last executing test programs: 13m20.056819056s ago: executing program 3 (id=113): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 13m18.829889387s ago: executing program 3 (id=117): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002040)=""/102400, 0x19000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xc3, 0x40000040, {0xffffffffffffffff}, {}, 0x10000, 0x3}) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)) setresuid(0xee00, 0xee00, 0x0) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) r5 = syz_open_dev$sndctrl(0x0, 0x80000001, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000600)={{0x7, 0x4, 0x1, 0x1, 'syz1\x00', 0x8}, 0x5, 0x40, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', &(0x7f0000000a80)}) r6 = add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000180), &(0x7f0000000740)="da91649bfb04be4db55cc93a63d9561b50f7450eb54b829490e2cc207e3add11b616bf0db51e286f88aed774ea47cb1f55a02a973c6a171accbe65bfb6cc1ebad171e4e6941be92c6a3c499996dd5559f81b96a5b64630d7857b154c2d9f7417b77af2c8e5ca7e5202438bf34ec75edcd0173d9a064254e2cbb706166ad50b5abd0889483f1965b00b4fbbb991e174871d0b6ada5ae5aa9efee831883f449135c02f938b00", 0xa5, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000800)="bfbfed7351d2f0e1b43b39aa7704a53fea40b2125f515e39e458ba97449e047cc001a0c4b0b7555f234a13f2a02d2444317a9bafcc34f0ce8cb9", 0x3a, r6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 13m16.284707426s ago: executing program 3 (id=120): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) 13m15.726165369s ago: executing program 3 (id=121): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000240)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 13m11.636795779s ago: executing program 3 (id=128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x2, 0x0, 0x0, "05b7780c02001a00"}, 0x6}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "256fa4f5733de849"}, 0x4}}]}, 0x44}}, 0x2404c0c8) 13m11.229910003s ago: executing program 3 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x11c4380, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x80) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13m10.003203005s ago: executing program 32 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x11c4380, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x80) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.050307149s ago: executing program 4 (id=2690): io_uring_enter(0xffffffffffffffff, 0x2c31, 0x856e, 0x4, &(0x7f00000000c0), 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) 1m0.794133254s ago: executing program 4 (id=2693): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40585414, &(0x7f0000000040)={0x6, 0x8, 0x80}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000000000100a0000000600010016000000"], 0x1c}}, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="704bf5ddec082d38277cd599f3e5441a687947fd7c78c8861e08e5daf58a258cee52c82a6ad6668ef01187bb25c994504e8abaee6931b5bfc7b3e78d7e1323b0a754c830889d8148bfe33c6814205fee", 0x50}, {&(0x7f0000000580)="9f1d6354a2eb281438bb72042df7782a0122ed4a325534d75abca157dbea678b258ff89afdaf3833c436089b04fddb581551d434931e0990e272663ee46c53e2207b55da74af6d29d2619a42ee394c8758b1a3c8719883ffaf123523edd66d902081e3b1313598515a7c80330f3dff57716f000dc840232a2dcf2d8b724f4c77a4adc944668de60c67aa37102d0c903b7cf85a7f6442c2357eeb879627d6ee5ea7f96438e60d150f83362057c2c81f199710e271e005edcdbb1c66f835", 0xbd}, {&(0x7f0000000340)="a6c88dd6650a2a8f33642893043f799944e368913e91805e65f91cc6eae92034a6db3df004b6d35033298e15d7f6bd1c7dd17aff885f84790ac6c2dbc8199383ebb5dbb03c9a13c5bddc51df5796378d20f011229bbcbeddf437ea1b2aed10534210805f3fb78bcf6aea967f3fc28d", 0x6f}, {&(0x7f00000004c0)="b77e7e3bfcd84d3b85724a9a564e328a3633518b8404bf40cfc40534a4ae47cd9d67169045df25964fdb358ddb57735f8c1096ea5ed24603f29e81dd9f6faaa33244a0c755f5079860aa6642ab654535286bcf2cf7e0dbb867ae8030d17151d7da75ea3d5676c4d31639db9989eee0cfddff96ce0f10646b303afe8f0cf669936d84a0adbe5c42d1f295835d446189d6c45588b103c3ef53", 0x98}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 57.338725956s ago: executing program 4 (id=2711): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc776000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x3, 0x1, 0xd06, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000540)={0x7, &(0x7f0000000480)=[{0x7, 0x81, 0x58, 0x5}, {0x79ca, 0x3, 0x6, 0x1ff}, {0x2efa, 0x10, 0x9, 0x1}, {0x7f0, 0x8, 0x9, 0x4}, {0xd, 0x1, 0x7f, 0x5}, {0x7, 0x8, 0x80, 0x1}, {0x8, 0x10, 0x0, 0x7}]}, 0x10) setxattr(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)='\'\x00', 0x2, 0x3) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 55.853189593s ago: executing program 4 (id=2713): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000ac0)=""/143, 0x8f) 55.405152939s ago: executing program 4 (id=2717): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x144}, 0x0) 54.414308687s ago: executing program 4 (id=2722): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002022cd2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 53.998007302s ago: executing program 33 (id=2722): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002022cd2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 9.456285867s ago: executing program 5 (id=2830): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x10, 0x93, 0xe2, 0x10, 0x6cb, 0x7, 0x35d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xfb, 0x10, 0x50, [{{0x9, 0x4, 0xe, 0x1, 0x0, 0xab, 0x59, 0xbe, 0x6}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), 0x0, 0x2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x800) 7.990448173s ago: executing program 0 (id=2835): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet_int(r4, 0x0, 0x7, 0x0, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3, 0x0, 0x6, 0x1) 7.466378893s ago: executing program 5 (id=2838): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0xfffffdb2) 7.326828821s ago: executing program 5 (id=2840): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffe0, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x4, 0x8, 0x487, 0x1, 0x0, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.042466858s ago: executing program 5 (id=2841): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc776000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x3, 0x1, 0xd06, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000540)={0x7, &(0x7f0000000480)=[{0x7, 0x81, 0x58, 0x5}, {0x79ca, 0x3, 0x6, 0x1ff}, {0x2efa, 0x10, 0x9, 0x1}, {0x7f0, 0x8, 0x9, 0x4}, {0xd, 0x1, 0x7f, 0x5}, {0x7, 0x8, 0x80, 0x1}, {0x8, 0x10, 0x0, 0x7}]}, 0x10) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)=@random={'trusted.', 'overlay\x00'}, &(0x7f0000000200)='\'\x00', 0x2, 0x3) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6.898284676s ago: executing program 1 (id=2842): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x192, &(0x7f0000009480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) read(r0, &(0x7f0000000200)=""/189, 0xbd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.922211293s ago: executing program 5 (id=2843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e80), 0x402, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, 0x0) 5.358104596s ago: executing program 5 (id=2845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a"], 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) 4.580283612s ago: executing program 1 (id=2846): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0903"], 0xfdef) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.282143879s ago: executing program 2 (id=2848): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8c0, &(0x7f0000000500), 0x3, 0x42f, &(0x7f0000000940)="$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") symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) 4.172128026s ago: executing program 1 (id=2849): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.014219325s ago: executing program 2 (id=2850): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffe0, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x4, 0x8, 0x487, 0x1, 0x0, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.013793355s ago: executing program 0 (id=2851): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc776000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x3, 0x1, 0xd06, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000540)={0x7, &(0x7f0000000480)=[{0x7, 0x81, 0x58, 0x5}, {0x79ca, 0x3, 0x6, 0x1ff}, {0x2efa, 0x10, 0x9, 0x1}, {0x7f0, 0x8, 0x9, 0x4}, {0xd, 0x1, 0x7f, 0x5}, {0x7, 0x8, 0x80, 0x1}, {0x8, 0x10, 0x0, 0x7}]}, 0x10) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)=@random={'trusted.', 'overlay\x00'}, &(0x7f0000000200)='\'\x00', 0x2, 0x3) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3.986360356s ago: executing program 1 (id=2852): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) inotify_init() close(0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.878921153s ago: executing program 2 (id=2853): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001f80)={0x1, 0x0, [{0x0, 0x0, 0xfffffffffffffffc}]}) 2.961660776s ago: executing program 0 (id=2854): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0003009}) 2.866598812s ago: executing program 2 (id=2855): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1) ioctl$sock_inet_udp_SIOCINQ(r3, 0x80104d12, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setregid(0x0, 0xee01) sendmmsg(0xffffffffffffffff, &(0x7f0000008fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2428}}], 0x1, 0x1) recvfrom$packet(r3, 0x0, 0x0, 0x40000140, &(0x7f0000000280)={0x11, 0x428d6df8113126e2, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32=r0, @ANYBLOB="00000071e3e7d952d30f", @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, &(0x7f0000000140), &(0x7f0000000040)=""/128}, 0x20) mount$9p_tcp(&(0x7f0000000640), 0x0, &(0x7f00000006c0), 0x8010, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d7463702a706f72303030303030303030346532322c000000100000000076"]) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) 2.674207273s ago: executing program 1 (id=2856): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = dup(r0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0xe7c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={0x8}) 1.745403957s ago: executing program 0 (id=2857): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0903"], 0xfdef) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.574653558s ago: executing program 2 (id=2858): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000045c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4004040) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0xe0, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, 0x0, 0x20004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes256, 0x10, '\x00', @c}) 1.401255358s ago: executing program 0 (id=2859): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 