last executing test programs: 2m32.93064734s ago: executing program 0 (id=119): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x258800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0xbe, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000006c0)="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", 0x1cf, 0x20008099, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000d80)={{}, "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"}) 2m31.860910638s ago: executing program 0 (id=122): syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2m31.636516638s ago: executing program 0 (id=123): syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0xe0, 0x0, '\t\x00\x00'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "b4"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x3, "0614af"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xff, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 2m29.598891744s ago: executing program 0 (id=127): gettid() mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$cgroup_subtree(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2m29.285355113s ago: executing program 0 (id=132): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x258800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0xbe, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000006c0)="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", 0x1cf, 0x20008099, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000d80)={{}, "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"}) 2m27.74511489s ago: executing program 0 (id=136): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x147042, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usbip_server_init(0x4) write$usbip_server(r5, &(0x7f0000000000)=@ret_unlink={{0x4, 0x7f, 0x0, 0x0, 0x1ff}, {0x4}}, 0x30) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newroute={0x34, 0x18, 0x309, 0x0, 0x0, {0xa, 0x80}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x5}}]}, 0x34}}, 0x10004044) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") 2m12.488679589s ago: executing program 32 (id=136): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x147042, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usbip_server_init(0x4) write$usbip_server(r5, &(0x7f0000000000)=@ret_unlink={{0x4, 0x7f, 0x0, 0x0, 0x1ff}, {0x4}}, 0x30) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newroute={0x34, 0x18, 0x309, 0x0, 0x0, {0xa, 0x80}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x5}}]}, 0x34}}, 0x10004044) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") 14.261257389s ago: executing program 1 (id=492): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2100840, &(0x7f00000045c0)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@journal_async_commit}, {@usrquota}, {@inode64}]}, 0x1, 0x4421, &(0x7f000000c300)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x25, 0x353, &(0x7f0000000480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x6, &(0x7f0000008940)={0x2, 0xf6}, &(0x7f0000008980)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) io_setup(0x42d1, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004640)={0x1f, 0x18, &(0x7f0000004640)=ANY=[], &(0x7f0000004540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x42) read$FUSE(r4, &(0x7f0000002500)={0x2020}, 0x2020) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400004202b62f00000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000000900010073797a30000000000940020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000300), 0x810010, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x7986}}, {@common=@privport}, {@sq={'sq', 0x3d, 0x81}}], [{@seclabel}, {@appraise}]}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 14.145940229s ago: executing program 4 (id=495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000001000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100"/15], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) 12.596984516s ago: executing program 4 (id=497): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)) 12.211725085s ago: executing program 4 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x5e, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5) 10.667882382s ago: executing program 5 (id=503): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x5e, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5) 9.93184506s ago: executing program 1 (id=506): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x258800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0xbe, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000006c0)="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", 0x269, 0x20008099, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 9.74341749s ago: executing program 3 (id=507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000001000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100"/15], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) 9.7409858s ago: executing program 5 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x1, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x0, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 8.493677427s ago: executing program 1 (id=510): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x82002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$dsp(r0, &(0x7f00000000c0)=""/108, 0xffffffcd) 8.220689577s ago: executing program 3 (id=511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = dup(r1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 8.137334677s ago: executing program 5 (id=512): mbind(&(0x7f0000a9b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000240)=0xf, 0x8f, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4b3141085d274847}) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0) lseek(r7, 0x1000000, 0x0) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) sendmsg$kcm(r8, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 7.090886294s ago: executing program 5 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, &(0x7f0000000640)="990f38f12a0f3066b9690a000066b80000008066ba000000000f3066b8070000000f23d80f21f86635400000c00f23f80f20950f009b4b423665660f38db280f20d86635080000002f22a16676562c", 0x4f}], 0x1, 0x13, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@acl}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") open(0x0, 0x6840, 0x120) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.040989305s ago: executing program 3 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) 7.040151164s ago: executing program 1 (id=515): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x5e, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5) 6.055335062s ago: executing program 3 (id=517): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2100840, &(0x7f00000045c0)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@journal_async_commit}, {@usrquota}, {@inode64}]}, 0x1, 0x4421, &(0x7f000000c300)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x25, 0x353, &(0x7f0000000480)="$eJzs3T1oJOUbAPBnMpvsJnD/pPjDodVqJ8hxiVhoY8JxwmEKvWPxq3Hhcn5kVyGLC7HIXhrFUrERtLK7QsurxULEzsLWE+RUbLzu8A5Hdmeyu8ls7kPMnh+/XxGePO/7zPvOZMhOQvLsS6uxeX42Lly7djVqtSQqq6dW43oSSzETaeQuBgDwb3I9y+LXLDdIPHGr2e8vxGwezU1ldwDAURi8/r98bJSo3svdAADTUPr5f7Knh9Fv50bZN452bwDA0Si9/j+4b/jAr/krw78JAAD+uc49/8JTa+sRZ+v1WkT7nW6j24jHR+NrF+LVaMVGnIzFuBmRPyjkTwv9j0+eWT99st7341I0+hXdRkS7123kTwpr6aC+GsuxGEtFfTasT/v1y4P6ekRc7A3Wj3bSbczGQrH+dwuxESuxGP8v1UecWT+9Ui8O0Gjv1fcidqO2dxL9/Z+IxfhmZvDJ+ejX5sfqZ3aW6/VT2fq++u6l6mAeAAAAAAAAAAAAAAAAAAAAAAAchRPzUXTPqS8N+99k7V737bPFhHp5fNDfJx8u+gPt5v2Bsuped55304P9gcb68yTR6zYqMXNPzxwAAAAAAAAAAAAAAAAAAAD+Pjrbc9FstTa2OttvbY6CuVZvLPP6V59+MR8H57yWjjJRyQ+3b06Ri7GqNIbl2bA8S/fNKYI0opicRPPS5eGOx+dUh2dRKu8H1dJQUuyp2Wode+CHjyZV/T7KpDEcqk1cIinWHxtq/y9PTdrPrYOks71ymzlXsiw7rHznw3JV1CIqpS/cXxF8efWV+x7pHH+0k1Q2m58XTR8eenjx2SsffPLzZrMVxaVptea2OjezP71WOnb/JMV1TibcCZOD3VFmd6uz3Uy//eW5+9/7+sDkdPL9k41n3jx8rc8OZubyoL/NOznT2Qk3/+TgxRvDu/fuL+bxj1ebl3e+/2nvYt6uauybhEYdAAAAAAAAAAAAAAAAAAAwFWP/K34XHnvm6HYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANM3ev//sWC3lLmT4EYvykPVja3OoYvPT/VUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/sjAAD//zpGdG4=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x6, &(0x7f0000008940)={0x2, 0xf6}, &(0x7f0000008980)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) io_setup(0x42d1, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004640)={0x1f, 0x18, &(0x7f0000004640)=ANY=[], &(0x7f0000004540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x42) read$FUSE(r4, &(0x7f0000002500)={0x2020}, 0x2020) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400004202b62f00000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000000900010073797a30000000000940020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a14000000020a01"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 5.961004222s ago: executing program 1 (id=518): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x5e, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5) 5.811779422s ago: executing program 2 (id=519): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x9a6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5501, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 4.94472197s ago: executing program 2 (id=520): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000340)={[{@dioread_lock}, {@nolazytime}, {@minixdf}]}, 0x1, 0x53c, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) socket(0x1e, 0x5, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2205, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x96) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r5}}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000e70000000006001d0000000000"], 0x24}}, 0x0) 4.94430444s ago: executing program 1 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000001000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100"/15], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) 3.880265578s ago: executing program 2 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x1, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x0, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.691902407s ago: executing program 4 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x20000000000000, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x67}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvfrom(r3, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='2', 0x1, 0x0, 0x0, 0x0) 3.653426968s ago: executing program 2 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x5e, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5) 2.021239094s ago: executing program 4 (id=525): mbind(&(0x7f0000a9b000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000240)=0xf, 0x8f, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4b3141085d274847}) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0) lseek(r7, 0x1000000, 0x0) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) sendmsg$kcm(r8, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 1.941557324s ago: executing program 2 (id=526): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x82002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$dsp(r0, &(0x7f00000000c0)=""/108, 0xffffffcd) 1.811976224s ago: executing program 3 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 1.736501103s ago: executing program 5 (id=528): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x5e, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5) 862.991842ms ago: executing program 4 (id=529): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000001c0), 0x0, 0x4ea, &(0x7f0000000880)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000140), 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x3, 0xfe, 0x0, 0x22, 0x6, 0xfe, 0x40, 0x1, 0x0, 0x8, 0x4, 0x0, 0x1, 0x2, 0x0, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 842.142592ms ago: executing program 3 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) 25.83776ms ago: executing program 5 (id=531): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x440, &(0x7f0000001000)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81], 0x3, 0x6b8, &(0x7f0000001080)="$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") listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0xfffffffffffffee6) 0s ago: executing program 2 (id=532): syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, '\x00', 0x9, 0xfc}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) kernel console output (not intermixed with test programs): 60.516137][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.523322][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.532169][ T4245] device bridge_slave_0 entered promiscuous mode [ 60.546276][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.572575][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.581869][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.589046][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.597148][ T4245] device bridge_slave_1 entered promiscuous mode [ 60.613012][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.632428][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.649513][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.656591][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.682679][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.728478][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.735618][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.762142][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.782720][ T4244] device hsr_slave_0 entered promiscuous mode [ 60.789435][ T4244] device hsr_slave_1 entered promiscuous mode [ 60.802395][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.817563][ T4255] team0: Port device team_slave_0 added [ 60.825919][ T4251] team0: Port device team_slave_0 added [ 60.833288][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.860919][ T4245] team0: Port device team_slave_0 added [ 60.868100][ T4255] team0: Port device team_slave_1 added [ 60.875187][ T4251] team0: Port device team_slave_1 added [ 60.882373][ T4245] team0: Port device team_slave_1 added [ 60.947722][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.954756][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.981310][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.005194][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.012304][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.038699][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.050289][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.057371][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.083609][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.095210][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.102270][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.128490][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.146303][ T4252] device hsr_slave_0 entered promiscuous mode [ 61.153338][ T4252] device hsr_slave_1 entered promiscuous mode [ 61.159951][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.167913][ T4252] Cannot create hsr debugfs directory [ 61.176568][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.183616][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.209689][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.221360][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.228307][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.254341][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.371821][ T4251] device hsr_slave_0 entered promiscuous mode [ 61.378599][ T4251] device hsr_slave_1 entered promiscuous mode [ 61.385323][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.393038][ T4251] Cannot create hsr debugfs directory [ 61.401948][ T4245] device hsr_slave_0 entered promiscuous mode [ 61.408666][ T4245] device hsr_slave_1 entered promiscuous mode [ 61.415319][ T4245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.423124][ T4245] Cannot create hsr debugfs directory [ 61.441892][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 61.448519][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 61.461739][ T4255] device hsr_slave_0 entered promiscuous mode [ 61.468407][ T4255] device hsr_slave_1 entered promiscuous mode [ 61.475244][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.482872][ T4255] Cannot create hsr debugfs directory [ 61.521194][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 61.527414][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 61.533329][ T4246] Bluetooth: hci3: command 0x0409 tx timeout [ 61.738004][ T4244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.749742][ T4244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.766378][ T4244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.785296][ T4244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.846176][ T4252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.869178][ T4252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.878349][ T4255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.890438][ T4255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.908619][ T4252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.918523][ T4255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.928967][ T4255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.944998][ T4252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.989573][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.000475][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.036566][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.080374][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.095854][ T4245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.106127][ T4245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.119119][ T4244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.131093][ T4245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.140328][ T4245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.188607][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.201804][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.213128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.235058][ T4244] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.262225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.272642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.281612][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.288853][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.299105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.310818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.320660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.329279][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.336417][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.371709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.379476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.388392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.418148][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.437966][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.446277][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.455990][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.466250][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.476154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.484990][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.494083][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.519649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.530131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.538987][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.546118][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.555214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.564532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.573825][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.580891][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.598497][ T4244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.608970][ T4244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.633717][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.649286][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.656335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.664944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.674734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.683978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.693067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.702549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.710678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.719436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.727643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.737099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.756090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.765054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.800147][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.810002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.825266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.834335][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.841614][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.849797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.859148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.868138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.877643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.887574][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.894702][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.903575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.912629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.920901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.939074][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.950130][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.971681][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.999980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.010210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.025940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.038617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.052356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.068363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.077426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.097542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.113011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.123719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.132571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.140920][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.148063][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.156260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.165988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.174605][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.181744][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.189779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.197797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.207990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.216092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.225821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.234563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.243874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.254831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.270589][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.313746][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.326765][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.336460][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.351451][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.359953][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.368807][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.376835][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.385719][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.395791][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.404508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.414982][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.424004][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.432804][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.441253][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.448433][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.457366][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.465372][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.477084][ T4244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.485848][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.494908][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.521400][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 63.521686][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 63.538786][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.556042][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.567858][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.577703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.588541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.601500][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 63.604767][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.607512][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 63.614584][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.620862][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 63.635725][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.646516][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.655489][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.663499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.671322][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.680500][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.690650][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.699706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.708305][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.722891][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.731854][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.740319][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.749235][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.767545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.780579][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.805541][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.838310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.863002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.878987][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.914558][ T4244] device veth0_vlan entered promiscuous mode [ 63.942192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.962744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.989521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.016342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.041344][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.049512][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.074154][ T4244] device veth1_vlan entered promiscuous mode [ 64.093917][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.175784][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.206786][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.228248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.251967][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.260809][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.276089][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.295594][ T4244] device veth0_macvtap entered promiscuous mode [ 64.316597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.328321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.343202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.360445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.369078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.385763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.396060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.407932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.417158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.426987][ T4244] device veth1_macvtap entered promiscuous mode [ 64.444966][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.453211][ T4255] device veth0_vlan entered promiscuous mode [ 64.464831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.473117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.484357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.495141][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.524335][ T4255] device veth1_vlan entered promiscuous mode [ 64.556226][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.583445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.592568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.600635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.610341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.619469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.628196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.636925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.647016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.655697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.665237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.674230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.683624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.692304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.701408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.709132][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.717069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.728337][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.742090][ T4244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750940][ T4244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.759810][ T4244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.770072][ T4244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.783520][ T4251] device veth0_vlan entered promiscuous mode [ 64.797461][ T4255] device veth0_macvtap entered promiscuous mode [ 64.806920][ T4252] device veth0_vlan entered promiscuous mode [ 64.814138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.822915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.832015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.840413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.876397][ T4251] device veth1_vlan entered promiscuous mode [ 64.889909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.900226][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.908485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.916685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.926185][ T4245] device veth0_vlan entered promiscuous mode [ 64.944316][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.952828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.961941][ T4255] device veth1_macvtap entered promiscuous mode [ 64.976904][ T4252] device veth1_vlan entered promiscuous mode [ 64.987057][ T4245] device veth1_vlan entered promiscuous mode [ 65.038801][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.050062][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.065133][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.081465][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.090050][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.098741][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.107651][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.122922][ T4251] device veth0_macvtap entered promiscuous mode [ 65.132545][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.149559][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.160950][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.198352][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.214296][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.222199][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.224577][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.239421][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.248468][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.257991][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.266819][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.285099][ T4255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.294314][ T4255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.303650][ T4255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.312670][ T4255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.324629][ T4251] device veth1_macvtap entered promiscuous mode [ 65.334278][ T4245] device veth0_macvtap entered promiscuous mode [ 65.355033][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.364857][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.375220][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.384923][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.397454][ T4245] device veth1_macvtap entered promiscuous mode [ 65.420148][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.428819][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.433010][ T4252] device veth0_macvtap entered promiscuous mode [ 65.456886][ T4252] device veth1_macvtap entered promiscuous mode [ 65.468693][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.477468][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.486092][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.494358][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.509088][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.519825][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.532610][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.543097][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.554438][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.570262][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.581030][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.593761][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.604464][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 65.611837][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 65.617987][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.628968][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.659484][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.680843][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.690862][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 65.691387][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 65.703171][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 65.709458][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.720061][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.730154][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.741141][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.756961][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.769077][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.779188][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.788551][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.797293][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.806283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.815329][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.826155][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.836735][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.847094][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.858319][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.868217][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.878666][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.888771][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.899500][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.910911][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.921816][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.930521][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.941634][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.950342][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965493][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.978911][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.989020][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.000085][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.012564][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.023170][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.034708][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.052130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.063018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.073169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.107808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.123734][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.134613][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.144834][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.155638][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.165720][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.178380][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.188903][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.199519][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.210571][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.234925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.244098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.262458][ T4245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.272416][ T4245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.281760][ T4245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.290485][ T4245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.313602][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.324058][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.334340][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.343765][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.364016][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.376682][ T4292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.376910][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.425204][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.480250][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.502607][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.529433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.544077][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.553605][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.562700][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.570622][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.586748][ T4292] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.600544][ T4292] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.601266][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.612933][ T4292] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.635004][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.643013][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.672260][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.688593][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.714076][ T4326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.754226][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.779894][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.789236][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.798880][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.806658][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.810171][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.326681][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.470682][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.486049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.515909][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.682531][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 67.688583][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 67.746249][ T4292] usb 1-1: USB disconnect, device number 2 [ 67.761755][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 67.767837][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 67.771386][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 68.002008][ T4345] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 68.009627][ T4345] netlink: 'syz.4.5': attribute type 8 has an invalid length. [ 68.017544][ T4345] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.385502][ T4350] loop1: detected capacity change from 0 to 2048 [ 68.478448][ T4350] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.718027][ T4348] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 68.724737][ T4348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.733577][ T4348] vhci_hcd vhci_hcd.0: Device attached [ 68.939478][ T4352] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.001206][ T4293] vhci_hcd: vhci_device speed not set [ 69.124568][ T4349] vhci_hcd: connection closed [ 69.132858][ T4310] vhci_hcd: stop threads [ 69.143413][ T4293] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 69.208116][ T4310] vhci_hcd: release socket [ 69.295540][ T4310] vhci_hcd: disconnect device [ 69.935755][ T4360] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'. [ 70.053690][ T4362] loop3: detected capacity change from 0 to 1024 [ 70.263621][ T4362] fuse: Unknown parameter 'group_i00000000000000000000' [ 70.288764][ T4364] loop0: detected capacity change from 0 to 128 [ 70.350213][ T4364] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.389684][ T4364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.720972][ C1] sched: RT throttling activated [ 70.757215][ T4358] loop2: detected capacity change from 0 to 40427 [ 70.808611][ T4358] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 70.851102][ T4358] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.892844][ T4358] F2FS-fs (loop2): invalid crc value [ 70.919950][ T11] hfsplus: b-tree write err: -5, ino 4 [ 70.954763][ T4358] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.124089][ T4358] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.237383][ T4358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.259935][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.266587][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.525121][ T4386] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.554675][ T4385] loop1: detected capacity change from 0 to 512 [ 72.609898][ T4387] loop3: detected capacity change from 0 to 512 [ 72.635182][ T4385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.651334][ T4385] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.737542][ T4387] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.867705][ T4387] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.963211][ T4387] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 73.123178][ T4387] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 73.171201][ T4387] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.18: Failed to acquire dquot type 1 [ 73.232117][ T4387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.18: bg 0: block 40: padding at end of block bitmap is not set [ 73.268429][ T4387] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 73.275227][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 73.293410][ T4387] EXT4-fs (loop3): 1 truncate cleaned up [ 73.330654][ T4387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.743265][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 73.758995][ T4376] loop0: detected capacity change from 0 to 32768 [ 73.957558][ T4376] XFS (loop0): Mounting V5 Filesystem [ 74.084723][ T4376] XFS (loop0): Ending clean mount [ 74.104106][ T4376] XFS (loop0): Quotacheck needed: Please wait. [ 74.177928][ T4415] IPv6: Can't replace route, no match found [ 74.345244][ T4293] vhci_hcd: vhci_device speed not set [ 74.388297][ T4376] XFS (loop0): Quotacheck: Done. [ 74.511320][ T4244] XFS (loop0): Unmounting Filesystem [ 74.890695][ T4412] loop3: detected capacity change from 0 to 32768 [ 74.909702][ T4412] XFS: noikeep mount option is deprecated. [ 74.948894][ T4422] loop2: detected capacity change from 0 to 1024 [ 75.025231][ T4422] fuse: Unknown parameter 'group_id00000000000000000000' [ 75.103545][ T4412] XFS (loop3): Mounting V5 Filesystem [ 75.104236][ T4289] hfsplus: b-tree write err: -5, ino 4 [ 75.176637][ T4434] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 75.183193][ T4434] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.200654][ T4434] vhci_hcd vhci_hcd.0: Device attached [ 75.208974][ T4435] vhci_hcd: cannot find the pending unlink 127 [ 75.234058][ T4434] loop0: detected capacity change from 0 to 2048 [ 75.262995][ T4412] XFS (loop3): Ending clean mount [ 75.266404][ T4434] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.273455][ T4335] udevd[4335]: incorrect nilfs2 checksum on /dev/loop0 [ 75.318368][ T4412] XFS (loop3): Quotacheck needed: Please wait. [ 75.521268][ T22] vhci_hcd: vhci_device speed not set [ 75.591358][ T22] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 76.573512][ T14] cfg80211: failed to load regulatory.db [ 76.582049][ T4412] XFS (loop3): Quotacheck: Done. [ 76.726449][ T4450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.010224][ T4435] vhci_hcd: connection reset by peer [ 77.016840][ T4289] vhci_hcd: stop threads [ 77.021895][ T4289] vhci_hcd: release socket [ 77.043535][ T4245] XFS (loop3): Unmounting Filesystem [ 77.048613][ T4289] vhci_hcd: disconnect device [ 77.151738][ T4462] loop1: detected capacity change from 0 to 512 [ 77.294398][ T4462] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 77.343983][ T4462] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.364095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.376425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.376470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.385143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.394038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.410993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.785749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 77.796098][ T4462] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 77.851203][ T4462] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 77.891527][ T4462] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.33: Failed to acquire dquot type 1 [ 77.946621][ T4462] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.33: bg 0: block 40: padding at end of block bitmap is not set [ 78.048429][ T4462] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 78.112381][ T4462] EXT4-fs (loop1): 1 truncate cleaned up [ 78.118261][ T4462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.683282][ T4477] Illegal XDP return value 4294967274 on prog (id 3) dev syz_tun, expect packet loss! [ 78.843484][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 78.849582][ T4479] loop4: detected capacity change from 0 to 1024 [ 79.040811][ T4489] fuse: Bad value for 'fd' [ 79.927589][ T11] hfsplus: b-tree write err: -5, ino 4 [ 81.062885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.101060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.110527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.161454][ T22] vhci_hcd: vhci_device speed not set [ 81.886904][ T4520] loop1: detected capacity change from 0 to 512 [ 81.924159][ T4520] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 83.481297][ T4530] loop4: detected capacity change from 0 to 512 [ 83.511633][ T4530] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.516550][ T4528] loop1: detected capacity change from 0 to 512 [ 83.562125][ T4530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.666961][ T4528] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.686666][ T4530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.688359][ T4528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.724407][ T4528] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 83.748804][ T4530] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.53: corrupted in-inode xattr [ 83.784762][ T4530] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.53: couldn't read orphan inode 15 (err -117) [ 83.802378][ T4528] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 83.865905][ T4530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.898340][ T4528] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.52: Failed to acquire dquot type 1 [ 84.103079][ T4528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.52: bg 0: block 40: padding at end of block bitmap is not set [ 84.362869][ T4528] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 84.566842][ T4528] EXT4-fs (loop1): 1 truncate cleaned up [ 84.621334][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.701902][ T4541] loop3: detected capacity change from 0 to 1024 [ 84.754978][ T4541] fuse: Unknown parameter 'group_id00000000000000000000' [ 84.846039][ T11] hfsplus: b-tree write err: -5, ino 4 [ 85.068566][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 85.320187][ T26] audit: type=1800 audit(1737251075.016:2): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.53" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 85.495326][ T4555] netlink: 'syz.2.59': attribute type 2 has an invalid length. [ 85.502998][ T4555] netlink: 'syz.2.59': attribute type 8 has an invalid length. [ 85.510595][ T4555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.59'. [ 86.235452][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 86.291112][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.315045][ T4560] loop2: detected capacity change from 0 to 512 [ 86.364963][ T4560] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.493612][ T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 86.505899][ T4560] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.534406][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.547678][ T4560] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.72: corrupted in-inode xattr [ 86.550322][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.570359][ T4560] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.72: couldn't read orphan inode 15 (err -117) [ 86.598749][ T4560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.831093][ T22] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 86.854528][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.867432][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.875809][ T22] usb 4-1: Product: syz [ 87.033874][ T22] usb 4-1: Manufacturer: syz [ 87.038518][ T22] usb 4-1: SerialNumber: syz [ 87.121842][ T26] audit: type=1800 audit(1737251076.816:3): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 88.061166][ T22] usb 4-1: 0:2 : does not exist [ 88.069935][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 88.081386][ T22] usb 4-1: USB disconnect, device number 2 [ 88.342033][ T4580] loop1: detected capacity change from 0 to 128 [ 88.348956][ T4580] ======================================================= [ 88.348956][ T4580] WARNING: The mand mount option has been deprecated and [ 88.348956][ T4580] and is ignored by this kernel. Remove the mand [ 88.348956][ T4580] option from the mount to silence this warning. [ 88.348956][ T4580] ======================================================= [ 88.404985][ T4580] FAT-fs (loop1): bogus number of reserved sectors [ 88.412854][ T4580] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.422435][ T4580] FAT-fs (loop1): Can't find a valid FAT filesystem [ 88.452062][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.494370][ T4594] loop2: detected capacity change from 0 to 512 [ 89.707335][ T4594] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 89.736800][ T4594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.777818][ T4594] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 89.842973][ T4594] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 89.860574][ T4594] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.70: Failed to acquire dquot type 1 [ 89.898622][ T4594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.70: bg 0: block 40: padding at end of block bitmap is not set [ 89.946935][ T4594] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 90.029407][ T4606] netlink: 'syz.1.73': attribute type 2 has an invalid length. [ 90.037179][ T4606] netlink: 'syz.1.73': attribute type 8 has an invalid length. [ 90.044895][ T4606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.73'. [ 90.098932][ T4594] EXT4-fs (loop2): 1 truncate cleaned up [ 90.161800][ T4594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.550151][ T4609] loop3: detected capacity change from 0 to 512 [ 90.605202][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 90.664739][ T4609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.724781][ T4609] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.692131][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 91.728263][ T4620] loop1: detected capacity change from 0 to 512 [ 91.846480][ T4620] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.886250][ T4620] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.937900][ T4620] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.77: corrupted in-inode xattr [ 91.950753][ T4620] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.77: couldn't read orphan inode 15 (err -117) [ 91.969000][ T4620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.074531][ T4572] syz.0.64 (4572) used greatest stack depth: 19968 bytes left [ 92.181132][ T4327] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 92.278521][ T26] audit: type=1800 audit(1737251081.976:4): pid=4625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.77" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 92.477955][ T4632] loop2: detected capacity change from 0 to 128 [ 92.485718][ T4632] FAT-fs (loop2): bogus number of reserved sectors [ 92.492445][ T4632] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 92.501888][ T4632] FAT-fs (loop2): Can't find a valid FAT filesystem [ 93.590362][ T4327] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 93.639507][ T4327] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 93.679286][ T4327] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 93.730816][ T4327] usb 4-1: config 1 has no interface number 0 [ 93.773292][ T4335] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.789668][ T4327] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 93.848752][ T4327] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 93.878283][ T4327] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 93.933191][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.983765][ T4327] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 94.452644][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 94.591606][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.686055][ T4327] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 94.829427][ T4650] loop1: detected capacity change from 0 to 512 [ 94.884576][ T22] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 94.905014][ T4294] usb 4-1: USB disconnect, device number 3 [ 94.914372][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.922196][ T4650] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 94.938513][ T4294] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 94.945205][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.963653][ T4650] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.982626][ T4650] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 94.996725][ T4650] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 95.001383][ T22] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 95.007163][ T4650] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.87: Failed to acquire dquot type 1 [ 95.037879][ T4650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.87: bg 0: block 40: padding at end of block bitmap is not set [ 95.102901][ T4662] xt_TCPMSS: Only works on TCP SYN packets [ 95.130651][ T4650] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 95.271401][ T4665] Bluetooth: MGMT ver 1.22 [ 95.573817][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.581698][ T4650] EXT4-fs (loop1): 1 truncate cleaned up [ 95.593284][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.613140][ T22] usb 5-1: Product: syz [ 95.620486][ T22] usb 5-1: Manufacturer: syz [ 95.628304][ T22] usb 5-1: SerialNumber: syz [ 95.663025][ T4650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.919785][ T22] usb 5-1: 0:2 : does not exist [ 95.976936][ T22] usb 5-1: USB disconnect, device number 2 [ 96.014214][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 96.256428][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.666170][ T4683] loop1: detected capacity change from 0 to 512 [ 96.677695][ T4682] loop4: detected capacity change from 0 to 512 [ 96.764644][ T4683] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.797859][ T4683] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.983075][ T4683] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 97.003038][ T4682] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.117647][ T4682] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.175364][ T4683] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 97.335365][ T4683] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.102: Failed to acquire dquot type 1 [ 97.570782][ T4683] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.102: bg 0: block 40: padding at end of block bitmap is not set [ 97.601266][ T4262] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.601277][ T4246] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 97.619921][ T4683] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 97.629757][ T4683] EXT4-fs (loop1): 1 truncate cleaned up [ 97.640798][ T4683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.709840][ T4699] loop2: detected capacity change from 0 to 128 [ 97.728818][ T4699] FAT-fs (loop2): bogus number of reserved sectors [ 97.735437][ T4699] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 97.744891][ T4699] FAT-fs (loop2): Can't find a valid FAT filesystem [ 97.834754][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 97.863624][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 98.080027][ T4708] netlink: 'syz.3.100': attribute type 2 has an invalid length. [ 98.088168][ T4708] netlink: 'syz.3.100': attribute type 8 has an invalid length. [ 98.096021][ T4708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.100'. [ 98.781080][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.090114][ T4711] loop3: detected capacity change from 0 to 32768 [ 99.099027][ T22] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.127938][ T4711] XFS: noikeep mount option is deprecated. [ 99.169299][ T22] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.326842][ T22] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 99.520298][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.540892][ T4711] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 99.610250][ T4711] XFS (loop3): Mounting V5 Filesystem [ 99.672803][ T22] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 99.779157][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.798834][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.817974][ T22] usb 5-1: Product: syz [ 99.861778][ T22] usb 5-1: Manufacturer: syz [ 99.866413][ T22] usb 5-1: SerialNumber: syz [ 99.913061][ T4711] XFS (loop3): Ending clean mount [ 99.955147][ T4711] XFS (loop3): Quotacheck needed: Please wait. [ 100.030746][ T4711] XFS (loop3): Quotacheck: Done. [ 100.093833][ T22] usb 5-1: 0:2 : does not exist [ 100.123201][ T22] usb 5-1: USB disconnect, device number 3 [ 100.157440][ T4744] loop0: detected capacity change from 0 to 512 [ 100.246064][ T4744] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 100.338540][ T4744] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.368428][ T4744] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 100.383847][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.417706][ T4744] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 100.464384][ T4744] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.110: Failed to acquire dquot type 1 [ 100.502222][ T4744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.110: bg 0: block 40: padding at end of block bitmap is not set [ 100.531141][ T4744] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 100.567798][ T4744] EXT4-fs (loop0): 1 truncate cleaned up [ 100.573860][ T4744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.717996][ T4745] XFS (loop3): User initiated shutdown received. [ 100.741966][ T4745] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 100.778879][ T4745] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 100.836800][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 100.978154][ T4754] netlink: 'syz.1.114': attribute type 2 has an invalid length. [ 101.005185][ T4754] netlink: 'syz.1.114': attribute type 8 has an invalid length. [ 101.016477][ T4754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.114'. [ 101.019164][ T4245] XFS (loop3): Unmounting Filesystem [ 101.203081][ T4763] loop4: detected capacity change from 0 to 128 [ 101.217269][ T4763] FAT-fs (loop4): bogus number of reserved sectors [ 101.223864][ T4763] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 101.234158][ T4763] FAT-fs (loop4): Can't find a valid FAT filesystem [ 101.317376][ T4335] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.461114][ T4294] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.559825][ T4789] loop2: detected capacity change from 0 to 512 [ 103.603994][ T4789] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.618502][ T4789] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.639814][ T4789] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 103.652767][ T4294] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.655409][ T4789] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 103.671006][ T4294] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.679701][ T4294] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 103.700995][ T4294] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.709990][ T4294] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 103.711956][ T4789] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.124: Failed to acquire dquot type 1 [ 103.743232][ T4294] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.761039][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.769083][ T4294] usb 1-1: Product: syz [ 103.773623][ T4294] usb 1-1: Manufacturer: syz [ 103.778228][ T4294] usb 1-1: SerialNumber: syz [ 103.809232][ T4789] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.124: bg 0: block 40: padding at end of block bitmap is not set [ 103.836616][ T4789] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 103.861382][ T4789] EXT4-fs (loop2): 1 truncate cleaned up [ 103.867248][ T4789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.985654][ T4789] kvm: pic: non byte read [ 103.990690][ T4789] kvm: pic: non byte read [ 104.009736][ T4294] usb 1-1: 0:2 : does not exist [ 104.035335][ T4294] usb 1-1: USB disconnect, device number 3 [ 104.210858][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 105.049919][ T4814] loop4: detected capacity change from 0 to 128 [ 105.073202][ T4814] FAT-fs (loop4): bogus number of reserved sectors [ 105.079756][ T4814] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 105.089261][ T4814] FAT-fs (loop4): Can't find a valid FAT filesystem [ 107.658054][ T4833] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 107.664620][ T4833] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.767997][ T4833] vhci_hcd vhci_hcd.0: Device attached [ 107.790390][ T4835] loop0: detected capacity change from 0 to 2048 [ 107.847226][ T4335] udevd[4335]: incorrect nilfs2 checksum on /dev/loop0 [ 108.067704][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.136978][ T4835] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.141064][ T4247] vhci_hcd: vhci_device speed not set [ 108.198095][ T4850] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.221048][ T4247] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 108.275850][ T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.345463][ T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.347449][ T4838] vhci_hcd: connection reset by peer [ 108.408549][ T4332] vhci_hcd: stop threads [ 108.419274][ T22] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 108.430171][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.439766][ T22] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 108.454792][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.470367][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.478559][ T4332] vhci_hcd: release socket [ 108.479423][ T22] usb 4-1: Product: syz [ 108.489370][ T22] usb 4-1: Manufacturer: syz [ 108.510220][ T22] usb 4-1: SerialNumber: syz [ 108.513706][ T4332] vhci_hcd: disconnect device [ 108.777256][ T22] usb 4-1: 0:2 : does not exist [ 108.845453][ T22] usb 4-1: USB disconnect, device number 4 [ 109.178926][ T4864] loop2: detected capacity change from 0 to 128 [ 109.194675][ T4864] FAT-fs (loop2): bogus number of reserved sectors [ 109.201332][ T4864] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 109.210626][ T4864] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.365173][ T4354] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.553893][ T4878] vivid-007: kernel_thread() failed [ 111.508265][ T4884] loop1: detected capacity change from 0 to 512 [ 111.530804][ T4884] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 768 [ 111.614009][ T93] block nbd3: Attempted send on invalid socket [ 111.620475][ T93] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 111.633327][ T93] gfs2: error 10 reading superblock [ 113.362507][ T4247] vhci_hcd: vhci_device speed not set [ 115.330233][ T4260] Bluetooth: hci0: command 0x0401 tx timeout [ 115.337296][ T4246] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 115.802040][ T4921] loop1: detected capacity change from 0 to 32768 [ 115.845677][ T4335] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.859674][ T4937] loop3: detected capacity change from 0 to 512 [ 116.074868][ T4937] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 116.623483][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.919511][ T4921] loop1: detected capacity change from 0 to 256 [ 117.074375][ T4921] FAT-fs (loop1): Directory bread(block 64) failed [ 117.112997][ T4327] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.120363][ T4946] loop4: detected capacity change from 0 to 512 [ 117.122018][ T4921] FAT-fs (loop1): Directory bread(block 65) failed [ 117.134426][ T4921] FAT-fs (loop1): Directory bread(block 66) failed [ 117.141261][ T4921] FAT-fs (loop1): Directory bread(block 67) failed [ 117.147866][ T4921] FAT-fs (loop1): Directory bread(block 68) failed [ 117.154791][ T4921] FAT-fs (loop1): Directory bread(block 69) failed [ 117.161673][ T4921] FAT-fs (loop1): Directory bread(block 70) failed [ 117.168233][ T4921] FAT-fs (loop1): Directory bread(block 71) failed [ 117.175246][ T4921] FAT-fs (loop1): Directory bread(block 72) failed [ 117.182052][ T4921] FAT-fs (loop1): Directory bread(block 73) failed [ 117.184552][ T4946] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 117.301140][ T4327] usb 3-1: Using ep0 maxpacket: 16 [ 117.317250][ T4327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 117.375385][ T4946] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.382121][ T4246] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.552707][ T4946] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 117.616182][ T4327] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 117.729693][ T4946] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 117.821036][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.861318][ T4946] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.169: Failed to acquire dquot type 1 [ 117.873021][ T4327] usb 3-1: Product: syz [ 117.877208][ T4327] usb 3-1: Manufacturer: syz [ 117.902704][ T4327] usb 3-1: SerialNumber: syz [ 117.915210][ T4946] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.169: bg 0: block 40: padding at end of block bitmap is not set [ 118.001457][ T4946] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 118.013123][ T4327] usb 3-1: config 0 descriptor?? [ 118.030726][ T4327] hub 3-1:0.0: bad descriptor, ignoring hub [ 118.050782][ T4327] hub: probe of 3-1:0.0 failed with error -5 [ 118.067748][ T4946] EXT4-fs (loop4): 1 truncate cleaned up [ 118.095903][ T4946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.165530][ T4327] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 118.323705][ T4953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 118.371433][ T26] audit: type=1400 audit(1737251108.006:5): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4920 comm="syz.1.160" [ 118.926637][ T4327] input: failed to attach handler mousedev to device input5, error: -5 [ 119.087841][ T4957] loop3: detected capacity change from 0 to 4096 [ 119.194507][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 121.402810][ T4979] loop3: detected capacity change from 0 to 512 [ 121.470253][ T4979] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 121.937215][ T4986] loop2: detected capacity change from 0 to 512 [ 121.986093][ T4986] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768 [ 122.481935][ T3606] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 122.503279][ T3606] usb 3-1: device reset changed ep0 maxpacket size! [ 122.522373][ T4327] usb 3-1: USB disconnect, device number 2 [ 122.623916][ T4246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.634616][ T4246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.652399][ T4246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.661653][ T4246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.669231][ T4246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 122.677078][ T4246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.731076][ T4327] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.942619][ T4327] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 122.996209][ T4327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.018227][ T4327] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 123.049012][ T4327] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.073270][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.090869][ T5002] loop4: detected capacity change from 0 to 512 [ 123.100001][ T4327] usb 3-1: Product: syz [ 123.108263][ T4327] usb 3-1: Manufacturer: syz [ 123.115292][ T4327] usb 3-1: SerialNumber: syz [ 123.195593][ T5002] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 123.232132][ T5002] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.268658][ T4992] chnl_net:caif_netlink_parms(): no params data found [ 123.277287][ T5002] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 123.313262][ T5002] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 123.354426][ T5002] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.183: Failed to acquire dquot type 1 [ 123.378316][ T4327] usb 3-1: 0:2 : does not exist [ 123.404846][ T4327] usb 3-1: USB disconnect, device number 3 [ 123.418622][ T5002] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.183: bg 0: block 40: padding at end of block bitmap is not set [ 123.448802][ T5002] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 123.529922][ T5002] EXT4-fs (loop4): 1 truncate cleaned up [ 123.580728][ T5002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.671929][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.704339][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.857114][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 123.871762][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.919966][ T4992] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.930400][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.968740][ T4992] device bridge_slave_0 entered promiscuous mode [ 124.018944][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.095025][ T4992] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.106360][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.208781][ T4992] device bridge_slave_1 entered promiscuous mode [ 124.325186][ T5028] loop3: detected capacity change from 0 to 512 [ 124.386092][ T5028] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 124.433466][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.735676][ T4246] Bluetooth: hci5: command 0x0409 tx timeout [ 125.058171][ T4992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.072545][ T4992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.184547][ T4992] team0: Port device team_slave_0 added [ 125.277597][ T4992] team0: Port device team_slave_1 added [ 125.474328][ T4992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.500540][ T4992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.679954][ T4992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.718514][ T4992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.731057][ T4992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.787725][ T4992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.967338][ T4992] device hsr_slave_0 entered promiscuous mode [ 126.008330][ T4992] device hsr_slave_1 entered promiscuous mode [ 126.045277][ T4992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.061093][ T4992] Cannot create hsr debugfs directory [ 126.801338][ T4246] Bluetooth: hci5: command 0x041b tx timeout [ 127.059044][ T5062] loop2: detected capacity change from 0 to 512 [ 127.134807][ T5062] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 127.194156][ T5062] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.236745][ T5062] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 127.285013][ T4992] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.293449][ T5062] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 127.342052][ T5062] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.197: Failed to acquire dquot type 1 [ 127.396593][ T5062] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.197: bg 0: block 40: padding at end of block bitmap is not set [ 127.412551][ T4992] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.467617][ T5062] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 127.517018][ T5062] EXT4-fs (loop2): 1 truncate cleaned up [ 127.523903][ T4992] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.536806][ T5062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.561638][ T4992] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.005490][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 128.115983][ T5080] netlink: 'syz.4.200': attribute type 2 has an invalid length. [ 128.123841][ T5080] netlink: 'syz.4.200': attribute type 8 has an invalid length. [ 128.131635][ T5080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.200'. [ 128.876029][ T4992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.883761][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 128.998951][ T33] device hsr_slave_0 left promiscuous mode [ 129.039581][ T33] device hsr_slave_1 left promiscuous mode [ 129.124524][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.147775][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.197801][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.234285][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.309495][ T33] device bridge_slave_1 left promiscuous mode [ 129.327608][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.419525][ T33] device bridge_slave_0 left promiscuous mode [ 129.441129][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.546497][ T33] device veth1_macvtap left promiscuous mode [ 129.578034][ T33] device veth0_macvtap left promiscuous mode [ 129.737622][ T33] device veth1_vlan left promiscuous mode [ 129.905422][ T33] device veth0_vlan left promiscuous mode [ 130.531286][ T4292] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 130.756042][ T4292] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 130.774434][ T4292] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 130.804563][ T4292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 130.824368][ T4292] usb 2-1: config 1 has no interface number 0 [ 130.840649][ T4292] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.863811][ T4292] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 130.971063][ T4260] Bluetooth: hci5: command 0x0419 tx timeout [ 131.042535][ T4292] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 131.061003][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.086030][ T4292] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 132.044700][ T33] team0 (unregistering): Port device team_slave_1 removed [ 132.298850][ T33] team0 (unregistering): Port device team_slave_0 removed [ 132.729048][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.746091][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.898752][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.947941][ T5125] loop2: detected capacity change from 0 to 32768 [ 132.999819][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.791185][ T4292] snd_usb_pod 2-1:1.1: set_interface failed [ 133.883352][ T4292] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 133.893554][ T4292] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 133.902962][ T4292] usb 2-1: USB disconnect, device number 2 [ 134.190158][ T5125] loop2: detected capacity change from 0 to 256 [ 134.291508][ T4291] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.627597][ T4291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.706989][ T4291] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.815555][ T5125] FAT-fs (loop2): Directory bread(block 64) failed [ 134.847038][ T5125] FAT-fs (loop2): Directory bread(block 65) failed [ 134.867528][ T5125] FAT-fs (loop2): Directory bread(block 66) failed [ 134.888175][ T4291] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 134.902564][ T5125] FAT-fs (loop2): Directory bread(block 67) failed [ 134.909775][ T5125] FAT-fs (loop2): Directory bread(block 68) failed [ 134.916650][ T5125] FAT-fs (loop2): Directory bread(block 69) failed [ 134.931117][ T4291] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.940213][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.951330][ T5125] FAT-fs (loop2): Directory bread(block 70) failed [ 134.957894][ T5125] FAT-fs (loop2): Directory bread(block 71) failed [ 134.970998][ T4291] usb 4-1: Product: syz [ 134.980265][ T4291] usb 4-1: Manufacturer: syz [ 134.992782][ T4291] usb 4-1: SerialNumber: syz [ 135.004216][ T5125] FAT-fs (loop2): Directory bread(block 72) failed [ 135.012835][ T5125] FAT-fs (loop2): Directory bread(block 73) failed [ 135.507651][ T4291] usb 4-1: 0:2 : does not exist [ 135.540980][ T4291] usb 4-1: USB disconnect, device number 5 [ 135.907144][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.455811][ T33] bond0 (unregistering): Released all slaves [ 136.527441][ T93] block nbd2: Attempted send on invalid socket [ 136.533846][ T93] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 136.549573][ T93] gfs2: error 10 reading superblock [ 137.487469][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.507131][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.545877][ T4992] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.572788][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.589895][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.609425][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.616590][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.641347][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.664638][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.681765][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.687948][ T4291] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 137.700752][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.708877][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.742316][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.781661][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.808242][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.828991][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.889577][ T4992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.915745][ T4291] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 137.946859][ T4291] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 137.985950][ T4992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.033304][ T4291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 138.091449][ T4291] usb 3-1: config 1 has no interface number 0 [ 138.117998][ T4291] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 138.187161][ T4291] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.221730][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.261722][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.291093][ T4291] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 138.302742][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.341980][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.361320][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.361681][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.605652][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.664188][ T4291] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 139.692969][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.781129][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.895174][ T5187] loop3: detected capacity change from 0 to 512 [ 140.012987][ T5187] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 141.538739][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.576869][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.587886][ T4291] snd_usb_pod 3-1:1.1: set_interface failed [ 141.594022][ T4291] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 141.603769][ T4291] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 141.614830][ T4291] usb 3-1: USB disconnect, device number 4 [ 141.752679][ T4992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.993152][ T5231] loop4: detected capacity change from 0 to 512 [ 144.005315][ T5231] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.013772][ T5231] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.062275][ T5231] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.236: corrupted in-inode xattr [ 144.091431][ T5231] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.236: couldn't read orphan inode 15 (err -117) [ 144.127121][ T5231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.624196][ T26] audit: type=1800 audit(1737251134.286:6): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.236" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 146.634486][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.644127][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.693682][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 146.726403][ T5257] loop3: detected capacity change from 0 to 512 [ 146.748958][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.765803][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.794752][ T4992] device veth0_vlan entered promiscuous mode [ 146.807678][ T5257] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.832187][ T5257] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.853617][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.871448][ T5257] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 146.897833][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.936112][ T5257] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 147.021470][ T5257] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.239: Failed to acquire dquot type 1 [ 147.066748][ T5257] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.239: bg 0: block 40: padding at end of block bitmap is not set [ 147.124584][ T4992] device veth1_vlan entered promiscuous mode [ 147.138262][ T5257] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 147.149917][ T5257] EXT4-fs (loop3): 1 truncate cleaned up [ 147.182323][ T5257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.218295][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 147.238190][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.287037][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.307296][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.357956][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.512788][ T7] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 147.525595][ T4992] device veth0_macvtap entered promiscuous mode [ 147.537249][ T4992] device veth1_macvtap entered promiscuous mode [ 147.539008][ T7] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 147.555775][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.567030][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.576911][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.593298][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.619214][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.696240][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.759555][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.923127][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.130369][ T4992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.184801][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 148.225274][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.259573][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.280180][ T7] usb 5-1: config 1 has no interface number 0 [ 148.286469][ T7] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.298463][ T7] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 148.311769][ T7] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 148.320834][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.345085][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.345174][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 148.379532][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.419110][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 148.437494][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.467120][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.487673][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.512057][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.567953][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.599174][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.620986][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.631976][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.644095][ T4992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.651163][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.667003][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.682241][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.717429][ T4992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.742126][ T4992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.766562][ T4992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.786116][ T4992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.882348][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.921372][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.954723][ T22] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 148.984967][ T4584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.996857][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.017774][ T4584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.025394][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.057113][ T22] usb 3-1: Product: syz [ 149.070331][ T22] usb 3-1: Manufacturer: syz [ 149.077686][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.095201][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.103633][ T22] usb 3-1: SerialNumber: syz [ 149.113826][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.125602][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.489418][ T22] usb 3-1: 0:2 : does not exist [ 149.521248][ T22] usb 3-1: USB disconnect, device number 5 [ 149.646135][ T5305] loop5: detected capacity change from 0 to 128 [ 149.756607][ T26] audit: type=1800 audit(1737251139.456:7): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.178" name="bus" dev="loop5" ino=1048599 res=0 errno=0 [ 149.786173][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 149.997138][ T5308] syz.5.178: attempt to access beyond end of device [ 149.997138][ T5308] loop5: rw=2049, sector=353, nr_sectors = 688 limit=128 [ 150.081833][ T7] snd_usb_pod 5-1:1.1: set_interface failed [ 150.089205][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 150.151495][ T7] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 150.175585][ T7] usb 5-1: USB disconnect, device number 4 [ 152.399317][ T5348] vivid-007: kernel_thread() failed [ 152.449003][ T5350] loop4: detected capacity change from 0 to 512 [ 153.096955][ T5350] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 153.154812][ T5350] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.205351][ T5350] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 153.221608][ T5350] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 153.253176][ T5350] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.256: Failed to acquire dquot type 1 [ 153.295001][ T5350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.256: bg 0: block 40: padding at end of block bitmap is not set [ 153.380863][ T5350] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 153.427117][ T5350] EXT4-fs (loop4): 1 truncate cleaned up [ 153.465818][ T5350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.154064][ T5358] sctp: failed to load transform for md5: -2 [ 154.409587][ T5380] netlink: 'syz.1.261': attribute type 2 has an invalid length. [ 154.417430][ T5380] netlink: 'syz.1.261': attribute type 8 has an invalid length. [ 154.425228][ T5380] netlink: 132 bytes leftover after parsing attributes in process `syz.1.261'. [ 154.488981][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 154.536759][ T41] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 154.839259][ T41] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 154.886880][ T41] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 154.969029][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 155.438291][ T41] usb 3-1: config 1 has no interface number 0 [ 155.736727][ T41] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.904616][ T41] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 155.918732][ T41] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 155.941067][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.973887][ T41] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 156.170996][ T41] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 156.336557][ T5414] loop5: detected capacity change from 0 to 512 [ 156.444615][ T41] usb 3-1: USB disconnect, device number 6 [ 156.450721][ T5414] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 156.503926][ T41] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 158.645336][ T5438] loop5: detected capacity change from 0 to 512 [ 158.759201][ T5438] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 159.390334][ T5438] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.512703][ T5438] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 159.574307][ T5438] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 159.671016][ T5438] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.274: Failed to acquire dquot type 1 [ 159.841561][ T5438] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.274: bg 0: block 40: padding at end of block bitmap is not set [ 159.954609][ T5438] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 159.995726][ T5438] EXT4-fs (loop5): 1 truncate cleaned up [ 160.021088][ T5438] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.318771][ T4992] EXT4-fs (loop5): unmounting filesystem. [ 162.678119][ T5487] loop3: detected capacity change from 0 to 512 [ 162.727605][ T5487] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 163.931164][ T41] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.201929][ T41] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 164.251113][ T41] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.330049][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.407308][ T41] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 164.616444][ T41] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.641355][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.649411][ T41] usb 3-1: Product: syz [ 164.661145][ T41] usb 3-1: Manufacturer: syz [ 164.675719][ T41] usb 3-1: SerialNumber: syz [ 164.993611][ T41] usb 3-1: 0:2 : does not exist [ 165.347872][ T41] usb 3-1: USB disconnect, device number 7 [ 