last executing test programs: 3m21.155363838s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x8}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2b) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x1}, 0x50) 3m20.515373928s ago: executing program 0 (id=19): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000740)) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x402) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x0, 0x6, 0x0, 0x0, 0x10000, 0x62339fdf, 0x4002004c4, 0x1000, 0x1, 0x0, 0x5, 0x1, 0x4], 0x15000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0xfffffffa, 0xc, 0x0, 0x0, 0x64, 0x5c64}, {0x80000008, 0x1, 0x6, 0xf9, 0x80000000, 0x1, 0x81}, {0x80000000, 0x8000, 0x4, 0x0, 0x7, 0x7ee1, 0x80}, {0xd, 0x4, 0x4, 0x6, 0xffffffff, 0x1, 0x91}, {0xa, 0x7, 0x4, 0x5, 0x4, 0x7, 0xe2}]}) r3 = eventfd2(0x4, 0x0) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x16a002, 0x0) write$eventfd(r3, 0x0, 0xeffd) 3m19.656620573s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m19.494166198s ago: executing program 0 (id=24): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 3m19.493995208s ago: executing program 4 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="000104000000000000000000000000000000000186dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m19.42193931s ago: executing program 4 (id=26): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x44010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) connect$inet(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) 3m19.314046193s ago: executing program 4 (id=28): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000200)=ANY=[], 0x3, 0x274, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x181000) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x42, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r5, 0xfffffffffffffc01, 0x0) tee(r3, r5, 0x60000000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x0, 0x0) read(r6, &(0x7f0000000700), 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 3m18.426194841s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001100)={0x18, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x141}, 0x80c0) 3m17.583496357s ago: executing program 4 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m17.45892911s ago: executing program 4 (id=36): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x90000, 0x0) 3m5.245716951s ago: executing program 32 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000009c0)="400f38f17100470f060f20c035020000000f22c00fc71eb8010000000f01c10f01d10f3266baf80cb8de637a87c4c1c859790066bafc0c66ed66ba4000b8a5c00000ef0f01c966b8e6008ed8", 0x4c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m3.563619492s ago: executing program 33 (id=24): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 3m2.363702569s ago: executing program 34 (id=36): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x90000, 0x0) 2m17.57377884s ago: executing program 3 (id=309): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x1a1, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H393me/FCpEhWHChqweJ5U86Pq4GJwipADBxfBoCGNTTFR08tgS8UuUpBqZzed6iiCjqLgXBwEBz2XbtIMncRBIpd7Iv4PfV5w97nvc3fPj2877IUZ4M/OcpMKI5r9fEYwwCVJxpRK8p2tf9pcT4LLtl6z+crmZLi4dKfR6bQW8hfz5OKB4aPkVX68Hv++CRVHFAOhgnzdWW425FbAsEJXzQbkapx+iq7T858xaSY4fBPN0FvjiqInXg0OFPrd+4VwcenMfLcx15pr3S2XZy4UzxWL58uF2/OdVvEt4j8RxYt4fwGZgD3+Q1J1Hm+avWpaEL+tIh08h3Sd9U196sT0AOVvM0T44A3IfDftvLrGSbI34gNVOSS8RO+zhzGMFqpmuKreSMl8Mb9SiuyK1meb9zqzq9eV/E5vVGQ7K6UtUl4KKDETt4aDfGQ1YiqiGrERsfWD42L+76tZie+vbXWUY5DmQaPfXyil4ZN4AeX4ysHEaDoVMFWL9/ne/mODb+MHx3Ecx3Ecx3EcZxf4GwAA//8kH13Y") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m16.935263519s ago: executing program 3 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000080), 0x4003) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x200000) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="54000000000000000000000007000000442c26107fffffff0000000600000400000000010000004080000000ffffe2ff0000000400000100000000c902000000000000000000000064010102ffffffffac1e010100000000"], 0x58}}], 0x1, 0x0) 2m15.703497277s ago: executing program 3 (id=316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004006089f3a9b9d91f40757330970000080000000100000080b7be57469395dbd1b4d1bc16d0827badf1ccc746376ba864d9fb281ee5ed3c4b600202c62e8c266a43f28043"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = dup(r4) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) write$P9_RSTATu(r6, &(0x7f0000000480)={0x6e, 0x7d, 0x1, {{0x0, 0x58, 0x9, 0x8, {0x1, 0x3, 0x2}, 0x98280000, 0x5, 0x1, 0x0, 0x1, '\x00', 0x12, '/dev/snd/pcmC#D#p\x00', 0x12, '/dev/snd/pcmC#D#p\x00'}, 0x1, '\x00', 0xffffffffffffffff}}, 0x6e) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x1}) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0603d0f, &(0x7f0000000040)={0x40}) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x109a00, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @broadcast}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000007"], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="ebfa0e81ceb3dc4c43c215ebd015af003afaf21393a2977cab52e35904000000a88aa35b175c12cf29c48c2d4b45c1dc73113beeb9b3a73cd0415b0437839a7b9b3f376c", 0x44}], 0x1) io_uring_setup(0x5d92, &(0x7f0000000280)={0x0, 0x93d0, 0xafdec291229ba0c, 0x42, 0x8d}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) close(0x3) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) fcntl$getown(r9, 0x9) 2m10.908688143s ago: executing program 3 (id=331): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_mount_image$exfat(&(0x7f00000004c0), &(0x7f0000001900)='./file1\x00', 0x14090, &(0x7f0000000100)=ANY=[], 0xfd, 0x1512, &(0x7f0000005080)="$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") r1 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) write$binfmt_elf64(r2, 0x0, 0xc8) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000000)={0x7, 0x2}, &(0x7f0000000040)) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) 2m10.554921703s ago: executing program 3 (id=335): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0x202, 0x4e23, 0x3, 0xa, 0x40, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0x32}, 0x0, @in=@remote, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 2m8.550076154s ago: executing program 3 (id=339): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0x8, 0xffffffff, 0x7}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48e, 0x0, 0x40}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1b7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', r5, &(0x7f00000003c0)='./sys\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 2m7.945251602s ago: executing program 35 (id=339): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0x8, 0xffffffff, 0x7}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48e, 0x0, 0x40}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1b7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', r5, &(0x7f00000003c0)='./sys\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 1m56.716510053s ago: executing program 6 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="b8050000", @ANYRES16=r1, @ANYBLOB="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"], 0x5b8}, 0x1, 0x0, 0x0, 0x4004840}, 0x20000810) 1m56.346143355s ago: executing program 6 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000270080"], 0x2c}}, 0x20000040) 1m56.208009649s ago: executing program 6 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 1m55.563647229s ago: executing program 6 (id=386): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x28800000, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) 1m53.606887828s ago: executing program 6 (id=391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0xfffd, 0xd6e, 0xdfee, 0x3}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x14200, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) 1m52.5621116s ago: executing program 6 (id=394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 1m52.22027114s ago: executing program 36 (id=394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 1m40.992334761s ago: executing program 2 (id=440): prlimit64(0x0, 0x1, &(0x7f0000000400)={0x3, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x8}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x4}, 0x38) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000c00)='1', 0x1) symlink(0x0, &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={0x0, 0x34, 0x12}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'michael_mic\x00'}}, &(0x7f0000000280)="0ddadb9cc8585557d8db7066898a8461ea86b6275eb11cf2e4e77ea0ea9193d4423f6b61404c0afd793928a12f2e71d740db81e1", &(0x7f00000002c0)=""/18) 1m40.817679466s ago: executing program 2 (id=443): socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) userfaultfd(0x80001) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000200)) socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1m40.682047261s ago: executing program 2 (id=444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 1m40.113827188s ago: executing program 2 (id=445): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000180)={[{@uid}, {}, {@nodecompose}, {@nls={'nls', 0x3d, 'macromanian'}}, {@creator={'creator', 0x3d, "4b49abd3"}}]}, 0x1, 0x5f3, &(0x7f0000000680)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x4f834c58, 0x43, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x2, 0x7}}, 0x50) 1m39.37001767s ago: executing program 2 (id=447): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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") r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x4, r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000840)=0xe8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000008c0)={[{@grpid}, {@grpquota}], [{@euid_eq={'euid', 0x3d, r3}}, {@appraise_type}]}, 0x4, 0x504, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) truncate(&(0x7f0000000080)='./file0\x00', 0x400000f030) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, &(0x7f00000000c0)) 1m36.972766354s ago: executing program 2 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x3, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4000000}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xc040840) 1m36.505472188s ago: executing program 37 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x3, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4000000}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xc040840) 12.459108801s ago: executing program 7 (id=747): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 11.660542545s ago: executing program 8 (id=748): syz_emit_ethernet(0x4a, &(0x7f0000000280)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x14, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) 10.333285916s ago: executing program 7 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+'], 0x6) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x44095, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r3, 0x0, 0x0) write(r2, &(0x7f0000000280)='high-', 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 7.918222959s ago: executing program 8 (id=755): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2b) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 7.167291432s ago: executing program 8 (id=759): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 7.164309682s ago: executing program 7 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='+5', 0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x1, 0x8, 0x200, 0x2, 0x7}, 0x7, 0x947, 0xe03}}, @TCA_TBF_PRATE64={0xffffffffffffffeb, 0x5, 0x68988cebd1138f5}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x9, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x5, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x80000001, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x26, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x400, 0x6, 0x2, 0x43, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x1000, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0xf8f, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x1, 0x7fffffff, 0x8, 0x1, 0x800, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x100, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0xd, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x7, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xffd, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0x3, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x468}}, 0x0) 6.23007908s ago: executing program 7 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='none\x00', 0x2000010, &(0x7f0000000300)=ANY=[], 0x2, 0x6f6, &(0x7f0000001a00)="$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") sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0xfded, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES64=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 6.219620401s ago: executing program 8 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x84000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6.176663782s ago: executing program 5 (id=764): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) 6.130427014s ago: executing program 9 (id=765): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e462775f9527ad4d3ff445ff0000008010cdbbf76e69950600", [0x1ce, 0x20000001]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 5.090237915s ago: executing program 5 (id=766): timer_create(0x8, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 4.738217536s ago: executing program 5 (id=767): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x6) 4.492083153s ago: executing program 8 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x44400) 3.554164972s ago: executing program 8 (id=769): socket(0x400000000010, 0x3, 0x0) creat(0x0, 0x122) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x2, 0x3, 0x0, 0x9}, 0x20) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r3, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x10) 3.532854613s ago: executing program 5 (id=770): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2b) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 3.263474871s ago: executing program 5 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+'], 0x6) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x44095, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r3, 0x0, 0x0) write(r2, &(0x7f0000000280)='high-', 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 3.102220046s ago: executing program 9 (id=772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x0, 0xce29, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.373997977s ago: executing program 9 (id=775): prlimit64(0x0, 0x1, &(0x7f0000000400)={0x3, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x8}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x4}, 0x38) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000c00)='1', 0x1) mkdir(0x0, 0x1ff) symlink(0x0, &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={0x0, 0x34, 0x12}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'michael_mic\x00'}}, &(0x7f0000000280)="0ddadb9cc8585557d8db7066898a8461ea86b6275eb11cf2e4e77ea0ea9193d4423f6b61404c0afd793928a12f2e71d740db81e1", &(0x7f00000002c0)=""/18) 2.369406048s ago: executing program 1 (id=776): r0 = socket$igmp(0x2, 0x3, 0x2) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x3, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 2.232675292s ago: executing program 7 (id=777): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x4441, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC], 0x0, 0x31d, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) r4 = socket(0x1, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) waitid(0x2, r2, 0x0, 0x8, 0x0) semget$private(0x0, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x0, 0x0}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x22020600) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.150139175s ago: executing program 1 (id=778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x101, @multicast2, 0x0, 0x2, 'wlc\x00', 0x6, 0x1, 0x3}, {@empty, 0x2, 0x2, 0x7, 0x0, 0x3}}, 0x44) 2.004635869s ago: executing program 1 (id=779): vmsplice(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f0000001480)="dc6af4e755fd830457e9cf11d1fd1deba455d34cf53efe57e3c9dd426e61b6521c1b40ac35c5d7cfa8016d187f176dbae714ca445db40ff0b9eba9f10353d29beec609b50e01ce6af87d55cf235098b2fb74868c06d045a919e75661e173a051a32f6c142abf2b65f7019cd66c44f274542f6a1e1a42c76282c89e4602a612ffde5b19e5f1f64250ae68060012701de0102001441f6a0d2f87e5a636234971d77ddee6d23f9c6e94bd83e10e3210e2d168a19b9f609bcdfdfea8b76f772197605cc95e869976f9c4dac14592ba5bc46a4f956fe05028c56bf17b4eecf893bd9a4952bbd7d552b8a2b0aa82d08246f235b7dd5b6be14f8e4cdb65c5f7840b037a197c9ad53cdf009038bd6df955b1313fc15119b03973349f5d371218ab15b618a2a611f3405fc39428bda308af76de9d52d59444b5691b3607b7b0220f4c0a0bab9324c4ef588d08e3c0eaf9e90da4d17d53c5db7b2ec275683c917f40c0e0c381681e3fe5317526107077ed2af04b8d3152840a0438d724325005fcd1f09aff3b19bc0adf31279b1eaeca4e804d18d30e52fce4fd90aaff32af36018e2135701ed7599805b9df5577a41a12e14507f32ff4c2e9c457ee56a268e7214ed6922661b0c8f2ef748f5ee9baea42a23dee2b6ab3afc179abf7ea74c57e478739f946dd97c9e3e28d6c3a6d97fabae8137a1c1fa8440bd2cc6f33bdc4a580102f82c152869877b22f9f223f62574c00e505208c1ae0b365aeeb8515c91ec2d701737236a81aeae31ea1a64b12383114273d4a2ca53f4f74a222e78d348456ab112bdf09eb80478e940d4a6ee66c09959baf6a2df11189eb1021538e9f78cd5d8803803b723a1bd8ff321a5f374e637d5eac851955b4137de38858f0edb3e64ee14267a872feb9d0db087f25a06884143fab8114055d19bfef22e086c79fcea253e8069a17070ae5cbfba37d877f5a5126d430e5a56460684b63f83ccd05fc868296ab229b08eca9f0bde6583e3e5466414be755cbcee234b6d711278801ece8b53dcc878498a1b7bcfca6527ac690b7a5190967dedbe84ef0bcf32014ce1d035aebf7fa067b84a741612cb79fd2d790f300eb62ee26f813802c9dcbf7d1ce6d974561e9eaa079295f72c6475b5cd91d9c6bc208a5886b13a98992219afe30c4d1c1879de87c14a22c45d3911005069d9d46e3bd655761971ce1e8b034def0149916c8e6c7c64e69eca05a10fc99ce7f8fc7c5d25423738f0c9e9051724ff97834774e2b2a48f5724178b01693f6635d2c7e953d3db6b322eb121036d6c277d11f4a561538ca4c724cf705a170c188dc472466595ff28338a84163e00e07c01b32ea569903e44992de727369b4ba30edd10fc8fda6a50c258014ef365d3b10450140870012d5ae145b52f5c0f2d6813a00884b1e8368953262bc2f56897b54b2ed1638e0c177e1a22d4533983a26b0620b4d1aebbcf03fdb969703959ec120ae231a619b2ae0156ca2de1658b539740c5bc2b01599ac1a252149e78cc5a3e31217e2485ad1896bf880e3f72a1b54e7443eeee130e1f44ee112600397379015351f5f986955dd0990363e214a0781ded51ab9a2e3c77a2cfc5471b6242fbe71cff202fd6dec3f079130b3e9a389a36420b67fa4f46b7abd97952806e59aeaa174880b8880bd8545472f3681f6a3e057138189784826c2b55c939f86a5193e1f11dfc860d9937bcb826ac2a19b2e71841fc7b703ab4e17622d1b3662611c9a08122f39b83bfc6075e82dff3a909fe2504ff083558c5e2b949d373cd8bd60c179d523072262268d4d612d0639b7d5e4cd7a861efbdd4421e02c052682009d36ac32f9b670b6f3a9992f997df042d4f32861fa0a6f2d6a0d14cc43b4069e59a2222949284934ae3a64d621c79c6152565b892c204a2735bad75cb573030bf83958412f36e9e8ab669b8f423e17a2690e2109360bc287904df089bdd40a181cd6ee751b7ba38d8340a48c6f1bb9118008db0d3bb50aa3f65853b01bc3d584a2ba6836e23d1c8c71801de9dd68ba16eaa0883fbb6bc9eed71e1c612818e6b6d494f4f12a4a6f3f0e752ba2fdedb0823fe7bdafd8a49ab5fc070ad821fb1313ea27e9b89616e32ef44389a3a6cb4cf6577ff83590c476f6f2af8361fb3d36105217b36f9a46988d56ab9de1953cdd497fe99dc0fa89608255aac6f5a391e647be96ffff65ddb7ffc18eb4be9e798f37bbce237e42c1b4175b00ce194489b44e7ee43829a2810a820218226f1f3974f975dbdc23b19546cc9d436cc792511d26dda609489f64010b9f175c04a1e80b3e32a89c638f4921a6d8ea41322746d4b6638abd442398a6ed67a6ba9368d32dbf5290e34937cb913c3a9e66c5d656a77fb4641bf3f08410dc2c6150d39412eef1d889fea724c36dfd80c0612f4ae0fff1a700d6a79e54d51ecbe1af53a04a63ee37b3690eabcd2d36ba3b728013b311df40b0b6b0b1d61286f403993b8b0b9e9db64f489f373a0a4ea8b1da1eccacb1e7e1f9f480411945347b37f7b3977c34daf0aa2b34f9138fbf4f0c0831801be2f7879efa7c885a62f4fd202d31b8452c15b942b5c7b76888051623bccff501daacd2c3e053b7fbfcb077d1e8fc197e195430ce3428acf70e68ad97b659abf7f6d5baeeb0ff2ad3f76d5aeaa59acdcc08f30aaa218f669b41462d7f43612b24e9a975dfdb951aff00154f711adbb01888a8a98cebb74e93c511fa7b72fd476f71866274ba2d7181003f779e74888d72b8fad50fed47133aac469604be0547981de62a30cb2edd0dac18631c50a46e61826900c80a0db360db656cbc6b6c28aa627fc52528858a4e5bb0775ec7e19bcdc592e81cbef265bb7908de48b4b4fe618f40581f852add53c77bcec59bb88786c39c876938afeb0a071d53989820cb7d33096ee59b557f68529e347aae051e309e21de444dd321220f5ffc08f94e2ccc58173da3fb4cdd9a967d49a0c7629b42f7322bcaf971182ef1ee60fa33e33a508f6b6be43dcf6f448565144b784c96894175be57aeab898b564d1820e0492bb413c6890aaa876d1e9b03d5e13ee2dbbb5ba478985d1e56cf175b151e8b5e646466068de1b58e395915c82a1deb9136bc68e6623e986bc2b84d9d83e46507d9aa9895a1de588dab15454b5df3095fee53d64f8fc6945b78ffb48403a54f77ea4218e6f3bd0d2ea55a4d420b264fd33f556ab410a86f60501b8b954fde239e37434c79f6040fae767698a56a2f1c49c7ec5267ca56c6a9ee4a51473b30f4e59886786a9d5e10d603c029d3ff02ec386a2f6c6abcd8f44723ac9f0dd9a6fbc2b83010ded295f4fea934a9046395448459cb6a0f6685433387e7e93f2f24bf930f4c29d82b1f4a3a8a5e626d2657aeca606e2a7f15961936e2fe04d4721c7cf9687980c914b8d43605ec80546e4551998e58c9cd093fd161eff624b12791b033e3b5672d6858ec1519537f8e2dfe1ba5dc7db896d5c10a628547c2c35fe17697892d9122d5123ec33fba26a887287e33d3e19ea340c26ebf28ed5c72caa0543483d8fc4b2f6b5caf5b781403f61d81ff9073eac172df755bc16b6b48be7e249643b1dccc29cad5e1e2515b0334c366b010f03d2189e44b23e922bc2ea9283564e2e5d37d989585a3b79a63b5638bd462471bf07833a76bc437de26958f6a6e14e2ccae3190e55d7e967e5d176ba188968f7dc2f8fa91875aba223c874c184a43e6e90bc22eebb020864e63b804cadc461ad2e9b14164cf3645927bb605be78794893789865b1ec989f359c384f20219b29069a5f0d618bf659144b7c5c67947d65e76f0670048baffc86736d52eef44b76dbe892f761ca05430b42df8960e155f56be9247b129179a70aadd60fd82d0d21cba2507984bec74e95073ec86872aae7e7a727adeb4adbddc3f0315408832fefdf7d75e48c89b37e72d42a22817be564f67a77a3286dafb5d7339565aa105b53ab983e0bc136989930eedee799cb3f5ba986df00e271f7382e6d1921b28824b7b83563442cf0fda26b1f665bb203bfa45f02e33640d5111e852131bcde3eae6a4d81bfda0046ae9a2113acf58f3fc0dadbf7b9fc0a3ffed153c8a7b7696112303850d619f5959f6bd8969ee8f9b074cd923d860f523bd2f76e657bb8f2f7e2a8b5fe347059f90f443f4276df4be3d9cc3ae56df50260352a0218af12a1ecee48cff6d58cb3371397e5c6a391118203989fb413b2429c5463a6786837372b42c420ebffba94497477abdf1ff28cd19586a194b6094ebbc3b4cfe9768319010002b0b5b1677f4d39d1017517c3043c67e5560ce6cdd1a1a306fe0001283d2757631d8d4f39ad8af3f6779b9276dc419988e5ce6d5149847552bfd8760766cd9f21fa4dc7a26fa19ae595a138ba76e70cfdb40464cea0db4c75b76f1583dcb293338e2174c3ac9c977c89cde0afe175815f4619aa8aafe128fff52447705c4050b018fd809d482d29208d8171cfeccd43f703b5e86b9e984c39ce8ef92abd5cf88fbd0a702d7b1672b11d04f4e52707daaf57e68f1aced88f8da157ae1767e173578f32e0fe7d5d1b57668a65c75de4d2d7549125c13cd3be61fa9dca6d6d589cd68150f6788178e1e7df5c7e27afb174d53cb950b1a62ce9a914e42f401328fb9c2001a218954414d7004c46dd189766e772b725b6f22f49c0456ec706b850b242cee9044897d6e5ae49de8a620a931dc34d410862cb2732fea44daa6ba4e962652b3548f10f11d30b5afea0de7910b487c921fbb2ec4b7e5dd5c6f5413da6d6eb7a29e9f058535abe49e19297fec1168aad06c59d305b516faf1f328abf3cc82df784246cc1487b58edd40ce13c9c9cfa36f7fe620f4066578ea6a324581084fc2c67fa", 0xd89}], 0x1, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002200)=ANY=[@ANYBLOB=')\x00\x00\x00'], 0x29) 1.923974462s ago: executing program 9 (id=780): syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x240) close(0x3) 982.24355ms ago: executing program 1 (id=781): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2b) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 855.995203ms ago: executing program 7 (id=782): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='addr\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x46) 729.250088ms ago: executing program 9 (id=783): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 625.094511ms ago: executing program 1 (id=784): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000001180)={@random="5acf320c4578", @remote, @void, {@ipv6={0x86dd, @esp={0x3, 0x6, "50d8d4", 0x10, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @private2, {[], {0x4d6, 0x2, @basic={0x0, 0x0, 0xf523}, '~<', 0x2}}}}}}, 0x0) 370.264538ms ago: executing program 1 (id=785): io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0), 0xfc, 0x57d, &(0x7f0000001500)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 109.086897ms ago: executing program 5 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r3 = io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x380, 0x2, 0x2c2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) tgkill(r1, r0, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000008c0)=0x1) 0s ago: executing program 9 (id=787): mkdir(&(0x7f0000000000)='dir0\x00', 0xff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 9359][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.249440][ T4691] Call Trace: [ 97.252744][ T4691] [ 97.255694][ T4691] dump_stack_lvl+0x188/0x250 [ 97.260401][ T4691] ? show_regs_print_info+0x20/0x20 [ 97.265632][ T4691] ? load_image+0x410/0x410 [ 97.270167][ T4691] ? __might_sleep+0xf0/0xf0 [ 97.274781][ T4691] ? __lock_acquire+0x7b50/0x7b50 [ 97.279839][ T4691] should_fail+0x383/0x4b0 [ 97.284282][ T4691] should_failslab+0x5/0x20 [ 97.288837][ T4691] slab_pre_alloc_hook+0x51/0xc0 [ 97.293800][ T4691] ? vm_area_dup+0x1e/0xb0 [ 97.298242][ T4691] kmem_cache_alloc+0x3d/0x280 [ 97.303037][ T4691] vm_area_dup+0x1e/0xb0 [ 97.307306][ T4691] __split_vma+0xb1/0x410 [ 97.311668][ T4691] ? find_vma+0x1df/0x230 [ 97.316025][ T4691] __do_munmap+0x40b/0xe10 [ 97.320478][ T4691] __vm_munmap+0x13f/0x240 [ 97.324919][ T4691] ? vm_munmap+0x20/0x20 [ 97.329200][ T4691] ? blocking_notifier_call_chain+0x16a/0x1b0 [ 97.335301][ T4691] __x64_sys_munmap+0x67/0x70 [ 97.340008][ T4691] do_syscall_64+0x4c/0xa0 [ 97.344452][ T4691] ? clear_bhb_loop+0x30/0x80 [ 97.349154][ T4691] ? clear_bhb_loop+0x30/0x80 [ 97.353863][ T4691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.359792][ T4691] RIP: 0033:0x7fedc887ef07 [ 97.364235][ T4691] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.383868][ T4691] RSP: 002b:00007fedc6ad5d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 97.392320][ T4691] RAX: ffffffffffffffda RBX: 00007fedc0000000 RCX: 00007fedc887ef07 [ 97.400318][ T4691] RDX: 0000000000000000 RSI: 0000000002ab7000 RDI: 00007fedc4000000 [ 97.408310][ T4691] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 97.416829][ T4691] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 97.424823][ T4691] R13: 0000000000001000 R14: 00007fedc4000000 R15: 0000000001549000 [ 97.432842][ T4691] [ 97.448602][ T4280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.463727][ T4514] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 97.487345][ T4514] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 97.539989][ T2306] Bluetooth: hci1: command 0x0419 tx timeout [ 97.572176][ T4280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.699448][ T4280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.804571][ T4280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.889692][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.896812][ T4514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.964866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.978968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.992294][ T4514] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.029983][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.051439][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.119938][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.136884][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.156011][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.163158][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.206526][ T4501] device veth0_vlan entered promiscuous mode [ 98.234875][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.255318][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.275089][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.288913][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.296077][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.310137][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.313071][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.330527][ T4229] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 98.337396][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.360478][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.361040][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.389263][ T4501] device veth1_vlan entered promiscuous mode [ 98.417726][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.436840][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.453591][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.468746][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.490512][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.491697][ T4229] as10x_usb: device has been detected [ 98.519670][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.525397][ T4229] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 98.539359][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.556724][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.569369][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.592329][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.615808][ T4514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.616929][ T4229] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 98.635317][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.651757][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.661931][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.670851][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.686426][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.741809][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.776436][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.793868][ T4229] as10x_usb: error during firmware upload part1 [ 98.808017][ T4501] device veth0_macvtap entered promiscuous mode [ 98.817987][ T4229] Registered device Abilis Systems DVB-Titan [ 98.906411][ T4501] device veth1_macvtap entered promiscuous mode [ 98.973609][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.990517][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.020699][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.049291][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.071426][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.099659][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.128136][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.156616][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.199650][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.218979][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.238809][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.258855][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.311554][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.320194][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.328797][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.355126][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.367951][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.410713][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.423515][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.433949][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.446937][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.467049][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.487586][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.499123][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.511171][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.521518][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.532221][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.544782][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.559344][ T4501] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.577844][ T4501] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.587056][ T4501] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.597782][ T4501] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.614572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.625368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.639037][ T4514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.789327][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.817603][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.837620][ T21] usb 4-1: USB disconnect, device number 2 [ 99.860724][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.905988][ T21] Unregistered device Abilis Systems DVB-Titan [ 99.927931][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.954537][ T21] as10x_usb: device has been disconnected [ 99.962855][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.034366][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.228404][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.248951][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.315393][ T4514] device veth0_vlan entered promiscuous mode [ 100.356930][ T4514] device veth1_vlan entered promiscuous mode [ 100.445144][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.511048][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.558970][ T4203] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 100.572342][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.631149][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.776175][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.795181][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.804589][ T4798] loop2: detected capacity change from 0 to 128 [ 100.842822][ T4514] device veth0_macvtap entered promiscuous mode [ 100.861999][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.892629][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.988434][ T4514] device veth1_macvtap entered promiscuous mode [ 101.026494][ T4798] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.049599][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.058096][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.119458][ T4798] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.166072][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.245131][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.280410][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.314083][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.353136][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.377537][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.397872][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.418850][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.440513][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.471360][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.496171][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.526468][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.574599][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.650763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.672201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.726047][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.753964][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.799293][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.827174][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.867251][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.915216][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.956452][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.989566][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.020766][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.050900][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.080151][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.120419][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.158268][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.250084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.292186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.383286][ T4514] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.410681][ T4514] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.459532][ T4514] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.491502][ T4514] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.499696][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.814569][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.831617][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.860134][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.890013][ T21] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 102.900216][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.920015][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.928136][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.938072][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.977177][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.035465][ T21] as10x_usb: device has been detected [ 103.051484][ T21] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 103.080923][ T4826] loop5: detected capacity change from 0 to 1024 [ 103.083187][ T21] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 103.120080][ T4826] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.145579][ T21] as10x_usb: error during firmware upload part1 [ 103.173319][ T21] Registered device Abilis Systems DVB-Titan [ 103.179789][ T4826] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.210584][ T4826] jbd2_journal_init_inode: Cannot locate journal superblock [ 103.229782][ T4826] EXT4-fs (loop5): Could not load journal inode [ 103.380953][ T4280] device hsr_slave_0 left promiscuous mode [ 103.398247][ T4280] device hsr_slave_1 left promiscuous mode [ 103.457332][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.489695][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.522570][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.543400][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.560939][ T4280] device bridge_slave_1 left promiscuous mode [ 103.568970][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.594048][ T4280] device bridge_slave_0 left promiscuous mode [ 103.607271][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.628466][ T4280] device hsr_slave_0 left promiscuous mode [ 103.635184][ T4280] device hsr_slave_1 left promiscuous mode [ 103.642518][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.650310][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.658358][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.667269][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.675474][ T4280] device bridge_slave_1 left promiscuous mode [ 103.682064][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.692795][ T4280] device bridge_slave_0 left promiscuous mode [ 103.699056][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.720151][ T4280] device veth1_macvtap left promiscuous mode [ 103.726648][ T4280] device veth0_macvtap left promiscuous mode [ 103.735605][ T4280] device veth1_vlan left promiscuous mode [ 103.742145][ T4280] device veth0_vlan left promiscuous mode [ 103.750512][ T4280] device veth1_macvtap left promiscuous mode [ 103.756639][ T4280] device veth0_macvtap left promiscuous mode [ 103.763319][ T4280] device veth1_vlan left promiscuous mode [ 103.780483][ T4280] device veth0_vlan left promiscuous mode [ 104.460567][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 104.504264][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 104.561306][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.617182][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.763643][ T4856] loop7: detected capacity change from 0 to 128 [ 104.866175][ T4280] bond0 (unregistering): Released all slaves [ 104.892025][ T4856] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.926293][ T4856] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.203368][ T1111] usb 3-1: USB disconnect, device number 3 [ 105.237118][ T1111] Unregistered device Abilis Systems DVB-Titan [ 105.242112][ T1111] as10x_usb: device has been disconnected [ 105.274076][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 105.295247][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 105.341180][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.367318][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.481533][ T4280] bond0 (unregistering): Released all slaves [ 105.587535][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 105.626289][ T4864] sl0: header compression turned on [ 105.824421][ T4882] loop2: detected capacity change from 0 to 1024 [ 105.898157][ T4882] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.918491][ T4882] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.936115][ T4881] netlink: 28 bytes leftover after parsing attributes in process `syz.7.127'. [ 105.949303][ T4882] jbd2_journal_init_inode: Cannot locate journal superblock [ 105.958649][ T4881] netlink: 'syz.7.127': attribute type 7 has an invalid length. [ 105.959090][ T4882] EXT4-fs (loop2): Could not load journal inode [ 105.979577][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.127'. [ 106.049976][ T4881] device ip6gretap0 entered promiscuous mode [ 106.060556][ T4881] device syz_tun entered promiscuous mode [ 106.083149][ T4882] loop2: detected capacity change from 0 to 512 [ 106.099935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 106.183651][ T4882] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 106.332757][ T4888] device syzkaller0 entered promiscuous mode [ 106.542679][ T4894] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.558863][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.132'. [ 106.570260][ T4894] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.662391][ T4902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.840126][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.138'. [ 106.869386][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.7.138'. [ 106.898641][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.138'. [ 106.937453][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.7.138'. [ 107.426184][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 107.464211][ T4938] sl0: header compression turned on [ 107.756590][ T4946] loop7: detected capacity change from 0 to 256 [ 107.826663][ T4946] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 107.972790][ T4946] exFAT-fs (loop7): error, broken FAT chain. [ 107.979045][ T4946] exFAT-fs (loop7): Filesystem has been set read-only [ 108.061154][ T4946] exFAT-fs (loop7): error, failed to bmap (inode : ffff8880604e07e0 iblock : 0, err : -5) [ 108.173979][ T4957] device syzkaller0 entered promiscuous mode [ 108.326939][ T4966] bond0: option arp_interval: invalid value (\A¯è/U#Ô]ðÌ®¡¤Ó´¶&Zý;-£4Y¤Ûäw’ÔQÁÈÀÉWù³8@ì;’ŸF·$ÊYLt1´tµÛ?õ6¿teÎUÉ-Ùî=æ§FzvǵçÓ†³¤Âºö‡¾U=µÕqÁV…ˆÜ—îèk7ªN3ÆŸK[(ZgÍt“';wÞÕ¢ÿm™\n §ìæ#|[8},ê) [ 108.401959][ T4966] bond0: option arp_interval: allowed values 0 - 2147483647 [ 108.709921][ T4985] netlink: 20 bytes leftover after parsing attributes in process `syz.5.152'. [ 108.875153][ T4979] kvm_set_msr_common: 6 callbacks suppressed [ 108.875170][ T4979] kvm [4974]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xff [ 108.899937][ T4979] kvm [4974]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 108.995622][ T4979] kvm [4974]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff, nop [ 109.054916][ T4979] kvm [4974]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff, nop [ 109.759651][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 109.893235][ T5015] device syzkaller0 entered promiscuous mode [ 110.009645][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 110.129799][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 110.169682][ T21] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 110.275428][ T5025] FAULT_INJECTION: forcing a failure. [ 110.275428][ T5025] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 110.349855][ T5025] CPU: 1 PID: 5025 Comm: syz.3.166 Not tainted syzkaller #0 [ 110.357202][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.367275][ T5025] Call Trace: [ 110.370574][ T5025] [ 110.373527][ T5025] dump_stack_lvl+0x188/0x250 [ 110.378235][ T5025] ? show_regs_print_info+0x20/0x20 [ 110.383462][ T5025] ? load_image+0x410/0x410 [ 110.387988][ T5025] ? __lock_acquire+0x7b50/0x7b50 [ 110.393028][ T5025] ? __lock_acquire+0x1305/0x7b50 [ 110.398082][ T5025] should_fail+0x383/0x4b0 [ 110.402535][ T5025] prepare_alloc_pages+0x1e3/0x5b0 [ 110.407696][ T5025] __alloc_pages+0x11b/0x480 [ 110.412328][ T5025] ? zone_statistics+0x170/0x170 [ 110.417302][ T5025] ? count_memcg_event_mm+0x324/0x370 [ 110.422709][ T5025] ? remove_device_exclusive_entry+0xac0/0xac0 [ 110.428900][ T5025] alloc_pages_vma+0x2bc/0x790 [ 110.433695][ T5025] handle_mm_fault+0x23be/0x4440 [ 110.438700][ T5025] ? get_page+0xe0/0xe0 [ 110.442889][ T5025] ? vmacache_find+0x238/0x590 [ 110.447683][ T5025] ? find_vma+0xd2/0x230 [ 110.451949][ T5025] do_user_addr_fault+0x494/0xc90 [ 110.457016][ T5025] exc_page_fault+0x60/0x100 [ 110.461625][ T5025] ? clear_bhb_loop+0x30/0x80 [ 110.466341][ T5025] asm_exc_page_fault+0x22/0x30 [ 110.471211][ T5025] RIP: 0033:0x7fedc87406cb [ 110.475663][ T5025] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 110.495296][ T5025] RSP: 002b:00007fedc6ad5fa0 EFLAGS: 00010206 [ 110.501401][ T5025] RAX: 0000000000000000 RBX: 00007fedc8b06fa0 RCX: 0000000000000000 [ 110.509396][ T5025] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 110.517390][ T5025] RBP: 00007fedc8916024 R08: 0000000000000000 R09: 0000000000000000 [ 110.525380][ T5025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 110.533376][ T5025] R13: 00007fedc8b07038 R14: 00007fedc8b06fa0 R15: 00007fff5d4429a8 [ 110.541385][ T5025] [ 110.569776][ T21] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 110.571157][ T5025] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 110.578874][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.578897][ T21] usb 7-1: Product: syz [ 110.578913][ T21] usb 7-1: Manufacturer: syz [ 110.578928][ T21] usb 7-1: SerialNumber: syz [ 110.680999][ T21] usb 7-1: config 0 descriptor?? [ 110.705829][ T5005] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.744824][ T5039] block device autoloading is deprecated and will be removed. [ 110.989337][ T4264] usb 7-1: USB disconnect, device number 2 [ 111.266754][ T5057] device syzkaller0 entered promiscuous mode [ 111.764550][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.180'. [ 111.843979][ T5079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.819988][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 112.968969][ T5118] kvm [5117]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000003c [ 113.002157][ T5118] kvm [5117]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 113.017072][ T5129] netlink: 'syz.7.196': attribute type 1 has an invalid length. [ 113.021139][ T5118] kvm [5117]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x70b3 [ 113.046900][ T5118] kvm [5117]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x6261, nop [ 113.069582][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 113.073296][ T5129] netlink: 'syz.7.196': attribute type 10 has an invalid length. [ 113.102249][ T5129] netlink: 40 bytes leftover after parsing attributes in process `syz.7.196'. [ 113.116683][ T5129] device dummy0 entered promiscuous mode [ 113.189844][ T21] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 113.212196][ T21] usb 7-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 113.273516][ T21] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 113.509873][ T21] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 113.529225][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.559236][ T21] usb 7-1: Product: syz [ 113.575000][ T21] usb 7-1: Manufacturer: syz [ 113.583540][ T21] usb 7-1: SerialNumber: syz [ 113.659164][ T21] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 113.689330][ T21] imon 7-1:155.0: unable to initialize intf0, err -19 [ 113.709964][ T5154] 9pnet_virtio: no channels available for device syz [ 113.740299][ T21] imon:imon_probe: failed to initialize context! [ 113.773725][ T21] imon 7-1:155.0: unable to register, err -19 [ 114.230684][ T5183] binder: 5180:5183 unknown command 1074553620 [ 114.236902][ T5183] binder: 5180:5183 ioctl c0306201 200000000640 returned -22 [ 114.276331][ T5179] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.277290][ T26] audit: type=1326 audit(1787891183.138:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5218 comm="syz.5.222" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7151200d9 code=0x0 [ 115.372321][ T4398] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 115.449441][ T5237] loop2: detected capacity change from 0 to 256 [ 115.500326][ T5237] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 115.528549][ T5237] exFAT-fs (loop2): error, broken FAT chain. [ 115.537638][ T5237] exFAT-fs (loop2): Filesystem has been set read-only [ 115.574223][ T5237] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880742907e0 iblock : 0, err : -5) [ 115.608956][ T21] usb 7-1: USB disconnect, device number 3 [ 115.629669][ T4398] usb 8-1: Using ep0 maxpacket: 16 [ 115.754747][ T4398] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.767288][ T4398] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.827780][ T4398] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.850478][ T4398] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.989832][ T4398] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.014925][ T4398] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.049694][ T4398] usb 8-1: SerialNumber: syz [ 117.229702][ T4229] Bluetooth: hci2: command 0x1003 tx timeout [ 117.246168][ T4199] Bluetooth: hci2: sending frame failed (-49) [ 117.320749][ T4398] hub 8-1:1.0: bad descriptor, ignoring hub [ 117.326722][ T4398] hub: probe of 8-1:1.0 failed with error -5 [ 117.358564][ T4398] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 117.726632][ T5209] raw-gadget.1 gadget: fail, usb_ep_set_wedge returned -11 [ 117.758291][ T5209] tmpfs: Unknown parameter 'grpquota' [ 117.906049][ T4398] usb 8-1: USB disconnect, device number 2 [ 118.557176][ T5300] loop7: detected capacity change from 0 to 128 [ 118.708635][ T5304] device syzkaller0 entered promiscuous mode [ 118.740700][ T5300] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.788246][ T5300] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.897212][ T5315] ip_tables: iptables: counters copy to user failed while replacing table [ 119.299611][ T7] Bluetooth: hci2: command 0x1001 tx timeout [ 119.305938][ T4199] Bluetooth: hci2: sending frame failed (-49) [ 119.992679][ T5344] loop6: detected capacity change from 0 to 512 [ 120.865586][ T5350] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 120.893430][ T5350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.389752][ T4271] Bluetooth: hci2: command 0x1009 tx timeout [ 122.182447][ T5388] loop6: detected capacity change from 0 to 512 [ 123.151220][ T7] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 123.167336][ T7] Bluetooth: hci3: Injecting HCI hardware error event [ 123.290824][ T4199] Bluetooth: hci3: hardware error 0x00 [ 123.396248][ T5404] nvmet: adding nsid 1 to subsystem testsubsys [ 123.479939][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 123.548340][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 123.578615][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 123.602924][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 123.669420][ T5393] nvme nvme0: NVME-FC{0}: new ctrl: NQN "n" [ 123.845090][ T5420] loop7: detected capacity change from 0 to 1024 [ 123.908352][ T5420] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.942649][ T5420] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.972687][ T5420] jbd2_journal_init_inode: Cannot locate journal superblock [ 123.989532][ T5420] EXT4-fs (loop7): Could not load journal inode [ 124.132367][ T5420] loop7: detected capacity change from 0 to 512 [ 124.167397][ T5420] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 125.445855][ T5438] loop2: detected capacity change from 0 to 512 [ 125.529678][ T4264] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 125.699972][ T4281] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 125.773068][ T4281] (NULL device *): queue 0 connect admin queue failed (-111). [ 125.872800][ T4281] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 125.910314][ T4264] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.997623][ T4281] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 126.003128][ T4264] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.029880][ T4264] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.039131][ T4264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.319698][ T4264] usb 8-1: usb_control_msg returned -32 [ 126.325332][ T4264] usbtmc 8-1:16.0: can't read capabilities [ 126.575089][ T5411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.911834][ T4229] usb 8-1: USB disconnect, device number 3 [ 128.128000][ T145] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 128.310234][ T145] (NULL device *): queue 0 connect admin queue failed (-111). [ 128.317756][ T145] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 128.405972][ T145] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 129.049500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 129.319509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 129.329510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 129.374585][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.290'. [ 129.385320][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.290'. [ 129.520962][ T5506] loop2: detected capacity change from 0 to 1024 [ 129.608363][ T5506] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.643706][ T5506] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 129.705291][ T5506] jbd2_journal_init_inode: Cannot locate journal superblock [ 129.759747][ T5506] EXT4-fs (loop2): Could not load journal inode [ 130.437994][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 130.903954][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 130.959922][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 130.967709][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 131.281812][ T5543] loop3: detected capacity change from 0 to 256 [ 131.954053][ T5546] loop2: detected capacity change from 0 to 512 [ 132.399482][ C0] sched: RT throttling activated [ 132.469000][ T5543] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 132.774124][ T5552] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 132.822938][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829411][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005067][ T5556] loop2: detected capacity change from 0 to 1024 [ 133.084077][ T5556] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 133.104533][ T5559] netlink: 5 bytes leftover after parsing attributes in process `syz.5.299'. [ 133.222973][ T156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 133.296216][ T156] (NULL device *): queue 0 connect admin queue failed (-111). [ 133.402869][ T156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 133.495302][ T156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 133.737304][ T5579] loop3: detected capacity change from 0 to 8 [ 133.889013][ T5579] SQUASHFS error: lzo decompression failed, data probably corrupt [ 133.942455][ T5592] loop2: detected capacity change from 0 to 164 [ 133.954376][ T5579] SQUASHFS error: Failed to read block 0x91: -5 [ 133.982823][ T5579] SQUASHFS error: Unable to read metadata cache entry [8f] [ 134.025791][ T5592] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 134.045409][ T5579] SQUASHFS error: Unable to read inode 0x13f [ 135.620789][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 135.751604][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 135.951431][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 136.108507][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 136.679757][ T5619] loop2: detected capacity change from 0 to 128 [ 136.762209][ T5625] loop7: detected capacity change from 0 to 256 [ 136.782640][ T5619] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.799849][ T5619] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.275564][ T5646] loop6: detected capacity change from 0 to 512 [ 139.504817][ T5653] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.669506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 139.679500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 139.699524][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 139.709513][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 139.719508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 139.729505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 139.739509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 140.062744][ T4280] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 140.163260][ T4280] (NULL device *): queue 0 connect admin queue failed (-111). [ 140.202807][ T4280] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 140.235541][ T4280] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 140.423496][ T5670] loop3: detected capacity change from 0 to 256 [ 140.506799][ T5670] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 142.077017][ T5678] exFAT-fs (loop3): hint_cluster is invalid (17) [ 142.089198][ T5678] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 142.097624][ T5678] exFAT-fs (loop3): Filesystem has been set read-only [ 142.260967][ T5686] loop6: detected capacity change from 0 to 512 [ 142.268769][ T4280] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 142.316501][ T4280] (NULL device *): queue 0 connect admin queue failed (-111). [ 142.405733][ T4280] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 142.415066][ T5686] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x000000000000f7b2,errors=remount-ro,errors=remount-ro,. Quota mode: writeback. [ 142.510193][ T5686] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.529763][ T4280] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 142.567957][ T5686] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.337: iget: bad i_size value: 2533274857506816 [ 142.650340][ T5686] EXT4-fs (loop6): Remounting filesystem read-only [ 142.769860][ T5698] EXT4-fs error (device loop6): ext4_resize_begin:61: comm syz.6.337: resize_inode disabled but reserved GDT blocks non-zero [ 142.816154][ T4280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.878592][ T5698] EXT4-fs (loop6): Remounting filesystem read-only [ 143.008922][ T4280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.474109][ T4280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.635727][ T4280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.847076][ T5726] loop6: detected capacity change from 0 to 256 [ 143.950615][ T5726] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 144.015174][ T5726] exFAT-fs (loop6): error, broken FAT chain. [ 144.099030][ T5726] exFAT-fs (loop6): Filesystem has been set read-only [ 144.149754][ T5726] exFAT-fs (loop6): error, failed to bmap (inode : ffff888074294260 iblock : 0, err : -5) [ 144.590739][ T4283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 144.596073][ T5752] loop6: detected capacity change from 0 to 1024 [ 144.673803][ T5752] EXT4-fs (loop6): test_dummy_encryption requires encrypt feature [ 144.773782][ T4283] (NULL device *): queue 0 connect admin queue failed (-111). [ 144.833312][ T4283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 144.959365][ T4283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 145.361637][ T5731] chnl_net:caif_netlink_parms(): no params data found [ 145.760121][ T5775] loop7: detected capacity change from 0 to 512 [ 146.449986][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 146.503689][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.513233][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.547580][ T5731] device bridge_slave_0 entered promiscuous mode [ 146.631812][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.659880][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.704828][ T5731] device bridge_slave_1 entered promiscuous mode [ 147.331904][ T4283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 147.357143][ T4283] (NULL device *): queue 0 connect admin queue failed (-111). [ 147.366196][ T4283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 147.381591][ T4283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 147.443739][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.645462][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.696463][ T1332] Bluetooth: hci2: command 0x041b tx timeout [ 148.753373][ T5731] team0: Port device team_slave_0 added [ 148.805071][ T5731] team0: Port device team_slave_1 added [ 148.874912][ T5796] loop7: detected capacity change from 0 to 16 [ 148.917882][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.926189][ T5796] erofs: (device loop7): mounted with root inode @ nid 36. [ 148.959728][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.049848][ T5796] erofs: (device loop7): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 149.069308][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.125891][ T5803] erofs: (device loop7): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 149.137348][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.179516][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.201527][ T5796] erofs: (device loop7): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 149.253612][ T5796] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 149.295695][ T5796] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 149.305547][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.459887][ T156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 149.507235][ T5731] device hsr_slave_0 entered promiscuous mode [ 149.529955][ T156] (NULL device *): queue 0 connect admin queue failed (-111). [ 149.561127][ T5731] device hsr_slave_1 entered promiscuous mode [ 149.589528][ T156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 149.597342][ T156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 149.711215][ T5814] loop7: detected capacity change from 0 to 1024 [ 149.729629][ T5731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.737244][ T5731] Cannot create hsr debugfs directory [ 149.799543][ T5814] EXT4-fs (loop7): test_dummy_encryption requires encrypt feature [ 149.878839][ T4280] device hsr_slave_0 left promiscuous mode [ 149.927752][ T4280] device hsr_slave_1 left promiscuous mode [ 150.002086][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.069616][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.121203][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.199581][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.217769][ T4280] device bridge_slave_1 left promiscuous mode [ 150.243612][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.423158][ T4280] device bridge_slave_0 left promiscuous mode [ 150.429415][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.519285][ T4280] device veth1_macvtap left promiscuous mode [ 150.539084][ T4280] device veth0_macvtap left promiscuous mode [ 150.574574][ T4280] device veth1_vlan left promiscuous mode [ 150.604880][ T4280] device veth0_vlan left promiscuous mode [ 150.740101][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 151.146077][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 151.168313][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 151.192559][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.219114][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.361566][ T4280] bond0 (unregistering): Released all slaves [ 151.480272][ T5830] device batadv_slave_0 entered promiscuous mode [ 151.507453][ T5829] device batadv_slave_0 left promiscuous mode [ 151.780020][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 151.812977][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 151.842254][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 151.863361][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 151.921635][ T5731] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 151.980666][ T5731] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 152.032211][ T5731] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 152.066081][ T5852] input: syz0 as /devices/virtual/input/input7 [ 152.092636][ T5731] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 152.356262][ T5860] device syzkaller0 entered promiscuous mode [ 152.525681][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.578168][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.610799][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.629308][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.703256][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.726861][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.756648][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.763815][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.824345][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 153.110204][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.330882][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.393838][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.455951][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.463135][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.552401][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.662268][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.689794][ T4233] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.718846][ T5888] loop6: detected capacity change from 0 to 512 [ 