378.163757ms ago: executing program 2 (id=2860): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b3019c", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet_int(r4, 0x0, 0x7, 0x0, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3, 0x0, 0x6, 0x1) 266.171304ms ago: executing program 0 (id=2861): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffe0, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x4, 0x8, 0x487, 0x1, 0x0, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=2862): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc776000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x3, 0x1, 0xd06, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000540)={0x7, &(0x7f0000000480)=[{0x7, 0x81, 0x58, 0x5}, {0x79ca, 0x3, 0x6, 0x1ff}, {0x2efa, 0x10, 0x9, 0x1}, {0x7f0, 0x8, 0x9, 0x4}, {0xd, 0x1, 0x7f, 0x5}, {0x7, 0x8, 0x80, 0x1}, {0x8, 0x10, 0x0, 0x7}]}, 0x10) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)=@random={'trusted.', 'overlay\x00'}, &(0x7f0000000200)='\'\x00', 0x2, 0x3) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 570.275663][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 570.315965][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 570.349860][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 572.444832][T11132] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 574.989713][T11162] __nla_validate_parse: 35 callbacks suppressed [ 574.989732][T11162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'. [ 576.710095][T11172] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 576.829665][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'. [ 576.857152][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.132796][T11170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.221118][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 577.265488][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 577.322412][T11182] bridge_slave_0: default FDB implementation only supports local addresses [ 577.346501][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 577.360596][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 577.369898][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 577.389210][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 577.399477][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 577.410745][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 578.759448][ T8] IPVS: starting estimator thread 0... [ 578.851731][T11200] IPVS: using max 17 ests per chain, 40800 per kthread [ 579.558649][T11218] 8021q: VLANs not supported on vcan0 [ 580.255222][T11231] __nla_validate_parse: 31 callbacks suppressed [ 580.255237][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.279015][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.291150][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.320822][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.386329][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.398348][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.415105][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.428747][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.479792][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 580.520817][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 582.240680][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.348751][T11270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.359556][T11345] __nla_validate_parse: 32 callbacks suppressed [ 587.368224][T11345] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1568'. [ 589.828950][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 589.848324][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 589.950771][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 589.961060][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 590.026317][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 590.062283][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 590.092992][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 590.142323][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 590.151943][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 591.650047][T11398] bridge_slave_0: left allmulticast mode [ 591.674489][T11398] bridge_slave_0: left promiscuous mode [ 591.699227][T11398] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.749225][T11398] bridge_slave_1: left allmulticast mode [ 591.761433][T11398] bridge_slave_1: left promiscuous mode [ 591.768466][T11398] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.783118][T11398] bond0: (slave bond_slave_0): Releasing backup interface [ 591.807686][T11398] bond0: (slave bond_slave_1): Releasing backup interface [ 592.078686][T11398] team0: Port device team_slave_0 removed [ 592.127882][T11398] team0: Port device team_slave_1 removed [ 592.146920][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.196163][T11398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.228425][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.341470][T11398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.428831][T11399] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 592.495200][T11399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.528563][T11399] team0: Port device bond0 added [ 595.056550][T11417] __nla_validate_parse: 31 callbacks suppressed [ 595.056562][T11417] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1593'. [ 595.403827][T11435] overlayfs: failed to clone lowerpath [ 598.927550][ T8] IPVS: starting estimator thread 0... [ 599.021725][T11454] IPVS: using max 32 ests per chain, 76800 per kthread [ 599.900203][T11469] overlayfs: failed to clone lowerpath [ 605.237699][T11498] overlayfs: failed to clone lowerpath [ 608.457670][T11530] overlayfs: failed to clone lowerpath [ 611.276794][T11559] overlayfs: failed to clone lowerpath [ 612.573295][ T28] audit: type=1326 audit(1771094165.436:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.4.1642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b4559bf79 code=0x0 [ 613.993133][T11592] overlayfs: failed to clone lowerpath [ 616.153973][T11618] overlayfs: failed to clone lowerpath [ 616.383562][T11619] vlan0: entered promiscuous mode [ 616.391556][T11619] bond0: entered promiscuous mode [ 617.755884][ T28] audit: type=1326 audit(1771094170.616:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.0.1665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356399bf79 code=0x0 [ 619.754334][T11665] overlayfs: failed to clone lowerpath [ 623.174209][T11672] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.696037][T11672] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.092480][T11672] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.228001][T11690] overlayfs: failed to clone lowerpath [ 625.241731][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.248114][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.436059][T11672] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.348580][T11672] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.466816][T11672] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.675057][T11672] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.711364][ T28] audit: type=1326 audit(1771094180.566:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.4.1688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b4559bf79 code=0x0 [ 627.789533][T11672] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.006229][T11719] overlayfs: failed to clone lowerpath [ 631.076868][T11748] overlayfs: failed to clone lowerpath [ 632.582082][T11755] fuse: Bad value for 'fd' [ 637.043839][T11791] overlayfs: failed to clone lowerpath [ 641.277438][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 641.293201][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 641.313195][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 641.694373][T11844] ptrace attach of "./syz-executor exec"[5772] was attempted by " [ 642.557893][T11854] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 642.909459][T11865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.112678][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 643.811922][T11879] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 643.913019][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 643.931349][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 644.026161][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 644.072610][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 644.086831][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 644.114985][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 644.332748][T11893] vlan0: entered promiscuous mode [ 645.165417][T11919] capability: warning: `syz.4.1757' uses deprecated v2 capabilities in a way that may be insecure [ 645.266807][T11923] bond_slave_0: entered promiscuous mode [ 645.272564][T11923] bond_slave_1: entered promiscuous mode [ 645.278280][T11923] vxlan0: entered promiscuous mode [ 645.317425][T11923] vlan3: entered promiscuous mode [ 645.337505][T11923] bond0: entered promiscuous mode [ 646.452402][ T28] audit: type=1326 audit(1771094199.316:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11946 comm="syz.0.1769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356399bf79 code=0x0 [ 647.202421][T11967] overlayfs: failed to clone upperpath [ 647.835406][T11984] __nla_validate_parse: 75 callbacks suppressed [ 647.835425][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'. [ 647.866875][T11984] vlan3: entered promiscuous mode [ 649.115554][ T28] audit: type=1326 audit(1771094201.976:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.2.1790" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c2779bf79 code=0x0 [ 649.927979][T12023] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 651.305357][T12047] overlayfs: failed to resolve './cgroup': -2 [ 651.629333][ T28] audit: type=1326 audit(1771094204.486:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.1.1806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1b0f9bf79 code=0x0 [ 652.622848][ T5771] Bluetooth: hci0: unexpected event for opcode 0xff03 [ 652.732705][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'. [ 652.797484][T12070] vlan3: entered promiscuous mode [ 654.789551][T12097] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 655.465712][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 655.552905][ T28] audit: type=1326 audit(1771094208.416:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.1.1826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1b0f9bf79 code=0x0 [ 658.547633][T12169] vlan3: entered promiscuous mode [ 658.849434][ T28] audit: type=1326 audit(1771094211.706:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 658.942633][ T28] audit: type=1326 audit(1771094211.746:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 658.977143][ T28] audit: type=1326 audit(1771094211.746:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 