165.448278][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.781854][ T5524] netlink: 'syz.4.290': attribute type 2 has an invalid length. [ 165.789591][ T5524] netlink: 'syz.4.290': attribute type 8 has an invalid length. [ 165.797347][ T5524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.290'. [ 168.196388][ T5560] loop3: detected capacity change from 0 to 512 [ 168.271600][ T5560] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 168.290729][ T5560] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.350457][ T5560] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 168.401400][ T5560] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 168.420993][ T5560] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.300: Failed to acquire dquot type 1 [ 168.574176][ T5560] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.300: bg 0: block 40: padding at end of block bitmap is not set [ 168.642950][ T5560] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 168.675054][ T5560] EXT4-fs (loop3): 1 truncate cleaned up [ 168.791298][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.125726][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 169.369758][ T5584] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.378755][ T5584] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.387670][ T5584] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.396575][ T5584] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.405832][ T5584] device geneve2 entered promiscuous mode [ 169.434836][ T5516] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 169.729543][ T5516] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 169.876848][ T5516] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 169.900143][ T5584] syz.4.305 (5584) used greatest stack depth: 19544 bytes left [ 169.940563][ T5516] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 169.961907][ T5516] usb 6-1: config 1 has no interface number 0 [ 171.313863][ T5516] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 171.326061][ T5516] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 171.339956][ T5516] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 171.349299][ T5516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.459355][ T5516] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 171.662617][ T5516] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 171.874049][ T5516] usb 6-1: USB disconnect, device number 2 [ 171.890886][ T5516] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 173.292773][ T5627] loop5: detected capacity change from 0 to 32768 [ 173.321653][ T5627] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.314 (5627) [ 173.461781][ T5627] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.499054][ T5635] kvm: pic: non byte read [ 173.507235][ T5627] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 173.527526][ T5635] kvm: pic: non byte read [ 173.536852][ T5627] BTRFS info (device loop5): setting nodatacow, compression disabled [ 173.539519][ T5639] loop3: detected capacity change from 0 to 512 [ 173.583183][ T5627] BTRFS info (device loop5): force clearing of disk cache [ 173.611298][ T5627] BTRFS info (device loop5): turning on sync discard [ 173.618030][ T5627] BTRFS info (device loop5): doing ref verification [ 173.628680][ T5627] BTRFS info (device loop5): disabling free space tree [ 173.638294][ T5639] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 173.667041][ T5627] BTRFS info (device loop5): turning off discard [ 173.687576][ T5627] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 173.710339][ T5627] BTRFS info (device loop5): use zstd compression, level 3 [ 173.728506][ T5627] BTRFS info (device loop5): enabling ssd optimizations [ 173.822153][ T4294] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 173.830015][ T5627] BTRFS info (device loop5): using spread ssd allocation scheme [ 173.879031][ T5627] BTRFS info (device loop5): not using ssd optimizations [ 173.920791][ T5627] BTRFS info (device loop5): not using spread ssd allocation scheme [ 174.562489][ T5627] BTRFS info (device loop5): rebuilding free space tree [ 174.618456][ T4294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.631514][ T4294] usb 5-1: not running at top speed; connect to a high speed hub [ 174.651524][ T4294] usb 5-1: config 4 has an invalid interface number: 160 but max is 0 [ 174.681043][ T4294] usb 5-1: config 4 has no interface number 0 [ 174.687188][ T4294] usb 5-1: config 4 interface 160 has no altsetting 0 [ 174.713357][ T4294] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=d8.68 [ 174.730971][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.738996][ T4294] usb 5-1: Product: syz [ 174.753939][ T4294] usb 5-1: Manufacturer: syz [ 174.758912][ T4294] usb 5-1: SerialNumber: syz [ 174.795131][ T5627] BTRFS info (device loop5): disabling free space tree [ 174.819378][ T5627] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.866392][ T5627] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.050014][ T4294] usb_ehset_test: probe of 5-1:4.160 failed with error -32 [ 175.065630][ T4294] usb 5-1: USB disconnect, device number 5 [ 175.222690][ T4992] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.241309][ T5627] syz.5.314 (5627) used greatest stack depth: 19376 bytes left [ 176.426289][ T41] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.643521][ T41] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 176.675857][ T41] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.705335][ T41] usb 6-1: config 1 has no interface number 1 [ 176.722599][ T41] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 176.756703][ T41] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.783458][ T41] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.799756][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.966332][ T41] usb 6-1: Product: syz [ 176.970542][ T41] usb 6-1: Manufacturer: syz [ 176.975285][ T41] usb 6-1: SerialNumber: syz [ 177.243227][ T41] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 177.715941][ T41] usb 6-1: USB disconnect, device number 3 [ 178.104998][ T5716] loop5: detected capacity change from 0 to 512 [ 178.139960][ T5716] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 180.329783][ T5748] loop5: detected capacity change from 0 to 512 [ 180.379914][ T5748] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 181.941732][ T5676] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.793411][ T5676] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.827458][ T5676] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 182.868521][ T5676] usb 3-1: config 1 has no interface number 1 [ 182.930840][ T5676] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 182.961254][ T5676] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.986818][ T5676] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.005070][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.018706][ T5784] loop5: detected capacity change from 0 to 512 [ 183.035144][ T5676] usb 3-1: Product: syz [ 183.043975][ T5676] usb 3-1: Manufacturer: syz [ 183.061273][ T5784] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.072026][ T5676] usb 3-1: SerialNumber: syz [ 183.105014][ T5784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.164860][ T5784] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.343: corrupted in-inode xattr [ 183.209235][ T5784] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.343: couldn't read orphan inode 15 (err -117) [ 183.252795][ T5784] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 183.301870][ T5676] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 183.355867][ T5676] usb 3-1: USB disconnect, device number 8 [ 183.439074][ T26] audit: type=1800 audit(1737251173.136:8): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.343" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 183.559920][ T4992] EXT4-fs (loop5): unmounting filesystem. [ 183.722168][ T5797] loop5: detected capacity change from 0 to 512 [ 183.732024][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.778099][ T5797] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 185.732123][ T5813] fuse: Unknown parameter 'user_i00000000000000000000' [ 186.001210][ T4246] Bluetooth: hci4: command 0x0406 tx timeout [ 186.007359][ T4246] Bluetooth: hci3: command 0x0406 tx timeout [ 186.014287][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 186.014306][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 190.286829][ T5868] loop4: detected capacity change from 0 to 32768 [ 190.301567][ T5868] XFS: noikeep mount option is deprecated. [ 190.358826][ T5868] XFS (loop4): Mounting V5 Filesystem [ 190.461532][ T5868] XFS (loop4): Ending clean mount [ 190.475781][ T5868] XFS (loop4): Quotacheck needed: Please wait. [ 190.553742][ T5868] XFS (loop4): Quotacheck: Done. [ 190.642004][ T5902] fuse: Unknown parameter 'user_i00000000000000000000' [ 191.098726][ T5907] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 191.106495][ T5907] netlink: 'syz.3.362': attribute type 8 has an invalid length. [ 191.114235][ T5907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.362'. [ 191.572140][ T4252] XFS (loop4): Unmounting Filesystem [ 191.583278][ T5909] loop3: detected capacity change from 0 to 512 [ 191.737824][ T5909] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 194.168204][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.174621][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.047466][ T5952] netlink: 'syz.5.373': attribute type 2 has an invalid length. [ 195.055224][ T5952] netlink: 'syz.5.373': attribute type 8 has an invalid length. [ 195.062925][ T5952] netlink: 132 bytes leftover after parsing attributes in process `syz.5.373'. [ 195.368434][ T5959] loop5: detected capacity change from 0 to 1024 [ 195.488561][ T5959] fuse: Unknown parameter 'user_i00000000000000000000' [ 195.608223][ T75] hfsplus: b-tree write err: -5, ino 4 [ 200.160824][ T6007] netlink: 'syz.1.385': attribute type 2 has an invalid length. [ 200.168659][ T6007] netlink: 'syz.1.385': attribute type 8 has an invalid length. [ 200.176394][ T6007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.385'. [ 200.769812][ T6017] fuse: Unknown parameter 'user_id00000000000000000000' [ 201.284506][ T6012] loop5: detected capacity change from 0 to 32768 [ 201.650397][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.387'. [ 201.660860][ T26] audit: type=1400 audit(1737251191.346:9): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6011 comm="syz.5.387" [ 202.276912][ T6030] loop4: detected capacity change from 0 to 512 [ 202.409071][ T6030] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.446543][ T6030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.534426][ T6030] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.392: corrupted in-inode xattr [ 202.652204][ T6030] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.392: couldn't read orphan inode 15 (err -117) [ 204.027366][ T6030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.231802][ T4468] wlan1: Trigger new scan to find an IBSS to join [ 204.356227][ T6049] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 204.364531][ T6049] netlink: 'syz.2.396': attribute type 8 has an invalid length. [ 204.372293][ T6049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.396'. [ 204.421032][ T26] audit: type=1800 audit(1737251194.086:10): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.392" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 204.797045][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 204.813459][ T6054] loop3: detected capacity change from 0 to 512 [ 204.856853][ T6057] loop5: detected capacity change from 0 to 1024 [ 204.875821][ T6054] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 205.459804][ T6060] fuse: Bad value for 'fd' [ 205.553225][ T4772] hfsplus: b-tree write err: -5, ino 4 [ 206.839643][ T6084] netlink: 'syz.5.407': attribute type 2 has an invalid length. [ 206.847403][ T6084] netlink: 'syz.5.407': attribute type 8 has an invalid length. [ 206.855166][ T6084] netlink: 132 bytes leftover after parsing attributes in process `syz.5.407'. [ 207.763085][ T4289] wlan1: Trigger new scan to find an IBSS to join [ 208.773833][ T4332] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 210.262496][ T6111] loop4: detected capacity change from 0 to 512 [ 210.290595][ T6111] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768 [ 210.348194][ T6115] loop3: detected capacity change from 0 to 1024 [ 210.513646][ T6115] fuse: Unknown parameter 'user_id00000000000000000000' [ 211.242681][ T4518] hfsplus: b-tree write err: -5, ino 4 [ 211.337075][ T6121] tipc: Started in network mode [ 211.342969][ T6121] tipc: Node identity 7f000001, cluster identity 4711 [ 211.367612][ T6121] tipc: Enabled bearer , priority 10 [ 211.469415][ T6126] loop3: detected capacity change from 0 to 512 [ 212.898314][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 212.911232][ T26] audit: type=1400 audit(1737251202.336:11): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6106 comm="syz.2.412" [ 212.947204][ T6126] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 212.968059][ T5678] tipc: Node number set to 2130706433 [ 213.241188][ T5677] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 213.480181][ T5677] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.509432][ T5677] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.537628][ T5677] usb 5-1: config 1 has no interface number 1 [ 213.574938][ T5677] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 213.606787][ T5677] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.658981][ T5677] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.704272][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.741351][ T5677] usb 5-1: Product: syz [ 213.840175][ T5677] usb 5-1: Manufacturer: syz [ 213.845124][ T5677] usb 5-1: SerialNumber: syz [ 214.075093][ T5677] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 214.121292][ T5677] usb 5-1: USB disconnect, device number 6 [ 215.003654][ T4335] udevd[4335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.120019][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 215.151773][ T26] audit: type=1400 audit(1737251204.816:12): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6137 comm="syz.1.422" [ 216.592435][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 216.701364][ T26] audit: type=1400 audit(1737251206.286:13): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6144 comm="syz.2.424" [ 216.811278][ T6166] loop5: detected capacity change from 0 to 1024 [ 216.931913][ T6166] fuse: Bad value for 'fd' [ 216.953023][ T41] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 217.018527][ T9] hfsplus: b-tree write err: -5, ino 4 [ 217.121354][ T41] usb 4-1: device descriptor read/64, error -71 [ 217.167290][ T6172] netlink: 'syz.5.431': attribute type 2 has an invalid length. [ 217.175029][ T6172] netlink: 'syz.5.431': attribute type 8 has an invalid length. [ 217.182779][ T6172] netlink: 132 bytes leftover after parsing attributes in process `syz.5.431'. [ 217.531019][ T41] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 217.669868][ T6182] loop5: detected capacity change from 0 to 512 [ 217.691253][ T41] usb 4-1: device descriptor read/64, error -71 [ 217.698255][ T6182] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 217.927742][ T41] usb usb4-port1: attempt power cycle [ 218.671109][ T41] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 