153.719123][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.778975][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.806901][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.835803][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.868999][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.914699][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.948382][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.959567][ T145] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 153.994213][ T145] (NULL device *): queue 0 connect admin queue failed (-111). [ 154.007654][ T5888] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.008231][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.034391][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.047410][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.059431][ T145] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 154.060098][ T4233] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.079091][ T4233] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 154.084304][ T5888] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.099524][ T4233] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.119852][ T4233] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 154.140137][ T145] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 154.145030][ T4233] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 154.179812][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.249898][ T5880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.269898][ T5880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.291213][ T4233] pl2303 6-1:1.0: pl2303 converter detected [ 154.318677][ T4233] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 154.474659][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.495311][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.554887][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.722887][ T4271] usb 6-1: USB disconnect, device number 2 [ 154.730154][ T5880] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 154.738882][ T5880] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 154.816310][ T5880] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 154.860132][ T5880] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 154.933504][ T5880] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 154.980919][ T4271] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 155.031200][ T4271] pl2303 6-1:1.0: device disconnected [ 155.147675][ T5924] device syzkaller0 entered promiscuous mode [ 155.387421][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.405201][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.734680][ T5731] device veth0_vlan entered promiscuous mode [ 155.856810][ T5731] device veth1_vlan entered promiscuous mode [ 155.935355][ T5948] loop6: detected capacity change from 0 to 2048 [ 155.976894][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.992318][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.279764][ T5547] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 157.307775][ T5547] (NULL device *): queue 0 connect admin queue failed (-111). [ 157.315684][ T5547] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 157.317703][ T5948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.323898][ T5547] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 157.325139][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.413262][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.456949][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.485603][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.522658][ T5731] device veth0_macvtap entered promiscuous mode [ 157.565964][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.587402][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.628642][ T4501] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 157.629024][ T5731] device veth1_macvtap entered promiscuous mode [ 157.671854][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.685544][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.703594][ T4501] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 157.726845][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.758072][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.800681][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.841183][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.888782][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.906868][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.916988][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.942286][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.976286][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.007441][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.051969][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.073099][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.116379][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.144617][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.158748][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.176367][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.187886][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.204179][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.224513][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.256846][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.288476][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.317017][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.441246][ T5731] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.460269][ T5731] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.469007][ T5731] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.501528][ T5731] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.511847][ T5972] loop2: detected capacity change from 0 to 1024 [ 158.665035][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.728328][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.729113][ T5972] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 158.760462][ T5972] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.813607][ T5982] device syzkaller0 entered promiscuous mode [ 158.844867][ T26] audit: type=1800 audit(1787891226.708:4): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.392" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 158.875316][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.907071][ T5547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.951993][ T5547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.068790][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.230576][ T7] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 159.361073][ T5992] loop7: detected capacity change from 0 to 1024 [ 159.389505][ T4282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 159.424875][ T5992] EXT4-fs (loop7): test_dummy_encryption requires encrypt feature [ 159.470900][ T4282] (NULL device *): queue 0 connect admin queue failed (-111). [ 159.533220][ T4282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 159.606800][ T4282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 160.455823][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 160.588929][ T4280] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.796738][ T4280] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.962357][ T4280] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.033855][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.042976][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.051303][ T6003] device bridge_slave_0 entered promiscuous mode [ 161.061151][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.193666][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.090082][ T1313] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 162.212233][ T5536] Bluetooth: hci0: command 0x0409 tx timeout [ 162.307873][ T1313] (NULL device *): queue 0 connect admin queue failed (-111). [ 162.315534][ T1313] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 162.325438][ T1313] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 162.393341][ T6003] device bridge_slave_1 entered promiscuous mode [ 162.823505][ T4280] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.941934][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.999078][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.651358][ T6003] team0: Port device team_slave_0 added [ 163.742585][ T6003] team0: Port device team_slave_1 added [ 163.929666][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.929683][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.929711][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.931737][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.931751][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.931776][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.073220][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.259598][ T4735] Bluetooth: hci0: command 0x041b tx timeout [ 164.365910][ T6003] device hsr_slave_0 entered promiscuous mode [ 164.369125][ T6003] device hsr_slave_1 entered promiscuous mode [ 164.470343][ T9] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 164.470467][ T9] (NULL device *): queue 0 connect admin queue failed (-111). [ 164.470489][ T9] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 164.470509][ T9] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 164.513723][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.255569][ T6099] loop7: detected capacity change from 0 to 1024 [ 165.767676][ T6101] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.453539][ T4735] Bluetooth: hci0: command 0x040f tx timeout [ 166.482380][ T6099] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 166.499627][ T4282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 166.544413][ T6099] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 166.555451][ T6099] jbd2_journal_init_inode: Cannot locate journal superblock [ 166.563148][ T6099] EXT4-fs (loop7): Could not load journal inode [ 166.571951][ T4282] (NULL device *): queue 0 connect admin queue failed (-111). [ 166.581848][ T4282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 166.589819][ T4282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 166.730138][ T6099] loop7: detected capacity change from 0 to 512 [ 166.751605][ T6003] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 166.780014][ T6003] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 166.819972][ T6099] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 166.834298][ T6003] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 166.879234][ T6003] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 166.999216][ T6113] loop8: detected capacity change from 0 to 1024 [ 167.298908][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.385299][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.400441][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.456783][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.487041][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.504240][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.518022][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.525177][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.599878][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.622267][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.632620][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.641623][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.648702][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.690376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.699026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.711882][ T4202] Bluetooth: hci2: ACL packet too small [ 167.739367][ T4280] device hsr_slave_0 left promiscuous mode [ 167.755581][ T4280] device hsr_slave_1 left promiscuous mode [ 167.766062][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.775431][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.786736][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.794445][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.802362][ T4280] device bridge_slave_1 left promiscuous mode [ 167.811226][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.829356][ T4280] device bridge_slave_0 left promiscuous mode [ 167.836109][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.008725][ T4280] device veth1_macvtap left promiscuous mode [ 168.050009][ T4280] device veth0_macvtap left promiscuous mode [ 168.095573][ T4280] device veth1_vlan left promiscuous mode [ 168.121255][ T4280] device veth0_vlan left promiscuous mode [ 168.141488][ T6137] loop8: detected capacity change from 0 to 512 [ 168.558663][ T4734] Bluetooth: hci0: command 0x0419 tx timeout [ 168.670781][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 168.727698][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 168.755807][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 168.781516][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 168.925785][ T4280] bond1 (unregistering): Released all slaves [ 168.952405][ T6146] netlink: 'syz.7.431': attribute type 11 has an invalid length. [ 169.036026][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 169.055033][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 169.068687][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.084749][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.150968][ T4280] bond0 (unregistering): Released all slaves [ 169.263828][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.293379][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.350813][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.360633][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.370357][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.409596][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.416821][ T6151] loop8: detected capacity change from 0 to 1024 [ 169.418025][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.445794][ T6151] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.472946][ T6003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.483513][ T6151] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 169.511850][ T6151] jbd2_journal_init_inode: Cannot locate journal superblock [ 169.519427][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.528110][ T6151] EXT4-fs (loop8): Could not load journal inode [ 169.646252][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.679269][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.723072][ T6151] loop8: detected capacity change from 0 to 512 [ 169.783289][ T6151] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000000" or missing value [ 170.055185][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.095507][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.143381][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.148201][ T6171] loop8: detected capacity change from 0 to 1024 [ 170.288233][ T6171] EXT4-fs (loop8): Ignoring removed bh option [ 170.437878][ T6171] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 170.447313][ T6183] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 170.529959][ T6171] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.705100][ T6194] loop7: detected capacity change from 0 to 512 [ 170.846059][ T6047] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 171.120830][ T6047] (NULL device *): queue 0 connect admin queue failed (-111). [ 171.141010][ T6047] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 171.142089][ T6195] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.438: lblock 3 mapped to illegal pblock 3 (length 3) [ 171.189884][ T6195] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 171.203235][ T6195] EXT4-fs (loop8): This should not happen!! Data will be lost [ 171.203235][ T6195] [ 171.415726][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.415803][ T6047] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 171.473614][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.549136][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.571470][ T6197] loop2: detected capacity change from 0 to 1024 [ 171.578853][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.590616][ T6003] device veth0_vlan entered promiscuous mode [ 171.598396][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.638147][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.653876][ T144] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 171.688150][ T6003] device veth1_vlan entered promiscuous mode [ 171.799671][ T144] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 171.868902][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.869947][ T144] EXT4-fs (loop8): This