridge_slave_0 left promiscuous mode [ 712.939986][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.976349][ T11] device veth1_macvtap left promiscuous mode [ 713.002055][ T11] device veth0_macvtap left promiscuous mode [ 713.020472][ T5382] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 713.038909][ T5382] XFS (loop5): Unmount and run xfs_repair [ 713.047876][ T5382] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 713.055595][ T5382] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 713.064700][ T5382] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 713.076330][ T5382] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 713.085787][ T11] device veth1_vlan left promiscuous mode [ 713.085951][ T5382] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 713.111997][ T5382] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 713.122868][ T11] device veth0_vlan left promiscuous mode [ 713.129631][ T5382] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 713.168378][ T5382] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 713.171296][ T4436] pwc: recv_control_msg error -32 req 02 val 2b00 [ 713.199383][ T5382] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 713.211758][ T4436] pwc: recv_control_msg error -32 req 02 val 2700 [ 713.240749][T10350] XFS (loop5): metadata I/O error in "xfs_read_agf+0x2e2/0x680" at daddr 0x1 len 1 error 74 [ 713.255668][ T4436] pwc: recv_control_msg error -32 req 02 val 2c00 [ 713.263182][ T4436] pwc: recv_control_msg error -32 req 04 val 1000 [ 713.264082][T10350] XFS (loop5): Error -117 reserving per-AG metadata reserve pool. [ 713.292831][ T4436] pwc: recv_control_msg error -32 req 04 val 1300 [ 713.323186][T10350] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1d4/0x200 (fs/xfs/xfs_fsops.c:584). Shutting down filesystem. [ 713.370584][T10350] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 713.445295][T10350] XFS (loop5): Ending clean mount [ 713.450820][T10350] XFS (loop5): Failed to initialize disk quotas. [ 713.490987][ T4436] pwc: recv_control_msg error -32 req 04 val 1400 [ 713.499060][ T4436] pwc: recv_control_msg error -32 req 02 val 2000 [ 713.506553][ T4436] pwc: recv_control_msg error -32 req 02 val 2100 [ 713.514169][ T4436] pwc: recv_control_msg error -32 req 04 val 1500 [ 713.522076][ T4436] pwc: recv_control_msg error -32 req 02 val 2500 [ 713.531760][ T4436] pwc: recv_control_msg error -71 req 02 val 2400 [ 713.538647][ T4436] pwc: recv_control_msg error -71 req 02 val 2600 [ 713.552557][ T4436] pwc: recv_control_msg error -71 req 02 val 2900 [ 713.562347][ T4436] pwc: recv_control_msg error -71 req 02 val 2800 [ 713.572254][ T4436] pwc: recv_control_msg error -71 req 04 val 1100 [ 713.582736][ T4436] pwc: recv_control_msg error -71 req 04 val 1200 [ 713.590523][ T4436] pwc: Registered as video103. [ 713.596676][ T4436] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 713.617220][ T4436] usb 3-1: USB disconnect, device number 9 [ 714.642290][ T7298] XFS (loop5): Unmounting Filesystem [ 717.126824][ T11] team0 (unregistering): Port device team_slave_1 removed [ 717.397830][ T11] team0 (unregistering): Port device team_slave_0 removed [ 717.578641][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.805117][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.936489][ T11] bond0 (unregistering): Released all slaves [ 721.045602][T10428] netlink: 'syz.5.1107': attribute type 10 has an invalid length. [ 721.067816][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 721.920452][T10464] loop4: detected capacity change from 0 to 512 [ 721.980021][T10464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 722.530217][T10464] EXT4-fs (loop4): 1 truncate cleaned up [ 722.555913][T10464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 722.558239][T10253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.650843][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 722.650860][ T26] audit: type=1800 audit(1739246540.673:308): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1114" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 722.681046][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 722.778659][T10472] loop5: detected capacity change from 0 to 256 [ 722.796557][T10253] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.903354][T10468] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.955216][T10472] FAT-fs (loop5): Directory bread(block 64) failed [ 722.961875][T10472] FAT-fs (loop5): Directory bread(block 65) failed [ 722.969889][T10472] FAT-fs (loop5): Directory bread(block 66) failed [ 722.976891][T10472] FAT-fs (loop5): Directory bread(block 67) failed [ 722.984284][T10472] FAT-fs (loop5): Directory bread(block 68) failed [ 722.991594][T10472] FAT-fs (loop5): Directory bread(block 69) failed [ 722.999143][T10472] FAT-fs (loop5): Directory bread(block 70) failed [ 723.006152][T10472] FAT-fs (loop5): Directory bread(block 71) failed [ 723.013812][T10472] FAT-fs (loop5): Directory bread(block 72) failed [ 723.020726][T10472] FAT-fs (loop5): Directory bread(block 73) failed [ 723.286424][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 723.297119][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 723.345004][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 723.582493][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.633909][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.641025][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.706873][T10468] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.882906][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 724.647107][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 724.678604][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.708931][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.716126][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.746511][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 724.775938][T10468] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.933923][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.972851][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 725.865740][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 725.875822][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 725.950153][T10253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 726.040047][T10253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.068522][T10468] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.207704][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 726.219945][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 726.239182][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 727.201746][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 727.241446][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 727.372045][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 727.412925][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 727.481346][T10468] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.494777][T10509] loop3: detected capacity change from 0 to 512 [ 727.560907][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 727.621231][T10509] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 727.666342][T10509] EXT4-fs (loop3): 1 truncate cleaned up [ 727.666375][T10509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 727.674522][T10468] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.687030][ T26] audit: type=1800 audit(1739246545.713:309): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 728.043776][T10468] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.047821][T10468] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.780036][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 729.910464][ T7171] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 730.130121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 730.162831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 730.194012][ T7171] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.226701][ T7171] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 730.232925][T10253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.628361][ T7171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.032975][ T7171] usb 6-1: config 0 descriptor?? [ 731.088831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 731.111914][ T7171] pwc: Askey VC010 type 2 USB webcam detected. [ 731.132781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 731.240244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 731.271039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 731.325708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 731.407603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 731.857675][ T7171] pwc: recv_control_msg error -32 req 02 val 2b00 [ 731.884287][ T7171] pwc: recv_control_msg error -32 req 02 val 2700 [ 731.900172][T10253] device veth0_vlan entered promiscuous mode [ 731.935838][ T7171] pwc: recv_control_msg error -32 req 02 val 2c00 [ 731.953686][ T7171] pwc: recv_control_msg error -32 req 04 val 1000 [ 731.966728][ T7171] pwc: recv_control_msg error -32 req 04 val 1300 [ 731.993277][ T7171] pwc: recv_control_msg error -32 req 04 val 1400 [ 732.008080][T10253] device veth1_vlan entered promiscuous mode [ 732.166329][ T7171] pwc: recv_control_msg error -32 req 02 val 2000 [ 732.173907][ T7171] pwc: recv_control_msg error -32 req 02 val 2100 [ 732.192380][ T7171] pwc: recv_control_msg error -32 req 04 val 1500 [ 732.221146][ T7171] pwc: recv_control_msg error -32 req 02 val 2500 [ 733.004828][ T7171] pwc: recv_control_msg error -71 req 02 val 2400 [ 733.023163][ T7171] pwc: recv_control_msg error -71 req 02 val 2600 [ 733.033152][ T7171] pwc: recv_control_msg error -71 req 02 val 2900 [ 733.062956][ T7171] pwc: recv_control_msg error -71 req 02 val 2800 [ 733.070790][ T7171] pwc: recv_control_msg error -71 req 04 val 1100 [ 733.088174][ T7171] pwc: recv_control_msg error -71 req 04 val 1200 [ 733.116735][ T7171] pwc: Registered as video103. [ 733.130562][ T7171] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 733.186635][T10253] device veth0_macvtap entered promiscuous mode [ 733.217634][ T7171] usb 6-1: USB disconnect, device number 12 [ 733.253619][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 733.291326][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 733.325362][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 733.603443][T10253] device veth1_macvtap entered promiscuous mode [ 735.134029][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.208919][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.247452][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.460360][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.560067][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.566315][T10571] loop3: detected capacity change from 0 to 256 [ 736.832236][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.594284][T10578] loop5: detected capacity change from 0 to 8192 [ 738.020428][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.544676][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.635485][T10253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.805815][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 738.859274][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 738.878208][ T3624] loop5: p1 p2[DM] p4 [ 738.882994][ T3624] loop5: p1 size 196608 extends beyond EOD, truncated [ 740.012581][T10586] loop2: detected capacity change from 0 to 8192 [ 740.265532][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.324360][ T3624] loop5: p2 start 4292936063 is beyond EOD, truncated [ 740.331201][ T3624] loop5: p4 size 50331648 extends beyond EOD, truncated [ 740.408665][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.425765][T10571] FAT-fs (loop3): Directory bread(block 64) failed [ 740.449311][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.449462][T10571] FAT-fs (loop3): Directory bread(block 65) failed [ 740.486249][T10571] FAT-fs (loop3): Directory bread(block 66) failed [ 740.502707][T10571] FAT-fs (loop3): Directory bread(block 67) failed [ 740.522176][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.530731][T10571] FAT-fs (loop3): Directory bread(block 68) failed [ 