659.001711][ T28] audit: type=1326 audit(1771094211.746:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 659.047308][ T28] audit: type=1326 audit(1771094211.746:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 659.080775][ T28] audit: type=1326 audit(1771094211.746:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 659.106470][ T28] audit: type=1326 audit(1771094211.746:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 659.157877][ T28] audit: type=1326 audit(1771094211.746:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 659.204043][ T28] audit: type=1326 audit(1771094211.746:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 659.243326][ T28] audit: type=1326 audit(1771094211.746:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b0f9bf79 code=0x7ffc0000 [ 661.878340][T12207] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 663.644329][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 663.820779][T12235] vlan3: entered promiscuous mode [ 663.827158][T12235] bond0: entered promiscuous mode [ 663.832655][T12235] bond_slave_0: entered promiscuous mode [ 663.842294][T12235] bond_slave_1: entered promiscuous mode [ 664.485074][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 664.485091][ T28] audit: type=1326 audit(1771094217.346:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12253 comm="syz.2.1877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c2779bf79 code=0x0 [ 664.670270][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'. [ 664.720010][T12262] vlan3: entered promiscuous mode [ 664.731315][T12262] syz_tun: entered promiscuous mode [ 666.057876][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'. [ 666.104717][T12285] vlan0: entered promiscuous mode [ 666.115525][T12285] syz_tun: entered promiscuous mode [ 666.215605][T12289] tipc: Failed to remove unknown binding: 66,0,0/2147483649:2208482998/2208482999 [ 666.282100][T12289] tipc: Failed to remove unknown binding: 66,0,0/2147483649:2208482998/2208482999 [ 666.658572][T12292] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1891'. [ 667.503314][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1899'. [ 667.541160][T12314] vlan3: entered promiscuous mode [ 668.426354][T12333] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1906'. [ 668.499577][T12337] pimreg3: entered allmulticast mode [ 669.328624][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 669.606922][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 670.718735][T12377] vlan3: entered promiscuous mode [ 670.925130][T12372] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1921'. [ 671.082181][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 673.658861][T12415] gtp0: entered promiscuous mode [ 675.159900][T12430] 8021q: VLANs not supported on vcan0 [ 676.085076][T12426] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1938'. [ 679.976168][T12491] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1957'. [ 680.063844][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.076670][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.089164][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.099372][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.122882][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.133663][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.154783][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.169770][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 680.559873][T12504] ptrace attach of "./syz-executor exec"[5780] was attempted by " [ 682.725135][T12525] __nla_validate_parse: 35 callbacks suppressed [ 682.725148][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 682.849601][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 682.976498][ T5771] Bluetooth: hci3: unexpected event for opcode 0x041c [ 684.126300][T12545] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 684.227926][T12545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.368620][T12547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.410286][T12537] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1976'. [ 684.425630][T12547] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 684.457316][T12547] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 686.094771][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.108112][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.927865][T12580] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1992'. [ 686.995860][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 687.559494][T12604] netlink: 'syz.1.2002': attribute type 12 has an invalid length. [ 688.000892][T12619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2009'. [ 688.094791][T12625] 8021q: VLANs not supported on vcan0 [ 688.590948][T12641] netlink: 'syz.1.2019': attribute type 1 has an invalid length. [ 688.640886][T12641] bond2: entered promiscuous mode [ 688.686917][T12641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.770406][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2019'. [ 688.780155][T12641] bond2: entered allmulticast mode [ 688.818782][T12631] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2014'. [ 688.880652][T12648] 8021q: VLANs not supported on vcan0 [ 689.052904][T12652] gtp0: entered promiscuous mode [ 689.059678][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2023'. [ 689.107102][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 689.796500][T12679] 8021q: VLANs not supported on vcan0 [ 690.570586][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 693.069670][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2057'. [ 693.085365][T12741] vlan0: entered promiscuous mode [ 699.398742][T12851] vlan4: entered promiscuous mode [ 701.648988][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 701.664636][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 701.763814][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 701.805465][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 701.816872][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 701.830539][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 702.021513][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 702.033246][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 702.049133][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 702.069839][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 705.853037][T12915] 8021q: VLANs not supported on vcan0 [ 707.644901][T12932] __nla_validate_parse: 29 callbacks suppressed [ 707.644918][T12932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2131'. [ 708.893646][T12951] overlayfs: missing 'lowerdir' [ 709.024014][T12953] ptrace attach of "./syz-executor exec"[5780] was attempted by "./syz-executor exec"[12953] [ 713.125303][T12985] overlayfs: missing 'lowerdir' [ 714.526510][T12988] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2147'. [ 714.595407][T13001] ptrace attach of "./syz-executor exec"[6379] was attempted by "./syz-executor exec"[13001] [ 715.876492][T13016] overlayfs: missing 'lowerdir' [ 718.047920][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 719.613946][T13044] overlayfs: missing 'lowerdir' [ 721.086097][ T28] audit: type=1326 audit(1771094273.946:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.0.2166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356399bf79 code=0x0 [ 722.372545][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 723.080244][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 723.135040][T13073] vlan4: entered promiscuous mode [ 723.180811][T13075] veth0_vlan: entered allmulticast mode [ 724.511747][ T28] audit: type=1326 audit(1771094277.366:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.2179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356399bf79 code=0x0 [ 724.626612][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 725.019823][T13105] ptrace attach of "./syz-executor exec"[5780] was attempted by ""[13105] [ 726.109626][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'. [ 726.265076][T13123] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2181'. [ 728.662503][T13144] ptrace attach of "./syz-executor exec"[5772] was attempted by ""[13144] [ 728.805027][T13140] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 729.553469][ T28] audit: type=1326 audit(1771094282.416:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b4559bf79 code=0x0 [ 729.692664][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'. [ 730.117716][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 731.920836][T13182] ptrace attach of "./syz-executor exec"[5776] was attempted by ""[13182] [ 732.703696][T13184] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 733.016800][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 733.104996][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2210'. [ 734.560135][ T28] audit: type=1326 audit(1771094287.416:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.2.2212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c2779bf79 code=0x0 [ 735.181745][T13224] ptrace attach of "./syz-executor exec"[6379] was attempted by " [ 736.096457][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 737.193970][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'. [ 737.672639][T13246] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 738.714140][T13250] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 739.109727][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'. [ 739.217831][ T28] audit: type=1326 audit(1771094292.076:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13258 comm="syz.0.2227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356399bf79 code=0x0 [ 739.319431][T13269] ptrace attach of "./syz-executor exec"[6379] was attempted by " [ 742.176901][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'. [ 743.272478][T13300] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 743.638880][T13304] bridge0: entered promiscuous mode [ 743.660478][T13304] vlan3: entered promiscuous mode [ 743.920000][T13314] ptrace attach of "./syz-executor exec"[6379] was attempted by " [ 744.031750][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 745.560223][ T28] audit: type=1326 audit(1771094298.416:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.2.2243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c2779bf79 code=0x0 [ 745.636792][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 745.661130][T13330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.795872][ T28] audit: type=1326 audit(1771094298.606:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 745.824420][T13330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.863121][ T28] audit: type=1326 audit(1771094298.606:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 745.908771][ T28] audit: type=1326 audit(1771094298.606:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 