last executing test programs: 5m40.977121024s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x2000000b, 0x0, 0x5}, 0x1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 5m39.80336676s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf5b}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4004010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="110725bd7000fbdbc12504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 5m39.720128878s ago: executing program 0 (id=1): ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x1, 0xa816}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000640)={0x2, 0xfc}, 0x2) 5m38.720070267s ago: executing program 3 (id=10): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x1, 0xa, 0x14000000, 0x0, 0xfffffffd, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x4, 0x1, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x80000000}) 5m24.58903532s ago: executing program 32 (id=1): ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x1, 0xa816}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000640)={0x2, 0xfc}, 0x2) 5m23.641966664s ago: executing program 33 (id=10): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x1, 0xa, 0x14000000, 0x0, 0xfffffffd, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x4, 0x1, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x80000000}) 4m35.566002914s ago: executing program 4 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = gettid() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_clone(0x20000, &(0x7f0000000380)="fd84128440e626398caecc80e9fb8b45d58a8c044961834c9e7f970d92b0a51d43c846070d9e4963a2debd4ab3857f974c2cfe7770057ca4186a0bcf1129eeb176e41df541b6d39418efefac77323d8f6c9dc2c8e744588ca835af99253c393a22d1a1fdf93961c2330bb266117e1a6bdf81d0b12de92c9b834dd488eab860b99629cee12d0636345482fff76695fe52b0743097a7", 0x95, &(0x7f0000000180), 0x0, &(0x7f0000000440)="44cdbb14dff96da9391cd2592febf5cf7607ea9734f79bf458f97366f117ae339de32f267cbb4226c65767e7f813f94dbcedfe127e7b04fa60a070a1bb21e4a25ae4303494850543ec7e42580eaadd093a13b2a54e94a133f58ad8d74aa7bbf3090c47a1cf5bc0625c80b4d84f4198416849c7e0ce0ed4c0b31b6c9eec260b6687900e1930f7e78201af682627f14083a34359af197622ece0ff482f190548f515389b1004bbe3600d419a7a4e6f035b2bdeba99df86211fe19c1699ab4c539f21cc645be08e1a82c5bc2813") prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x7, 0x2f, 0x1}) 4m34.037842174s ago: executing program 4 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E'], 0x20) 4m32.398204286s ago: executing program 4 (id=119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @private=0xa010100}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00'}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4m31.395055585s ago: executing program 6 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x118820, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x81}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in6=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x2, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@empty, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}]}]}, 0x17c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x387f, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000580)='GPL\x00', 0x8000, 0x8f, &(0x7f00000005c0)=""/143, 0x41100, 0x88b952b8e0d4b726, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f00000007c0), 0x10, 0x6a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000004c0)='ext4_fc_commit_start\x00', r6, 0x0, 0x9}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setgroups(0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) creat(&(0x7f0000000200)='./file1\x00', 0x2) 4m31.211392663s ago: executing program 4 (id=122): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) 4m29.458985756s ago: executing program 6 (id=124): socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000300)={{0x4009, 0x4, 0x80, 0x7, 'syz1\x00', 0x365e250b}, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0xc2d0, 'syz0\x00', 0x0}) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x13) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x86) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000040), 0x4) write(r1, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0", 0x93) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x3, &(0x7f0000000080)=0x77) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000003d00090000000000000000070100000004000000080001800400108008000200", @ANYBLOB="5be614fbe3a5dfd873e8e20ba841973caa45087fef69e7718ed0729ab8d30bfba8669e484deef53c326e25ea9d0c5970b981d65cf8bb21cbca38fffab5386c96eeaa572280be500001ca3d491a0f7bc3"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 4m29.458174376s ago: executing program 4 (id=125): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f0000000000)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d0040d1) 4m27.726558137s ago: executing program 4 (id=130): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0xfffffffffffffffc, 0x0) ptrace$getregset(0x4204, r0, 0x3, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001740)="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", 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, 0x0}, 0x20) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0xc6e701) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = mq_open(&(0x7f0000000080)='\x00', 0x8c0, 0x43e8810af9c41ce7, &(0x7f00000000c0)={0x800, 0x5, 0x1, 0x3}) mq_notify(r5, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cc, 0x2}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4m14.030914997s ago: executing program 34 (id=124): socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000300)={{0x4009, 0x4, 0x80, 0x7, 'syz1\x00', 0x365e250b}, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0xc2d0, 'syz0\x00', 0x0}) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x13) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x86) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000040), 0x4) write(r1, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0", 0x93) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x3, &(0x7f0000000080)=0x77) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000003d00090000000000000000070100000004000000080001800400108008000200", @ANYBLOB="5be614fbe3a5dfd873e8e20ba841973caa45087fef69e7718ed0729ab8d30bfba8669e484deef53c326e25ea9d0c5970b981d65cf8bb21cbca38fffab5386c96eeaa572280be500001ca3d491a0f7bc3"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 4m11.789892118s ago: executing program 35 (id=130): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0xfffffffffffffffc, 0x0) ptrace$getregset(0x4204, r0, 0x3, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001740)="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", 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, 0x0}, 0x20) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0xc6e701) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = mq_open(&(0x7f0000000080)='\x00', 0x8c0, 0x43e8810af9c41ce7, &(0x7f00000000c0)={0x800, 0x5, 0x1, 0x3}) mq_notify(r5, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cc, 0x2}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 25.739111995s ago: executing program 8 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000f500000600080000003300007bcc41"], 0x2a) 23.94361161s ago: executing program 8 (id=664): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) fcntl$setstatus(r0, 0x4, 0x2800) syz_open_dev$evdev(&(0x7f0000000180), 0x200, 0xa2600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = getpid() syz_pidfd_open(r2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 22.574019074s ago: executing program 8 (id=667): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200087fc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sysinfo(&(0x7f0000000000)=""/196) r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r2, &(0x7f00000098c0), 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 13.654030616s ago: executing program 8 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x10) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r7, 0x5412, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa) r8 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x2c}}, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="5c6df6c73e0d2043db66aa215ea9cb749a073654efd9da7d1f33705b831eaa815929d53b9c49169026f5e09c7fa8aba74cd4d65c0786a3fadb1305a7f0db81dfea20b5a0a1ef"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 11.747680142s ago: executing program 2 (id=693): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385204080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) close(0xffffffffffffffff) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x1f00, 0x0}) 10.583378086s ago: executing program 2 (id=695): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000740)=0x9, 0x4) 10.369919427s ago: executing program 2 (id=696): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 8.334823816s ago: executing program 5 (id=700): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109021b00010000c0080904530005058d9d00090582a2c2"], 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0xc0202, 0x0) fcntl$dupfd(r3, 0x0, r1) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = msgget(0x0, 0x40) msgctl$MSG_INFO(r4, 0xc, &(0x7f00000000c0)=""/173) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r7, &(0x7f0000000480)={0x1, {&(0x7f0000000380)=""/1, 0x1, 0x0, 0x3, 0x3}}, 0x48) dup(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.681845139s ago: executing program 7 (id=703): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0) 6.730953092s ago: executing program 7 (id=705): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385204080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) close(0xffffffffffffffff) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x1f00, 0x0}) 5.693594204s ago: executing program 7 (id=707): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000001e40)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 5.01648007s ago: executing program 5 (id=708): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 4.949782337s ago: executing program 1 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0xffffff00}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006"], 0x1c}}, 0x0) 4.890071542s ago: executing program 7 (id=710): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) 4.841989307s ago: executing program 7 (id=711): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0xff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000eaff000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x7, 0xc4f, 0x1, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 4.831942878s ago: executing program 5 (id=712): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0xd, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0xffffffff, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x0, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0x1, 0x2, 0x1, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc00"], 0x174}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203000210000000000000000000000002"], 0x80}, 0x1, 0x7}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.681845553s ago: executing program 2 (id=713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffff25, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000380)=""/102392, 0x18ff8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, {0x2, 0xff, 0x3}}, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) 4.346697636s ago: executing program 1 (id=714): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b", 0x38}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b0", 0x5}, {0x0, 0x11}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) 4.102337399s ago: executing program 1 (id=715): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x14, 0x0, 0x700, 0x10, &(0x7f0000000300), 0x10}, 0x90) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0xa10812, &(0x7f00000009c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b38fbd8a2aaaa3eb9629d0d9360c03c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bd0766812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aaf", @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0], 0x21, 0x1516, &(0x7f0000001f80)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) listen(0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) close(0x3) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="00000000976670dfe4cee7cb43a4273af7a34880ae099c1ef21dec214cb8741368db24573e9606a59b238e8caf15b49ba320cc5bd7117f3f3d311583ab33c09f6ba00f9cc0ff7856", 0x48, 0xffffffffffffffff) open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 3.946068175s ago: executing program 2 (id=716): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0x8, 0x6, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x58, 0x2, 0x4, 0x9, 0x3a3c, {0x6, 0x7, 0xfffb, 0xf561}, 0x0, 0x0}}) 2.707472556s ago: executing program 1 (id=717): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385204080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) close(0xffffffffffffffff) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x1f00, 0x0}) 2.559166281s ago: executing program 8 (id=718): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x2, 0x0, @time={0x3ff, 0x80}, {0xe, 0xdf}, {0x2a, 0x9}, @control={0x9, 0xb, 0x4}}, {0x2, 0x0, 0x0, 0x0, @time={0x367f, 0xffeffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) 2.451512671s ago: executing program 5 (id=719): mkdir(0x0, 0x0) chdir(0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f0000001300)="d08a12c52edbbb40681dc8bad9b382e7", 0x10}], 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 850.003467ms ago: executing program 8 (id=720): geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x1}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d708941c8eb50"]) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) gettid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5414, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x7, 0x0, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x4000002, 0xf27, 0xffff, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) r6 = dup(r3) write$cgroup_subtree(r6, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x2, 0x4, 0x1, 0x3, 0x80000001}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000200)) write$P9_RRENAME(r6, 0x0, 0x0) 801.343482ms ago: executing program 5 (id=721): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) 800.565712ms ago: executing program 1 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) 554.649816ms ago: executing program 1 (id=723): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 191.190012ms ago: executing program 5 (id=724): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000002200)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000380)={0x1, 