740.540741][T10571] FAT-fs (loop3): Directory bread(block 69) failed [ 740.558768][T10571] FAT-fs (loop3): Directory bread(block 70) failed [ 740.575308][T10571] FAT-fs (loop3): Directory bread(block 71) failed [ 740.589658][T10571] FAT-fs (loop3): Directory bread(block 72) failed [ 740.592314][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.609322][T10571] FAT-fs (loop3): Directory bread(block 73) failed [ 740.670797][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.694082][ T3624] loop2: p1 p2[DM] p4 [ 740.701223][ T3624] loop2: p1 size 196608 extends beyond EOD, truncated [ 740.708227][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.724010][ T3624] loop2: p2 start 4292936063 is beyond EOD, truncated [ 740.730869][ T3624] loop2: p4 size 50331648 extends beyond EOD, truncated [ 740.740182][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.767615][T10253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.803540][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'. [ 740.818671][ T9961] udevd[9961]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 740.835285][ T7638] udevd[7638]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 740.852488][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 740.867871][ T7490] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 740.910969][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 740.952838][ T7638] udevd[7638]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 740.966543][ T7490] udevd[7490]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 741.013452][T10253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.054463][T10253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.102282][T10253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.576478][T10253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.787189][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.787277][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.791762][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 741.847022][T10610] loop3: detected capacity change from 0 to 512 [ 741.849799][T10610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 742.063499][T10610] EXT4-fs (loop3): 1 truncate cleaned up [ 742.063535][T10610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 742.262626][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.262689][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.265886][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 744.607542][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 746.130744][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 747.225729][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.471612][T10652] loop1: detected capacity change from 0 to 512 [ 751.100417][T10652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 751.230459][T10652] EXT4-fs (loop1): 1 truncate cleaned up [ 751.422311][T10652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 751.857749][T10666] loop3: detected capacity change from 0 to 8192 [ 752.754677][ T3624] loop3: p1 p2[DM] p4 [ 752.758976][ T3624] loop3: p1 size 196608 extends beyond EOD, truncated [ 753.221470][ T3624] loop3: p2 start 4292936063 is beyond EOD, truncated [ 753.286150][ T3624] loop3: p4 size 50331648 extends beyond EOD, truncated [ 753.725340][ T9961] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 753.816655][ T7638] udevd[7638]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 753.859757][ T9961] udevd[9961]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 753.943577][T10253] EXT4-fs (loop1): unmounting filesystem. [ 754.709147][T10688] loop3: detected capacity change from 0 to 512 [ 755.197242][T10688] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 755.230130][T10688] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.259914][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 758.568812][T10711] loop3: detected capacity change from 0 to 512 [ 758.599796][T10711] EXT4-fs: Ignoring removed nobh option [ 758.649483][T10711] EXT4-fs (loop3): invalid first ino: 0 [ 760.024000][T10719] loop2: detected capacity change from 0 to 256 [ 761.630227][T10727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.741644][ T4434] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 761.944123][ T4434] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.965153][ T4434] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 761.975391][T10719] FAT-fs (loop2): Directory bread(block 64) failed [ 761.987325][ T4434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.995645][T10719] FAT-fs (loop2): Directory bread(block 65) failed [ 762.003201][ T4434] usb 6-1: config 0 descriptor?? [ 762.015960][ T4434] pwc: Askey VC010 type 2 USB webcam detected. [ 762.021717][T10727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.050788][T10719] FAT-fs (loop2): Directory bread(block 66) failed [ 762.060757][T10719] FAT-fs (loop2): Directory bread(block 67) failed [ 762.080780][T10719] FAT-fs (loop2): Directory bread(block 68) failed [ 762.100770][T10719] FAT-fs (loop2): Directory bread(block 69) failed [ 762.130764][T10719] FAT-fs (loop2): Directory bread(block 70) failed [ 762.140757][T10719] FAT-fs (loop2): Directory bread(block 71) failed [ 762.153167][T10719] FAT-fs (loop2): Directory bread(block 72) failed [ 762.160794][T10719] FAT-fs (loop2): Directory bread(block 73) failed [ 762.340152][T10727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.420023][ T4434] pwc: recv_control_msg error -32 req 02 val 2b00 [ 762.432526][ T4434] pwc: recv_control_msg error -32 req 02 val 2700 [ 762.453586][ T4434] pwc: recv_control_msg error -32 req 02 val 2c00 [ 762.477347][ T4434] pwc: recv_control_msg error -32 req 04 val 1000 [ 762.510236][ T4434] pwc: recv_control_msg error -32 req 04 val 1300 [ 762.524201][T10727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.560182][ T4434] pwc: recv_control_msg error -32 req 04 val 1400 [ 762.587123][ T4434] pwc: recv_control_msg error -32 req 02 val 2000 [ 762.616885][ T4434] pwc: recv_control_msg error -32 req 02 val 2100 [ 762.636249][ T4434] pwc: recv_control_msg error -32 req 04 val 1500 [ 762.898982][ T4434] pwc: recv_control_msg error -71 req 02 val 2400 [ 762.919537][ T4434] pwc: recv_control_msg error -71 req 02 val 2600 [ 762.951502][ T4434] pwc: recv_control_msg error -71 req 02 val 2900 [ 762.977990][ T4434] pwc: recv_control_msg error -71 req 02 val 2800 [ 762.992374][ T4434] pwc: recv_control_msg error -71 req 04 val 1100 [ 763.000478][ T4434] pwc: recv_control_msg error -71 req 04 val 1200 [ 763.070395][ T4434] pwc: Registered as video103. [ 763.076581][ T4434] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 763.117989][ T4434] usb 6-1: USB disconnect, device number 13 [ 763.406861][T10727] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.458353][T10727] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.823770][T10727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.150865][T10727] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.218576][T10765] loop5: detected capacity change from 0 to 512 [ 764.425192][T10765] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 764.446330][T10765] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.776319][T10778] loop3: detected capacity change from 0 to 8192 [ 766.070593][ T3624] loop3: p1 p2[DM] p4 [ 766.092493][ T3624] loop3: p1 size 196608 extends beyond EOD, truncated [ 766.119974][ T7298] EXT4-fs (loop5): unmounting filesystem. [ 766.144492][ T3624] loop3: p2 start 4292936063 is beyond EOD, truncated [ 766.191935][ T3624] loop3: p4 size 50331648 extends beyond EOD, truncated [ 767.445295][T10792] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.680248][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 769.424186][T10792] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.557710][T10792] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.687041][T10792] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.772568][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 773.965497][T10792] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.028622][T10792] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.387423][T10792] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.619996][T10792] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.090792][ T4705] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 777.905120][ T4705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.985671][ T4705] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 778.012585][ T4705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.024472][ T4705] usb 2-1: config 0 descriptor?? [ 778.086439][ T4705] pwc: Askey VC010 type 2 USB webcam detected. [ 778.169162][T10865] loop5: detected capacity change from 0 to 256 [ 778.536518][ T4705] pwc: send_video_command error -71 [ 778.545600][ T4705] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 778.604990][ T4705] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 778.648526][ T4705] usb 2-1: USB disconnect, device number 2 [ 778.878310][T10865] FAT-fs (loop5): Directory bread(block 64) failed [ 779.822370][T10865] FAT-fs (loop5): Directory bread(block 65) failed [ 780.100302][T10865] FAT-fs (loop5): Directory bread(block 66) failed [ 781.082001][T10865] FAT-fs (loop5): Directory bread(block 67) failed [ 781.154073][T10865] FAT-fs (loop5): Directory bread(block 68) failed [ 781.161205][T10865] FAT-fs (loop5): Directory bread(block 69) failed [ 781.180934][T10865] FAT-fs (loop5): Directory bread(block 70) failed [ 781.345041][T10885] loop1: detected capacity change from 0 to 256 [ 781.549151][T10865] FAT-fs (loop5): Directory bread(block 71) failed [ 781.559888][T10865] FAT-fs (loop5): Directory bread(block 72) failed [ 781.653919][T10865] FAT-fs (loop5): Directory bread(block 73) failed [ 781.751835][T10885] FAT-fs (loop1): Directory bread(block 64) failed [ 781.801146][T10885] FAT-fs (loop1): Directory bread(block 65) failed [ 781.819358][T10885] FAT-fs (loop1): Directory bread(block 66) failed [ 781.920569][T10885] FAT-fs (loop1): Directory bread(block 67) failed [ 782.428221][T10885] FAT-fs (loop1): Directory bread(block 68) failed [ 782.468535][T10885] FAT-fs (loop1): Directory bread(block 69) failed [ 783.042414][T10885] FAT-fs (loop1): Directory bread(block 70) failed [ 783.059350][T10885] FAT-fs (loop1): Directory bread(block 71) failed [ 783.076642][T10885] FAT-fs (loop1): Directory bread(block 72) failed [ 783.115216][T10885] FAT-fs (loop1): Directory bread(block 73) failed [ 783.820027][T10916] loop1: detected capacity change from 0 to 512 [ 783.848596][T10916] EXT4-fs: Ignoring removed nobh option [ 783.889482][T10916] EXT4-fs (loop1): invalid first ino: 0 [ 793.291161][T10994] loop3: detected capacity change from 0 to 512 [ 793.298498][T10994] EXT4-fs: Ignoring removed nobh option [ 793.407881][T10994] EXT4-fs (loop3): invalid first ino: 0 [ 795.382530][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 796.040634][T11016] loop3: detected capacity change from 0 to 8192 [ 796.757375][ T3624] loop3: p1 p2[DM] p4 [ 796.814614][ T3624] loop3: p1 size 196608 extends beyond EOD, truncated [ 796.839784][ T3624] loop3: p2 start 4292936063 is beyond EOD, truncated [ 796.892273][ T3624] loop3: p4 size 50331648 extends beyond EOD, truncated [ 797.081762][T11023] bridge0: port 3(gretap0) entered blocking state [ 797.090251][T11023] bridge0: port 3(gretap0) entered disabled state [ 797.099403][T11023] device gretap0 entered promiscuous mode [ 797.107092][T11023] bridge0: port 3(gretap0) entered blocking state [ 797.114224][T11023] bridge0: port 3(gretap0) entered forwarding state [ 798.648397][T11027] loop3: detected capacity change from 0 to 256 [ 798.865327][ T9961] udevd[9961]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 798.919921][ T7638] udevd[7638]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 798.941688][T11027] FAT-fs (loop3): Directory bread(block 64) failed [ 798.963393][T11027] FAT-fs (loop3): Directory bread(block 65) failed [ 798.976474][T11035] loop4: detected capacity change from 0 to 512 [ 799.010647][T11035] EXT4-fs: Ignoring removed nobh option [ 799.011060][T11027] FAT-fs (loop3): Directory bread(block 66) failed [ 799.041505][T11035] EXT4-fs (loop4): invalid first ino: 0 [ 799.202547][T11027] FAT-fs (loop3): Directory bread(block 67) failed [ 799.211923][T11027] FAT-fs (loop3): Directory bread(block 68) failed [ 799.243767][T11027] FAT-fs (loop3): Directory bread(block 69) failed [ 799.352470][ T4705] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 799.394441][T11027] FAT-fs (loop3): Directory bread(block 70) failed [ 799.421923][T11027] FAT-fs (loop3): Directory bread(block 71) failed [ 799.430142][T11027] FAT-fs (loop3): Directory bread(block 72) failed [ 799.442163][T11027] FAT-fs (loop3): Directory bread(block 73) failed [ 799.732384][ T4705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.763747][ T4705] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 799.854822][ T4705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.958261][ T4705] usb 3-1: config 0 descriptor?? [ 800.018559][ T4705] pwc: Askey VC010 type 2 USB webcam detected. [ 800.402629][ T4705] pwc: recv_control_msg error -32 req 02 val 2b00 [ 800.415057][ T4705] pwc: recv_control_msg error -32 req 02 val 2700 [ 800.447465][ T4705] pwc: recv_control_msg error -32 req 02 val 2c00 [ 800.559141][ T4705] pwc: recv_control_msg error -32 req 04 val 1000 [ 800.612852][ T4705] pwc: recv_control_msg error -32 req 04 val 1300 [ 800.630648][ T4705] pwc: recv_control_msg error -32 req 04 val 1400 [ 800.994021][ T4705] pwc: recv_control_msg error -32 req 02 val 2000 [ 801.177055][ T4705] pwc: recv_control_msg error -32 req 02 val 2100 [ 801.189243][ T4705] pwc: recv_control_msg error -32 req 04 val 1500 [ 801.733077][T11058] loop3: detected capacity change from 0 to 8192 [ 802.257316][ T3624] loop3: p1 p2[DM] p4 [ 802.261713][ T3624] loop3: p1 size 196608 extends beyond EOD, truncated [ 802.343548][ T3624] loop3: p2 start 4292936063 is beyond EOD, truncated [ 802.356177][ T3624] loop3: p4 size 50331648 extends beyond EOD, truncated [ 802.408768][ T4705] pwc: recv_control_msg error -71 req 02 val 2400 [ 802.878205][ T4705] pwc: recv_control_msg error -71 req 02 val 2600 [ 802.893723][ T4705] pwc: recv_control_msg error -71 req 02 val 2900 [ 802.902776][ T4705] pwc: recv_control_msg error -71 req 02 val 2800 [ 802.910090][ T4705] pwc: recv_control_msg error -71 req 04 val 1100 [ 802.921849][ T4705] pwc: recv_control_msg error -71 req 04 val 1200 [ 802.973039][ T4705] pwc: Registered as video103. [ 802.979479][ T4705] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 803.108888][ T4705] usb 3-1: USB disconnect, device number 10 [ 803.156822][ T9961] udevd[9961]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 803.185228][ T7638] udevd[7638]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 803.558489][T11072] bridge0: port 3(gretap0) entered blocking state [ 803.565093][T11072] bridge0: port 3(gretap0) entered disabled state [ 803.573046][T11072] device gretap0 entered promiscuous mode [ 803.579261][T11072] bridge0: port 3(gretap0) entered blocking state [ 803.585805][T11072] bridge0: port 3(gretap0) entered forwarding state [ 806.686803][T11085] kvm [11084]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb400000001 [ 808.683106][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.658865][T11147] loop5: detected capacity change from 0 to 256 [ 812.005908][T11147] FAT-fs (loop5): Directory bread(block 64) failed [ 812.030190][T11147] FAT-fs (loop5): Directory bread(block 65) failed [ 812.065444][T11147] FAT-fs (loop5): Directory bread(block 66) failed [ 812.071997][T11147] FAT-fs (loop5): Directory bread(block 67) failed [ 812.126120][T11147] FAT-fs (loop5): Directory bread(block 68) failed [ 812.148539][T11147] FAT-fs (loop5): Directory bread(block 69) failed [ 812.163610][T11147] FAT-fs (loop5): Directory bread(block 70) failed [ 812.178660][T11147] FAT-fs (loop5): Directory bread(block 71) failed [ 812.205977][T11147] FAT-fs (loop5): Directory bread(block 72) failed [ 812.218024][T11147] FAT-fs (loop5): Directory bread(block 73) failed [ 813.055510][T11163] bridge0: port 3(gretap0) entered blocking state [ 813.062307][T11163] bridge0: port 3(gretap0) entered disabled state [ 813.069937][T11163] device gretap0 entered promiscuous mode [ 813.076355][T11163] bridge0: port 3(gretap0) entered blocking state [ 813.082929][T11163] bridge0: port 3(gretap0) entered forwarding state [ 813.096789][T11163] device gretap0 left promiscuous mode [ 813.102594][T11163] bridge0: port 3(gretap0) entered disabled state [ 815.190464][T11165] kvm [11164]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb400000001 [ 815.212390][T11165] kvm [11164]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb400004001 [ 815.304582][T11178] loop5: detected capacity change from 0 to 512 [ 815.337123][T11178] EXT4-fs: Ignoring removed nobh option [ 815.370776][T11178] EXT4-fs (loop5): invalid first ino: 0 [ 816.330351][T11192] loop3: detected capacity change from 0 to 256 [ 817.664953][T11192] FAT-fs (loop3): Directory bread(block 64) failed [ 817.682309][T11192] FAT-fs (loop3): Directory bread(block 65) failed [ 817.948561][T11192] FAT-fs (loop3): Directory bread(block 66) failed [ 817.970195][T11205] loop1: detected capacity change from 0 to 64 [ 818.244258][T11192] FAT-fs (loop3): Directory bread(block 67) failed [ 818.287165][T11192] FAT-fs (loop3): Directory bread(block 68) failed [ 818.771661][T11192] FAT-fs (loop3): Directory bread(block 69) failed [ 818.976415][T11192] FAT-fs (loop3): Directory bread(block 70) failed [ 819.002312][T11192] FAT-fs (loop3): Directory bread(block 71) failed [ 819.022433][T11192] FAT-fs (loop3): Directory bread(block 72) failed [ 819.086026][T11214] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 819.099637][T11214] Error parsing options; rc = [-22] [ 820.432960][T11192] FAT-fs (loop3): Directory bread(block 73) failed [ 821.750863][T11223] netlink: 'syz.4.1259': attribute type 1 has an invalid length. [ 822.924552][T11223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 823.501057][T11241] loop5: detected capacity change from 0 to 512 [ 823.528023][T11241] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 823.617024][T11241] EXT4-fs (loop5): 1 truncate cleaned up [ 823.628979][T11241] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 825.586522][T11255] loop4: detected capacity change from 0 to 512 [ 825.615651][T11258] loop3: detected capacity change from 0 to 512 [ 825.659187][T11255] EXT4-fs: Ignoring removed nobh option [ 825.713043][T11255] EXT4-fs (loop4): invalid first ino: 0 [ 825.951071][T11258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 826.133557][T11258] EXT4-fs (loop3): 1 truncate cleaned up [ 826.142994][T11258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 826.168618][ T26] audit: type=1800 audit(1739246644.193:310): pid=11258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1264" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 826.902899][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 827.551913][ T7298] EXT4-fs (loop5): unmounting filesystem. [ 827.696972][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 828.533851][T11282] loop1: detected capacity change from 0 to 8192 [ 829.092302][ T3624] loop1: p1 p2[DM] p4 [ 829.096750][ T3624] loop1: p1 size 196608 extends beyond EOD, truncated [ 831.557802][ T3624] loop1: p2 start 4292936063 is beyond EOD, truncated [ 831.889545][ T3624] loop1: p4 size 50331648 extends beyond EOD, truncated [ 832.738968][T11308] loop5: detected capacity change from 0 to 256 [ 832.853826][ T9961] udevd[9961]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 832.965661][ T9961] udevd[9961]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 836.333590][T11326] loop1: detected capacity change from 0 to 512 [ 836.387307][T11326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 836.437589][T11308] FAT-fs (loop5): Directory bread(block 64) failed [ 836.449012][T11308] FAT-fs (loop5): Directory bread(block 65) failed [ 836.535737][T11308] FAT-fs (loop5): Directory bread(block 66) failed [ 836.543938][T11326] EXT4-fs (loop1): 1 truncate cleaned up [ 836.549633][T11326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 836.666714][T11308] FAT-fs (loop5): Directory bread(block 67) failed [ 836.720072][T11333] serio: Serial port pts0 [ 837.252335][T11308] FAT-fs (loop5): Directory bread(block 68) failed [ 837.264380][ T26] audit: type=1800 audit(1739246655.293:311): pid=11326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1282" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 837.326232][T11308] FAT-fs (loop5): Directory bread(block 69) failed [ 837.408318][T11308] FAT-fs (loop5): Directory bread(block 70) failed [ 837.484619][T11308] FAT-fs (loop5): Directory bread(block 71) failed [ 837.583747][T11308] FAT-fs (loop5): Directory bread(block 72) failed [ 837.623198][T11308] FAT-fs (loop5): Directory bread(block 73) failed [ 839.699021][T10253] EXT4-fs (loop1): unmounting filesystem. [ 840.352691][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 840.366192][T11372] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.723215][T11376] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.773235][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 840.855427][T11372] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.915034][T11376] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.977269][T11372] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.981173][T11376] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.015801][T11372] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.069505][T11376] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.983682][T11395] loop2: detected capacity change from 0 to 256 [ 845.070055][T11372] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.093849][T11372] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.178767][T11372] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.277623][T11395] FAT-fs (loop2): Directory bread(block 64) failed [ 845.307820][T11395] FAT-fs (loop2): Directory bread(block 65) failed [ 845.489333][T11372] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.778422][T11376] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.273472][T11376] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.283115][T11395] FAT-fs (loop2): Directory bread(block 66) failed [ 846.295899][T11376] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.319977][T11376] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.340831][T11395] FAT-fs (loop2): Directory bread(block 67) failed [ 846.391036][T11395] FAT-fs (loop2): Directory bread(block 68) failed [ 846.543474][T11395] FAT-fs (loop2): Directory bread(block 69) failed [ 846.914108][T11395] FAT-fs (loop2): Directory bread(block 70) failed [ 846.962195][T11395] FAT-fs (loop2): Directory bread(block 71) failed [ 846.968864][T11395] FAT-fs (loop2): Directory bread(block 72) failed [ 847.027879][T11395] FAT-fs (loop2): Directory bread(block 73) failed [ 852.310923][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 853.830272][T11462] loop1: detected capacity change from 0 to 512 [ 853.878550][T11462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 854.329060][T11462] EXT4-fs (loop1): 1 truncate cleaned up [ 854.345994][T11462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 856.380028][ T26] audit: type=1326 audit(1739246674.403:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 857.082157][ T26] audit: type=1326 audit(1739246674.403:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 857.345292][ T26] audit: type=1326 audit(1739246674.433:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 857.418929][ T26] audit: type=1326 audit(1739246674.433:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 857.450786][ T26] audit: type=1326 audit(1739246674.433:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 857.479897][ T26] audit: type=1326 audit(1739246674.433:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 857.560411][ T26] audit: type=1326 audit(1739246674.433:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 857.654915][ T26] audit: type=1326 audit(1739246674.433:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 858.098180][ T26] audit: type=1326 audit(1739246674.433:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 858.154557][ T26] audit: type=1326 audit(1739246674.433:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aa18cde9 code=0x7ffc0000 [ 858.381389][T10253] EXT4-fs (loop1): unmounting filesystem. [ 860.121400][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 867.295987][T11549] loop2: detected capacity change from 0 to 256 [ 867.991939][T11564] loop4: detected capacity change from 0 to 256 [ 868.713314][T11549] FAT-fs (loop2): Directory bread(block 64) failed [ 868.720358][T11549] FAT-fs (loop2): Directory bread(block 65) failed [ 868.728369][T11549] FAT-fs (loop2): Directory bread(block 66) failed [ 868.735699][T11549] FAT-fs (loop2): Directory bread(block 67) failed [ 868.753274][T11549] FAT-fs (loop2): Directory bread(block 68) failed [ 868.768112][T11549] FAT-fs (loop2): Directory bread(block 69) failed [ 868.922919][T11549] FAT-fs (loop2): Directory bread(block 70) failed [ 869.311310][T11549] FAT-fs (loop2): Directory bread(block 71) failed [ 869.321106][T11549] FAT-fs (loop2): Directory bread(block 72) failed [ 869.328305][T11549] FAT-fs (loop2): Directory bread(block 73) failed [ 869.407559][T11564] FAT-fs (loop4): Directory bread(block 64) failed [ 869.424467][T11564] FAT-fs (loop4): Directory bread(block 65) failed [ 869.433722][T11564] FAT-fs (loop4): Directory bread(block 66) failed [ 869.445383][T11564] FAT-fs (loop4): Directory bread(block 67) failed [ 869.453728][T11564] FAT-fs (loop4): Directory bread(block 68) failed [ 869.465532][T11564] FAT-fs (loop4): Directory bread(block 69) failed [ 869.473727][T11564] FAT-fs (loop4): Directory bread(block 70) failed [ 869.485487][T11564] FAT-fs (loop4): Directory bread(block 71) failed [ 869.493977][T11564] FAT-fs (loop4): Directory bread(block 72) failed [ 869.517164][T11564] FAT-fs (loop4): Directory bread(block 73) failed [ 870.197589][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.234011][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 870.524438][T11582] device xfrm1 entered promiscuous mode [ 873.672406][ T4436] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 873.775171][T11610] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.836066][T11610] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.866179][ T4436] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.891372][ T4436] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 873.901472][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 873.968041][ T4436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.989429][ T4436] usb 4-1: config 0 descriptor?? [ 874.025623][ T4436] pwc: Askey VC010 type 2 USB webcam detected. [ 874.058704][T11610] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.090208][T11620] netlink: 'syz.5.1341': attribute type 10 has an invalid length. [ 874.136331][T11610] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.405267][ T4436] pwc: recv_control_msg error -32 req 02 val 2b00 [ 874.418779][T11610] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.429096][ T4436] pwc: recv_control_msg error -32 req 02 val 2700 [ 874.449740][ T4436] pwc: recv_control_msg error -32 req 02 val 2c00 [ 874.472022][ T4436] pwc: recv_control_msg error -32 req 04 val 1000 [ 874.501984][T11610] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.513350][ T4436] pwc: recv_control_msg error -32 req 04 val 1300 [ 874.534222][ T4436] pwc: recv_control_msg error -32 req 04 val 1400 [ 874.560297][ T4436] pwc: recv_control_msg error -32 req 02 val 2000 [ 874.587527][T11610] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.601029][ T4436] pwc: recv_control_msg error -32 req 02 val 2100 [ 874.706398][T11610] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.828326][ T4436] pwc: recv_control_msg error -71 req 02 val 2500 [ 874.846229][ T4436] pwc: recv_control_msg error -71 req 02 val 2400 [ 874.869695][ T4436] pwc: recv_control_msg error -71 req 02 val 2600 [ 874.902001][ T4436] pwc: recv_control_msg error -71 req 02 val 2900 [ 874.927988][ T4436] pwc: recv_control_msg error -71 req 02 val 2800 [ 874.957396][ T4436] pwc: recv_control_msg error -71 req 04 val 1100 [ 875.001431][ T4436] pwc: recv_control_msg error -71 req 04 val 1200 [ 875.060465][ T4436] pwc: Registered as video103. [ 875.079264][ T4436] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 875.142305][ T4436] usb 4-1: USB disconnect, device number 6 [ 876.604683][T11649] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.847659][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 877.964859][T11649] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.423973][T11649] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.745594][T11649] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.020450][T11649] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.096948][T11649] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.145606][T11649] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.188111][T11649] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.562283][ T4434] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 888.587961][T11749] loop5: detected capacity change from 0 to 256 [ 888.813437][ T4434] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.824724][ T4434] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 888.834125][ T4434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.844494][ T4434] usb 2-1: config 0 descriptor?? [ 888.924303][ T4434] pwc: Askey VC010 type 2 USB webcam detected. [ 888.943375][T11749] FAT-fs (loop5): Directory bread(block 64) failed [ 889.038750][T11752] serio: Serial port pts0 [ 889.563014][ T4434] pwc: recv_control_msg error -32 req 02 val 2b00 [ 889.580887][ T4434] pwc: recv_control_msg error -32 req 02 val 2700 [ 889.587754][T11749] FAT-fs (loop5): Directory bread(block 65) failed [ 889.588693][ T4434] pwc: recv_control_msg error -32 req 02 val 2c00 [ 889.602768][T11749] FAT-fs (loop5): Directory bread(block 66) failed [ 889.610064][ T4434] pwc: recv_control_msg error -32 req 04 val 1000 [ 889.617701][T11749] FAT-fs (loop5): Directory bread(block 67) failed [ 889.699127][ T4434] pwc: recv_control_msg error -32 req 04 val 1300 [ 889.792510][ T4434] pwc: recv_control_msg error -32 req 04 val 1400 [ 889.806397][ T4434] pwc: recv_control_msg error -32 req 02 val 2000 [ 889.816972][ T4434] pwc: recv_control_msg error -32 req 02 val 2100 [ 890.177381][ T4434] pwc: recv_control_msg error -71 req 02 val 2500 [ 890.185585][ T4434] pwc: recv_control_msg error -71 req 02 val 2400 [ 890.193796][ T4434] pwc: recv_control_msg error -71 req 02 val 2600 [ 890.196028][T11762] serio: Serial port pts0 [ 890.200792][ T4434] pwc: recv_control_msg error -71 req 02 val 2900 [ 890.213863][T11749] FAT-fs (loop5): Directory bread(block 68) failed [ 890.441865][ T4434] pwc: recv_control_msg error -71 req 02 val 2800 [ 890.448952][ T4434] pwc: recv_control_msg error -71 req 04 val 1100 [ 890.456106][ T4434] pwc: recv_control_msg error -71 req 04 val 1200 [ 890.465369][ T4434] pwc: Registered as video103. [ 890.471295][ T4434] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 890.490161][ T4434] usb 2-1: USB disconnect, device number 3 [ 890.503292][T11749] FAT-fs (loop5): Directory bread(block 69) failed [ 890.512945][T11749] FAT-fs (loop5): Directory bread(block 70) failed [ 890.523655][T11749] FAT-fs (loop5): Directory bread(block 71) failed [ 890.540610][T11749] FAT-fs (loop5): Directory bread(block 72) failed [ 890.555542][T11749] FAT-fs (loop5): Directory bread(block 73) failed [ 890.826050][T11769] loop3: detected capacity change from 0 to 256 [ 891.126872][T11769] FAT-fs (loop3): Directory bread(block 64) failed [ 891.154891][T11769] FAT-fs (loop3): Directory bread(block 65) failed [ 891.193061][T11769] FAT-fs (loop3): Directory bread(block 66) failed [ 891.315260][T11769] FAT-fs (loop3): Directory bread(block 67) failed [ 891.321911][T11769] FAT-fs (loop3): Directory bread(block 68) failed [ 891.406783][T11769] FAT-fs (loop3): Directory bread(block 69) failed [ 891.446147][T11769] FAT-fs (loop3): Directory bread(block 70) failed [ 891.478551][T11769] FAT-fs (loop3): Directory bread(block 71) failed [ 891.515043][T11774] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.529208][T11769] FAT-fs (loop3): Directory bread(block 72) failed [ 891.562316][T11769] FAT-fs (loop3): Directory bread(block 73) failed [ 891.675526][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 891.717635][T11774] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.839464][T11774] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.907519][T11774] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.407212][T11774] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.479261][T11774] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.560559][T11774] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.642432][T11774] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.690163][T11799] loop3: detected capacity change from 0 to 64 [ 894.407302][T11804] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 894.420689][T11804] Error parsing options; rc = [-22] [ 894.917038][T11804] vivid-007: kernel_thread() failed [ 896.258356][T11811] serio: Serial port pts0 [ 899.667493][T11833] kvm [11832]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7300000001 [ 899.710289][T11833] kvm [11832]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x7300004001 [ 899.740132][T11833] kvm [11832]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x7400000001 [ 899.762264][T11833] kvm [11832]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x7400004001 [ 899.789101][T11833] kvm [11832]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf400000001 [ 899.845674][T11833] kvm [11832]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xf400004001 [ 903.771001][T11906] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1398'. [ 904.070249][T11912] dccp_close: ABORT with 56 bytes unread [ 904.457908][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 904.509462][T11936] Illegal XDP return value 1621753899 on prog (id 377) dev N/A, expect packet loss! [ 905.005958][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 905.032209][T11951] vlan1: default FDB implementation only supports local addresses [ 908.264785][T12040] loop2: detected capacity change from 0 to 512 [ 908.372788][T12040] EXT4-fs: Ignoring removed nobh option [ 908.481651][T12040] EXT4-fs (loop2): invalid first ino: 0 [ 908.548825][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 909.275556][T12053] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 909.288277][T12053] bridge0: port 3(gretap0) entered disabled state [ 909.295649][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.304557][T12053] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.361482][T12053] bridge0: port 3(gretap0) entered blocking state [ 909.368106][T12053] bridge0: port 3(gretap0) entered forwarding state [ 909.376515][T12053] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.383757][T12053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.392601][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.399735][T12053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.577222][T12053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 909.840125][T12060] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.634324][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562d7800: rx timeout, send abort [ 911.144564][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562d7800: abort rx timeout. Force session deactivation [ 911.440433][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 912.614573][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 912.851847][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 912.873940][T12166] kvm [12163]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb400000001 [ 912.903956][T12166] kvm [12163]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xb400004001 [ 912.906939][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 913.040874][T12166] kvm [12163]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x2b800000001 [ 913.096706][T12166] kvm [12163]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x2b800004001 [ 913.178143][T12166] kvm [12163]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x33400000001 [ 913.236628][T12166] kvm [12163]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x33400004001 [ 913.290480][T12166] kvm [12163]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x35100000001 [ 913.341288][T12166] kvm [12163]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x35100004001 [ 913.458675][T12166] kvm [12163]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x35200000001 [ 915.583502][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 915.938502][T12299] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 916.151058][T12303] xt_CT: No such helper "pptp" [ 916.771045][T12327] netlink: 'syz.2.1520': attribute type 1 has an invalid length. [ 916.820249][T12327] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1520'. [ 917.258641][T12357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 918.020785][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 918.106684][T12385] device bond2 entered promiscuous mode [ 918.142617][T12385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 918.211851][T12390] xt_CT: No such helper "pptp" [ 918.782841][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1541'. [ 918.812641][T12394] HTB: quantum of class 8010000C is big. Consider r2q change. [ 918.851352][T12412] device syzkaller1 entered promiscuous mode [ 918.902372][ T48] Bluetooth: hci5: command 0x0405 tx timeout [ 919.324150][T12439] dccp_close: ABORT with 60 bytes unread [ 919.601536][T12449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1555'. [ 920.013171][T12462] syz.1.1560 sent an empty control message without MSG_MORE. [ 920.150726][T12469] device veth0_to_hsr entered promiscuous mode [ 920.207706][T12468] device veth0_to_hsr left promiscuous mode [ 920.325149][T12474] dccp_close: ABORT with 20 bytes unread [ 920.606680][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 920.699719][T12487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1569'. [ 924.935686][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 924.981979][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1585'. [ 929.324265][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1601'. [ 929.342915][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1601'. [ 931.556438][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.729767][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 932.785816][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1613'. [ 937.078295][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 937.998118][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1625'. [ 943.196597][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1638'. [ 943.238460][T12855] loop3: detected capacity change from 0 to 512 [ 943.245445][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1638'. [ 943.286704][T12855] EXT4-fs: Ignoring removed nobh option [ 943.329934][T12855] EXT4-fs (loop3): invalid first ino: 0 [ 948.362281][T11864] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 948.410819][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 948.581606][T11864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.592283][T11864] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 948.596964][T12907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1649'. [ 948.601439][T11864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.666852][T11864] usb 6-1: config 0 descriptor?? [ 948.722366][T11864] pwc: Askey VC010 type 2 USB webcam detected. [ 949.329351][T11864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 949.414602][T11864] pwc: recv_control_msg error -32 req 02 val 2700 [ 949.431764][T11864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 949.442175][T11864] pwc: recv_control_msg error -32 req 04 val 1000 [ 949.482773][T11864] pwc: recv_control_msg error -32 req 04 val 1300 [ 949.498390][T11864] pwc: recv_control_msg error -32 req 04 val 1400 [ 949.516096][T11864] pwc: recv_control_msg error -32 req 02 val 2000 [ 949.527583][T11864] pwc: recv_control_msg error -32 req 02 val 2100 [ 949.640222][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 949.675305][T12920] loop4: detected capacity change from 0 to 2048 [ 949.740779][T12920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 949.773976][T11864] pwc: recv_control_msg error -71 req 02 val 2500 [ 949.782343][T11864] pwc: recv_control_msg error -71 req 02 val 2400 [ 949.798588][T11864] pwc: recv_control_msg error -71 req 02 val 2600 [ 949.813075][T11864] pwc: recv_control_msg error -71 req 02 val 2900 [ 949.826504][T11864] pwc: recv_control_msg error -71 req 02 val 2800 [ 950.017927][T11864] pwc: recv_control_msg error -71 req 04 val 1100 [ 950.026059][T11864] pwc: recv_control_msg error -71 req 04 val 1200 [ 950.034040][T11864] pwc: Registered as video103. [ 950.041350][T11864] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 950.054994][T11864] usb 6-1: USB disconnect, device number 14 [ 950.220663][T12935] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 950.238429][T12935] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 950.251398][T12935] EXT4-fs (loop4): This should not happen!! Data will be lost [ 950.251398][T12935] [ 950.261269][T12935] EXT4-fs (loop4): Total free blocks count 0 [ 950.267402][T12935] EXT4-fs (loop4): Free/Dirty block details [ 950.273560][T12935] EXT4-fs (loop4): free_blocks=2415919104 [ 950.279568][T12935] EXT4-fs (loop4): dirty_blocks=48 [ 950.284868][T12935] EXT4-fs (loop4): Block reservation details [ 950.290970][T12935] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 950.542893][T12935] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 954.963140][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 955.001065][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1662'. [ 955.001338][T12980] loop5: detected capacity change from 0 to 512 [ 955.051063][T12980] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 955.100357][T12980] EXT4-fs (loop5): 1 truncate cleaned up [ 955.113427][T12980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 955.182734][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 955.182750][ T26] audit: type=1800 audit(1739246773.213:348): pid=12980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1663" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 956.777339][ T7298] EXT4-fs (loop5): unmounting filesystem. [ 956.792816][T12995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1665'. [ 957.112161][ T7179] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 957.350431][ T7179] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.397296][ T7179] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 957.410036][ T7179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.532559][ T7179] usb 5-1: config 0 descriptor?? [ 957.571485][ T7179] pwc: Askey VC010 type 2 USB webcam detected. [ 958.517307][ T7179] pwc: recv_control_msg error -32 req 02 val 2b00 [ 958.564503][ T7179] pwc: recv_control_msg error -32 req 02 val 2700 [ 958.621872][ T7179] pwc: recv_control_msg error -32 req 02 val 2c00 [ 958.640775][ T7179] pwc: recv_control_msg error -32 req 04 val 1000 [ 959.029066][ T7179] pwc: recv_control_msg error -32 req 04 val 1300 [ 959.042163][ T7179] pwc: recv_control_msg error -32 req 04 val 1400 [ 959.052648][ T7179] pwc: recv_control_msg error -32 req 02 val 2000 [ 959.068353][ T7179] pwc: recv_control_msg error -32 req 02 val 2100 [ 959.662133][ T7179] pwc: recv_control_msg error -71 req 02 val 2500 [ 959.669896][ T7179] pwc: recv_control_msg error -71 req 02 val 2400 [ 959.685110][ T7179] pwc: recv_control_msg error -71 req 02 val 2600 [ 959.701949][ T7179] pwc: recv_control_msg error -71 req 02 val 2900 [ 959.716160][ T7179] pwc: recv_control_msg error -71 req 02 val 2800 [ 959.747910][ T7179] pwc: recv_control_msg error -71 req 04 val 1100 [ 959.778627][ T7179] pwc: recv_control_msg error -71 req 04 val 1200 [ 959.805935][ T7179] pwc: Registered as video103. [ 959.837570][ T7179] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 959.934689][ T7179] usb 5-1: USB disconnect, device number 3 [ 961.071155][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 961.090244][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 962.689927][T13055] loop5: detected capacity change from 0 to 512 [ 962.702236][T13055] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 963.293408][T13055] EXT4-fs (loop5): 1 truncate cleaned up [ 963.300889][T13055] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 963.370166][ T26] audit: type=1800 audit(1739246781.393:349): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1678" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 963.989006][ T7298] EXT4-fs (loop5): unmounting filesystem. [ 967.400054][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 967.637171][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 968.667738][T13129] loop1: detected capacity change from 0 to 512 [ 968.696785][T13129] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 968.728612][T13129] EXT4-fs (loop1): 1 truncate cleaned up [ 968.736777][T13129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 968.811489][ T26] audit: type=1800 audit(1739246786.833:350): pid=13129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1690" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 970.484042][T10253] EXT4-fs (loop1): unmounting filesystem. [ 972.257073][T13159] loop5: detected capacity change from 0 to 512 [ 972.283675][T13159] EXT4-fs: Ignoring removed nobh option [ 973.064611][T13159] EXT4-fs (loop5): invalid first ino: 0 [ 973.134381][ T9961] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 975.552333][ T4438] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 975.743940][ T4438] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.764531][ T4438] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 975.787886][ T4438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.815542][ T4438] usb 6-1: config 0 descriptor?? [ 975.830888][ T4438] pwc: Askey VC010 type 2 USB webcam detected. [ 976.237485][ T4438] pwc: recv_control_msg error -32 req 02 val 2b00 [ 976.318150][ T4438] pwc: recv_control_msg error -32 req 02 val 2700 [ 976.326592][ T4438] pwc: recv_control_msg error -32 req 02 val 2c00 [ 976.335664][ T4438] pwc: recv_control_msg error -32 req 04 val 1000 [ 976.343795][ T4438] pwc: recv_control_msg error -32 req 04 val 1300 [ 976.351732][ T4438] pwc: recv_control_msg error -32 req 04 val 1400 [ 976.451918][ T4438] pwc: recv_control_msg error -32 req 02 val 2000 [ 976.460239][ T4438] pwc: recv_control_msg error -32 req 02 val 2100 [ 976.750806][ T4438] pwc: recv_control_msg error -71 req 02 val 2500 [ 976.769650][ T4438] pwc: recv_control_msg error -71 req 02 val 2400 [ 976.786985][ T4438] pwc: recv_control_msg error -71 req 02 val 2600 [ 976.802263][ T4438] pwc: recv_control_msg error -71 req 02 val 2900 [ 976.811033][ T4438] pwc: recv_control_msg error -71 req 02 val 2800 [ 976.818791][ T4438] pwc: recv_control_msg error -71 req 04 val 1100 [ 976.826346][ T4438] pwc: recv_control_msg error -71 req 04 val 1200 [ 976.859251][ T4438] pwc: Registered as video103. [ 976.880161][ T4438] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 976.930501][ T4438] usb 6-1: USB disconnect, device number 15 [ 977.000660][T13216] loop2: detected capacity change from 0 to 512 [ 977.026508][T13216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 977.112610][T13216] EXT4-fs (loop2): 1 truncate cleaned up [ 977.118325][T13216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 977.192406][ T26] audit: type=1800 audit(1739246795.213:351): pid=13216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1706" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 979.215321][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 980.951284][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 980.994244][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'. [ 987.997265][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1727'. [ 988.138203][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1727'. [ 991.752674][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1736'. [ 992.987194][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.279696][T13404] loop1: detected capacity change from 0 to 512 [ 