746.001307][ T28] audit: type=1326 audit(1771094298.606:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 746.063978][ T28] audit: type=1326 audit(1771094298.606:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 746.090457][ T28] audit: type=1326 audit(1771094298.606:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2b4559bce2 code=0x7ffc0000 [ 746.113355][ T28] audit: type=1326 audit(1771094298.606:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b4555c84e code=0x7ffc0000 [ 746.137020][ T28] audit: type=1326 audit(1771094298.616:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2b4559bda7 code=0x7ffc0000 [ 746.159701][ T28] audit: type=1326 audit(1771094298.616:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b4555c84e code=0x7ffc0000 [ 747.219339][T13350] ptrace attach of "./syz-executor exec"[5776] was attempted by " [ 747.495829][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.705469][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.284433][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2256'. [ 748.630304][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 750.584104][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2267'. [ 750.794104][T13398] ptrace attach of "./syz-executor exec"[5772] was attempted by " [ 751.244750][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 751.678991][T13412] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 751.959947][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 752.971066][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2276'. [ 753.613210][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.634991][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.662514][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.672959][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.686249][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.697517][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.715517][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.745775][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.758002][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 753.767423][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 758.991067][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 759.001414][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 759.012277][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 759.020882][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 759.028571][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 759.035968][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 759.506659][T13521] __nla_validate_parse: 73 callbacks suppressed [ 759.506676][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 760.646110][T13505] chnl_net:caif_netlink_parms(): no params data found [ 760.937819][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.945607][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.953921][T13505] bridge_slave_0: entered allmulticast mode [ 760.968068][T13505] bridge_slave_0: entered promiscuous mode [ 761.008267][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.083866][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.094712][ T5087] Bluetooth: hci4: command tx timeout [ 761.236606][T13505] bridge_slave_1: entered allmulticast mode [ 761.674295][T13505] bridge_slave_1: entered promiscuous mode [ 761.691823][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 761.790215][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 761.822794][T13505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.961076][T13505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.173929][T13505] team0: Port device team_slave_0 added [ 762.183732][T13505] team0: Port device team_slave_1 added [ 762.278422][T13505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.361318][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.173751][ T5087] Bluetooth: hci4: command tx timeout [ 763.284050][T13505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.333409][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 763.518018][T13505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.525378][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.569803][T13505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.705019][T12955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.721063][T12955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.802234][T13505] hsr_slave_0: entered promiscuous mode [ 763.809943][T13505] hsr_slave_1: entered promiscuous mode [ 763.819170][T13505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.837708][T13505] Cannot create hsr debugfs directory [ 764.067856][T12955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.336009][T12955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.237841][T12955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.271431][ T5087] Bluetooth: hci4: command tx timeout [ 765.285572][T12955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.548545][T12955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.590973][T12955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.749693][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 767.210072][T13589] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 767.236023][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 767.331784][ T5087] Bluetooth: hci4: command tx timeout [ 767.407715][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 768.673876][T13505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 768.735363][ T5087] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 769.021429][T13505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 769.034494][T13505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 769.045406][T13505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 770.360595][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 773.248510][T13505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.321481][T12955] hsr_slave_0: left promiscuous mode [ 773.337257][T12955] hsr_slave_1: left promiscuous mode [ 773.347084][T12955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.355348][T12955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.369594][T12955] vlan2: left promiscuous mode [ 773.377979][T12955] bridge0: port 3(vlan2) entered disabled state [ 773.389231][T12955] bridge_slave_1: left allmulticast mode [ 773.395279][T12955] bridge_slave_1: left promiscuous mode [ 773.402747][T12955] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.412474][T12955] bridge_slave_0: left promiscuous mode [ 773.418143][T12955] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.454762][T12955] veth0_macvtap: left promiscuous mode [ 773.460444][T12955] veth1_vlan: left promiscuous mode [ 773.466169][T12955] veth0_vlan: left promiscuous mode [ 774.738301][T13681] overlayfs: missing 'lowerdir' [ 778.175999][T12955] bond2 (unregistering): Released all slaves [ 778.220135][T12955] pimreg3 (unregistering): left allmulticast mode [ 778.340822][T12955] bond1 (unregistering): Released all slaves [ 778.374857][T12955] pim6reg (unregistering): left allmulticast mode [ 778.405009][T12955] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 778.419028][T12955] vxlan0 (unregistering): left promiscuous mode [ 779.809516][T12955] team_slave_1 (unregistering): left promiscuous mode [ 779.825862][T12955] team0 (unregistering): Port device team_slave_1 removed [ 779.879269][T12955] team_slave_0 (unregistering): left promiscuous mode [ 779.887023][T12955] team0 (unregistering): Port device team_slave_0 removed [ 779.945375][T12955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.955109][T12955] bond_slave_1 (unregistering): left promiscuous mode [ 780.009475][T12955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.018591][T12955] bond_slave_0 (unregistering): left promiscuous mode [ 780.382639][T12955] bond0 (unregistering): Released all slaves [ 780.495215][T13505] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.626984][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.634328][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.657799][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.665114][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.758820][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 781.179486][T13709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2342'. [ 781.922513][T13724] overlayfs: missing 'lowerdir' [ 782.993535][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.119500][T13505] veth0_vlan: entered promiscuous mode [ 783.155931][T13505] veth1_vlan: entered promiscuous mode [ 783.230598][T13505] veth0_macvtap: entered promiscuous mode [ 783.269397][T13505] veth1_macvtap: entered promiscuous mode [ 783.306747][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.318246][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.328938][T13505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.357615][T13505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.373601][T13505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.456225][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 783.596326][T13505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.806300][T13505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.897663][T13505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.011769][T13505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.124376][T13505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.341930][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2351'. [ 784.433662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.456949][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.469369][T13745] overlayfs: failed to clone upperpath [ 784.507931][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.541310][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.622118][T13749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2355'. [ 784.633003][T13749] tipc: Invalid UDP bearer configuration [ 784.633063][T13749] tipc: Enabling of bearer rejected, failed to enable media [ 785.996772][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'. [ 788.602416][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2373'. [ 790.287823][T13819] ptrace attach of "./syz-executor exec"[13505] was attempted by " [ 790.465296][T13822] loop1: detected capacity change from 0 to 16 [ 791.443509][T13822] erofs: (device loop1): mounted with root inode @ nid 36. [ 791.518895][T13822] erofs: (device loop1): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 791.593325][T13822] erofs: (device loop1): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 791.629436][T13822] syz.1.2379: attempt to access beyond end of device [ 791.629436][T13822] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 791.657043][T13822] syz.1.2379: attempt to access beyond end of device [ 791.657043][T13822] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 