0x100, 0x4, {0x4, 0x7, 0x780000, 0xfcad}}) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x18, 0xa, 0x9d, 0x5, 0x22, 0x4, 0x7, 0x0, 0x1d, 0x12, 0x1, 0x670b8e23, 0x7, 0x3d, 0x7, 0x4, [0x10, 0x7f]}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) io_setup(0x202, &(0x7f0000000200)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a99300001000000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x81) rmdir(&(0x7f0000000040)='./control\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000) 94.533391ms ago: executing program 2 (id=725): socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_STATX(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040080) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 0s ago: executing program 7 (id=726): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffff25, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000380)=""/102392, 0x18ff8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, {0x2, 0xff, 0x3}}, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.769383][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.780297][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.791647][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.807402][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.834445][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.848016][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859446][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.895413][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.905993][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.918516][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.934288][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.949538][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.962351][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.986483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.010817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.035137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.056560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.138885][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.148178][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.158930][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.168157][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.190969][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.200200][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.217069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.364799][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.401872][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.491674][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.500516][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.515420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.518566][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.531998][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.541776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.550193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.643902][ T4311] xt_socket: unknown flags 0x50 [ 77.305853][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 77.312023][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 77.318560][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 77.327754][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 77.334897][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 77.519780][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.548125][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.611493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.101678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.163467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.172597][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.181828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 78.191405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 78.200858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 78.210794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.234446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.243758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.253258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.831590][ T4331] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 78.838737][ T4331] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 78.846735][ T4331] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 78.853947][ T4331] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 80.070331][ T4331] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 80.077249][ T4331] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 80.084302][ T4331] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 80.091725][ T4331] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 80.098919][ T4331] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 80.105830][ T4331] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 80.112672][ T4331] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 80.119348][ T4331] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 80.210591][ T4331] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 80.218920][ T4331] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 82.907072][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.528601][ T4359] ceph: No mds server is up or the cluster is laggy [ 84.541332][ T4306] libceph: connect (1)[c::]:6789 error -101 [ 84.562163][ T4306] libceph: mon0 (1)[c::]:6789 connect error [ 86.877169][ T1325] cfg80211: failed to load regulatory.db [ 90.290581][ T4306] libceph: connect (1)[c::]:6789 error -101 [ 90.304306][ T4306] libceph: mon0 (1)[c::]:6789 connect error [ 90.454753][ T4401] ceph: No mds server is up or the cluster is laggy [ 90.594559][ T4306] libceph: connect (1)[c::]:6789 error -101 [ 90.608151][ T4306] libceph: mon0 (1)[c::]:6789 connect error [ 91.182322][ T4306] libceph: connect (1)[c::]:6789 error -101 [ 91.223889][ T4306] libceph: mon0 (1)[c::]:6789 connect error [ 93.089462][ T4431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.117078][ T4335] Bluetooth: hci5: command 0x0409 tx timeout [ 95.709526][ T4429] chnl_net:caif_netlink_parms(): no params data found [ 96.169052][ T4452] loop4: detected capacity change from 0 to 512 [ 96.610095][ T4461] Zero length message leads to an empty skb [ 96.789723][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 96.806556][ T4452] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.922551][ T4472] Cannot find add_set index 0 as target [ 97.117696][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.465965][ T4477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.806271][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 97.855276][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.923273][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.003091][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.014652][ T4429] device bridge_slave_0 entered promiscuous mode [ 98.060432][ T4464] syz.2.45 (4464) used greatest stack depth: 16640 bytes left [ 98.246498][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.288877][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.063077][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.099808][ T4429] device bridge_slave_1 entered promiscuous mode [ 99.113546][ T4306] Bluetooth: hci1: command 0x0409 tx timeout [ 99.220698][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.212745][ T4429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.234619][ T4429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.281838][ T4306] Bluetooth: hci5: command 0x040f tx timeout [ 100.460926][ T4429] team0: Port device team_slave_0 added [ 101.532063][ T4498] netlink: 'syz.4.51': attribute type 2 has an invalid length. [ 101.882308][ T4429] team0: Port device team_slave_1 added [ 102.523559][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 102.583383][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.608724][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.679585][ T4429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.762148][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.784975][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.918252][ T4429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.962778][ T4466] chnl_net:caif_netlink_parms(): no params data found [ 103.150725][ T4429] device hsr_slave_0 entered promiscuous mode [ 103.313858][ T4429] device hsr_slave_1 entered promiscuous mode [ 103.320970][ T4429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.329187][ T4429] Cannot create hsr debugfs directory [ 103.493997][ T4523] loop4: detected capacity change from 0 to 1024 [ 104.697468][ T2286] Bluetooth: hci1: command 0x040f tx timeout [ 104.711625][ T2286] Bluetooth: hci5: command 0x0419 tx timeout [ 105.142490][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.170688][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.254538][ T4466] device bridge_slave_0 entered promiscuous mode [ 105.383192][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.436794][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.475296][ T4466] device bridge_slave_1 entered promiscuous mode [ 105.683780][ T4466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.732655][ T4466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.554153][ T4429] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.610308][ T4466] team0: Port device team_slave_0 added [ 106.641957][ T4429] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.710891][ T4466] team0: Port device team_slave_1 added [ 106.724623][ T4306] Bluetooth: hci1: command 0x0419 tx timeout [ 106.752999][ T4429] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.857155][ T4544] loop4: detected capacity change from 0 to 32768 [ 106.903315][ T4429] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.233522][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.240800][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.445916][ T4466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.497237][ T4544] XFS (loop4): Mounting V5 Filesystem [ 107.604966][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.612062][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.725863][ T4466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.751751][ T4544] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 108.396353][ T4544] XFS (loop4): Starting recovery (logdev: internal) [ 108.469689][ T4466] device hsr_slave_0 entered promiscuous mode [ 108.482235][ T4544] XFS (loop4): Ending recovery (logdev: internal) [ 108.489665][ T4466] device hsr_slave_1 entered promiscuous mode [ 108.513355][ T4466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.534920][ T4187] XFS (loop4): Unmounting Filesystem [ 108.541708][ T4466] Cannot create hsr debugfs directory [ 110.329819][ T4600] loop2: detected capacity change from 0 to 1024 [ 110.698938][ T144] device hsr_slave_0 left promiscuous mode [ 110.729546][ T144] device hsr_slave_1 left promiscuous mode [ 110.751569][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.892148][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.060452][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.171579][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.322122][ T144] device bridge_slave_1 left promiscuous mode [ 111.430059][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.628806][ T144] device bridge_slave_0 left promiscuous mode [ 111.636932][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.896305][ T144] device veth1_macvtap left promiscuous mode [ 113.443111][ T4622] netlink: 'syz.1.71': attribute type 2 has an invalid length. [ 113.894636][ T144] device veth0_macvtap left promiscuous mode [ 113.900893][ T144] device veth1_vlan left promiscuous mode [ 113.947719][ T144] device veth0_vlan left promiscuous mode [ 114.328716][ T4630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.239607][ T4625] loop1: detected capacity change from 0 to 32768 [ 116.127993][ T4625] XFS (loop1): Mounting V5 Filesystem [ 116.383997][ T4625] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 116.917947][ T4625] XFS (loop1): Starting recovery (logdev: internal) [ 117.058869][ T4625] XFS (loop1): Ending recovery (logdev: internal) [ 117.097031][ T4182] XFS (loop1): Unmounting Filesystem [ 117.382424][ T144] team0 (unregistering): Port device team_slave_1 removed [ 117.637308][ T144] team0 (unregistering): Port device team_slave_0 removed [ 117.974885][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.046776][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.666199][ T144] bond0 (unregistering): Released all slaves [ 119.692748][ T4429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.716024][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.734372][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.779297][ T4429] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.317085][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.379266][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.081699][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.089779][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.407701][ T4678] loop2: detected capacity change from 0 to 512 [ 121.415971][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.440298][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.457179][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.464476][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.534564][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.543704][ T4678] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 121.556728][ T4678] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.580320][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.594569][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.688562][ T4693] Cannot find add_set index 0 as target [ 121.950911][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.961012][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.008543][ T4674] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.021577][ T4674] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.098343][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.127659][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.162753][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.217586][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.255230][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.315006][ T4466] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.469239][ T4466] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.716723][ T4429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.933694][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.051867][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.117730][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.242671][ T4466] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.380372][ T4466] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.131934][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 124.196543][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 124.435060][ T4723] ceph: No mds server is up or the cluster is laggy [ 124.529248][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.571736][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.614451][ T4466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.674780][ T4429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.734073][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.746833][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.794556][ T4466] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.836703][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.876506][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.913171][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.920337][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.073733][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.132654][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.375914][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.443468][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.450690][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.689487][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.888321][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.954245][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.010740][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.080519][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.140954][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.201272][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.230990][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.290410][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.320146][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.359483][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.394591][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.434584][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.443323][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.456825][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.492864][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.508875][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.544690][ T4429] device veth0_vlan entered promiscuous mode [ 126.565642][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.585523][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.637064][ T4429] device veth1_vlan entered promiscuous mode [ 126.723211][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 126.779061][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.864044][ T23] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 126.886678][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.894801][ T23] usb 2-1: config 0 has no interface number 0 [ 126.902379][ T23] usb 2-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 194 [ 126.937482][ T23] usb 2-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 126.975828][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.007259][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.046678][ T4429] device veth0_macvtap entered promiscuous mode [ 127.063766][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.110163][ T4429] device veth1_macvtap entered promiscuous mode [ 127.173463][ T23] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 127.184376][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.216234][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.227574][ T23] usb 2-1: Product: syz [ 127.251499][ T23] usb 2-1: Manufacturer: syz [ 127.261968][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.628427][ T23] usb 2-1: SerialNumber: syz [ 127.786309][ T23] usb 2-1: config 0 descriptor?? [ 127.800701][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.812261][ T4738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.822405][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.841305][ T23] redrat3 2-1:0.83: Couldn't find all endpoints [ 127.888389][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.915737][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.932844][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.950695][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.968356][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.010679][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.038463][ T23] usb 2-1: USB disconnect, device number 2 [ 128.051760][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.104961][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.162822][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.189505][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.213062][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.240071][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.263695][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.367442][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.002531][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.024437][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.037495][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.187980][ T4773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.224394][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.708231][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.897303][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.935286][ T4429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.742018][ T4429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.772542][ T4429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.869569][ T4429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.902483][ T4466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.917634][ T4786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.103'. [ 133.675687][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.682159][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.942938][ C0] sched: RT throttling activated [ 135.946813][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.999254][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.435261][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.795820][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.876690][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.149059][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.254939][ T4811] loop2: detected capacity change from 0 to 256 [ 137.343703][ T4811] exfat: Deprecated parameter 'utf8' [ 137.350178][ T4811] exfat: Deprecated parameter 'namecase' [ 137.431850][ T4811] exfat: Deprecated parameter 'namecase' [ 137.490832][ T4811] exfat: Deprecated parameter 'utf8' [ 137.501573][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.521901][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.540189][ T4466] device veth0_vlan entered promiscuous mode [ 137.562740][ T4811] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 137.579788][ T4466] device veth1_vlan entered promiscuous mode [ 137.616758][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.654033][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.704114][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.735382][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.33'. [ 137.884015][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.910813][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.939333][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.031708][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.055754][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.099529][ T4466] device veth0_macvtap entered promiscuous mode [ 138.134884][ T4466] device veth1_macvtap entered promiscuous mode [ 138.203957][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.249314][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.314428][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.360871][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.381246][ T4835] loop1: detected capacity change from 0 to 512 [ 138.381345][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.424294][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.702637][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.718798][ T4835] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 138.921002][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.963787][ T4835] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.091605][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.160448][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.172249][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.182306][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.206580][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.265743][ T4844] kAFS: unable to lookup cell '\/' [ 139.283280][ T4845] Cannot find add_set index 0 as target [ 139.473829][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.513390][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.535910][ T26] audit: type=1800 audit(1760814214.746:2): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.107" name="file1" dev="loop2" ino=1048696 res=0 errno=0 [ 139.717544][ T4850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.794567][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.952487][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.983112][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.173060][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.184340][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.195850][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.270775][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.311134][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.333023][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.366593][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.411186][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.453145][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.461953][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.551861][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 140.576303][ T4466] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.730156][ T4864] syz.1.111 uses obsolete (PF_INET,SOCK_PACKET) [ 140.746928][ T4466] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.546057][ T4466] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.585878][ T4466] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.090918][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.140803][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.217025][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.238766][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.281032][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.361704][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.837125][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.065742][ T4906] loop5: detected capacity change from 0 to 512 [ 146.854179][ T4912] loop6: detected capacity change from 0 to 1024 [ 147.030719][ T4912] ======================================================= [ 147.030719][ T4912] WARNING: The mand mount option has been deprecated and [ 147.030719][ T4912] and is ignored by this kernel. Remove the mand [ 147.030719][ T4912] option from the mount to silence this warning. [ 147.030719][ T4912] ======================================================= [ 147.071695][ T4912] EXT4-fs (loop6): inline encryption not supported [ 147.080149][ T4912] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.405947][ T4906] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 147.437716][ T4912] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 147.505155][ T4907] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3871: comm syz.6.38: Allocating blocks 497-513 which overlap fs metadata [ 147.541471][ T4907] EXT4-fs (loop6): pa ffff8880747a3380: logic 128, phys. 385, len 8 [ 147.550090][ T4907] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 147.567795][ T4912] EXT4-fs error (device loop6): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 147.625221][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.780086][ T4906] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.718371][ T4906] Cannot find add_set index 0 as target [ 149.008238][ T4943] loop1: detected capacity change from 0 to 256 [ 149.479933][ T4943] exfat: Deprecated parameter 'utf8' [ 149.485951][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.528391][ T4943] exfat: Deprecated parameter 'namecase' [ 149.575834][ T4943] exfat: Deprecated parameter 'namecase' [ 149.618913][ T4943] exfat: Deprecated parameter 'utf8' [ 149.792288][ T4943] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 149.871328][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.826839][ T4980] loop2: detected capacity change from 0 to 1024 [ 151.957686][ T4980] EXT4-fs (loop2): inline encryption not supported [ 151.964525][ T4980] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.107587][ T4980] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 152.160231][ T4980] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.135: Allocating blocks 497-513 which overlap fs metadata [ 152.176871][ T4980] EXT4-fs (loop2): pa ffff88805341a460: logic 128, phys. 385, len 8 [ 152.185012][ T4980] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 152.203684][ T4980] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 153.198278][ T4995] IPVS: lc: FWM 3 0x00000003 - no destination available [ 153.205868][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 155.649016][ T5012] loop1: detected capacity change from 0 to 512 [ 155.887196][ T5012] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 155.909973][ T5012] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.141784][ T5027] Cannot find add_set index 0 as target [ 156.386051][ T5025] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 157.147580][ T5039] netlink: 'syz.2.144': attribute type 29 has an invalid length. [ 157.157749][ T5039] netlink: 'syz.2.144': attribute type 3 has an invalid length. [ 157.165838][ T5039] netlink: 76 bytes leftover after parsing attributes in process `syz.2.144'. [ 157.674738][ T144] device hsr_slave_0 left promiscuous mode [ 157.688799][ T144] device hsr_slave_1 left promiscuous mode [ 157.727820][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.747795][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.629225][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.647418][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.660124][ T144] device bridge_slave_1 left promiscuous mode [ 158.668068][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.725842][ T144] device bridge_slave_0 left promiscuous mode [ 