218.732998][ T41] usb 4-1: device descriptor read/8, error -71 [ 219.080996][ T41] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 219.141697][ T41] usb 4-1: device descriptor read/8, error -71 [ 219.269629][ T41] usb usb4-port1: unable to enumerate USB device [ 219.763578][ T9] wlan1: Trigger new scan to find an IBSS to join [ 220.564268][ T6203] loop4: detected capacity change from 0 to 1024 [ 220.735048][ T6203] fuse: Bad value for 'fd' [ 220.798259][ T4468] hfsplus: b-tree write err: -5, ino 4 [ 221.347197][ T6201] loop3: detected capacity change from 0 to 32768 [ 221.417379][ T6201] XFS: noikeep mount option is deprecated. [ 221.493958][ T6201] XFS (loop3): Mounting V5 Filesystem [ 221.572952][ T6208] loop4: detected capacity change from 0 to 32768 [ 221.637130][ T4335] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.682276][ T6201] XFS (loop3): Ending clean mount [ 221.720162][ T6201] XFS (loop3): Quotacheck needed: Please wait. [ 221.784245][ T6201] XFS (loop3): Quotacheck: Done. [ 221.845853][ T6221] netlink: 'syz.5.444': attribute type 2 has an invalid length. [ 221.853628][ T6221] netlink: 'syz.5.444': attribute type 8 has an invalid length. [ 221.861442][ T6221] netlink: 132 bytes leftover after parsing attributes in process `syz.5.444'. [ 222.049988][ T6223] loop5: detected capacity change from 0 to 512 [ 222.103279][ T6223] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.130872][ T6223] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.145062][ T6208] loop4: detected capacity change from 0 to 256 [ 222.400027][ T6223] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.445: corrupted in-inode xattr [ 222.729888][ T6208] FAT-fs (loop4): Directory bread(block 64) failed [ 222.749137][ T6208] FAT-fs (loop4): Directory bread(block 65) failed [ 222.771258][ T6208] FAT-fs (loop4): Directory bread(block 66) failed [ 222.791332][ T6208] FAT-fs (loop4): Directory bread(block 67) failed [ 222.808707][ T6223] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.445: couldn't read orphan inode 15 (err -117) [ 222.826287][ T6208] FAT-fs (loop4): Directory bread(block 68) failed [ 222.846393][ T6208] FAT-fs (loop4): Directory bread(block 69) failed [ 222.856910][ T6223] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 222.876301][ T4245] XFS (loop3): Unmounting Filesystem [ 222.891665][ T6208] FAT-fs (loop4): Directory bread(block 70) failed [ 222.951012][ T6208] FAT-fs (loop4): Directory bread(block 71) failed [ 222.967256][ T6208] FAT-fs (loop4): Directory bread(block 72) failed [ 222.978918][ T6208] FAT-fs (loop4): Directory bread(block 73) failed [ 223.138281][ T26] audit: type=1800 audit(1737251212.836:14): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.445" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 223.364080][ T4992] EXT4-fs (loop5): unmounting filesystem. [ 223.474428][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 223.701011][ T26] audit: type=1400 audit(1737251213.166:15): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6207 comm="syz.4.442" [ 223.883635][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 223.892578][ T6234] netlink: 44 bytes leftover after parsing attributes in process `syz.3.446'. [ 223.901848][ T6234] Zero length message leads to an empty skb [ 224.048435][ T6237] loop5: detected capacity change from 0 to 512 [ 224.405371][ T6237] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 768 [ 225.280652][ T4584] wlan1: Trigger new scan to find an IBSS to join [ 228.537943][ T4313] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 229.999281][ T6297] loop3: detected capacity change from 0 to 512 [ 230.017425][ T6297] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768 [ 230.065192][ T6302] tipc: Started in network mode [ 230.111247][ T6302] tipc: Node identity 7f000001, cluster identity 4711 [ 230.137341][ T6302] tipc: Enabled bearer , priority 10 [ 231.771703][ T4294] tipc: Node number set to 2130706433 [ 232.557359][ T6333] loop3: detected capacity change from 0 to 512 [ 232.579103][ T6333] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.605726][ T6333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.045181][ T6333] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.475: corrupted in-inode xattr [ 234.061175][ T6333] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.475: couldn't read orphan inode 15 (err -117) [ 234.118776][ T6333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.449437][ T26] audit: type=1800 audit(1737251224.146:16): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.475" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 234.663414][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 237.160190][ T6376] loop3: detected capacity change from 0 to 512 [ 237.266992][ T6376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.304340][ T6376] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.741440][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 238.771616][ T4351] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.494324][ T4584] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.788029][ T6440] vxcan1: MTU too low for tipc bearer [ 243.813578][ T6440] tipc: Enabling of bearer rejected, failed to enable media [ 247.921786][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 248.573842][ T6490] input: syz1 as /devices/virtual/input/input6 [ 250.376992][ T6485] loop3: detected capacity change from 0 to 32768 [ 250.452307][ T4335] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.814604][ T6485] loop3: detected capacity change from 0 to 256 [ 254.337590][ T6532] loop5: detected capacity change from 0 to 1024 [ 254.368902][ T6532] ================================================================== [ 254.377008][ T6532] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x576/0x11f0 [ 254.384772][ T6532] Read of size 2 at addr ffff888076e85218 by task syz.5.531/6532 [ 254.392505][ T6532] [ 254.394854][ T6532] CPU: 0 PID: 6532 Comm: syz.5.531 Not tainted 6.1.125-syzkaller #0 [ 254.402844][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.412932][ T6532] Call Trace: [ 254.416229][ T6532] [ 254.419170][ T6532] dump_stack_lvl+0x1e3/0x2cb [ 254.423876][ T6532] ? nf_tcp_handle_invalid+0x642/0x642 [ 254.429369][ T6532] ? panic+0x764/0x764 [ 254.433459][ T6532] ? _printk+0xd1/0x111 [ 254.437641][ T6532] ? __virt_addr_valid+0x17f/0x530 [ 254.442772][ T6532] ? __virt_addr_valid+0x17f/0x530 [ 254.447902][ T6532] print_report+0x15f/0x4f0 [ 254.452419][ T6532] ? __virt_addr_valid+0x17f/0x530 [ 254.457547][ T6532] ? __virt_addr_valid+0x17f/0x530 [ 254.462680][ T6532] ? __virt_addr_valid+0x45b/0x530 [ 254.467808][ T6532] ? __phys_addr+0xb6/0x170 [ 254.472333][ T6532] ? hfsplus_uni2asc+0x576/0x11f0 [ 254.477388][ T6532] kasan_report+0x136/0x160 [ 254.481994][ T6532] ? hfsplus_uni2asc+0x576/0x11f0 [ 254.487041][ T6532] hfsplus_uni2asc+0x576/0x11f0 [ 254.491914][ T6532] ? memcpy+0x3c/0x60 [ 254.495910][ T6532] hfsplus_listxattr+0x70a/0xf00 [ 254.500863][ T6532] ? hfsplus_getxattr+0xd0/0xd0 [ 254.505731][ T6532] ? __alloc_pages+0x36f/0x770 [ 254.510529][ T6532] ? kvmalloc_node+0x6e/0x180 [ 254.515214][ T6532] ? rcu_is_watching+0x11/0xb0 [ 254.519985][ T6532] ? kvmalloc_node+0x6e/0x180 [ 254.524675][ T6532] ? trace_kmalloc+0x22/0xa0 [ 254.529281][ T6532] ? __kmalloc_node+0x154/0x230 [ 254.534146][ T6532] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 254.539540][ T6532] listxattr+0x282/0x2e0 [ 254.543814][ T6532] ? hfsplus_getxattr+0xd0/0xd0 [ 254.548689][ T6532] __x64_sys_listxattr+0x172/0x230 [ 254.553824][ T6532] ? print_irqtrace_events+0x210/0x210 [ 254.559311][ T6532] ? __ia32_sys_fgetxattr+0xa0/0xa0 [ 254.564530][ T6532] ? syscall_enter_from_user_mode+0x2e/0x230 [ 254.570535][ T6532] ? lockdep_hardirqs_on+0x94/0x130 [ 254.575759][ T6532] ? syscall_enter_from_user_mode+0x2e/0x230 [ 254.581764][ T6532] do_syscall_64+0x3b/0xb0 [ 254.586206][ T6532] ? clear_bhb_loop+0x45/0xa0 [ 254.590903][ T6532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.596823][ T6532] RIP: 0033:0x7fcbf4985d29 [ 254.601266][ T6532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.620897][ T6532] RSP: 002b:00007fcbf56d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 254.629344][ T6532] RAX: ffffffffffffffda RBX: 00007fcbf4b75fa0 RCX: 00007fcbf4985d29 [ 254.637342][ T6532] RDX: fffffffffffffee6 RSI: 0000000000000000 RDI: 0000000020000a00 [ 254.645335][ T6532] RBP: 00007fcbf4a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 254.653328][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.661312][ T6532] R13: 0000000000000000 R14: 00007fcbf4b75fa0 R15: 00007ffe2c42e3a8 [ 254.669317][ T6532] [ 254.672341][ T6532] [ 254.674668][ T6532] Allocated by task 6532: [ 254.678997][ T6532] kasan_set_track+0x4b/0x70 [ 254.683608][ T6532] __kasan_kmalloc+0x97/0xb0 [ 254.688209][ T6532] __kmalloc+0xb2/0x230 [ 254.692379][ T6532] hfsplus_find_init+0x81/0x1c0 [ 254.697243][ T6532] hfsplus_listxattr+0x3bd/0xf00 [ 254.702182][ T6532] listxattr+0x282/0x2e0 [ 254.706431][ T6532] __x64_sys_listxattr+0x172/0x230 [ 254.711548][ T6532] do_syscall_64+0x3b/0xb0 [ 254.715984][ T6532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.721892][ T6532] [ 254.724392][ T6532] The buggy address belongs to the object at ffff888076e85000 [ 254.724392][ T6532] which belongs to the cache kmalloc-1k of size 1024 [ 254.738457][ T6532] The buggy address is located 536 bytes inside of [ 254.738457][ T6532] 1024-byte region [ffff888076e85000, ffff888076e85400) [ 254.751830][ T6532] [ 254.754159][ T6532] The buggy address belongs to the physical page: [ 254.760589][ T6532] page:ffffea0001dba000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888076e86800 pfn:0x76e80 [ 254.772058][ T6532] head:ffffea0001dba000 order:3 compound_mapcount:0 compound_pincount:0 [ 254.780403][ T6532] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 254.788414][ T6532] raw: 00fff00000010200 ffffea0001527c00 dead000000000002 ffff888017c41dc0 [ 254.797007][ T6532] raw: ffff888076e86800 000000008010000f 00000001ffffffff 0000000000000000 [ 254.805596][ T6532] page dumped because: kasan: bad access detected [ 254.812020][ T6532] page_owner tracks the page as allocated [ 254.817735][ T6532] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5728, tgid 5727 (syz.5.333), ts 179919081405, free_ts 179158417113 [ 254.839800][ T6532] post_alloc_hook+0x18d/0x1b0 [ 254.844586][ T6532] get_page_from_freelist+0x3731/0x38d0 [ 254.850140][ T6532] __alloc_pages+0x28d/0x770 [ 254.854734][ T6532] alloc_slab_page+0x6a/0x150 [ 254.859418][ T6532] new_slab+0x84/0x2d0 [ 254.863494][ T6532] ___slab_alloc+0xc20/0x1270 [ 254.868174][ T6532] __kmem_cache_alloc_node+0x19f/0x260 [ 254.873638][ T6532] __kmalloc_node_track_caller+0xa0/0x220 [ 254.879361][ T6532] pskb_carve+0x331/0x18c0 [ 254.883777][ T6532] pskb_extract+0x41/0x220 [ 254.888196][ T6532] rds_tcp_data_recv+0x436/0xa20 [ 254.893139][ T6532] tcp_read_sock+0x20e/0xad0 [ 254.897727][ T6532] rds_tcp_data_ready+0x2c5/0x6a0 [ 254.902754][ T6532] tcp_data_queue+0x21c5/0x6fd0 [ 254.907610][ T6532] tcp_rcv_established+0xe63/0x1f00 [ 254.912820][ T6532] tcp_v6_do_rcv+0x53c/0x1270 [ 254.917514][ T6532] page last free stack trace: [ 254.922194][ T6532] free_unref_page_prepare+0x12a6/0x15b0 [ 254.927832][ T6532] free_unref_page+0x33/0x3e0 [ 254.932494][ T6532] qlist_free_all+0x76/0xe0 [ 254.936980][ T6532] kasan_quarantine_reduce+0x156/0x170 [ 254.942429][ T6532] __kasan_slab_alloc+0x1f/0x70 [ 254.947278][ T6532] slab_post_alloc_hook+0x52/0x3a0 [ 254.952387][ T6532] kmem_cache_alloc+0x10c/0x2d0 [ 254.957249][ T6532] getname_flags+0xb8/0x4f0 [ 254.961752][ T6532] do_sys_openat2+0xd2/0x4f0 [ 254.966342][ T6532] __x64_sys_openat+0x243/0x290 [ 254.971207][ T6532] do_syscall_64+0x3b/0xb0 [ 254.975638][ T6532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.981553][ T6532] [ 254.983875][ T6532] Memory state around the buggy address: [ 254.989508][ T6532] ffff888076e85100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.997754][ T6532] ffff888076e85180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 255.005818][ T6532] >ffff888076e85200: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.013885][ T6532] ^ [ 255.018743][ T6532] ffff888076e85280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.026816][ T6532] ffff888076e85300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.034888][ T6532] ================================================================== [ 255.065646][ T6532] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.072876][ T6532] CPU: 0 PID: 6532 Comm: syz.5.531 Not tainted 6.1.125-syzkaller #0 [ 255.080872][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.091028][ T6532] Call Trace: [ 255.094315][ T6532] [ 255.097254][ T6532] dump_stack_lvl+0x1e3/0x2cb [ 255.101953][ T6532] ? nf_tcp_handle_invalid+0x642/0x642 [ 255.107429][ T6532] ? panic+0x764/0x764 [ 255.111597][ T6532] ? preempt_schedule_common+0xa6/0xd0 [ 255.117157][ T6532] ? vscnprintf+0x59/0x80 [ 255.121500][ T6532] panic+0x318/0x764 [ 255.125413][ T6532] ? check_panic_on_warn+0x1d/0xa0 [ 255.130543][ T6532] ? memcpy_page_flushcache+0xfc/0xfc [ 255.135927][ T6532] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 255.141925][ T6532] ? _raw_spin_unlock+0x40/0x40 [ 255.146793][ T6532] ? print_report+0x4a3/0x4f0 [ 255.151486][ T6532] check_panic_on_warn+0x7e/0xa0 [ 255.156440][ T6532] ? hfsplus_uni2asc+0x576/0x11f0 [ 255.161481][ T6532] end_report+0x66/0x110 [ 255.165739][ T6532] kasan_report+0x143/0x160 [ 255.170253][ T6532] ? hfsplus_uni2asc+0x576/0x11f0 [ 255.175305][ T6532] hfsplus_uni2asc+0x576/0x11f0 [ 255.180164][ T6532] ? memcpy+0x3c/0x60 [ 255.184169][ T6532] hfsplus_listxattr+0x70a/0xf00 [ 255.189129][ T6532] ? hfsplus_getxattr+0xd0/0xd0 [ 255.193988][ T6532] ? __alloc_pages+0x36f/0x770 [ 255.198754][ T6532] ? kvmalloc_node+0x6e/0x180 [ 255.203422][ T6532] ? rcu_is_watching+0x11/0xb0 [ 255.208182][ T6532] ? kvmalloc_node+0x6e/0x180 [ 255.212850][ T6532] ? trace_kmalloc+0x22/0xa0 [ 255.217432][ T6532] ? __kmalloc_node+0x154/0x230 [ 255.222275][ T6532] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 255.227644][ T6532] listxattr+0x282/0x2e0 [ 255.231876][ T6532] ? hfsplus_getxattr+0xd0/0xd0 [ 255.236733][ T6532] __x64_sys_listxattr+0x172/0x230 [ 255.241853][ T6532] ? print_irqtrace_events+0x210/0x210 [ 255.247319][ T6532] ? __ia32_sys_fgetxattr+0xa0/0xa0 [ 255.252513][ T6532] ? syscall_enter_from_user_mode+0x2e/0x230 [ 255.258502][ T6532] ? lockdep_hardirqs_on+0x94/0x130 [ 255.263698][ T6532] ? syscall_enter_from_user_mode+0x2e/0x230 [ 255.269673][ T6532] do_syscall_64+0x3b/0xb0 [ 255.274083][ T6532] ? clear_bhb_loop+0x45/0xa0 [ 255.278749][ T6532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.284635][ T6532] RIP: 0033:0x7fcbf4985d29 [ 255.289038][ T6532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.308633][ T6532] RSP: 002b:00007fcbf56d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 255.317047][ T6532] RAX: ffffffffffffffda RBX: 00007fcbf4b75fa0 RCX: 00007fcbf4985d29 [ 255.325099][ T6532] RDX: fffffffffffffee6 RSI: 0000000000000000 RDI: 0000000020000a00 [ 255.333063][ T6532] RBP: 00007fcbf4a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 255.341108][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.349073][ T6532] R13: 0000000000000000 R14: 00007fcbf4b75fa0 R15: 00007ffe2c42e3a8 [ 255.357038][ T6532] [ 255.360350][ T6532] Kernel Offset: disabled [ 255.364685][ T6532] Rebooting in 86400 seconds..