791.715276][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 791.834700][T13839] input: syz1 as /devices/virtual/input/input6 [ 792.126869][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 792.159086][T13844] vlan3: entered promiscuous mode [ 792.527927][T13850] input: syz1 as /devices/virtual/input/input7 [ 793.292191][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.305903][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.319580][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.331100][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.346927][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 793.354822][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.820944][T13865] loop1: detected capacity change from 0 to 256 [ 795.162522][T13865] FAT-fs (loop1): Directory bread(block 64) failed [ 795.169996][T13865] FAT-fs (loop1): Directory bread(block 65) failed [ 795.176874][T13865] FAT-fs (loop1): Directory bread(block 66) failed [ 795.183509][T13865] FAT-fs (loop1): Directory bread(block 67) failed [ 795.190154][T13865] FAT-fs (loop1): Directory bread(block 68) failed [ 795.196771][T13865] FAT-fs (loop1): Directory bread(block 69) failed [ 795.203550][T13865] FAT-fs (loop1): Directory bread(block 70) failed [ 795.210988][T13865] FAT-fs (loop1): Directory bread(block 71) failed [ 795.217780][T13865] FAT-fs (loop1): Directory bread(block 72) failed [ 795.224437][T13865] FAT-fs (loop1): Directory bread(block 73) failed [ 795.411598][ T5771] Bluetooth: hci3: command tx timeout [ 795.422559][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 795.528638][T13857] chnl_net:caif_netlink_parms(): no params data found [ 795.745370][T13877] loop1: detected capacity change from 0 to 512 [ 795.754579][T13877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 795.777174][T13877] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 795.785653][T13877] System zones: 0-2, 18-18, 34-34 [ 795.791892][T13877] EXT4-fs (loop1): orphan cleanup on readonly fs [ 795.806110][T13877] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2396: bg 0: block 248: padding at end of block bitmap is not set [ 795.827411][T13877] __quota_error: 213 callbacks suppressed [ 795.827427][T13877] Quota error (device loop1): write_blk: dquota write failed [ 795.841223][T13877] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 795.851315][T13877] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2396: Failed to acquire dquot type 1 [ 795.878882][T13877] EXT4-fs (loop1): 1 truncate cleaned up [ 795.946780][T13877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 796.245512][ T3505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.435516][T13505] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.502393][ T5771] Bluetooth: hci3: command tx timeout [ 797.552286][ T3505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.597648][T13857] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.625420][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.652134][T13857] bridge_slave_0: entered allmulticast mode [ 797.659628][T13857] bridge_slave_0: entered promiscuous mode [ 797.693317][T13857] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.700514][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.718331][T13857] bridge_slave_1: entered allmulticast mode [ 797.750069][T13857] bridge_slave_1: entered promiscuous mode [ 797.797671][ T3505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.036231][T13857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.222270][ T3505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.254336][T13902] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 799.284306][T13857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.568747][T13857] team0: Port device team_slave_0 added [ 799.574714][ T5771] Bluetooth: hci3: command tx timeout [ 799.592314][T13857] team0: Port device team_slave_1 added [ 799.666375][T13857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.691345][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.742492][T13857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.809003][T13857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.830956][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.891205][T13857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.930417][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 800.288911][T13857] hsr_slave_0: entered promiscuous mode [ 800.325219][T13857] hsr_slave_1: entered promiscuous mode [ 800.358320][T13857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.368285][T13857] Cannot create hsr debugfs directory [ 800.879437][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2413'. [ 800.919073][T13936] vlan4: entered promiscuous mode [ 801.606603][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2414'. [ 801.656457][ T5771] Bluetooth: hci3: command tx timeout [ 804.149398][ T3505] hsr_slave_0: left promiscuous mode [ 804.176917][ T3505] hsr_slave_1: left promiscuous mode [ 804.223248][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.254248][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.309605][ T3505] bridge_slave_1: left allmulticast mode [ 804.332402][ T3505] bridge_slave_1: left promiscuous mode [ 804.355989][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.400118][ T3505] bridge_slave_0: left allmulticast mode [ 804.408544][ T3505] bridge_slave_0: left promiscuous mode [ 804.418502][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.482805][ T3505] batadv0: left promiscuous mode [ 804.507180][ T3505] veth1_macvtap: left promiscuous mode [ 804.521761][ T3505] veth0_macvtap: left promiscuous mode [ 804.537843][ T3505] veth1_vlan: left promiscuous mode [ 804.569466][ T3505] veth0_vlan: left promiscuous mode [ 804.964986][ T3505] bond2 (unregistering): Released all slaves [ 805.030903][ T3505] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 805.293415][ T3505] bond1 (unregistering): Released all slaves [ 805.889191][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.898087][ T3505] bond_slave_1 (unregistering): left promiscuous mode [ 805.944775][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.956018][ T3505] bond_slave_0 (unregistering): left promiscuous mode [ 806.298588][ T3505] bond0 (unregistering): Released all slaves [ 806.388863][T13996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2424'. [ 806.405267][T13857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 806.469349][T13857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 806.533824][T13857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 806.578505][T13857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 807.024082][T14021] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 807.830969][T13857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.888010][T13857] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.900451][ T3505] IPVS: stop unused estimator thread 0... [ 807.932822][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.940763][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.914174][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.921437][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.943127][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.949728][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.029487][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2434'. [ 809.110111][T13857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.934331][T13857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.159099][T13857] veth0_vlan: entered promiscuous mode [ 810.202891][T13857] veth1_vlan: entered promiscuous mode [ 810.213753][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 810.288093][T13857] veth0_macvtap: entered promiscuous mode [ 810.313976][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 810.918039][ T28] audit: type=1326 audit(1771094363.746:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.310940][T13857] veth1_macvtap: entered promiscuous mode [ 811.334452][ T28] audit: type=1326 audit(1771094363.746:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.405587][ T28] audit: type=1326 audit(1771094363.756:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.458379][T13857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.470929][T13857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.481046][T13857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.503317][ T28] audit: type=1326 audit(1771094363.756:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.506905][T13857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.561223][ T28] audit: type=1326 audit(1771094363.756:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.597021][T13857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.649762][T13857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.671064][T13857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.704340][T13857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.732931][ T28] audit: type=1326 audit(1771094363.766:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.758440][T13857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.781963][T13857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.825913][T13857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.825936][ T28] audit: type=1326 audit(1771094363.766:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.825979][ T28] audit: type=1326 audit(1771094363.766:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 811.839702][T13857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.878132][ T28] audit: type=1326 audit(1771094363.766:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 812.024252][ T28] audit: type=1326 audit(1771094363.766:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.4.