158.745835][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.850592][ T144] device veth1_macvtap left promiscuous mode [ 158.873383][ T144] device veth0_macvtap left promiscuous mode [ 159.074436][ T5053] loop1: detected capacity change from 0 to 1024 [ 159.125938][ T144] device veth1_vlan left promiscuous mode [ 159.132112][ T144] device veth0_vlan left promiscuous mode [ 160.647447][ T5053] EXT4-fs (loop1): inline encryption not supported [ 160.654275][ T5053] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.690559][ T5063] loop2: detected capacity change from 0 to 256 [ 160.779036][ T5053] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 160.814553][ T5063] exfat: Deprecated parameter 'utf8' [ 160.822482][ T5063] exfat: Deprecated parameter 'namecase' [ 160.839051][ T5052] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.147: Allocating blocks 497-513 which overlap fs metadata [ 160.855930][ T5052] EXT4-fs (loop1): pa ffff88805341aa80: logic 128, phys. 385, len 8 [ 160.864031][ T5052] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 160.865194][ T5063] exfat: Deprecated parameter 'namecase' [ 160.885314][ T5052] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 160.925032][ T5063] exfat: Deprecated parameter 'utf8' [ 160.993997][ T5063] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 162.767656][ T5080] kAFS: unable to lookup cell '\/' [ 164.611999][ T5093] loop1: detected capacity change from 0 to 512 [ 164.643090][ T144] team0 (unregistering): Port device team_slave_1 removed [ 164.901664][ T144] team0 (unregistering): Port device team_slave_0 removed [ 165.153144][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 165.413111][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 165.533897][ T7] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 165.553155][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.572699][ T7] usb 6-1: config 0 descriptor?? [ 165.632268][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.643089][ T5093] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 165.664626][ T5093] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.683232][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.920844][ T5102] Cannot find add_set index 0 as target [ 166.239704][ T144] bond0 (unregistering): Released all slaves [ 167.480283][ T7] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 167.514550][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 167.541177][ T7] dib0700: firmware download failed at 7 with -22 [ 167.603721][ T7] usb 6-1: USB disconnect, device number 2 [ 167.657923][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 167.920337][ T5127] loop5: detected capacity change from 0 to 1024 [ 168.504725][ T5127] EXT4-fs (loop5): inline encryption not supported [ 168.506218][ T4335] Bluetooth: hci6: command 0x0409 tx timeout [ 168.511681][ T5127] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.644913][ T5127] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 168.647972][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 168.706591][ T5123] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.161: Allocating blocks 497-513 which overlap fs metadata [ 168.723611][ T5123] EXT4-fs (loop5): pa ffff88807043fd20: logic 128, phys. 385, len 8 [ 168.732242][ T5123] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 168.746388][ T5127] EXT4-fs error (device loop5): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 169.465282][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 169.816806][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.866710][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 169.880669][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.889150][ T5103] device bridge_slave_0 entered promiscuous mode [ 170.606968][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.618013][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.660944][ T5103] device bridge_slave_1 entered promiscuous mode [ 170.695560][ T1111] Bluetooth: hci6: command 0x041b tx timeout [ 170.702023][ T4259] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.738293][ T5173] loop5: detected capacity change from 0 to 512 [ 170.820064][ T5173] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 170.897819][ T5173] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.957835][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.214035][ T5185] Cannot find add_set index 0 as target [ 171.621922][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.673077][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.680382][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.704657][ T5098] device bridge_slave_0 entered promiscuous mode [ 172.018243][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 172.732271][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.737321][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 172.768187][ T1111] Bluetooth: hci6: command 0x040f tx timeout [ 172.943193][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.292606][ T5098] device bridge_slave_1 entered promiscuous mode [ 173.488959][ T5103] team0: Port device team_slave_0 added [ 173.792096][ T5103] team0: Port device team_slave_1 added [ 173.959505][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.974986][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.982079][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.070492][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.083034][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 174.101773][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.154477][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.161552][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.202456][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.735638][ T5098] team0: Port device team_slave_0 added [ 174.823664][ T4259] Bluetooth: hci6: command 0x0419 tx timeout [ 174.830398][ T4259] Bluetooth: hci1: command 0x1003 tx timeout [ 174.837262][ T4199] Bluetooth: hci1: sending frame failed (-49) [ 174.941576][ T5098] team0: Port device team_slave_1 added [ 174.958593][ T5103] device hsr_slave_0 entered promiscuous mode [ 174.976925][ T5103] device hsr_slave_1 entered promiscuous mode [ 174.983968][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.993382][ T5103] Cannot create hsr debugfs directory [ 175.204319][ T5223] loop2: detected capacity change from 0 to 512 [ 175.254719][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.261798][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.298134][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.782933][ T5229] netlink: 'syz.1.178': attribute type 29 has an invalid length. [ 175.792378][ T5229] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 175.795218][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.812948][ T5229] netlink: 76 bytes leftover after parsing attributes in process `syz.1.178'. [ 175.813262][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.845407][ T5223] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 175.848791][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.969437][ T5223] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.071021][ T5236] Cannot find add_set index 0 as target [ 176.370629][ T5098] device hsr_slave_0 entered promiscuous mode [ 176.452101][ T5098] device hsr_slave_1 entered promiscuous mode [ 176.494249][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.569156][ T5098] Cannot create hsr debugfs directory [ 177.338135][ T1111] Bluetooth: hci1: command 0x1001 tx timeout [ 177.344773][ T4199] Bluetooth: hci1: sending frame failed (-49) [ 177.360713][ T5103] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 177.914297][ T5254] could not allocate digest TFM handle blake2s-128-generic [ 178.207098][ T4212] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.325936][ T5103] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 178.358255][ T5103] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 178.499315][ T5103] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 179.264268][ T4212] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.363106][ T4250] Bluetooth: hci1: command 0x1009 tx timeout [ 179.512545][ T4212] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.894293][ T4212] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.389447][ T4212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.433081][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.462239][ T4212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.489294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.506620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.555257][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.577384][ T4212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.783951][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.801763][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.831634][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.838818][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.876898][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.900881][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.920392][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.927981][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.995050][ T4212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.061034][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.074547][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.124926][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.166043][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.186150][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.195654][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.209003][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.221029][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.255733][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.294246][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.314332][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.327432][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.341166][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.837678][ T5098] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 182.913966][ T5098] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.964710][ T5098] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.026540][ T5098] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 185.368498][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.413181][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.421520][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.387738][ T5349] overlayfs: failed to resolve './file0': -2 [ 187.991842][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.136785][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.270201][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.527020][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.564403][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.592403][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.616505][ T4228] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 188.653554][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.660804][ T4913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.833099][ T5103] device veth0_vlan entered promiscuous mode [ 188.856154][ T5103] device veth1_vlan entered promiscuous mode [ 189.819141][ T4228] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.835661][ T5103] device veth0_macvtap entered promiscuous mode [ 189.863334][ T4228] usb 2-1: config 0 has no interface number 0 [ 189.869778][ T4228] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.913997][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.924221][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.953164][ T4228] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 189.958244][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.162482][ T4228] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.172858][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.192016][ T4228] usb 2-1: config 0 descriptor?? [ 190.197633][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.204813][ T4913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.366711][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.419080][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.431121][ T5374] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.518524][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.622870][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.767108][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.878804][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.987486][ T4228] usb 2-1: can't set config #0, error -71 [ 191.007340][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.017228][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.026582][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.037141][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.043469][ T4228] usb 2-1: USB disconnect, device number 3 [ 191.084159][ T5103] device veth1_macvtap entered promiscuous mode [ 191.119671][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.135207][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.146681][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.203514][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.434652][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.456980][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.254006][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.332191][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 193.349388][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.365572][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.374695][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.490767][ T5098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.406389][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412749][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.431787][ T5428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.624878][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.703799][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.075148][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.123875][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.397575][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.422941][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.439340][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.451676][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.465548][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.479239][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.583976][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.629222][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.648258][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.697876][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.972953][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.026281][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.055801][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.085447][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.147602][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.183080][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.241331][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.280084][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.343159][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.373742][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.401826][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.441285][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.461078][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.628027][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.529390][ T5103] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.599604][ T5103] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.625366][ T5103] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.661596][ T5103] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.905037][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.942000][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.955561][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.281102][ T4212] device hsr_slave_0 left promiscuous mode [ 199.519445][ T4212] device hsr_slave_1 left promiscuous mode [ 200.356345][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.379275][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.412443][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.426430][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.461478][ T4212] device bridge_slave_1 left promiscuous mode [ 200.472386][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.584463][ T4212] device bridge_slave_0 left promiscuous mode [ 200.591883][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.658485][ T4212] device hsr_slave_0 left promiscuous mode [ 200.739412][ T4212] device hsr_slave_1 left promiscuous mode [ 200.823662][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.902485][ T4259] libceph: connect (1)[c::]:6789 error -101 [ 200.915124][ T4259] libceph: mon0 (1)[c::]:6789 connect error [ 201.196256][ T4259] libceph: connect (1)[c::]:6789 error -101 [ 201.204859][ T4259] libceph: mon0 (1)[c::]:6789 connect error [ 201.211779][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.301626][ T5516] ceph: No mds server is up or the cluster is laggy [ 201.491887][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.558250][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.577900][ T4212] device bridge_slave_1 left promiscuous mode [ 201.604737][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.681255][ T4212] device bridge_slave_0 left promiscuous mode [ 201.693175][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.741421][ T5523] loop5: detected capacity change from 0 to 256 [ 201.771770][ T4212] device veth1_macvtap left promiscuous mode [ 201.804354][ T5523] exfat: Deprecated parameter 'utf8' [ 201.810025][ T5523] exfat: Deprecated parameter 'namecase' [ 201.823178][ T4212] device veth0_macvtap left promiscuous mode [ 201.823259][ T5523] exfat: Deprecated parameter 'namecase' [ 201.835099][ T4212] device veth1_vlan left promiscuous mode [ 201.852199][ T4212] device veth0_vlan left promiscuous mode [ 201.861011][ T5523] exfat: Deprecated parameter 'utf8' [ 201.879198][ T4212] device veth1_macvtap left promiscuous mode [ 201.902238][ T4212] device veth0_macvtap left promiscuous mode [ 201.910744][ T4212] device veth1_vlan left promiscuous mode [ 201.920157][ T4212] device veth0_vlan left promiscuous mode [ 201.934814][ T5523] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 202.313804][ T5527] kAFS: unable to lookup cell '\/' [ 202.355920][ T26] audit: type=1800 audit(1760814277.556:3): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.225" name="file1" dev="loop5" ino=1048738 res=0 errno=0 [ 202.982619][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 203.002719][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 203.022048][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.075064][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.190906][ T5537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.372708][ T5540] netlink: 'syz.2.232': attribute type 29 has an invalid length. [ 203.380964][ T5540] netlink: 'syz.2.232': attribute type 3 has an invalid length. [ 203.390122][ T5540] netlink: 76 bytes leftover after parsing attributes in process `syz.2.232'. [ 203.412407][ T4212] bond0 (unregistering): Released all slaves [ 204.210347][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 204.936774][ T5549] loop2: detected capacity change from 0 to 256 [ 204.953963][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 205.013680][ T5549] exfat: Deprecated parameter 'utf8' [ 205.019182][ T5549] exfat: Deprecated parameter 'namecase' [ 205.063902][ T5549] exfat: Deprecated parameter 'namecase' [ 205.069626][ T5549] exfat: Deprecated parameter 'utf8' [ 205.118664][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.271651][ T5549] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 205.286823][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.919876][ T4212] bond0 (unregistering): Released all slaves [ 206.149665][ T5559] loop1: detected capacity change from 0 to 256 [ 206.201713][ T4897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.233508][ T4897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.265290][ T5563] kAFS: unable to lookup cell '\/' [ 206.273890][ T5559] exfat: Deprecated parameter 'utf8' [ 206.274685][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.279266][ T5559] exfat: Deprecated parameter 'namecase' [ 206.325143][ T5559] exfat: Deprecated parameter 'namecase' [ 206.330854][ T5559] exfat: Deprecated parameter 'utf8' [ 206.452720][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.474397][ T5559] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 206.492674][ T26] audit: type=1800 audit(1760814281.696:4): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.234" name="file1" dev="loop2" ino=1048739 res=0 errno=0 [ 206.551924][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.593437][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.410867][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.483831][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.531779][ T5098] device veth0_vlan entered promiscuous mode [ 207.566710][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.589234][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.618077][ T5098] device veth1_vlan entered promiscuous mode [ 207.649523][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.668197][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.690559][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.188494][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.338766][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.372112][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.407229][ T5098] device veth0_macvtap entered promiscuous mode [ 208.459214][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.472117][ T5098] device veth1_macvtap entered promiscuous mode [ 208.561778][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.609015][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.643095][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.670530][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.691649][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.723047][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.744138][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.772931][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.795139][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.803676][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.812660][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.840368][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.856101][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.869426][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.890214][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.900672][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.918119][ T1108] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 208.926051][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.943641][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.974645][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.004045][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.014023][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.024417][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.054306][ T5098] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.072977][ T5098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.092033][ T5098] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.112290][ T5098] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.343532][ T1108] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 209.361440][ T1108] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.413038][ T1108] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 209.563269][ T1108] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 209.575288][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.695662][ T1108] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.731429][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.881531][ T1108] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 210.135386][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.163508][ T1108] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 210.173350][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.182381][ T1108] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 210.223147][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.240527][ T1108] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 210.286314][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.603252][ T1108] usb 6-1: string descriptor 0 read error: -22 [ 210.660615][ T1108] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 211.222998][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.465829][ T1108] adutux 6-1:168.0: interrupt endpoints not found [ 212.488448][ T1111] usb 6-1: USB disconnect, device number 3 [ 212.787523][ T5637] netlink: 224 bytes leftover after parsing attributes in process `syz.1.249'. [ 212.831305][ T5639] loop5: detected capacity change from 0 to 256 [ 212.963500][ T5641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.005602][ T5639] exfat: Deprecated parameter 'utf8' [ 213.010979][ T5639] exfat: Deprecated parameter 'namecase' [ 213.037796][ T5639] exfat: Deprecated parameter 'namecase' [ 213.057455][ T5639] exfat: Deprecated parameter 'utf8' [ 213.102476][ T5639] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 213.566127][ T5654] kAFS: unable to lookup cell '\/' [ 214.213183][ T26] audit: type=1800 audit(1760814289.076:5): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.250" name="file1" dev="loop5" ino=1048757 res=0 errno=0 [ 217.500081][ T5701] loop1: detected capacity change from 0 to 256 [ 217.726640][ T1111] Bluetooth: hci5: command 0x0406 tx timeout [ 217.739661][ T5697] loop5: detected capacity change from 0 to 512 [ 218.574979][ T5701] exfat: Deprecated parameter 'utf8' [ 218.595749][ T5701] exfat: Deprecated parameter 'namecase' [ 218.824228][ T5701] exfat: Deprecated parameter 'namecase' [ 218.829931][ T5701] exfat: Deprecated parameter 'utf8' [ 219.796503][ T5701] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 219.847460][ T5697] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 219.923262][ T5697] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.251518][ T5727] kAFS: unable to lookup cell '\/' [ 220.697734][ T26] audit: type=1800 audit(1760814295.826:6): pid=5727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=1048758 res=0 errno=0 [ 220.860650][ T5731] Cannot find add_set index 0 as target [ 225.177283][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 225.195343][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 225.465658][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 225.480173][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 225.654573][ T5772] ceph: No mds server is up or the cluster is laggy [ 225.677147][ T5777] loop2: detected capacity change from 0 to 256 [ 225.844698][ T5777] exfat: Deprecated parameter 'utf8' [ 225.854467][ T5777] exfat: Deprecated parameter 'namecase' [ 225.873705][ T5777] exfat: Deprecated parameter 'namecase' [ 225.879503][ T5777] exfat: Deprecated parameter 'utf8' [ 226.143157][ T5777] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 226.735341][ T5775] kAFS: unable to lookup cell '\/' [ 226.827549][ T26] audit: type=1800 audit(1760814302.036:7): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.281" name="file1" dev="loop2" ino=1048759 res=0 errno=0 [ 228.391408][ T5806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.670073][ T5812] netlink: 'syz.5.289': attribute type 2 has an invalid length. [ 231.599316][ T5841] overlayfs: missing 'workdir' [ 232.480825][ T5852] tipc: Started in network mode [ 232.492120][ T5852] tipc: Node identity a2ac5a869119, cluster identity 4711 [ 232.538636][ T5852] tipc: Enabled bearer , priority 0 [ 232.621997][ T5854] device syzkaller0 entered promiscuous mode [ 232.696012][ T5852] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.748051][ T5852] tipc: Resetting bearer [ 232.771633][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 232.788578][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 232.864483][ T5850] tipc: Resetting bearer [ 232.906373][ T5850] tipc: Disabling bearer [ 232.983033][ T1325] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 233.363200][ T1325] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 233.371463][ T1325] usb 3-1: config 0 has no interface number 0 [ 233.469070][ T1325] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 233.658273][ T1325] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 233.983913][ T1325] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 234.034452][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.168182][ T1325] usb 3-1: Product: syz [ 234.172532][ T1325] usb 3-1: Manufacturer: syz [ 234.178071][ T1325] usb 3-1: SerialNumber: syz [ 234.199391][ T1325] usb 3-1: config 0 descriptor?? [ 234.526871][ T1325] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 234.556748][ T1325] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 234.592557][ T1325] usb 3-1: USB disconnect, device number 2 [ 236.437565][ T5902] loop7: detected capacity change from 0 to 512 [ 236.697721][ T5906] overlayfs: missing 'workdir' [ 237.018007][ T5907] bad cache= option: none [ 237.018007][ T5907] [ 237.033634][ T23] Process accounting resumed [ 237.043317][ T5907] CIFS: VFS: bad cache= option: none [ 237.334398][ T5904] Process accounting resumed [ 237.378815][ T5913] loop1: detected capacity change from 0 to 256 [ 237.386164][ T5902] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 237.409675][ T5902] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.704621][ T5913] exfat: Deprecated parameter 'utf8' [ 237.933682][ T5913] exfat: Deprecated parameter 'namecase' [ 237.940245][ T5913] exfat: Deprecated parameter 'namecase' [ 237.967488][ T5913] exfat: Deprecated parameter 'utf8' [ 238.222765][ T5928] Cannot find add_set index 0 as target [ 238.484891][ T5913] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 238.797187][ T5934] kAFS: unable to lookup cell '\/' [ 238.943115][ T26] audit: type=1800 audit(1760814314.126:8): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="file1" dev="loop1" ino=1048760 res=0 errno=0 [ 241.813220][ T5961] loop1: detected capacity change from 0 to 1024 [ 243.142254][ T5978] loop7: detected capacity change from 0 to 512 [ 243.464795][ T5983] netlink: 'syz.8.323': attribute type 2 has an invalid length. [ 244.234914][ T5978] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 244.247872][ T5978] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.341011][ T5995] Cannot find add_set index 0 as target [ 245.963270][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 246.263183][ T1108] usb 8-1: Using ep0 maxpacket: 16 [ 246.507029][ T1108] usb 8-1: config 1 interface 0 has no altsetting 0 [ 246.687590][ T1108] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 246.701783][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.730926][ T1108] usb 8-1: Product: ๳᧛ᤴꖐ铊ꋰ운蘃礴‹ྏ뼧帶곩蛧떦쵟鉜佢לⲏ䒳攱畗塆ퟬ붔斊캏⣴鏴㙨淗뙀㩛駷悅辸❩ᙉ튞ا奷朶㲎塔↪橳ჿ놔親⯣痻퓡䈧摥莡⨘烜ꑠ猛⁾ボ㿂⺛졃麽儙⛮셪믯꤉斃뻄薄㮝澮⌧഼忰纎ꭁ湨藒莱〻㢋ⴅ殌⤈옜눳턕쬯栉ᔼ妥뎯쟆㖳濞ཱྀz綦⑖낕熫 [ 247.456141][ T1108] usb 8-1: Manufacturer: ӿ [ 247.463024][ T1108] usb 8-1: SerialNumber: 낳튝怊颣ᅹ櫘相䦲毥芠뺨怨筲鏡㛬尅꥓罤궘猯第᠌ꆍ⍨伯옶硾灊⠶ᾚ︉颮䚞㊳㤗⋠ᱡ讨ሑ鐪⚠ᐂ꽲쏲狅쪎 [ 249.333796][ T1108] usbhid 8-1:1.0: can't add hid device: -71 [ 249.341230][ T1108] usbhid: probe of 8-1:1.0 failed with error -71 [ 249.373289][ T1108] usb 8-1: USB disconnect, device number 2 [ 249.778092][ T6057] netlink: 124 bytes leftover after parsing attributes in process `syz.1.340'. [ 250.151786][ T6082] loop8: detected capacity change from 0 to 1024 [ 251.744926][ T4335] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 252.683069][ T4335] usb 8-1: Using ep0 maxpacket: 8 [ 252.923064][ T4335] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 253.002372][ T4335] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 253.069025][ T4335] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.126503][ T4335] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.231605][ T4335] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.291191][ T4335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.385594][ T6115] device syzkaller1 entered promiscuous mode [ 253.399274][ T6115] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 253.603114][ T4335] usb 8-1: GET_CAPABILITIES returned 0 [ 253.608958][ T4335] usbtmc 8-1:16.0: can't read capabilities [ 253.705448][ T6121] lo speed is unknown, defaulting to 1000 [ 253.756344][ T6121] lo speed is unknown, defaulting to 1000 [ 253.790410][ T6121] lo speed is unknown, defaulting to 1000 [ 253.973192][ T6086] usb 8-1: usbtmc_ioctl_clear_in_halt returned -32 [ 254.008739][ T1108] usb 8-1: USB disconnect, device number 3 [ 254.062001][ T6121] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 254.765392][ T6121] lo speed is unknown, defaulting to 1000 [ 254.848222][ T6121] lo speed is unknown, defaulting to 1000 [ 254.925364][ T6121] lo speed is unknown, defaulting to 1000 [ 255.444713][ T6121] lo speed is unknown, defaulting to 1000 [ 255.525616][ T6121] lo speed is unknown, defaulting to 1000 [ 255.835542][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.842137][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.988419][ T6157] loop8: detected capacity change from 0 to 1024 [ 260.275774][ T6195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 263.624303][ T6217] loop8: detected capacity change from 0 to 1024 [ 264.970896][ T6230] loop2: detected capacity change from 0 to 512 [ 265.271316][ T6230] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 266.741079][ T6230] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.889918][ T6252] Cannot find add_set index 0 as target [ 270.544989][ T6266] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.588330][ T6269] tipc: Started in network mode [ 272.174521][ T6269] tipc: Node identity 56195311662a, cluster identity 4711 [ 272.182010][ T6269] tipc: Enabled bearer , priority 0 [ 273.059382][ T6271] device syzkaller0 entered promiscuous mode [ 273.329019][ T4267] tipc: Node number set to 808669969 [ 274.226453][ T6267] tipc: Resetting bearer [ 274.337437][ T6267] tipc: Disabling bearer [ 274.518642][ T6294] loop1: detected capacity change from 0 to 512 [ 274.764059][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 274.793163][ T6294] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.955178][ T6305] Cannot find add_set index 0 as target [ 276.201880][ T6323] netlink: 'syz.2.393': attribute type 2 has an invalid length. [ 279.680524][ T6347] loop5: detected capacity change from 0 to 1024 [ 281.989586][ T6354] tipc: Started in network mode [ 282.007917][ T6360] loop2: detected capacity change from 0 to 256 [ 282.024213][ T6354] tipc: Node identity becf435e89f6, cluster identity 4711 [ 282.060737][ T6354] tipc: Enabled bearer , priority 0 [ 282.096583][ T6363] device syzkaller0 entered promiscuous mode [ 282.111768][ T6354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 282.140008][ T6354] tipc: Resetting bearer [ 282.169048][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.401'. [ 282.215450][ T6360] exfat: Deprecated parameter 'utf8' [ 282.232998][ T6360] exfat: Deprecated parameter 'namecase' [ 282.240622][ T6360] exfat: Deprecated parameter 'namecase' [ 282.247109][ T6360] exfat: Deprecated parameter 'utf8' [ 282.253196][ T6353] tipc: Resetting bearer [ 282.576644][ T6360] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 282.780246][ T6353] tipc: Disabling bearer [ 282.958665][ T6372] kAFS: unable to lookup cell '\/' [ 283.083214][ T26] audit: type=1800 audit(1760814358.276:9): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.404" name="file1" dev="loop2" ino=1048774 res=0 errno=0 [ 284.272239][ T263] block nbd0: Attempted send on invalid socket [ 284.342006][ T6400] xt_socket: unknown flags 0x50 [ 285.045045][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 285.295293][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 286.359322][ T6418] lo speed is unknown, defaulting to 1000 [ 286.653133][ T4335] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 287.033301][ T4335] usb 3-1: config 0 has no interfaces? [ 287.039069][ T4335] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 287.141735][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.320598][ T4335] usb 3-1: config 0 descriptor?? [ 287.686725][ T6430] loop8: detected capacity change from 0 to 256 [ 287.764898][ T6430] exfat: Deprecated parameter 'utf8' [ 287.800918][ T6430] exfat: Deprecated parameter 'namecase' [ 287.863060][ T6430] exfat: Deprecated parameter 'namecase' [ 287.885604][ T6430] exfat: Deprecated parameter 'utf8' [ 288.567248][ T6430] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 288.622276][ T6418] udc-core: couldn't find an available UDC or it's busy [ 288.633138][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 288.643051][ T4335] Bluetooth: hci6: command 0x0406 tx timeout [ 288.672035][ T6418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.712344][ T4335] usb 3-1: USB disconnect, device number 3 [ 288.913971][ T6440] kAFS: unable to lookup cell '\/' [ 288.966287][ T26] audit: type=1800 audit(1760814364.166:10): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.416" name="file1" dev="loop8" ino=1048775 res=0 errno=0 [ 290.441850][ T6457] netlink: 52 bytes leftover after parsing attributes in process `syz.8.419'. [ 291.814660][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.825048][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.007194][ T150] block nbd0: Attempted send on invalid socket [ 293.013452][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 295.624975][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 295.682269][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 295.810032][ T6524] ceph: No mds server is up or the cluster is laggy [ 296.264705][ T1325] libceph: connect (1)[c::]:6789 error -101 [ 296.275397][ T1325] libceph: mon0 (1)[c::]:6789 connect error [ 296.632711][ T6535] tipc: Started in network mode [ 296.673054][ T6535] tipc: Node identity 9eb99b32203b, cluster identity 4711 [ 296.709035][ T6535] tipc: Enabled bearer , priority 0 [ 296.767943][ T6539] device syzkaller0 entered promiscuous mode [ 296.833606][ T6535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.909323][ T6540] tipc: Resetting bearer [ 297.734538][ T5951] tipc: Node number set to 3196230450 [ 298.643983][ T6550] tipc: Resetting bearer [ 298.743417][ T6550] tipc: Disabling bearer [ 299.083070][ T6565] process 'syz.8.438' launched './file0' with NULL argv: empty string added [ 305.915096][ T6617] tipc: Enabled bearer , priority 0 [ 305.950807][ T6617] device syzkaller0 entered promiscuous mode [ 305.990192][ T6617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 306.021743][ T6617] tipc: Resetting bearer [ 306.080367][ T6615] tipc: Resetting bearer [ 306.132004][ T6615] tipc: Disabling bearer [ 307.423034][ T4267] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 307.713315][ T4267] usb 6-1: Using ep0 maxpacket: 32 [ 307.873685][ T4267] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 307.884097][ T4267] usb 6-1: config 0 has no interface number 0 [ 307.900313][ T4267] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.913108][ T4267] usb 6-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 308.113601][ T4267] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 308.127813][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.148479][ T4267] usb 6-1: Product: syz [ 308.163119][ T4267] usb 6-1: Manufacturer: syz [ 308.168291][ T4267] usb 6-1: SerialNumber: syz [ 308.201246][ T4267] usb 6-1: config 0 descriptor?? [ 308.284053][ T4267] redrat3 6-1:0.83: Couldn't find all endpoints [ 308.475087][ T4250] usb 6-1: USB disconnect, device number 4 [ 309.939560][ T6669] tipc: Enabled bearer , priority 0 [ 310.004164][ T6669] device syzkaller0 entered promiscuous mode [ 310.027380][ T6669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 310.169089][ T6669] tipc: Resetting bearer [ 310.179391][ T6668] tipc: Resetting bearer [ 310.474807][ T6668] tipc: Disabling bearer [ 311.146195][ T6698] loop1: detected capacity change from 0 to 1024 [ 312.509502][ T6680] loop5: detected capacity change from 0 to 32768 [ 312.692484][ T6680] XFS (loop5): Mounting V5 Filesystem [ 312.806318][ T6680] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 312.968057][ T6680] XFS (loop5): Starting recovery (logdev: internal) [ 313.063461][ T6680] XFS (loop5): Ending recovery (logdev: internal) [ 313.221492][ T4429] XFS (loop5): Unmounting Filesystem [ 313.586045][ T6728] loop1: detected capacity change from 0 to 1024 [ 314.211586][ T6728] EXT4-fs (loop1): inline encryption not supported [ 314.218553][ T6728] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.342211][ T6728] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 314.369324][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.450688][ T6727] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.474: Allocating blocks 497-513 which overlap fs metadata [ 314.468342][ T6727] EXT4-fs (loop1): pa ffff88805ebd88c0: logic 128, phys. 385, len 8 [ 314.476495][ T6727] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 314.490404][ T6728] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 318.647181][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.658813][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.659081][ T6779] loop5: detected capacity change from 0 to 1024 [ 320.508100][ T6779] EXT4-fs (loop5): inline encryption not supported [ 320.514927][ T6779] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.164366][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.213092][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.257073][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.602470][ T6779] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 321.629219][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.665888][ T6777] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.487: Allocating blocks 497-513 which overlap fs metadata [ 321.680490][ T6777] EXT4-fs (loop5): pa ffff88805341ab60: logic 128, phys. 385, len 8 [ 321.688578][ T6777] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 321.703734][ T6779] EXT4-fs error (device loop5): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 322.674731][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.492'. [ 325.717196][ T6848] loop1: detected capacity change from 0 to 1024 [ 327.217385][ T6848] EXT4-fs (loop1): inline encryption not supported [ 327.224286][ T6848] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.583862][ T6848] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 327.667983][ T6844] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.500: Allocating blocks 497-513 which overlap fs metadata [ 327.683086][ T6844] EXT4-fs (loop1): pa ffff88805ebd8ee0: logic 128, phys. 385, len 8 [ 327.691548][ T6844] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 327.710970][ T6844] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 329.073561][ T6886] netlink: 'syz.5.510': attribute type 2 has an invalid length. [ 330.499899][ T6899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.902290][ T4335] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 332.888387][ T6934] xt_socket: unknown flags 0x50 [ 333.693811][ T4335] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 333.712254][ T4335] usb 8-1: config 1 has no interface number 0 [ 333.718624][ T4335] usb 8-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 64 [ 333.735297][ T4335] usb 8-1: config 1 interface 105 has no altsetting 0 [ 334.180559][ T6951] netlink: 'syz.2.523': attribute type 2 has an invalid length. [ 334.513284][ T4335] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 334.611649][ T4335] usb 8-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 334.817605][ T4335] usb 8-1: Product: syz [ 334.840246][ T4335] usb 8-1: Manufacturer: syz [ 334.923206][ T4335] usb 8-1: can't set config #1, error -71 [ 335.013118][ T4335] usb 8-1: USB disconnect, device number 4 [ 335.871100][ T4414] Bluetooth: hci1: Frame reassembly failed (-90) [ 337.692443][ T6988] xt_socket: unknown flags 0x50 [ 337.923454][ T2286] Bluetooth: hci1: command 0x1003 tx timeout [ 337.929694][ T146] Bluetooth: hci1: sending frame failed (-49) [ 339.887311][ T7011] netlink: 'syz.2.537': attribute type 2 has an invalid length. [ 339.963134][ T4250] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 339.993273][ T4335] Bluetooth: hci1: command 0x1001 tx timeout [ 339.999983][ T146] Bluetooth: hci1: sending frame failed (-49) [ 340.333419][ T4250] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.382463][ T4250] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 340.694274][ T4250] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 341.134929][ T4250] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.273317][ T2286] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 341.300592][ T4250] usb 9-1: Product: syz [ 341.312723][ T4250] usb 9-1: Manufacturer: syz [ 341.332725][ T4250] usb 9-1: SerialNumber: syz [ 341.365959][ T4250] usb 9-1: config 0 descriptor?? [ 341.940191][ T2286] usb 3-1: Using ep0 maxpacket: 16 [ 342.514717][ T4335] Bluetooth: hci1: command 0x1009 tx timeout [ 342.593346][ T2286] usb 3-1: config 6 has an invalid interface number: 170 but max is 0 [ 342.602334][ T2286] usb 3-1: config 6 has no interface number 0 [ 343.964134][ T21] usb 9-1: USB disconnect, device number 2 [ 344.028140][ T263] block nbd0: Attempted send on invalid socket [ 344.035292][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 344.074555][ T2286] usb 3-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f [ 344.144980][ T2286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.239853][ T2286] usb 3-1: Product: syz [ 344.325662][ T2286] usb 3-1: Manufacturer: syz [ 344.353043][ T2286] usb 3-1: can't set config #6, error -71 [ 344.363126][ T2286] usb 3-1: USB disconnect, device number 4 [ 344.975538][ T7071] xt_socket: unknown flags 0x50 [ 346.693004][ T7073] netlink: 'syz.5.549': attribute type 2 has an invalid length. [ 351.192915][ T7106] netlink: 32 bytes leftover after parsing attributes in process `syz.5.558'. [ 351.201988][ T7106] netlink: 48 bytes leftover after parsing attributes in process `syz.5.558'. [ 351.211292][ T7106] netlink: 48 bytes leftover after parsing attributes in process `syz.5.558'. [ 352.311313][ T7105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.894228][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 352.900806][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 353.033063][ T4335] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 353.187929][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 353.282904][ T4335] usb 9-1: Using ep0 maxpacket: 32 [ 353.416159][ T4335] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 353.427876][ T4335] usb 9-1: config 0 has no interface number 0 [ 353.428790][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 353.435226][ T4335] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 353.545986][ T7126] ceph: No mds server is up or the cluster is laggy [ 354.021854][ T4335] usb 9-1: config 0 interface 126 has no altsetting 0 [ 354.033309][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 354.041957][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 354.213188][ T4335] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 354.259287][ T4335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.288950][ T4335] usb 9-1: Product: syz [ 354.316280][ T4335] usb 9-1: Manufacturer: syz [ 354.328480][ T4335] usb 9-1: SerialNumber: syz [ 354.419881][ T4335] usb 9-1: config 0 descriptor?? [ 354.613186][ T7121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 355.684202][ T7121] udc-core: couldn't find an available UDC or it's busy [ 355.733032][ T7121] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 355.821196][ T4335] ir_usb 9-1:0.126: required endpoints missing [ 357.402728][ T2286] usb 9-1: USB disconnect, device number 3 [ 357.496174][ T7178] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 357.644083][ T7171] netlink: 'syz.2.571': attribute type 4 has an invalid length. [ 357.652118][ T7171] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.571'. [ 357.748356][ T7184] loop8: detected capacity change from 0 to 512 [ 357.953993][ T7184] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 357.973475][ T7184] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.221780][ T7202] Cannot find add_set index 0 as target [ 361.037998][ T7232] xt_socket: unknown flags 0x50 [ 361.280136][ T150] block nbd1: Attempted send on invalid socket [ 361.287680][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.304030][ T150] block nbd1: Attempted send on invalid socket [ 361.311675][ T150] blk_update_request: I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.816002][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 361.827732][ T150] block nbd1: Attempted send on invalid socket [ 361.835239][ T150] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.846412][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 361.857908][ T150] block nbd1: Attempted send on invalid socket [ 361.864259][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.876950][ T150] block nbd1: Attempted send on invalid socket [ 361.883231][ T150] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.894556][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 361.904440][ T150] block nbd1: Attempted send on invalid socket [ 361.910695][ T150] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.922098][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 361.932292][ T150] block nbd1: Attempted send on invalid socket [ 361.938590][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.953255][ T150] block nbd1: Attempted send on invalid socket [ 361.959637][ T150] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.971496][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 361.982143][ T150] block nbd1: Attempted send on invalid socket [ 361.988641][ T150] blk_update_request: I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 361.999810][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 362.011311][ T150] block nbd1: Attempted send on invalid socket [ 362.017612][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.029287][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 362.039312][ T7234] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 362.049399][ T7234] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 362.903033][ T4259] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 363.373841][ T4259] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.453458][ T4259] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 363.539874][ T4259] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.613743][ T4259] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 363.875089][ T4259] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.902219][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.938233][ T4259] usb 6-1: Product: syz [ 363.942562][ T4259] usb 6-1: Manufacturer: syz [ 363.993468][ T7247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 364.024104][ T4259] cdc_wdm 6-1:1.0: skipping garbage [ 364.032067][ T4259] cdc_wdm 6-1:1.0: skipping garbage [ 364.050415][ T4259] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 364.197389][ T4258] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 364.298134][ T7273] loop2: detected capacity change from 0 to 512 [ 364.330813][ T21] usb 6-1: USB disconnect, device number 5 [ 364.401580][ T7273] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 364.427642][ T7273] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.443082][ T4258] usb 2-1: Using ep0 maxpacket: 8 [ 364.612001][ T7283] Cannot find add_set index 0 as target [ 365.243377][ T4258] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 365.259204][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.301446][ T4258] usb 2-1: Product: syz [ 365.330371][ T4258] usb 2-1: Manufacturer: syz [ 365.353857][ T4258] usb 2-1: SerialNumber: syz [ 365.389648][ T4258] usb 2-1: config 0 descriptor?? [ 365.445063][ T4258] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 365.652491][ T7296] block device autoloading is deprecated and will be removed. [ 365.809013][ T7294] md: could not open device unknown-block(128,0). [ 365.831100][ T7294] md: md_import_device returned -6 [ 366.338483][ T7311] xt_socket: unknown flags 0x50 [ 366.593076][ T4258] gspca_sonixj: reg_w1 err -71 [ 366.657258][ T4258] sonixj: probe of 2-1:0.0 failed with error -71 [ 367.141813][ T4258] usb 2-1: USB disconnect, device number 4 [ 367.154547][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.599'. [ 367.504272][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.599'. [ 368.218280][ T7325] netlink: 'syz.7.599': attribute type 11 has an invalid length. [ 368.229110][ T7325] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.238454][ T7325] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.247237][ T7325] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.256133][ T7325] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.419416][ T7334] loop8: detected capacity change from 0 to 512 [ 368.553155][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.599'. [ 368.562030][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.599'. [ 368.571385][ T7325] netlink: 'syz.7.599': attribute type 11 has an invalid length. [ 368.735012][ T7334] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 368.753205][ T7334] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.937899][ T7350] Cannot find add_set index 0 as target [ 371.330940][ T7383] binder: 7382:7383 ioctl c00c620f 0 returned -14 [ 371.777031][ T7389] xt_socket: unknown flags 0x50 [ 372.051194][ T7392] loop2: detected capacity change from 0 to 1024 [ 372.159984][ T7392] EXT4-fs (loop2): inline encryption not supported [ 372.167561][ T7392] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 372.690938][ T7395] loop7: detected capacity change from 0 to 256 [ 372.729564][ T7392] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 372.777785][ T7391] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.612: Allocating blocks 497-513 which overlap fs metadata [ 372.792541][ T7391] EXT4-fs (loop2): pa ffff88805ebd8380: logic 128, phys. 385, len 8 [ 372.800853][ T7391] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 372.817049][ T7391] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 372.835986][ T7395] exfat: Deprecated parameter 'utf8' [ 372.869653][ T7395] exfat: Deprecated parameter 'namecase' [ 372.933060][ T7395] exfat: Deprecated parameter 'namecase' [ 373.048881][ T7395] exfat: Deprecated parameter 'utf8' [ 373.182429][ T7395] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 373.640447][ T7411] kAFS: unable to lookup cell '\/' [ 373.911772][ T26] audit: type=1800 audit(1760814449.056:11): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.613" name="file1" dev="loop7" ino=1048802 res=0 errno=0 [ 377.299233][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'. [ 377.354769][ T7462] input: syz1 as /devices/virtual/input/input6 [ 378.607719][ T7476] loop5: detected capacity change from 0 to 1024 [ 379.202318][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.208716][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.257696][ T7476] EXT4-fs (loop5): inline encryption not supported [ 379.265058][ T7476] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.387223][ T7476] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 379.441038][ T7473] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.626: Allocating blocks 497-513 which overlap fs metadata [ 379.455961][ T7473] EXT4-fs (loop5): pa ffff88805ebd8460: logic 128, phys. 385, len 8 [ 379.464216][ T7473] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 379.483438][ T7473] EXT4-fs error (device loop5): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 379.554394][ T7487] loop2: detected capacity change from 0 to 256 [ 379.701704][ T7487] exfat: Deprecated parameter 'utf8' [ 379.720397][ T7487] exfat: Deprecated parameter 'namecase' [ 379.731283][ T7487] exfat: Deprecated parameter 'namecase' [ 379.737416][ T7487] exfat: Deprecated parameter 'utf8' [ 379.764727][ T7487] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 380.115587][ T7500] kAFS: unable to lookup cell '\/' [ 380.411867][ T26] audit: type=1800 audit(1760814455.616:12): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.628" name="file1" dev="loop2" ino=1048803 res=0 errno=0 [ 384.774882][ T7525] tipc: Enabled bearer , priority 0 [ 384.837831][ T7531] device syzkaller0 entered promiscuous mode [ 384.914826][ T7525] tipc: Resetting bearer [ 384.941780][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 385.036655][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 385.079648][ T7524] tipc: Resetting bearer [ 385.178317][ T7524] tipc: Disabling bearer [ 385.470397][ T7546] loop8: detected capacity change from 0 to 1024 [ 385.862006][ T7546] EXT4-fs (loop8): inline encryption not supported [ 385.869442][ T7546] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 386.105900][ T7543] lo speed is unknown, defaulting to 1000 [ 386.133464][ T7546] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 386.147204][ T7553] loop7: detected capacity change from 0 to 256 [ 386.160249][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.199403][ T7540] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3871: comm syz.8.641: Allocating blocks 497-513 which overlap fs metadata [ 386.233765][ T7540] EXT4-fs (loop8): pa ffff88807043f1c0: logic 128, phys. 385, len 8 [ 386.241868][ T7540] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 386.252994][ T2286] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 386.258691][ T7546] EXT4-fs error (device loop8): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 386.324376][ T7553] exfat: Deprecated parameter 'utf8' [ 386.330379][ T7553] exfat: Deprecated parameter 'namecase' [ 386.336785][ T7562] capability: warning: `syz.1.646' uses deprecated v2 capabilities in a way that may be insecure [ 386.360425][ T7553] exfat: Deprecated parameter 'namecase' [ 386.384447][ T7553] exfat: Deprecated parameter 'utf8' [ 386.490368][ T7553] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 386.543084][ T2286] usb 6-1: Using ep0 maxpacket: 8 [ 386.977351][ T7595] kAFS: unable to lookup cell '\/' [ 387.113079][ T26] audit: type=1800 audit(1760814462.306:13): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.645" name="file1" dev="loop7" ino=1048804 res=0 errno=0 [ 387.540440][ T2286] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 387.624854][ T2286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.727178][ T2286] usb 6-1: Product: syz [ 387.782258][ T2286] usb 6-1: Manufacturer: syz [ 387.825491][ T2286] usb 6-1: SerialNumber: syz [ 387.915210][ T2286] usb 6-1: config 0 descriptor?? [ 387.983525][ T2286] usb 6-1: can't set config #0, error -71 [ 388.044901][ T2286] usb 6-1: USB disconnect, device number 6 [ 389.517336][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 389.526414][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 389.623119][ T4258] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 389.841064][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 389.848417][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 389.903079][ T4258] usb 6-1: Using ep0 maxpacket: 16 [ 389.970685][ T7614] ceph: No mds server is up or the cluster is laggy [ 390.023129][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.063948][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.074514][ T4258] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.161989][ T4258] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.200881][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.242340][ T4258] usb 6-1: config 0 descriptor?? [ 390.255182][ T7624] tipc: Enabled bearer , priority 0 [ 390.274369][ T7624] device syzkaller0 entered promiscuous mode [ 390.318231][ T7624] tipc: Resetting bearer [ 390.372408][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 390.403671][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 390.573195][ T7623] tipc: Resetting bearer [ 390.600444][ T7623] tipc: Disabling bearer [ 390.751565][ T7637] loop2: detected capacity change from 0 to 1024 [ 391.145839][ T4258] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 391.316317][ T4258] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 391.389052][ T4250] tipc: Node number set to 867523206 [ 391.411759][ T7637] EXT4-fs (loop2): inline encryption not supported [ 391.418558][ T7637] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 391.436296][ T4258] microsoft 0003:045E:07DA.0001: implement() called with n (152) > 32! (kworker/1:4) [ 391.468657][ T4258] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 391.540315][ T7637] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 391.567529][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.576932][ T4258] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 391.589513][ T4258] microsoft 0003:045E:07DA.0001: no inputs found [ 391.612700][ T7636] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.657: Allocating blocks 497-513 which overlap fs metadata [ 391.627142][ T4258] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 391.636191][ T7636] EXT4-fs (loop2): pa ffff88807043fe00: logic 128, phys. 385, len 8 [ 391.644296][ T7636] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 391.663206][ T7636] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 391.668392][ T4258] usb 6-1: USB disconnect, device number 7 [ 391.724551][ T7644] device syzkaller1 entered promiscuous mode [ 392.055743][ T7646] fido_id[7646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 392.234540][ T7654] loop5: detected capacity change from 0 to 256 [ 393.115782][ T7654] exfat: Deprecated parameter 'utf8' [ 393.121164][ T7654] exfat: Deprecated parameter 'namecase' [ 393.143032][ T7654] exfat: Deprecated parameter 'namecase' [ 393.162923][ T7654] exfat: Deprecated parameter 'utf8' [ 393.276438][ T7654] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 393.483008][ T4250] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 393.614303][ T7677] kAFS: unable to lookup cell '\/' [ 393.930626][ T26] audit: type=1800 audit(1760814469.136:14): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.661" name="file1" dev="loop5" ino=1048805 res=0 errno=0 [ 394.733131][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 394.846941][ T7687] netlink: 9 bytes leftover after parsing attributes in process `syz.8.667'. [ 394.892684][ T7687] device gretap0 entered promiscuous mode [ 394.937195][ T7691] netlink: 5 bytes leftover after parsing attributes in process `syz.8.667'. [ 395.013052][ T4250] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 395.022137][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.188496][ T4250] usb 2-1: Product: syz [ 395.230111][ T4250] usb 2-1: Manufacturer: syz [ 395.236063][ T7691] 0{X: renamed from gretap0 [ 395.983962][ T4250] usb 2-1: SerialNumber: syz [ 396.012715][ T4250] r8152-cfgselector 2-1: config 0 descriptor?? [ 396.151408][ T7691] device 30{X left promiscuous mode [ 396.232982][ T4250] r8152-cfgselector 2-1: Unknown version 0x0000 [ 396.243497][ T7691] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 396.273935][ T4250] r8152-cfgselector 2-1: Unknown version 0x0000 [ 396.280866][ T4250] r8152-cfgselector 2-1: bad CDC descriptors [ 396.323073][ T4250] r8152-cfgselector 2-1: Unknown version 0x0000 [ 396.498665][ T4250] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 397.807033][ T7734] loop1: detected capacity change from 0 to 256 [ 397.913855][ T7734] exfat: Deprecated parameter 'utf8' [ 397.919411][ T7734] exfat: Deprecated parameter 'namecase' [ 397.962742][ T7734] exfat: Deprecated parameter 'namecase' [ 397.978792][ T7734] exfat: Deprecated parameter 'utf8' [ 398.025042][ T7736] input: syz1 as /devices/virtual/input/input7 [ 398.058330][ T7734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 398.526222][ T7746] kAFS: unable to lookup cell '\/' [ 398.825883][ T26] audit: type=1800 audit(1760814474.036:15): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.676" name="file1" dev="loop1" ino=1048806 res=0 errno=0 [ 401.017057][ T7753] lo speed is unknown, defaulting to 1000 [ 401.584484][ T7771] netlink: 'syz.2.683': attribute type 2 has an invalid length. [ 403.602114][ T7797] loop5: detected capacity change from 0 to 256 [ 403.993116][ T7797] exfat: Deprecated parameter 'utf8' [ 404.062236][ T4272] Bluetooth: hci1: Frame reassembly failed (-90) [ 404.475549][ T7797] exfat: Deprecated parameter 'namecase' [ 404.503853][ T7797] exfat: Deprecated parameter 'namecase' [ 404.522937][ T7797] exfat: Deprecated parameter 'utf8' [ 404.610170][ T7797] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 405.045514][ T7812] kAFS: unable to lookup cell '\/' [ 405.373078][ T26] audit: type=1800 audit(1760814480.526:16): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.689" name="file1" dev="loop5" ino=1048807 res=0 errno=0 [ 406.519004][ T21] Bluetooth: hci1: command 0x1003 tx timeout [ 406.526059][ T146] Bluetooth: hci1: sending frame failed (-49) [ 406.955830][ T7831] No source specified [ 408.552989][ T21] Bluetooth: hci1: command 0x1001 tx timeout [ 408.563542][ T146] Bluetooth: hci1: sending frame failed (-49) [ 409.252223][ T7858] loop1: detected capacity change from 0 to 256 [ 409.283078][ T2286] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 409.363799][ T7858] exfat: Deprecated parameter 'utf8' [ 409.433582][ T7858] exfat: Deprecated parameter 'namecase' [ 409.489413][ T7858] exfat: Deprecated parameter 'namecase' [ 409.555594][ T2286] usb 6-1: Using ep0 maxpacket: 32 [ 409.559655][ T7858] exfat: Deprecated parameter 'utf8' [ 409.641872][ T7858] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 409.933118][ T2286] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 409.942126][ T2286] usb 6-1: config 0 has no interface number 0 [ 410.008126][ T7878] kAFS: unable to lookup cell '\/' [ 410.072965][ T26] audit: type=1800 audit(1760814485.246:17): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="file1" dev="loop1" ino=1048808 res=0 errno=0 [ 410.108515][ T2286] usb 6-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 194 [ 410.187276][ T2286] usb 6-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 410.748680][ T4804] Bluetooth: hci1: command 0x1009 tx timeout [ 410.754829][ T2286] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 410.764456][ T2286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.775457][ T2286] usb 6-1: Product: syz [ 410.779651][ T2286] usb 6-1: Manufacturer: syz [ 410.793177][ T2286] usb 6-1: SerialNumber: syz [ 411.545014][ T2286] usb 6-1: config 0 descriptor?? [ 411.563138][ T7852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 411.584415][ T2286] redrat3 6-1:0.83: Couldn't find all endpoints [ 412.199524][ T1111] usb 6-1: USB disconnect, device number 8 [ 412.587416][ T7915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.565644][ T7942] loop1: detected capacity change from 0 to 256 [ 413.593398][ T4228] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 413.620679][ T7942] exfat: Deprecated parameter 'utf8' [ 413.676718][ T7942] exfat: Deprecated parameter 'namecase' [ 413.713517][ T7942] exfat: Deprecated parameter 'namecase' [ 413.765702][ T7942] exfat: Deprecated parameter 'utf8' [ 413.832973][ T4228] usb 3-1: Using ep0 maxpacket: 8 [ 413.854969][ T7942] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 414.039707][ T4228] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 414.050109][ T4228] usb 3-1: config 179 has no interface number 0 [ 414.060788][ T4228] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 414.077852][ T4228] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 414.089757][ T4228] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 414.102177][ T4228] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 414.165899][ T7951] kAFS: unable to lookup cell '\/' [ 414.366266][ T26] audit: type=1800 audit(1760814489.576:18): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.715" name="file1" dev="loop1" ino=1048809 res=0 errno=0 [ 414.513858][ T4228] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 414.529930][ T4228] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 414.551035][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.623171][ T7938] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 414.759603][ T7955] sg_write: data in/out 987/8 bytes for SCSI command 0xfd-- guessing data in; [ 414.759603][ T7955] program syz.8.718 not setting count and/or reply_len properly [ 415.024161][ T4228] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 416.539445][ T4306] usb 3-1: USB disconnect, device number 5 [ 416.552888][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 416.561878][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 416.613895][ T4306] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 417.102402][ T7985] loop5: detected capacity change from 0 to 512 [ 417.109700][ T7973] tmpfs: Bad value for 'mpol' [ 417.280024][ T7985] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 417.317475][ T7973] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 417.329523][ T7973] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 417.337946][ T7973] CPU: 0 PID: 7973 Comm: syz.8.720 Not tainted syzkaller #0 [ 417.345237][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.355336][ T7973] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 417.361021][ T7973] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d dc 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c dc 49 fa 4d 8b 24 24 48 83 c3 [ 417.380773][ T7973] RSP: 0018:ffffc9000489fa80 EFLAGS: 00010206 [ 417.386871][ T7973] RAX: 0000000000000005 RBX: ffff88805e526f80 RCX: 0000000000080000 [ 417.394961][ T7973] RDX: ffffc900185e3000 RSI: 0000000000000427 RDI: 0000000000000428 [ 417.402986][ T7973] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed102982f826 [ 417.410999][ T7973] R10: ffffed102982f826 R11: 1ffff1102982f825 R12: 0000000000000028 [ 417.419015][ T7973] R13: dffffc0000000000 R14: ffff88814c17c000 R15: dffffc0000000000 [ 417.427029][ T7973] FS: 00007f7d627c56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 417.436034][ T7973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.442644][ T7973] CR2: 000000110c3f69ba CR3: 00000000663f1000 CR4: 00000000003506f0 [ 417.450640][ T7973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.458639][ T7973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.464015][ T7985] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.466637][ T7973] Call Trace: [ 417.466647][ T7973] [ 417.466657][ T7973] pcl818_detach+0x62/0xd0 [ 417.466685][ T7973] comedi_device_detach_locked+0x16e/0x710 [ 417.493748][ T7973] comedi_unlocked_ioctl+0xd0b/0x1050 [ 417.499169][ T7973] ? comedi_poll+0x8b0/0x8b0 [ 417.503835][ T7973] ? bpf_lsm_file_ioctl+0x5/0x10 [ 417.508814][ T7973] ? security_file_ioctl+0x7c/0xa0 [ 417.513975][ T7973] ? comedi_poll+0x8b0/0x8b0 [ 417.518656][ T7973] __se_sys_ioctl+0xfa/0x170 [ 417.523378][ T7973] do_syscall_64+0x4c/0xa0 [ 417.527826][ T7973] ? clear_bhb_loop+0x30/0x80 [ 417.532537][ T7973] ? clear_bhb_loop+0x30/0x80 [ 417.537252][ T7973] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.543175][ T7973] RIP: 0033:0x7f7d6457efc9 [ 417.547620][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.567458][ T7973] RSP: 002b:00007f7d627c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.575913][ T7973] RAX: ffffffffffffffda RBX: 00007f7d647d6090 RCX: 00007f7d6457efc9 [ 417.584041][ T7973] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 417.592050][ T7973] RBP: 00007f7d64601f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.600048][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.608043][ T7973] R13: 00007f7d647d6128 R14: 00007f7d647d6090 R15: 00007ffc48e1a5b8 [ 417.616051][ T7973] [ 417.619105][ T7973] Modules linked in: [ 417.698827][ T7996] Cannot find add_set index 0 as target [ 417.979824][ T7973] ---[ end trace b9339bb20a5643d0 ]--- [ 417.996415][ T7995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.030645][ T7973] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 418.049155][ T7973] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d dc 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c dc 49 fa 4d 8b 24 24 48 83 c3 [ 418.098072][ T7973] RSP: 0018:ffffc9000489fa80 EFLAGS: 00010206 [ 418.104459][ T7973] RAX: 0000000000000005 RBX: ffff88805e526f80 RCX: 0000000000080000 [ 418.122377][ T7973] RDX: ffffc900185e3000 RSI: 0000000000000427 RDI: 0000000000000428 [ 418.138871][ T7973] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed102982f826 [ 418.258444][ T7973] R10: ffffed102982f826 R11: 1ffff1102982f825 R12: 0000000000000028 [ 418.267131][ T7973] R13: dffffc0000000000 R14: ffff88814c17c000 R15: dffffc0000000000 [ 418.276158][ T7973] FS: 00007f7d627c56c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 418.290705][ T7973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.298720][ T7973] CR2: 000056210b25e950 CR3: 00000000663f1000 CR4: 00000000003506e0 [ 418.310209][ T7973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.320351][ T7973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.330895][ T7973] Kernel panic - not syncing: Fatal exception [ 418.337428][ T7973] Kernel Offset: disabled [ 418.341772][ T7973] Rebooting in 86400 seconds..