should not happen!! Data will be lost [ 171.869947][ T144] [ 171.880419][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.911235][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.930213][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.944345][ T6003] device veth0_macvtap entered promiscuous mode [ 171.970101][ T4188] hfsplus: invalid file type 0174400 for inode 18 [ 171.977426][ T4188] hfsplus: invalid file type 0174400 for inode 18 [ 172.616472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.053866][ T6003] device veth1_macvtap entered promiscuous mode [ 173.138212][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.150103][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.251657][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.262256][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.279502][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.295697][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.314670][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.334091][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.359072][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.458538][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.487564][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.539638][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 173.622778][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 173.635942][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 173.649802][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.674191][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 173.682586][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.716475][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.756832][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.780570][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.817473][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.845957][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.908284][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.933772][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.962792][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.980555][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.030393][ T6003] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.065341][ T6003] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.098955][ T6003] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.129778][ T6003] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.427858][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.449561][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.509444][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.567195][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.589334][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.628144][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.900958][ T6228] device syzkaller0 entered promiscuous mode [ 175.799399][ T6252] ip_tables: iptables: counters copy to user failed while replacing table [ 176.573865][ T6047] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 176.657293][ T6047] (NULL device *): queue 0 connect admin queue failed (-111). [ 176.700698][ T6047] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 176.750916][ T6047] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 177.051683][ T6243] chnl_net:caif_netlink_parms(): no params data found [ 177.299773][ T4264] Bluetooth: hci3: command 0x0409 tx timeout [ 177.898962][ T6266] loop5: detected capacity change from 0 to 1024 [ 178.131261][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.180062][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.201600][ T6271] loop9: detected capacity change from 0 to 256 [ 178.241286][ T6243] device bridge_slave_0 entered promiscuous mode [ 178.304616][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.356818][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.408762][ T6243] device bridge_slave_1 entered promiscuous mode [ 178.550336][ T6266] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.566215][ T6271] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 178.599671][ T6266] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.629640][ T6266] jbd2_journal_init_inode: Cannot locate journal superblock [ 178.660929][ T6266] EXT4-fs (loop5): Could not load journal inode [ 178.663399][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.701067][ T6271] exFAT-fs (loop9): error, broken FAT chain. [ 178.707103][ T6271] exFAT-fs (loop9): Filesystem has been set read-only [ 178.749714][ T6271] exFAT-fs (loop9): error, failed to bmap (inode : ffff888074293be0 iblock : 0, err : -5) [ 178.785992][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.824022][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 178.942012][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 178.969888][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 178.977756][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 179.026304][ T6243] team0: Port device team_slave_0 added [ 179.082603][ T6243] team0: Port device team_slave_1 added [ 179.291945][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.298941][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.587429][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.666427][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 179.711267][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.770237][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.925234][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.702064][ T6243] device hsr_slave_0 entered promiscuous mode [ 180.803295][ T6243] device hsr_slave_1 entered promiscuous mode [ 182.125205][ T9] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 182.161011][ T4735] Bluetooth: hci3: command 0x040f tx timeout [ 182.167734][ T6243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.188709][ T9] (NULL device *): queue 0 connect admin queue failed (-111). [ 182.197863][ T6243] Cannot create hsr debugfs directory [ 182.221972][ T6321] loop7: detected capacity change from 0 to 1024 [ 182.230410][ T9] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 182.238324][ T9] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 182.312001][ T6321] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 182.367224][ T6321] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 182.450565][ T6321] jbd2_journal_init_inode: Cannot locate journal superblock [ 182.454221][ T6325] loop9: detected capacity change from 0 to 2048 [ 182.457907][ T6321] EXT4-fs (loop7): Could not load journal inode [ 182.516904][ T6325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.555110][ T4280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.617823][ T6321] loop7: detected capacity change from 0 to 512 [ 182.628012][ T4280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.662367][ T6321] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 182.794890][ T4280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.851474][ T4280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.871118][ T6332] netlink: 88 bytes leftover after parsing attributes in process `syz.7.476'. [ 182.965738][ T4280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.080760][ T4280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.331299][ T4735] Bluetooth: hci3: command 0x0419 tx timeout [ 184.404303][ T145] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 184.428667][ T4280] bond0: (slave netdevsim0): Releasing backup interface [ 184.434973][ T145] (NULL device *): queue 0 connect admin queue failed (-111). [ 184.513929][ T145] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 184.544202][ T145] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 184.569969][ T6350] loop9: detected capacity change from 0 to 256 [ 184.589120][ T4280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.629931][ T4280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.318979][ T6357] loop8: detected capacity change from 0 to 1024 [ 185.354195][ T6360] loop5: detected capacity change from 0 to 256 [ 185.432881][ T6360] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 185.487802][ T6360] exFAT-fs (loop5): error, broken FAT chain. [ 185.505136][ T6360] exFAT-fs (loop5): Filesystem has been set read-only [ 185.544482][ T6360] exFAT-fs (loop5): error, failed to bmap (inode : ffff8880604e0e60 iblock : 0, err : -5) [ 185.922644][ T6367] device syzkaller0 entered promiscuous mode [ 186.089898][ T6385] loop8: detected capacity change from 0 to 1024 [ 186.161591][ T6385] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 186.193378][ T6385] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 186.279949][ T6385] jbd2_journal_init_inode: Cannot locate journal superblock [ 186.329743][ T6385] EXT4-fs (loop8): Could not load journal inode [ 186.672401][ T6052] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 186.703397][ T6052] (NULL device *): queue 0 connect admin queue failed (-111). [ 186.718389][ T6052] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 186.746734][ T6052] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 188.636877][ T6426] loop9: detected capacity change from 0 to 512 [ 188.713329][ T6428] loop7: detected capacity change from 0 to 256 [ 188.732500][ T6243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.748656][ T6243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.776065][ T6428] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 188.829827][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 188.861985][ T6243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.879644][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 188.922020][ T6243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.940706][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 188.949070][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 189.095060][ T4280] device hsr_slave_0 left promiscuous mode [ 189.122961][ T4280] device hsr_slave_1 left promiscuous mode [ 189.130958][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.179232][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.191341][ T6426] EXT4-fs (loop9): Test dummy encryption mode enabled [ 189.240793][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.289578][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.329625][ T6426] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.491: inode has both inline data and extents flags [ 189.371719][ T4280] device bridge_slave_1 left promiscuous mode [ 189.378753][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.419680][ T6426] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.491: couldn't read orphan inode 15 (err -117) [ 189.487689][ T4280] device bridge_slave_0 left promiscuous mode [ 189.507076][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.543409][ T6448] loop7: detected capacity change from 0 to 256 [ 189.551478][ T6426] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 189.588015][ T4280] device veth1_macvtap left promiscuous mode [ 189.597094][ T4280] device veth0_macvtap left promiscuous mode [ 189.699723][ T4280] device veth1_vlan left promiscuous mode [ 189.705608][ T4280] device veth0_vlan left promiscuous mode [ 190.347964][ T6452] loop8: detected capacity change from 0 to 256 [ 190.504747][ T6452] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 190.550084][ T6426] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 190.584233][ T6452] exFAT-fs (loop8): error, broken FAT chain. [ 190.609771][ T6452] exFAT-fs (loop8): Filesystem has been set read-only [ 190.616598][ T6452] exFAT-fs (loop8): error, failed to bmap (inode : ffff888074294f60 iblock : 0, err : -5) [ 190.870831][ T6426] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 190.990762][ T4281] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 190.997488][ T6468] loop8: detected capacity change from 0 to 1024 [ 191.037409][ T4281] (NULL device *): queue 0 connect admin queue failed (-111). [ 191.091662][ T4281] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 191.119051][ T6468] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 191.128424][ T4281] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 191.162982][ T6468] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.248122][ T6468] jbd2_journal_init_inode: Cannot locate journal superblock [ 191.269204][ T6468] EXT4-fs (loop8): Could not load journal inode [ 191.351900][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 191.664512][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 191.666584][ T6468] loop8: detected capacity change from 0 to 512 [ 191.723512][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.757014][ T6468] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000000" or missing value [ 191.771734][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.045052][ T4280] bond0 (unregistering): Released all slaves [ 192.420590][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.484135][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.223422][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.239130][ T156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 193.267840][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.320470][ T156] (NULL device *): queue 0 connect admin queue failed (-111). [ 193.361487][ T6510] loop8: detected capacity change from 0 to 256 [ 193.390679][ T156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 193.398471][ T156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 193.434190][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.484365][ T6510] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 193.508489][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.529435][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.536581][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.565852][ T6510] exFAT-fs (loop8): error, broken FAT chain. [ 193.588198][ T6510] exFAT-fs (loop8): Filesystem has been set read-only [ 193.616619][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.624727][ T6510] exFAT-fs (loop8): error, failed to bmap (inode : ffff888074295c60 iblock : 0, err : -5) [ 193.643889][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.670089][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.719771][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.726868][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.800388][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.813418][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.833392][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.885194][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.913844][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.497807][ T6523] rtc_cmos 00:00: Alarms can be up to one day in the future [ 195.130974][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.137304][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.232541][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.263885][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.310478][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.376923][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.420286][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.459531][ T6047] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 195.480735][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.529673][ T6047] (NULL device *): queue 0 connect admin queue failed (-111). [ 195.537217][ T6047] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 195.558559][ T6243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.580391][ T6047] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 195.916551][ T6536] loop5: detected capacity change from 0 to 512 [ 196.025089][ T6536] EXT4-fs (loop5): Ignoring removed oldalloc option [ 196.125842][ T6536] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 196.169251][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.285102][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.327580][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.460001][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.472209][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.570382][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.611912][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.666782][ T6243] device veth0_vlan entered promiscuous mode [ 196.691582][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.729823][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.747754][ T6243] device veth1_vlan entered promiscuous mode [ 