995.289255][T13404] EXT4-fs: Ignoring removed nobh option [ 995.300772][T13404] EXT4-fs (loop1): invalid first ino: 0 [ 996.760658][T13416] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.114864][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 998.295761][T13416] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.677639][T13416] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.796066][T13416] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.871244][T13416] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.914502][T13416] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.936498][T13416] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.969622][T13416] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.655505][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 1001.698553][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1758'. [ 1001.728442][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 1004.610039][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 1005.808259][T13513] loop5: detected capacity change from 0 to 512 [ 1005.857015][T13513] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1005.893861][T13513] EXT4-fs (loop5): 1 truncate cleaned up [ 1005.902129][T13513] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1005.931561][ T26] audit: type=1800 audit(1739246823.953:352): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1767" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1010.002840][ T7298] EXT4-fs (loop5): unmounting filesystem. [ 1010.848323][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 1014.040723][T13584] loop2: detected capacity change from 0 to 512 [ 1014.110942][T13584] EXT4-fs: Ignoring removed nobh option [ 1015.093115][T13584] EXT4-fs (loop2): invalid first ino: 0 [ 1015.488764][T13600] loop4: detected capacity change from 0 to 512 [ 1015.855883][T13600] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1016.206425][T13600] EXT4-fs (loop4): 1 truncate cleaned up [ 1016.409567][T13600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1016.424792][ T26] audit: type=1800 audit(1739246834.453:353): pid=13600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1784" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1019.304551][T13639] loop2: detected capacity change from 0 to 256 [ 1020.539190][T13649] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1794'. [ 1020.566164][T13639] FAT-fs (loop2): Directory bread(block 64) failed [ 1020.602232][T13639] FAT-fs (loop2): Directory bread(block 65) failed [ 1020.626930][T13639] FAT-fs (loop2): Directory bread(block 66) failed [ 1020.647348][T13639] FAT-fs (loop2): Directory bread(block 67) failed [ 1020.661953][T13639] FAT-fs (loop2): Directory bread(block 68) failed [ 1020.682952][T13639] FAT-fs (loop2): Directory bread(block 69) failed [ 1020.694101][T13639] FAT-fs (loop2): Directory bread(block 70) failed [ 1020.708460][T13639] FAT-fs (loop2): Directory bread(block 71) failed [ 1020.721782][T13639] FAT-fs (loop2): Directory bread(block 72) failed [ 1020.747917][T13639] FAT-fs (loop2): Directory bread(block 73) failed [ 1020.785386][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 1022.723500][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1022.951087][T13680] loop3: detected capacity change from 0 to 512 [ 1023.103231][T13680] EXT4-fs: Ignoring removed nobh option [ 1023.126195][T13680] EXT4-fs (loop3): invalid first ino: 0 [ 1026.097205][T13717] loop4: detected capacity change from 0 to 512 [ 1026.412847][T13717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1026.444397][T13720] loop3: detected capacity change from 0 to 512 [ 1026.539767][T13717] EXT4-fs (loop4): 1 truncate cleaned up [ 1026.553157][T13717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1026.563294][T13720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1026.620190][ T26] audit: type=1800 audit(1739246844.643:354): pid=13717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1808" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1026.651263][T13720] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.090839][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 1027.743118][T13743] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1810'. [ 1027.996554][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 1028.111694][T13750] loop1: detected capacity change from 0 to 512 [ 1028.152163][T13750] EXT4-fs: Ignoring removed nobh option [ 1028.209844][T13750] EXT4-fs (loop1): invalid first ino: 0 [ 1031.936273][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 1032.355532][T13784] serio: Serial port pts0 [ 1034.279944][T13808] loop5: detected capacity change from 0 to 512 [ 1034.329988][T13808] EXT4-fs: Ignoring removed nobh option [ 1034.443223][T13808] EXT4-fs (loop5): invalid first ino: 0 [ 1036.078487][T13826] loop3: detected capacity change from 0 to 512 [ 1036.120768][T13830] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1828'. [ 1036.134084][T13826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1036.163416][T13826] EXT4-fs (loop3): 1 truncate cleaned up [ 1036.169264][T13826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1036.183747][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 1036.193060][ T26] audit: type=1800 audit(1739246854.223:355): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1830" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1039.517394][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 1041.931135][T13891] loop1: detected capacity change from 0 to 512 [ 1042.018512][ T7171] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1042.070645][T13891] EXT4-fs: Ignoring removed nobh option [ 1042.096830][T13891] EXT4-fs (loop1): invalid first ino: 0 [ 1042.260848][ T7171] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.342089][ T7171] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1043.906896][ T7171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.925283][ T7171] usb 4-1: config 0 descriptor?? [ 1043.953799][ T7171] pwc: Askey VC010 type 2 USB webcam detected. [ 1044.131555][T13903] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.232863][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1044.404385][ T7171] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1044.419651][ T7171] pwc: recv_control_msg error -32 req 02 val 2700 [ 1044.454378][ T7171] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1044.475892][ T7171] pwc: recv_control_msg error -32 req 04 val 1000 [ 1044.487269][T13903] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.499128][ T7171] pwc: recv_control_msg error -32 req 04 val 1300 [ 1044.510372][T13912] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1845'. [ 1044.528275][ T7171] pwc: recv_control_msg error -32 req 04 val 1400 [ 1044.564952][ T7171] pwc: recv_control_msg error -32 req 02 val 2000 [ 1044.577312][T13903] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.603577][ T7171] pwc: recv_control_msg error -32 req 02 val 2100 [ 1044.717952][T13903] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.799169][T13921] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1846'. [ 1044.848660][ T7171] pwc: recv_control_msg error -71 req 02 val 2500 [ 1044.874816][ T7171] pwc: recv_control_msg error -71 req 02 val 2400 [ 1044.889745][ T7171] pwc: recv_control_msg error -71 req 02 val 2600 [ 1044.901790][T13903] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.905767][ T7171] pwc: recv_control_msg error -71 req 02 val 2900 [ 1044.919555][ T7171] pwc: recv_control_msg error -71 req 02 val 2800 [ 1044.932279][ T7171] pwc: recv_control_msg error -71 req 04 val 1100 [ 1044.948037][ T7171] pwc: recv_control_msg error -71 req 04 val 1200 [ 1044.973955][ T7171] pwc: Registered as video103. [ 1044.981493][T13903] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.993995][ T7171] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 1045.041619][ T7171] usb 4-1: USB disconnect, device number 7 [ 1045.049242][T13903] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.104941][T13903] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.331365][T13930] loop2: detected capacity change from 0 to 512 [ 1045.360630][T13930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1045.427120][T13930] EXT4-fs (loop2): 1 truncate cleaned up [ 1045.433418][T13930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1045.505947][ T26] audit: type=1800 audit(1739246863.533:356): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1848" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1050.472698][T13975] device gretap0 left promiscuous mode [ 1050.480557][T13975] bridge0: port 3(gretap0) entered disabled state [ 1051.009037][T13977] loop5: detected capacity change from 0 to 512 [ 1051.032923][T13977] EXT4-fs: Ignoring removed nobh option [ 1051.048868][T13977] EXT4-fs (loop5): invalid first ino: 0 [ 1051.238896][ T9961] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1053.369275][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1054.426896][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.622285][ T4438] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1054.850871][ T4438] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.118314][ T4438] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1055.163568][ T4438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.455922][ T4438] usb 2-1: config 0 descriptor?? [ 1055.719608][ T4438] pwc: Askey VC010 type 2 USB webcam detected. [ 1055.843621][T14016] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1863'. [ 1056.083046][ T4438] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1056.093872][ T4438] pwc: recv_control_msg error -32 req 02 val 2700 [ 1056.109074][ T4438] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1056.127365][ T4438] pwc: recv_control_msg error -32 req 04 val 1000 [ 1056.158765][ T4438] pwc: recv_control_msg error -32 req 04 val 1300 [ 1056.208719][ T4438] pwc: recv_control_msg error -32 req 04 val 1400 [ 1056.241200][ T4438] pwc: recv_control_msg error -32 req 02 val 2000 [ 1056.274074][ T4438] pwc: recv_control_msg error -32 req 02 val 2100 [ 1056.510091][ T4438] pwc: recv_control_msg error -71 req 02 val 2500 [ 1056.557560][ T4438] pwc: recv_control_msg error -71 req 02 val 2400 [ 1056.587279][ T4438] pwc: recv_control_msg error -71 req 02 val 2600 [ 1056.615705][ T4438] pwc: recv_control_msg error -71 req 02 val 2900 [ 1056.644272][ T4438] pwc: recv_control_msg error -71 req 02 val 2800 [ 1056.675123][ T4438] pwc: recv_control_msg error -71 req 04 val 1100 [ 1056.701900][ T4438] pwc: recv_control_msg error -71 req 04 val 1200 [ 1056.732967][ T4438] pwc: Registered as video103. [ 1056.757125][ T4438] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 1056.809830][ T4438] usb 2-1: USB disconnect, device number 4 [ 1058.744532][T14045] loop5: detected capacity change from 0 to 64 [ 1059.159883][T14041] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1059.173201][T14041] Error parsing options; rc = [-22] [ 1059.342332][T14047] loop1: detected capacity change from 0 to 256 [ 1060.838149][T14047] FAT-fs (loop1): Directory bread(block 64) failed [ 1060.856998][T14047] FAT-fs (loop1): Directory bread(block 65) failed [ 1060.897023][T14047] FAT-fs (loop1): Directory bread(block 66) failed [ 1060.907007][T14047] FAT-fs (loop1): Directory bread(block 67) failed [ 1060.947168][T14047] FAT-fs (loop1): Directory bread(block 68) failed [ 1060.957032][T14047] FAT-fs (loop1): Directory bread(block 69) failed [ 1060.967984][T14047] FAT-fs (loop1): Directory bread(block 70) failed [ 1060.977005][T14047] FAT-fs (loop1): Directory bread(block 71) failed [ 1061.002160][T14047] FAT-fs (loop1): Directory bread(block 72) failed [ 1061.018443][T14047] FAT-fs (loop1): Directory bread(block 73) failed [ 1062.496987][T14072] loop3: detected capacity change from 0 to 512 [ 1062.562610][T14072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1062.684290][T14072] EXT4-fs (loop3): 1 truncate cleaned up [ 1062.690007][T14072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1062.848841][ T26] audit: type=1800 audit(1739246880.873:357): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1874" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1065.057551][T14094] serio: Serial port pts0 [ 1067.856338][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 1068.097968][T14130] loop3: detected capacity change from 0 to 512 [ 1068.169183][T14130] EXT4-fs: Ignoring removed nobh option [ 1068.220774][T14130] EXT4-fs (loop3): invalid first ino: 0 [ 1073.969902][T14173] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1891'. [ 1075.472258][T14197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1075.497394][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1075.506670][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1075.516688][T14197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1075.525616][T14197] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1076.019701][T14197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.702077][T14215] serio: Serial port pts0 [ 1077.756351][ T4740] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.066194][ T4740] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.592356][T14197] Bluetooth: hci0: command 0x0409 tx timeout [ 1078.934191][ T4740] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.163524][ T4740] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.288077][T14195] chnl_net:caif_netlink_parms(): no params data found [ 1080.762047][T14197] Bluetooth: hci0: command 0x041b tx timeout [ 1082.468781][T14271] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1913'. [ 1082.695962][T14276] serio: Serial port pts0 [ 1082.822110][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1083.605456][T14195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.630485][T14195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.682507][T14195] device bridge_slave_0 entered promiscuous mode [ 1084.446847][T14195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.462646][T14195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.480585][T14195] device bridge_slave_1 entered promiscuous mode [ 1084.912274][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1085.299218][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.324515][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.519377][T14195] team0: Port device team_slave_0 added [ 1086.548915][T14195] team0: Port device team_slave_1 added [ 1088.154495][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.162685][T14325] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1925'. [ 1088.179751][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.211065][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.271589][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.288594][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.323333][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.675376][T14195] device hsr_slave_0 entered promiscuous mode [ 1088.697589][T14195] device hsr_slave_1 entered promiscuous mode [ 1088.735585][T14195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1088.747384][T14195] Cannot create hsr debugfs directory [ 1088.824019][T14347] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1930'. [ 1089.091119][ T4740] device hsr_slave_0 left promiscuous mode [ 1089.157752][ T4740] device hsr_slave_1 left promiscuous mode [ 1089.180864][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.198939][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.355928][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.385056][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.690208][ T4740] device bridge_slave_1 left promiscuous mode [ 1089.725596][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.844694][ T4740] device bridge_slave_0 left promiscuous mode [ 1089.910790][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.146535][ T4740] device veth1_macvtap left promiscuous mode [ 1090.181345][ T4740] device veth0_macvtap left promiscuous mode [ 1090.219212][ T4740] device veth1_vlan left promiscuous mode [ 1090.312777][ T4740] device veth0_vlan left promiscuous mode [ 1090.845024][T14370] serio: Serial port pts1 [ 1094.266283][ T4740] team0 (unregistering): Port device team_slave_1 removed [ 1094.320333][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 1094.378160][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.071035][ T4740] bond0 (unregistering): Released all slaves [ 1096.837891][T14445] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1955'. [ 1100.144647][T14195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1100.166628][T14195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1100.200689][T14195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1100.242971][T14195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1102.278701][T14195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.427175][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1102.483137][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1102.718554][T14195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.789136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1102.808997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1102.838130][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.845367][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.906058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1102.917590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1102.927054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1102.938513][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.945647][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.953483][T14517] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1976'. [ 1102.987515][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1103.015018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1103.109270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1103.286960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.459827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1103.659432][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.711429][T14195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1103.756774][T14195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.790646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1103.815104][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1103.848911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1103.874460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1103.883272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1103.907186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1104.946287][T14195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.097107][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.112475][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.121588][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.890776][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1106.142609][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1106.158654][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1106.182266][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1106.191407][T14547] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1983'. [ 1106.207418][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1106.246143][T14195] device veth0_vlan entered promiscuous mode [ 1106.288480][T14195] device veth1_vlan entered promiscuous mode [ 1106.460777][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1106.507643][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1106.543420][T14195] device veth0_macvtap entered promiscuous mode [ 1106.616648][T14195] device veth1_macvtap entered promiscuous mode [ 1106.722400][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.742527][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.768681][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.865916][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.899104][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.961147][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.999452][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.061385][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.449085][T14195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.628447][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1107.643362][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1107.651783][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1107.679702][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1107.733691][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.770416][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.791390][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.819463][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.891543][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.938093][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.985125][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.004787][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.061795][T14195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.101297][T14195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.130876][T14195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.203561][T14195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.222039][T14195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.433310][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.593083][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.282835][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.292612][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.405901][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1109.458144][ T4899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.470245][ T4899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.685060][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.872199][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.201425][T14723] loop3: detected capacity change from 0 to 512 [ 1119.237449][T14723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1119.350618][T14723] EXT4-fs (loop3): 1 truncate cleaned up [ 1119.362798][T14723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1120.062837][ T26] audit: type=1800 audit(1739246938.093:358): pid=14723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2031" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1121.809922][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 1125.239949][T14797] loop2: detected capacity change from 0 to 512 [ 1125.276705][T14797] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1125.896077][T14797] EXT4-fs (loop2): 1 truncate cleaned up [ 1125.935430][T14797] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1126.155717][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 1126.238346][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2052'. [ 1126.252151][ T26] audit: type=1800 audit(1739246944.253:359): pid=14797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2049" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1128.927346][T14854] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1128.958247][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1129.764377][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 1129.869695][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2065'. [ 1132.320330][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 1132.505860][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2077'. [ 1134.023759][ T48] Bluetooth: hci0: command 0x0405 tx timeout [ 1137.317873][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 1137.392899][T14999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'. [ 1144.256119][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 1144.269346][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2131'. [ 1146.000249][T15128] kvm [15126]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7300000001 [ 1146.076223][T15128] kvm [15126]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x7300004001 [ 1146.090022][T15128] kvm [15126]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x7400000001 [ 1146.109960][T15128] kvm [15126]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x7400004001 [ 1149.205628][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 1149.223357][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2158'. [ 