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4559bf79 code=0x7ffc0000 [ 812.123942][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.134008][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.197357][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.205706][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.273127][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2451'. [ 814.802200][T14140] syz.4.2455[14140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.802459][T14140] syz.4.2455[14140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 815.265378][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 815.318129][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 815.342316][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 815.357216][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 815.370636][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 815.392166][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 816.498603][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 816.775305][T14152] chnl_net:caif_netlink_parms(): no params data found [ 816.857234][ T3527] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.572786][ T5087] Bluetooth: hci1: command tx timeout [ 817.736065][T14179] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 818.078477][ T3527] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.294278][ T3527] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.433200][T14152] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.451782][T14152] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.454768][T14202] loop1: detected capacity change from 0 to 128 [ 818.459588][T14152] bridge_slave_0: entered allmulticast mode [ 818.503131][T14152] bridge_slave_0: entered promiscuous mode [ 818.533638][ T3527] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.564891][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2468'. [ 818.584472][T14152] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.609176][T14152] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.625774][T14152] bridge_slave_1: entered allmulticast mode [ 818.636421][T14152] bridge_slave_1: entered promiscuous mode [ 818.740347][T14152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.795004][T14152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.908353][T14152] team0: Port device team_slave_0 added [ 819.048966][T14152] team0: Port device team_slave_1 added [ 819.145303][T14207] ptrace attach of "./syz-executor exec"[6379] was attempted by " [ 819.693918][ T5087] Bluetooth: hci1: command tx timeout [ 819.963163][T14152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.970192][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.191753][T14152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.285363][T14152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.325411][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.451646][T14152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.594974][ T3527] tipc: Left network mode [ 820.709994][T14152] hsr_slave_0: entered promiscuous mode [ 820.811835][T14152] hsr_slave_1: entered promiscuous mode [ 820.845204][T14152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.873393][T14152] Cannot create hsr debugfs directory [ 821.165408][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2479'. [ 821.903932][ T5087] Bluetooth: hci1: command tx timeout [ 822.557235][T14256] ptrace attach of "./syz-executor exec"[13857] was attempted by " [ 823.210040][T14270] vlan2: entered promiscuous mode [ 823.356057][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 823.413043][T14273] veth0_vlan: entered allmulticast mode [ 823.624993][T14280] loop1: detected capacity change from 0 to 512 [ 823.737710][T14280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2490: bg 0: block 5: invalid block bitmap [ 823.967273][T14280] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 823.984066][ T5087] Bluetooth: hci1: command tx timeout [ 824.901189][T14280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2490: invalid indirect mapped block 3 (level 2) [ 824.985142][T14280] EXT4-fs (loop1): 1 orphan inode deleted [ 824.990976][T14280] EXT4-fs (loop1): 1 truncate cleaned up [ 825.064695][T14280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.258429][T13505] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.512084][ T3527] hsr_slave_0: left promiscuous mode [ 826.530406][ T3527] hsr_slave_1: left promiscuous mode [ 826.547791][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.564062][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.591077][ T3527] bridge_slave_1: left allmulticast mode [ 826.602680][ T3527] bridge_slave_1: left promiscuous mode [ 826.621694][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.647080][ T3527] bridge_slave_0: left allmulticast mode [ 826.655419][ T3527] bridge_slave_0: left promiscuous mode [ 826.676653][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.793581][ T3527] veth0_macvtap: left promiscuous mode [ 826.801513][ T3527] veth1_vlan: left promiscuous mode [ 828.150948][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 828.150966][ T28] audit: type=1326 audit(1771094381.006:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.4.2500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b4559bf79 code=0x0 [ 829.283322][ T3527] bond1 (unregistering): Released all slaves [ 830.268155][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 830.325886][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 830.375683][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.384697][ T3527] bond_slave_1 (unregistering): left promiscuous mode [ 830.444379][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.453844][ T3527] bond_slave_0 (unregistering): left promiscuous mode [ 830.830655][ T3527] bond0 (unregistering): Released all slaves [ 830.960972][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2496'. [ 830.971977][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 831.018905][T14152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 831.104859][T14152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 831.149041][T14152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 831.182201][T14152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 831.361878][T14344] loop0: detected capacity change from 0 to 512 [ 831.392838][T14344] EXT4-fs: Ignoring removed orlov option [ 831.439148][T14344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 831.470644][T14344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 831.536908][T14344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 831.616051][T14344] EXT4-fs (loop0): 1 truncate cleaned up [ 831.633368][ T3527] IPVS: stop unused estimator thread 0... [ 831.644974][T14344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.725954][T14152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.057306][T14152] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.078411][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.085655][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.382044][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.389316][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.114238][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.006237][T14152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.248297][T14152] veth0_vlan: entered promiscuous mode [ 835.334476][T14152] veth1_vlan: entered promiscuous mode [ 835.447332][T14152] veth0_macvtap: entered promiscuous mode [ 835.455153][T14386] loop1: detected capacity change from 0 to 512 [ 835.479153][T14386] EXT4-fs: Ignoring removed mblk_io_submit option [ 835.486624][T14152] veth1_macvtap: entered promiscuous mode [ 835.550527][T14386] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 835.554955][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.616905][T14386] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2509: attempt to clear invalid blocks 2 len 1 [ 835.630052][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.630077][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.630094][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.632708][T14152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.672552][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.683341][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.693853][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.712998][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.729812][T14152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.767119][T14386] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 835.775928][T14152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.812561][T14386] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2509: invalid indirect mapped block 1819239214 (level 0) [ 835.821403][T14152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.838767][T14386] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2509: invalid indirect mapped block 1819239214 (level 1) [ 835.839165][T14152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.864441][T14152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.945632][T14386] EXT4-fs (loop1): 1 truncate cleaned up [ 835.958186][T14386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.984590][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 836.140048][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.169745][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.180478][T13505] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.260698][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.279778][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.736839][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 837.775130][T14416] vlan4: entered promiscuous mode [ 837.868207][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 838.800297][T14433] loop1: detected capacity change from 0 to 128 [ 838.850629][T14433] FAT-fs (loop1): Unrecognized mount option "syZ_immutable" or missing value [ 839.688190][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 842.437806][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 844.751656][T14492] loop0: detected capacity change from 0 to 16 [ 844.764831][T14492] erofs: Unknown parameter '' [ 845.260913][T14491] input: syz1 as /devices/virtual/input/input8 [ 846.832020][T14503] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 847.111283][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 847.224727][T14511] loop0: detected capacity change from 0 to 128 [ 847.341356][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 847.370841][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 847.442438][T14508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.927102][T14508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.227202][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 849.296867][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 849.331447][ T23] usb 2-1: can't read configurations, error -71 [ 851.061666][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 851.083826][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 851.093644][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 851.106237][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 851.114208][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 851.121957][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 851.540415][T14530] loop0: detected capacity change from 0 to 4096 [ 851.952682][T14530] EXT4-fs (loop0): Test dummy encryption mode enabled [ 852.008784][T14522] chnl_net:caif_netlink_parms(): no params data found [ 852.047564][T14530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.286844][T14555] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 852.290792][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.319794][T14555] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #18: comm syz.0.2557: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 852.361370][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.377894][T14522] bridge_slave_0: entered allmulticast mode [ 852.402520][T14522] bridge_slave_0: entered promiscuous mode [ 852.430746][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.461784][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.469082][T14522] bridge_slave_1: entered allmulticast mode [ 852.497319][T14522] bridge_slave_1: entered promiscuous mode [ 852.564027][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.613171][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.677305][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.823217][T14522] team0: Port device team_slave_0 added [ 852.838394][T14522] team0: Port device team_slave_1 added [ 853.027856][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.034964][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.061535][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.156397][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.198217][ T5771] Bluetooth: hci2: command tx timeout [ 853.281260][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.468880][T14568] overlayfs: missing 'lowerdir' [ 853.697325][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.002236][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 854.016406][T14522] hsr_slave_0: entered promiscuous mode [ 854.053481][T14522] hsr_slave_1: entered promiscuous mode [ 854.626380][T14522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.251367][ T5771] Bluetooth: hci2: command tx timeout [ 855.627948][T14522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.826356][T14522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.966011][T14587] loop1: detected capacity change from 0 to 512 [ 856.043879][T14587] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 856.113830][T14587] EXT4-fs (loop1): 1 truncate cleaned up [ 856.143596][T14587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.174040][T14522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.192033][T14587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.275792][T14578] loop0: detected capacity change from 0 to 40427 [ 856.313738][T14578] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 856.491959][T14522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 856.513412][T14522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 856.524648][T14522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 856.571253][T14522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 856.616448][T14598] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2579'. [ 856.875864][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.969401][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.034597][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.041906][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.973971][ T5771] Bluetooth: hci2: command tx timeout [ 858.307834][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.315080][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.781670][T14633] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2589'. [ 859.847600][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.402735][ T5771] Bluetooth: hci2: command tx timeout [ 860.875347][T14647] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 861.106327][T14635] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2590'. [ 861.334140][T14522] veth0_vlan: entered promiscuous mode [ 861.356230][T14522] veth1_vlan: entered promiscuous mode [ 861.393196][T14522] veth0_macvtap: entered promiscuous mode [ 861.403209][T14522] veth1_macvtap: entered promiscuous mode [ 861.422496][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.435124][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.630783][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.698359][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.797032][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.905903][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.040499][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.325709][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.336347][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.346845][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.357651][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.367302][T14348] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 862.369807][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.412847][T14522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.427834][T14522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.439041][T14522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.455279][T14522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.581368][T14348] usb 2-1: Using ep0 maxpacket: 16 [ 862.593100][T14348] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 862.603510][T14348] usb 2-1: config 1 has no interface number 0 [ 862.617292][T14348] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 862.651759][T12955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.653313][T14348] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 862.675789][T12955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.710728][T14348] usb 2-1: config 1 interface 105 has no altsetting 0 [ 862.721666][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.729540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.754304][T14348] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 862.771232][T14348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.779324][T14348] usb 2-1: Product: syz [ 862.796616][T14348] usb 2-1: Manufacturer: syz [ 862.804929][T14348] usb 2-1: SerialNumber: syz [ 862.820023][T14659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 862.838546][T14659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 863.013608][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2602'. [ 863.765211][T14675] vlan2: entered promiscuous mode [ 863.770315][T14675] team0: entered promiscuous mode [ 863.801255][T14675] team_slave_0: entered promiscuous mode [ 863.817294][T14675] team_slave_1: entered promiscuous mode [ 863.914252][T14683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 863.929727][T14683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 865.001846][T14348] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 865.044083][T14348] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 865.141481][T14348] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f8:29:70:c6:36:f5 [ 866.265155][T14514] usb 2-1: USB disconnect, device number 7 [ 866.313678][T14514] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 866.313776][T14702] loop4: detected capacity change from 0 to 512 [ 866.412636][T14702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 866.498556][T14705] loop0: detected capacity change from 0 to 512 [ 866.568602][T14702] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 866.587567][T14705] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 866.592667][T14514] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 866.610615][T14693] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2607'. [ 866.622369][T14702] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2610: invalid indirect mapped block 2683928664 (level 1) [ 866.660928][T14514] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 866.663309][T14705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 866.681615][T14514] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 866.707577][T14702] EXT4-fs (loop4): Remounting filesystem read-only [ 866.715377][T14702] EXT4-fs (loop4): 1 truncate cleaned up [ 866.730392][T14702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.734204][T14705] EXT4-fs (loop0): orphan cleanup on readonly fs [ 866.764249][T14705] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.2611: bad orphan inode 267 [ 866.780848][T14705] EXT4-fs (loop0): Remounting filesystem read-only [ 866.789516][T14705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 866.860034][T14705] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.2611: dx entry: limit 0 != root limit 125 [ 866.877100][T14705] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2611: Corrupt directory, running e2fsck is recommended [ 866.959239][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 866.965122][T14522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.380346][T14729] loop0: detected capacity change from 0 to 256 [ 867.433036][T14729] exfat: Deprecated parameter 'utf8' [ 867.477237][T14729] exfat: Deprecated parameter 'utf8' [ 867.558434][T14729] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 870.038396][T14768] input: syz0 as /devices/virtual/input/input9 [ 870.340009][T14779] loop4: detected capacity change from 0 to 512 [ 870.364244][T14778] loop0: detected capacity change from 0 to 1024 [ 870.381228][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.387598][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.390081][T14778] EXT4-fs: Ignoring removed mblk_io_submit option [ 870.457227][T14779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.465759][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2632'. [ 870.513980][T14781] vlan3: entered promiscuous mode [ 870.521703][T14779] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.559453][T14781] team0: entered promiscuous mode [ 870.582860][T14778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.612570][T14781] team_slave_0: entered promiscuous mode [ 870.628936][T14781] team_slave_1: entered promiscuous mode [ 870.639324][ T28] audit: type=1800 audit(2000000038.360:301): pid=14778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2630" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 870.678070][T14522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.878992][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.890685][T14762] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2626'. [ 871.801519][T14798] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 872.217565][T14807] capability: warning: `syz.1.2637' uses 32-bit capabilities (legacy support in use) [ 872.227425][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 872.458520][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 873.267818][T14792] loop4: detected capacity change from 0 to 40427 [ 873.326712][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 873.334661][T14792] F2FS-fs (loop4): invalid crc value [ 873.349295][T14803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.380350][T14792] F2FS-fs (loop4): Found nat_bits in checkpoint [ 873.535383][T14820] loop1: detected capacity change from 0 to 256 [ 873.565461][T14820] exfat: Deprecated parameter 'utf8' [ 873.570945][T14820] exfat: Deprecated parameter 'utf8' [ 873.598555][T14803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.626875][T14820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 873.690042][T14792] F2FS-fs (loop4): Start checkpoint disabled! [ 