196.913422][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.946615][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.994495][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.280402][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.365280][ T6243] device veth0_macvtap entered promiscuous mode [ 197.434296][ T6243] device veth1_macvtap entered promiscuous mode [ 197.523726][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.557022][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.579327][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.596009][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.621807][ T6052] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 197.693276][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.703897][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.714773][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.797738][ T6052] (NULL device *): queue 0 connect admin queue failed (-111). [ 197.845864][ T6569] loop9: detected capacity change from 0 to 1024 [ 197.869867][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.889598][ T6052] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 197.986956][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.006105][ T6052] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 198.095353][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.154104][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.201515][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.236840][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.339961][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.392934][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.416696][ T6582] loop8: detected capacity change from 0 to 256 [ 198.429610][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.476540][ T6572] kvm [6571]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000003c [ 198.487033][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.509780][ T6572] kvm [6571]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 198.519830][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.546370][ T6572] kvm [6571]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x70b3 [ 198.548115][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.578462][ T6572] kvm [6571]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x6261, nop [ 199.149948][ T6589] rtc_cmos 00:00: Alarms can be up to one day in the future [ 199.820699][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.857724][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.866677][ T6582] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 199.930655][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.952346][ T6582] exFAT-fs (loop8): error, broken FAT chain. [ 199.984991][ T6582] exFAT-fs (loop8): Filesystem has been set read-only [ 199.998759][ T6243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.029603][ T6582] exFAT-fs (loop8): error, failed to bmap (inode : ffff888074296960 iblock : 0, err : -5) [ 200.077313][ T6243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.099556][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 200.123575][ T6243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.162324][ T6243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.165124][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 200.221821][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 200.264155][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 200.291379][ T6602] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 200.645947][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.667220][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.719713][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.799647][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.808563][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.854719][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.991045][ T6618] loop5: detected capacity change from 0 to 2048 [ 201.168183][ T6618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.339816][ T6618] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 202.271775][ T6645] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.941485][ T6313] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 203.031272][ T6313] (NULL device *): queue 0 connect admin queue failed (-111). [ 203.038837][ T6313] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 203.088995][ T6313] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 204.447000][ T6672] loop5: detected capacity change from 0 to 1024 [ 205.139858][ T6052] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 205.232502][ T6052] (NULL device *): queue 0 connect admin queue failed (-111). [ 205.329556][ T6052] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 205.337414][ T6052] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 205.604243][ T6715] loop8: detected capacity change from 0 to 1024 [ 205.792172][ T6715] EXT4-fs (loop8): test_dummy_encryption requires encrypt feature [ 207.186722][ T6743] loop9: detected capacity change from 0 to 256 [ 207.318399][ T4229] Bluetooth: hci2: command 0x2016 tx timeout [ 207.331189][ T6743] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 207.490068][ T4281] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 207.513449][ T6743] attempt to access beyond end of device [ 207.513449][ T6743] loop9: rw=524288, want=408, limit=256 [ 207.569317][ T4281] (NULL device *): queue 0 connect admin queue failed (-111). [ 207.595216][ T6743] attempt to access beyond end of device [ 207.595216][ T6743] loop9: rw=524288, want=664, limit=256 [ 207.606449][ T4281] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 207.606494][ T4281] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 207.799654][ T6743] attempt to access beyond end of device [ 207.799654][ T6743] loop9: rw=0, want=288, limit=256 [ 209.480347][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 209.500143][ T26] audit: type=1800 audit(1787891277.368:5): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.544" name="file1" dev="loop9" ino=1048648 res=0 errno=0 [ 209.746339][ T6052] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 209.761302][ T26] audit: type=1800 audit(1787891277.368:6): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.544" name="file1" dev="loop9" ino=1048648 res=0 errno=0 [ 209.803068][ T6776] loop5: detected capacity change from 0 to 512 [ 209.872112][ T6052] (NULL device *): queue 0 connect admin queue failed (-111). [ 209.916140][ T6052] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 209.942436][ T6052] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 209.963696][ T6776] EXT4-fs (loop5): Test dummy encryption mode enabled [ 209.996976][ T6776] EXT4-fs (loop5): Ignoring removed oldalloc option [ 210.679155][ T6776] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 211.540092][ T4230] Bluetooth: hci3: command 0x0405 tx timeout [ 211.779602][ T4229] Bluetooth: hci5: command 0x0406 tx timeout [ 212.269545][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 212.350223][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 212.358975][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 212.373410][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 212.516035][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.7.568'. [ 213.227600][ T6874] loop5: detected capacity change from 0 to 512 [ 214.243695][ T6874] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 214.339947][ T6874] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 5 (only 1 groups) [ 214.435851][ T4280] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 215.118873][ T4280] (NULL device *): queue 0 connect admin queue failed (-111). [ 215.228046][ T4280] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 215.349595][ T4280] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 215.557988][ T6914] loop9: detected capacity change from 0 to 16 [ 215.737027][ T6914] erofs: (device loop9): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 217.254767][ T6954] smpboot: CPU 1 is now offline [ 217.395513][ T6047] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 217.506307][ T6047] (NULL device *): queue 0 connect admin queue failed (-111). [ 217.569520][ T6047] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 217.629631][ T7] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 217.658798][ T6047] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 217.919588][ T7] usb 10-1: device descriptor read/64, error -71 [ 218.739151][ T6988] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.668384][ T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 219.780048][ T6313] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 219.889565][ T6313] (NULL device *): queue 0 connect admin queue failed (-111). [ 219.897058][ T6313] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 219.909531][ T7] usb 10-1: device descriptor read/64, error -71 [ 220.040881][ T7] usb usb10-port1: attempt power cycle [ 220.052199][ T6313] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 220.428636][ T7010] loop9: detected capacity change from 0 to 256 [ 220.583516][ T7010] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 220.756335][ T7010] exFAT-fs (loop9): error, broken FAT chain. [ 220.878934][ T7010] exFAT-fs (loop9): Filesystem has been set read-only [ 221.023891][ T7010] exFAT-fs (loop9): error, failed to bmap (inode : ffff8880742955e0 iblock : 0, err : -5) [ 221.302788][ T7036] loop7: detected capacity change from 0 to 736 [ 222.603344][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 222.619109][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 222.741868][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 222.879040][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 222.938338][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 225.194538][ T1313] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 225.297943][ T7074] loop8: detected capacity change from 0 to 512 [ 225.325413][ T1313] (NULL device *): queue 0 connect admin queue failed (-111). [ 225.364775][ T1313] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 225.372526][ T1313] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 225.451958][ T7074] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.524996][ T7074] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 226.061358][ T7088] netlink: 36 bytes leftover after parsing attributes in process `syz.8.625'. [ 226.172069][ T7092] loop5: detected capacity change from 0 to 1024 [ 226.879392][ T7108] loop8: detected capacity change from 0 to 1024 [ 227.484255][ T7129] loop7: detected capacity change from 0 to 1024 [ 227.569758][ T7129] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.613671][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 227.672457][ T7129] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.699755][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 227.760647][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 227.779153][ T7129] jbd2_journal_init_inode: Cannot locate journal superblock [ 227.829987][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 227.841689][ T7129] EXT4-fs (loop7): Could not load journal inode [ 227.861378][ T7134] loop8: detected capacity change from 0 to 256 [ 228.017145][ T7129] loop7: detected capacity change from 0 to 512 [ 228.094328][ T7129] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 229.485302][ T7171] raw_sendmsg: syz.1.638 forgot to set AF_INET. Fix it! [ 229.699639][ T7178] ip_tables: iptables: counters copy to user failed while replacing table [ 229.747585][ T7179] loop1: detected capacity change from 0 to 512 [ 229.912812][ T7179] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback. [ 229.979220][ T1313] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 230.013063][ T7179] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.044508][ T1313] (NULL device *): queue 0 connect admin queue failed (-111). [ 230.116983][ T1313] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 230.205011][ T1313] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 230.404080][ T7203] loop1: detected capacity change from 0 to 1024 [ 230.487400][ T7203] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 230.592779][ T7203] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.349613][ T7212] rtc_cmos 00:00: Alarms can be up to one day in the future [ 231.422642][ T7203] jbd2_journal_init_inode: Cannot locate journal superblock [ 231.464834][ T7203] EXT4-fs (loop1): Could not load journal inode [ 231.607844][ T7203] loop1: detected capacity change from 0 to 512 [ 231.657767][ T7219] loop9: detected capacity change from 0 to 256 [ 231.693853][ T7203] EXT4-fs (loop1): Unrecognized mount option "euid=00000000000000000000" or missing value [ 232.342659][ T6047] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 232.410185][ T6047] (NULL device *): queue 0 connect admin queue failed (-111). [ 232.498998][ T6047] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 232.560004][ T6047] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 234.657055][ T7261] rtc_cmos 00:00: Alarms can be up to one day in the future [ 234.788620][ T7264] loop1: detected capacity change from 0 to 1024 [ 234.931671][ T7264] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 235.070742][ T7264] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.246587][ T7264] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.661: lblock 0 mapped to illegal pblock 0 (length 1) [ 236.028402][ T6047] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 236.170220][ T7264] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 236.194214][ T6047] (NULL device *): queue 0 connect admin queue failed (-111). [ 236.223071][ T6047] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 236.230840][ T6047] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 236.281786][ T7264] EXT4-fs (loop1): This should not happen!! Data will be lost [ 236.281786][ T7264] [ 236.356347][ T7264] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.661: lblock 0 mapped to illegal pblock 0 (length 1) [ 236.518068][ T7264] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.661: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 237.382227][ T7301] loop1: detected capacity change from 0 to 512 [ 237.422175][ T7305] loop7: detected capacity change from 0 to 1024 [ 237.455363][ T7301] EXT4-fs (loop1): Ignoring removed oldalloc option [ 237.515122][ T7305] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 237.549795][ T7301] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 237.641930][ T7305] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 237.718076][ T7305] jbd2_journal_init_inode: Cannot locate journal superblock [ 237.792371][ T7305] EXT4-fs (loop7): Could not load journal inode [ 237.916524][ T7305] loop7: detected capacity change from 0 to 512 [ 238.013327][ T7305] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 238.161868][ T7319] netlink: 36 bytes leftover after parsing attributes in process `syz.5.671'. [ 238.347264][ T145] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 239.123710][ T7328] rtc_cmos 00:00: Alarms can be up to one day in the future [ 239.242679][ T145] (NULL device *): queue 0 connect admin queue failed (-111). [ 239.307183][ T145] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 239.389025][ T145] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 240.213357][ T7351] loop7: detected capacity change from 0 to 512 [ 240.279452][ T7351] EXT4-fs (loop7): Ignoring removed oldalloc option [ 240.609565][ T7351] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 240.759874][ T7363] loop1: detected capacity change from 0 to 2048 [ 240.863514][ T7363] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 240.951741][ T7363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.179985][ T7369] loop7: detected capacity change from 0 to 2048 [ 241.269268][ T7369] loop7: p1 < > p4 < > [ 241.419663][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 241.454161][ T3559] loop7: p1 < > p4 < > [ 241.491085][ T7372] netlink: 148 bytes leftover after parsing attributes in process `syz.7.682'. [ 241.636364][ T7372] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 241.691670][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 241.739213][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 241.779400][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.8.684'. [ 241.807039][ T7384] loop1: detected capacity change from 0 to 1024 [ 241.831319][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 242.253543][ T7402] loop1: detected capacity change from 0 to 256 [ 243.173192][ T26] audit: type=1326 audit(1787891823.