1151.051256][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 1151.119789][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2172'. [ 1160.102015][ T48] Bluetooth: hci0: command 0x0401 tx timeout [ 1162.195733][T15438] loop1: detected capacity change from 0 to 512 [ 1162.243641][T15438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1162.417284][T15438] EXT4-fs (loop1): 1 truncate cleaned up [ 1162.423404][T15438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1164.805050][T10253] EXT4-fs (loop1): unmounting filesystem. [ 1176.021064][T15611] kvm [15608]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb60 [ 1177.305007][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.641246][T15652] loop3: detected capacity change from 0 to 512 [ 1177.687713][T15652] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1177.833337][T15652] EXT4-fs (loop3): 1 truncate cleaned up [ 1177.883472][T15652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1180.145296][T15683] serio: Serial port pts0 [ 1180.684566][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 1180.751375][T15682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.933622][T15682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.987072][ T9118] EXT4-fs (loop3): unmounting filesystem. [ 1181.226324][T15682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.458559][T15700] kvm [15698]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7300000001 [ 1181.485872][T15682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.491498][T15700] kvm [15698]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x7300004001 [ 1181.533309][T15700] kvm [15698]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x7400000001 [ 1181.575689][T15700] kvm [15698]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x7400004001 [ 1181.703935][T15700] kvm [15698]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf400000001 [ 1182.111476][T15682] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.424502][T15682] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.433372][T15700] kvm [15698]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xf400004001 [ 1182.584870][T15682] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.642750][T15682] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.422660][T15736] kvm [15734]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb60 [ 1185.613121][T15746] loop3: detected capacity change from 0 to 40427 [ 1185.665517][T15746] F2FS-fs (loop3): Invalid segment/section count (31 != 24 * 1) [ 1185.732506][T15746] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1185.761427][T15746] F2FS-fs (loop3): Unrecognized mount option "jqfm" or missing value [ 1189.035805][T15810] kvm [15808]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb60 [ 1189.179077][T15818] serio: Serial port pts0 [ 1197.551426][T15931] loop2: detected capacity change from 0 to 512 [ 1197.705143][T15931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1197.748272][T15931] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.727342][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 1199.531685][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 1199.562738][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 1199.862182][T14197] Bluetooth: hci0: command 0x0406 tx timeout [ 1204.028812][T16030] loop1: detected capacity change from 0 to 64 [ 1204.822752][T16038] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1204.836109][T16038] Error parsing options; rc = [-22] [ 1205.295469][T16038] vivid-003: kernel_thread() failed [ 1206.434426][T16042] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.526857][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 1206.581719][T16042] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.655876][T16042] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.750076][T16042] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.995642][T16042] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.098288][T16042] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.157576][T16042] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.271808][T16042] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.974218][T16062] kvm [16060]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb60 [ 1208.165529][T16073] loop4: detected capacity change from 0 to 512 [ 1208.230486][T16073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1208.331065][T16073] EXT4-fs (loop4): 1 truncate cleaned up [ 1208.337225][T16073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1209.327335][T16089] bridge0: port 3(gretap0) entered blocking state [ 1209.334029][T16089] bridge0: port 3(gretap0) entered disabled state [ 1209.341762][T16089] device gretap0 entered promiscuous mode [ 1209.348090][T16089] bridge0: port 3(gretap0) entered blocking state [ 1209.354647][T16089] bridge0: port 3(gretap0) entered forwarding state [ 1209.366670][T16089] device gretap0 left promiscuous mode [ 1209.372829][T16089] bridge0: port 3(gretap0) entered disabled state [ 1210.926773][T16102] ------------[ cut here ]------------ [ 1210.933071][T16102] refcount_t: decrement hit 0; leaking memory. [ 1210.970339][T16102] WARNING: CPU: 0 PID: 16102 at lib/refcount.c:31 refcount_warn_saturate+0x16d/0x1a0 [ 1210.980186][T16102] Modules linked in: [ 1210.984235][T16102] CPU: 0 PID: 16102 Comm: syz.0.2371 Not tainted 6.1.128-syzkaller #0 [ 1210.992500][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1211.002687][T16102] RIP: 0010:refcount_warn_saturate+0x16d/0x1a0 [ 1211.009442][T16102] Code: c7 c7 60 2d 5e 8b e8 22 3e 0e fd 0f 0b e9 6e ff ff ff e8 f6 24 46 fd c6 05 a8 5b 42 0a 01 48 c7 c7 c0 2d 5e 8b e8 03 3e 0e fd <0f> 0b e9 4f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b2 fe ff [ 1211.029465][T16102] RSP: 0018:ffffc900044f7b28 EFLAGS: 00010246 [ 1211.035694][T16102] RAX: c212ac5cd914ce00 RBX: 0000000000000004 RCX: ffff88802ba08000 [ 1211.043785][T16102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1211.051801][T16102] RBP: 0000000000000004 R08: ffffffff8152b84e R09: ffffed10171c4f1c [ 1211.059907][T16102] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807db365b8 [ 1211.068011][T16102] R13: 0000000000000000 R14: ffff88807db365fc R15: dffffc0000000000 [ 1211.076041][T16102] FS: 000055556b657500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1211.085010][T16102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1211.091603][T16102] CR2: 0000555576b57808 CR3: 0000000062c07000 CR4: 00000000003506f0 [ 1211.099710][T16102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1211.107748][T16102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1211.115800][T16102] Call Trace: [ 1211.119173][T16102] [ 1211.122137][T16102] ? __warn+0x15a/0x520 [ 1211.126303][T16102] ? refcount_warn_saturate+0x16d/0x1a0 [ 1211.131865][T16102] ? report_bug+0x2af/0x500 [ 1211.136544][T16102] ? refcount_warn_saturate+0x16d/0x1a0 [ 1211.142193][T16102] ? handle_bug+0x3d/0x70 [ 1211.146725][T16102] ? exc_invalid_op+0x16/0x40 [ 1211.151413][T16102] ? asm_exc_invalid_op+0x16/0x20 [ 1211.156555][T16102] ? __warn_printk+0x28e/0x350 [ 1211.161334][T16102] ? refcount_warn_saturate+0x16d/0x1a0 [ 1211.166933][T16102] ? refcount_warn_saturate+0x16d/0x1a0 [ 1211.172525][T16102] ref_tracker_free+0x6a0/0x7d0 [ 1211.177386][T16102] ? refcount_inc+0x80/0x80 [ 1211.181967][T16102] ? ax25_destroy_socket+0x53c/0x5b0 [ 1211.187354][T16102] ax25_release+0x3ef/0x940 [ 1211.191877][T16102] sock_close+0xcd/0x230 [ 1211.196240][T16102] ? sock_mmap+0x90/0x90 [ 1211.200526][T16102] __fput+0x3f6/0x8d0 [ 1211.204609][T16102] task_work_run+0x246/0x300 [ 1211.209317][T16102] ? task_work_cancel+0x2e0/0x2e0 [ 1211.214450][T16102] ? exit_to_user_mode_loop+0x39/0x100 [ 1211.219929][T16102] exit_to_user_mode_loop+0xde/0x100 [ 1211.225254][T16102] exit_to_user_mode_prepare+0xb1/0x140 [ 1211.230833][T16102] syscall_exit_to_user_mode+0x60/0x270 [ 1211.236492][T16102] do_syscall_64+0x47/0xb0 [ 1211.240930][T16102] ? clear_bhb_loop+0x45/0xa0 [ 1211.245743][T16102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1211.251698][T16102] RIP: 0033:0x7f9c1478cde9 [ 1211.256185][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.275905][T16102] RSP: 002b:00007fff87e128d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1211.284403][T16102] RAX: 0000000000000000 RBX: 00000000001279bb RCX: 00007f9c1478cde9 [ 1211.292730][T16102] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1211.300733][T16102] RBP: 00007f9c149a7ba0 R08: 0000000000000001 R09: 0000000c87e12bcf [ 1211.308774][T16102] R10: 00007f9c14400000 R11: 0000000000000246 R12: 00007f9c149a5fac [ 1211.316817][T16102] R13: 00007f9c149a5fa0 R14: ffffffffffffffff R15: 00007fff87e129f0 [ 1211.324862][T16102] [ 1211.327912][T16102] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1211.335304][T16102] CPU: 0 PID: 16102 Comm: syz.0.2371 Not tainted 6.1.128-syzkaller #0 [ 1211.343558][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1211.353629][T16102] Call Trace: [ 1211.356913][T16102] [ 1211.359860][T16102] dump_stack_lvl+0x1e3/0x2cb [ 1211.364602][T16102] ? nf_tcp_handle_invalid+0x642/0x642 [ 1211.370158][T16102] ? panic+0x764/0x764 [ 1211.374273][T16102] ? 0xffffffffa000094c [ 1211.378442][T16102] ? vscnprintf+0x59/0x80 [ 1211.382790][T16102] panic+0x318/0x764 [ 1211.386785][T16102] ? __warn+0x169/0x520 [ 1211.390981][T16102] ? memcpy_page_flushcache+0xfc/0xfc [ 1211.396381][T16102] __warn+0x348/0x520 [ 1211.400391][T16102] ? refcount_warn_saturate+0x16d/0x1a0 [ 1211.405959][T16102] report_bug+0x2af/0x500 [ 1211.410320][T16102] ? refcount_warn_saturate+0x16d/0x1a0 [ 1211.415927][T16102] handle_bug+0x3d/0x70 [ 1211.420089][T16102] exc_invalid_op+0x16/0x40 [ 1211.424592][T16102] asm_exc_invalid_op+0x16/0x20 [ 1211.429475][T16102] RIP: 0010:refcount_warn_saturate+0x16d/0x1a0 [ 1211.435646][T16102] Code: c7 c7 60 2d 5e 8b e8 22 3e 0e fd 0f 0b e9 6e ff ff ff e8 f6 24 46 fd c6 05 a8 5b 42 0a 01 48 c7 c7 c0 2d 5e 8b e8 03 3e 0e fd <0f> 0b e9 4f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b2 fe ff [ 1211.455354][T16102] RSP: 0018:ffffc900044f7b28 EFLAGS: 00010246 [ 1211.461423][T16102] RAX: c212ac5cd914ce00 RBX: 0000000000000004 RCX: ffff88802ba08000 [ 1211.469480][T16102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1211.477452][T16102] RBP: 0000000000000004 R08: ffffffff8152b84e R09: ffffed10171c4f1c [ 1211.485431][T16102] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807db365b8 [ 1211.493669][T16102] R13: 0000000000000000 R14: ffff88807db365fc R15: dffffc0000000000 [ 1211.501696][T16102] ? __warn_printk+0x28e/0x350 [ 1211.506486][T16102] ? refcount_warn_saturate+0x16d/0x1a0 [ 1211.512049][T16102] ref_tracker_free+0x6a0/0x7d0 [ 1211.516907][T16102] ? refcount_inc+0x80/0x80 [ 1211.521427][T16102] ? ax25_destroy_socket+0x53c/0x5b0 [ 1211.526724][T16102] ax25_release+0x3ef/0x940 [ 1211.531329][T16102] sock_close+0xcd/0x230 [ 1211.535605][T16102] ? sock_mmap+0x90/0x90 [ 1211.539937][T16102] __fput+0x3f6/0x8d0 [ 1211.543941][T16102] task_work_run+0x246/0x300 [ 1211.548540][T16102] ? task_work_cancel+0x2e0/0x2e0 [ 1211.553570][T16102] ? exit_to_user_mode_loop+0x39/0x100 [ 1211.559033][T16102] exit_to_user_mode_loop+0xde/0x100 [ 1211.564324][T16102] exit_to_user_mode_prepare+0xb1/0x140 [ 1211.569924][T16102] syscall_exit_to_user_mode+0x60/0x270 [ 1211.575514][T16102] do_syscall_64+0x47/0xb0 [ 1211.579938][T16102] ? clear_bhb_loop+0x45/0xa0 [ 1211.584623][T16102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1211.590545][T16102] RIP: 0033:0x7f9c1478cde9 [ 1211.594968][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.614579][T16102] RSP: 002b:00007fff87e128d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1211.623005][T16102] RAX: 0000000000000000 RBX: 00000000001279bb RCX: 00007f9c1478cde9 [ 1211.631006][T16102] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1211.639002][T16102] RBP: 00007f9c149a7ba0 R08: 0000000000000001 R09: 0000000c87e12bcf [ 1211.646977][T16102] R10: 00007f9c14400000 R11: 0000000000000246 R12: 00007f9c149a5fac [ 1211.654952][T16102] R13: 00007f9c149a5fa0 R14: ffffffffffffffff R15: 00007fff87e129f0 [ 1211.662940][T16102] [ 1211.666278][T16102] Kernel Offset: disabled [ 1211.670722][T16102] Rebooting in 86400 seconds..