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.5.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7151200d9 code=0x0 [ 243.850727][ T7433] loop1: detected capacity change from 0 to 2048 [ 244.002129][ T145] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 244.017793][ T7433] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.125568][ T145] (NULL device *): queue 0 connect admin queue failed (-111). [ 244.176792][ T145] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 244.220090][ T7430] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 244.264938][ T145] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 244.388685][ T7430] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 244.443554][ T7445] netlink: 36 bytes leftover after parsing attributes in process `syz.9.698'. [ 244.468957][ T7430] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.468957][ T7430] [ 244.531093][ T7430] EXT4-fs (loop1): Total free blocks count 0 [ 244.575368][ T7430] EXT4-fs (loop1): Free/Dirty block details [ 244.615405][ T7430] EXT4-fs (loop1): free_blocks=4096 [ 244.664054][ T7430] EXT4-fs (loop1): dirty_blocks=32 [ 244.694557][ T7430] EXT4-fs (loop1): Block reservation details [ 244.752678][ T7430] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 245.947652][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.9.703'. [ 245.956456][ T7474] netlink: 80 bytes leftover after parsing attributes in process `syz.9.703'. [ 246.382083][ T7489] ip_tables: iptables: counters copy to user failed while replacing table [ 246.434528][ T156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 246.564390][ T156] (NULL device *): queue 0 connect admin queue failed (-111). [ 246.572846][ T7496] netlink: 36 bytes leftover after parsing attributes in process `syz.9.710'. [ 246.641451][ T156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 246.708546][ T156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 246.858210][ T7506] loop5: detected capacity change from 0 to 1024 [ 246.992000][ T7506] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 247.847648][ T7506] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.051199][ T26] audit: type=1800 audit(1787892341.497:8): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.715" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 249.510836][ T156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 249.596918][ T156] (NULL device *): queue 0 connect admin queue failed (-111). [ 249.721510][ T156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 249.807170][ T156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 249.864397][ T7548] loop7: detected capacity change from 0 to 1024 [ 250.607385][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.726'. [ 250.831559][ T7548] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 250.950261][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 250.998554][ T7548] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.129084][ T7548] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: comm syz.7.704: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.971667][ T26] audit: type=1326 audit(1787892345.277:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.1.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba995760d9 code=0x0 [ 251.995667][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 252.040654][ T7548] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 252.062303][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 252.166925][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 252.174680][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 252.220709][ T7548] EXT4-fs (loop7): This should not happen!! Data will be lost [ 252.220709][ T7548] [ 252.277039][ T7548] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: comm syz.7.704: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.419815][ T7548] EXT4-fs error (device loop7): ext4_ext_remove_space:2944: inode #15: comm syz.7.704: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 252.679111][ T4229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 253.030701][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 253.682486][ T4229] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 253.721633][ T4229] usb 6-1: config 0 has no interface number 0 [ 254.367967][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 254.586630][ T7601] Core dump to core aborted: cannot preserve file permissions [ 254.656271][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 254.673993][ T4229] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 254.714530][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 254.724789][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.784059][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 254.792687][ T4229] usb 6-1: Product: syz [ 254.815229][ T4229] usb 6-1: Manufacturer: syz [ 254.847487][ T4229] usb 6-1: SerialNumber: syz [ 254.887573][ T4229] usb 6-1: config 0 descriptor?? [ 254.970604][ T4229] smsc95xx v2.0.0 [ 255.023957][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.030288][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.815316][ T4229] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 255.891143][ T4229] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 256.042682][ T4229] usb 6-1: USB disconnect, device number 3 [ 256.235159][ T7629] loop7: detected capacity change from 0 to 2048 [ 256.337156][ T7632] loop5: detected capacity change from 0 to 512 [ 256.379220][ T7629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.492119][ T7632] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.596128][ T7632] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.936156][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 257.053063][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 257.119974][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 257.183332][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 259.545177][ T6313] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 259.669266][ T6313] (NULL device *): queue 0 connect admin queue failed (-111). [ 259.731800][ T6313] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 259.844140][ T6313] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 261.976811][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.9.728'. [ 262.796409][ T7717] futex_wake_op: syz.1.749 tries to shift op by 144; fix this program [ 262.810084][ T4238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 262.881614][ T4238] (NULL device *): queue 0 connect admin queue failed (-111). [ 262.962846][ T4238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 263.027056][ T7722] loop1: detected capacity change from 0 to 16 [ 263.039705][ T4238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 263.103734][ T7722] erofs: (device loop1): mounted with root inode @ nid 36. [ 264.151303][ T7739] netlink: 136 bytes leftover after parsing attributes in process `syz.5.758'. [ 264.901204][ T7745] rtc_cmos 00:00: Alarms can be up to one day in the future [ 265.214524][ T6313] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 265.341278][ T6313] (NULL device *): queue 0 connect admin queue failed (-111). [ 265.378284][ T6313] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 265.445297][ T6313] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 265.463546][ T7758] loop9: detected capacity change from 0 to 256 [ 266.353367][ T7762] Core dump to core aborted: cannot preserve file permissions [ 266.849952][ T7758] loop_set_status: loop9 () has still dirty pages (nrpages=32) [ 268.224864][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 268.406123][ T144] (NULL device *): queue 0 connect admin queue failed (-111). [ 268.460347][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 268.565354][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 268.626559][ T7819] loop7: detected capacity change from 0 to 1024 [ 268.711515][ T7819] hfsplus: failed to load catalog file [ 268.806799][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.762'. [ 268.993135][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 269.076631][ T7835] loop7: detected capacity change from 0 to 128 [ 269.152964][ T7835] FAT-fs (loop7): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 270.675565][ T6047] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 270.835794][ T6047] (NULL device *): queue 0 connect admin queue failed (-111). [ 270.843292][ T6047] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 270.967225][ T7862] loop1: detected capacity change from 0 to 1024 [ 270.991440][ T6047] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 271.171876][ T7862] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.311309][ T7878] ------------[ cut here ]------------ [ 272.316977][ T7878] WARNING: CPU: 0 PID: 7878 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xac0/0xcd0 [ 272.327646][ T7878] Modules linked in: [ 272.331530][ T7878] CPU: 0 PID: 7878 Comm: syz.9.787 Not tainted syzkaller #0 [ 272.338798][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.348841][ T7878] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 272.354637][ T7878] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 e7 4d 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 75 4f 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 272.374228][ T7878] RSP: 0018:ffffc90002eff780 EFLAGS: 00010002 [ 272.380312][ T7878] RAX: 1ffff11002d8f101 RBX: 1ffff11002d8e876 RCX: ffffffff817be9eb [ 272.388290][ T7878] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 272.396251][ T7878] RBP: ffffc90002eff920 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 272.404212][ T7878] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016c78810 [ 272.412169][ T7878] R13: 000000000000003c R14: 1ffff11002d8e873 R15: ffff888016c70400 [ 272.420127][ T7878] FS: 00007fab75d266c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 272.429043][ T7878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.435612][ T7878] CR2: 000000110c25bf27 CR3: 0000000049126000 CR4: 00000000003506f0 [ 272.443589][ T7878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.451545][ T7878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.459502][ T7878] Call Trace: [ 272.462770][ T7878] [ 272.465706][ T7878] ? ring_buffer_read_page+0x12c0/0x12c0 [ 272.471335][ T7878] ? do_raw_spin_lock+0x128/0x2f0 [ 272.476367][ T7878] ? __rwlock_init+0x140/0x140 [ 272.481119][ T7878] rb_buffer_peek+0x5c/0x780 [ 272.485701][ T7878] ring_buffer_peek+0x1de/0x400 [ 272.490540][ T7878] ? ring_buffer_iter_empty+0x340/0x340 [ 272.496096][ T7878] ? ring_buffer_empty+0x530/0x530 [ 272.501195][ T7878] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.507178][ T7878] ? __lock_acquire+0x7b50/0x7b50 [ 272.512193][ T7878] peek_next_entry+0x113/0x1c0 [ 272.516948][ T7878] __find_next_entry+0x537/0x6b0 [ 272.521889][ T7878] ? lockdep_hardirqs_on+0x94/0x140 [ 272.527081][ T7878] ? ring_buffer_consume+0x3ea/0x430 [ 272.532356][ T7878] ? trace_find_next_entry+0x3a0/0x3a0 [ 272.537809][ T7878] tracing_read_pipe+0x3b1/0xae0 [ 272.542759][ T7878] ? s_show+0x300/0x300 [ 272.546901][ T7878] vfs_read+0x2ff/0xd50 [ 272.551071][ T7878] ? __lock_acquire+0x7b50/0x7b50 [ 272.556087][ T7878] ? kernel_read+0x1e0/0x1e0 [ 272.560674][ T7878] ? mutex_lock_nested+0x17/0x20 [ 272.565621][ T7878] ? __fdget_pos+0x2bf/0x370 [ 272.570198][ T7878] ? ksys_read+0x70/0x260 [ 272.574531][ T7878] ksys_read+0x153/0x260 [ 272.578781][ T7878] ? vfs_write+0xd70/0xd70 [ 272.583185][ T7878] ? lockdep_hardirqs_on+0x94/0x140 [ 272.588377][ T7878] do_syscall_64+0x4c/0xa0 [ 272.592799][ T7878] ? clear_bhb_loop+0x30/0x80 [ 272.597463][ T7878] ? clear_bhb_loop+0x30/0x80 [ 272.602128][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.608008][ T7878] RIP: 0033:0x7fab77ace0d9 [ 272.612412][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.632005][ T7878] RSP: 002b:00007fab75d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.640408][ T7878] RAX: ffffffffffffffda RBX: 00007fab77d55fa0 RCX: 00007fab77ace0d9 [ 272.648455][ T7878] RDX: 0000000000002020 RSI: 0000200000001500 RDI: 0000000000000003 [ 272.656588][ T7878] RBP: 00007fab77b65024 R08: 0000000000000000 R09: 0000000000000000 [ 272.664560][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.672517][ T7878] R13: 00007fab77d56038 R14: 00007fab77d55fa0 R15: 00007fff9c48a748 [ 272.680487][ T7878] [ 272.683497][ T7878] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 272.690764][ T7878] CPU: 0 PID: 7878 Comm: syz.9.787 Not tainted syzkaller #0 [ 272.698032][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.708257][ T7878] Call Trace: [ 272.711540][ T7878] [ 272.714467][ T7878] dump_stack_lvl+0x188/0x250 [ 272.719148][ T7878] ? show_regs_print_info+0x20/0x20 [ 272.724343][ T7878] ? load_image+0x410/0x410 [ 272.728848][ T7878] panic+0x2f8/0x850 [ 272.732737][ T7878] ? bpf_jit_dump+0xd0/0xd0 [ 272.737237][ T7878] ? rb_get_reader_page+0xac0/0xcd0 [ 272.742446][ T7878] __warn+0x248/0x2b0 [ 272.746421][ T7878] ? rb_get_reader_page+0xac0/0xcd0 [ 272.751629][ T7878] report_bug+0x1b9/0x2e0 [ 272.755958][ T7878] handle_bug+0x3a/0x70 [ 272.760108][ T7878] exc_invalid_op+0x16/0x40 [ 272.764597][ T7878] asm_exc_invalid_op+0x16/0x20 [ 272.769456][ T7878] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 272.775249][ T7878] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 e7 4d 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 75 4f 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 272.794876][ T7878] RSP: 0018:ffffc90002eff780 EFLAGS: 00010002 [ 272.800951][ T7878] RAX: 1ffff11002d8f101 RBX: 1ffff11002d8e876 RCX: ffffffff817be9eb [ 272.808912][ T7878] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 272.816871][ T7878] RBP: ffffc90002eff920 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 272.824833][ T7878] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016c78810 [ 272.832810][ T7878] R13: 000000000000003c R14: 1ffff11002d8e873 R15: ffff888016c70400 [ 272.840778][ T7878] ? rb_get_reader_page+0xabb/0xcd0 [ 272.845987][ T7878] ? ring_buffer_read_page+0x12c0/0x12c0 [ 272.851618][ T7878] ? do_raw_spin_lock+0x128/0x2f0 [ 272.856632][ T7878] ? __rwlock_init+0x140/0x140 [ 272.861384][ T7878] rb_buffer_peek+0x5c/0x780 [ 272.865963][ T7878] ring_buffer_peek+0x1de/0x400 [ 272.870803][ T7878] ? ring_buffer_iter_empty+0x340/0x340 [ 272.876353][ T7878] ? ring_buffer_empty+0x530/0x530 [ 272.881451][ T7878] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.887421][ T7878] ? __lock_acquire+0x7b50/0x7b50 [ 272.892437][ T7878] peek_next_entry+0x113/0x1c0 [ 272.897195][ T7878] __find_next_entry+0x537/0x6b0 [ 272.902120][ T7878] ? lockdep_hardirqs_on+0x94/0x140 [ 272.907308][ T7878] ? ring_buffer_consume+0x3ea/0x430 [ 272.912596][ T7878] ? trace_find_next_entry+0x3a0/0x3a0 [ 272.918049][ T7878] tracing_read_pipe+0x3b1/0xae0 [ 272.922982][ T7878] ? s_show+0x300/0x300 [ 272.927176][ T7878] vfs_read+0x2ff/0xd50 [ 272.931327][ T7878] ? __lock_acquire+0x7b50/0x7b50 [ 272.936343][ T7878] ? kernel_read+0x1e0/0x1e0 [ 272.940940][ T7878] ? mutex_lock_nested+0x17/0x20 [ 272.945905][ T7878] ? __fdget_pos+0x2bf/0x370 [ 272.950507][ T7878] ? ksys_read+0x70/0x260 [ 272.954834][ T7878] ksys_read+0x153/0x260 [ 272.959074][ T7878] ? vfs_write+0xd70/0xd70 [ 272.963487][ T7878] ? lockdep_hardirqs_on+0x94/0x140 [ 272.968678][ T7878] do_syscall_64+0x4c/0xa0 [ 272.973099][ T7878] ? clear_bhb_loop+0x30/0x80 [ 272.977764][ T7878] ? clear_bhb_loop+0x30/0x80 [ 272.982440][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.988334][ T7878] RIP: 0033:0x7fab77ace0d9 [ 272.992739][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.012344][ T7878] RSP: 002b:00007fab75d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.020747][ T7878] RAX: ffffffffffffffda RBX: 00007fab77d55fa0 RCX: 00007fab77ace0d9 [ 273.028713][ T7878] RDX: 0000000000002020 RSI: 0000200000001500 RDI: 0000000000000003 [ 273.036671][ T7878] RBP: 00007fab77b65024 R08: 0000000000000000 R09: 0000000000000000 [ 273.044640][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.052597][ T7878] R13: 00007fab77d56038 R14: 00007fab77d55fa0 R15: 00007fff9c48a748 [ 273.060565][ T7878] [ 273.063628][ T7878] Kernel Offset: disabled [ 273.068153][ T7878] Rebooting in 86400 seconds..