873.769471][T14792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 873.839670][T14822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2643'. [ 873.850328][T14822] 8021q: VLANs not supported on vcan0 [ 873.917846][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 873.935226][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 873.957410][ T27] usb 1-1: can't read configurations, error -71 [ 874.671449][T14514] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 874.838273][T14828] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2646'. [ 874.922577][T14514] usb 5-1: Using ep0 maxpacket: 8 [ 875.004696][T14514] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 875.085948][T14514] usb 5-1: config 179 has no interface number 0 [ 875.186017][T14514] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 875.348185][T14514] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 875.417808][T14514] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 875.441691][T14514] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 875.674364][T14514] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 875.689580][T14514] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 875.699724][T14514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.713303][T14834] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 875.747367][T14848] loop1: detected capacity change from 0 to 256 [ 876.557999][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 876.568284][T14848] FAT-fs (loop1): Directory bread(block 64) failed [ 876.604218][T14848] FAT-fs (loop1): Directory bread(block 65) failed [ 876.636994][T14848] FAT-fs (loop1): Directory bread(block 66) failed [ 876.657455][T14848] FAT-fs (loop1): Directory bread(block 67) failed [ 876.691988][T14851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2654'. [ 876.701658][T14848] FAT-fs (loop1): Directory bread(block 68) failed [ 876.708281][T14848] FAT-fs (loop1): Directory bread(block 69) failed [ 876.753363][ T8] usb 5-1: USB disconnect, device number 3 [ 876.753471][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 876.769610][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 876.784063][T14848] FAT-fs (loop1): Directory bread(block 70) failed [ 876.799751][ T8] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 876.828770][T14848] FAT-fs (loop1): Directory bread(block 71) failed [ 876.838341][T14848] FAT-fs (loop1): Directory bread(block 72) failed [ 876.850668][T14848] FAT-fs (loop1): Directory bread(block 73) failed [ 877.039397][T14856] loop0: detected capacity change from 0 to 2048 [ 877.079981][T14856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.114159][T14856] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.148380][ T11] kworker/u4:0: attempt to access beyond end of device [ 877.148380][ T11] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 877.753672][T14866] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 878.468953][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.972626][T14348] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 879.166774][T14348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.013993][T14348] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.151366][T14348] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 880.160548][T14348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 880.174845][T14348] usb 1-1: SerialNumber: syz [ 880.426243][T14348] usb 1-1: 0:2 : does not exist [ 880.490427][T14348] usb 1-1: USB disconnect, device number 8 [ 880.574882][T13714] udevd[13714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.381857][T14898] loop4: detected capacity change from 0 to 128 [ 881.491657][T14898] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 881.555263][T14898] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 881.703897][T14904] loop0: detected capacity change from 0 to 256 [ 881.795258][T14522] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 881.908499][T14904] FAT-fs (loop0): Directory bread(block 64) failed [ 881.951453][T14904] FAT-fs (loop0): Directory bread(block 65) failed [ 881.979521][T14906] loop4: detected capacity change from 0 to 1024 [ 881.991478][T14904] FAT-fs (loop0): Directory bread(block 66) failed [ 881.998090][T14904] FAT-fs (loop0): Directory bread(block 67) failed [ 882.012490][T14906] EXT4-fs: quotafile must be on filesystem root [ 882.061477][T14904] FAT-fs (loop0): Directory bread(block 68) failed [ 882.068104][T14904] FAT-fs (loop0): Directory bread(block 69) failed [ 882.086911][T14904] FAT-fs (loop0): Directory bread(block 70) failed [ 882.094813][T14904] FAT-fs (loop0): Directory bread(block 71) failed [ 882.106732][T14904] FAT-fs (loop0): Directory bread(block 72) failed [ 882.116792][T14904] FAT-fs (loop0): Directory bread(block 73) failed [ 882.568627][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2678'. [ 882.585417][T14914] 8021q: VLANs not supported on vcan0 [ 882.586789][T14916] loop0: detected capacity change from 0 to 256 [ 882.602812][T14916] exfat: Deprecated parameter 'namecase' [ 882.608703][T14916] exfat: Deprecated parameter 'namecase' [ 882.655066][T14916] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 882.697450][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 882.716343][T14916] syz.0.2679: attempt to access beyond end of device [ 882.716343][T14916] loop0: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 882.798515][T14916] syz.0.2679: attempt to access beyond end of device [ 882.798515][T14916] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 882.876985][ T28] audit: type=1800 audit(2000000050.590:302): pid=14916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2679" name="file1" dev="loop0" ino=1048970 res=0 errno=0 [ 882.885691][T14925] loop4: detected capacity change from 0 to 256 [ 882.938558][T14925] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 882.961648][T14925] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 883.040583][T14925] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d) [ 883.215702][T14932] loop0: detected capacity change from 0 to 512 [ 883.251765][T14932] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 883.297021][T14932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0102] [ 883.321327][T14932] System zones: 1-12 [ 883.327506][T14932] EXT4-fs (loop0): orphan cleanup on readonly fs [ 883.340939][T14932] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2685: bg 0: block 361: padding at end of block bitmap is not set [ 883.394058][T14932] EXT4-fs (loop0): Remounting filesystem read-only [ 883.406455][T14932] EXT4-fs (loop0): 1 truncate cleaned up [ 883.464932][T14932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 883.626794][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'. [ 883.708716][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 884.224162][T14957] loop0: detected capacity change from 0 to 512 [ 884.253873][T14957] EXT4-fs (loop0): 1 truncate cleaned up [ 884.422824][T14957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.751486][T14961] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2696: bg 0: block 465: padding at end of block bitmap is not set [ 885.252953][T14961] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 885.265839][T14961] EXT4-fs (loop0): This should not happen!! Data will be lost [ 885.265839][T14961] [ 885.275629][T14961] EXT4-fs (loop0): Total free blocks count 0 [ 885.281661][T14961] EXT4-fs (loop0): Free/Dirty block details [ 885.287590][T14961] EXT4-fs (loop0): free_blocks=0 [ 885.292609][T14961] EXT4-fs (loop0): dirty_blocks=65 [ 885.297719][T14961] EXT4-fs (loop0): Block reservation details [ 885.303792][T14961] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 885.436444][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 885.640992][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2700'. [ 885.709794][T14970] vlan2: entered promiscuous mode [ 885.721051][T14970] bridge0: entered promiscuous mode [ 885.769400][T14973] loop0: detected capacity change from 0 to 512 [ 885.827231][T14973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.790485][T14973] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.954762][ T28] audit: type=1800 audit(2000000054.680:303): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2698" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 887.199574][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.242053][T14991] tipc: MTU too low for tipc bearer [ 888.919451][T15016] loop4: detected capacity change from 0 to 1024 [ 888.940139][T15016] EXT4-fs: Ignoring removed orlov option [ 889.025211][T15016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.429952][T14522] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 889.527785][T14522] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 890.170140][T14522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.296922][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.359181][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'. [ 890.525563][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.635562][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.804944][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.114121][ T2128] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 891.352633][ T2128] usb 1-1: no configurations [ 891.357274][ T2128] usb 1-1: can't read configurations, error -22 [ 891.561690][ T2128] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 891.610324][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 891.640709][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.649824][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.662842][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.679853][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 891.690026][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 891.988925][ T2128] usb 1-1: no configurations [ 892.421859][ T2128] usb 1-1: can't read configurations, error -22 [ 892.589004][ T2128] usb usb1-port1: attempt power cycle [ 893.324911][ T2128] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 893.378242][ T2128] usb 1-1: no configurations [ 893.443597][ T2128] usb 1-1: can't read configurations, error -22 [ 893.673830][ T2128] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 893.768152][ T2128] usb 1-1: no configurations [ 893.808926][ T2128] usb 1-1: can't read configurations, error -22 [ 893.886745][ T2128] usb usb1-port1: unable to enumerate USB device [ 893.895493][ T5771] Bluetooth: hci0: command tx timeout [ 894.406289][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 895.289297][T15087] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 895.968241][T15049] chnl_net:caif_netlink_parms(): no params data found [ 895.985452][ T5771] Bluetooth: hci0: command tx timeout [ 897.454350][ T42] hsr_slave_0: left promiscuous mode [ 897.460550][ T42] hsr_slave_1: left promiscuous mode [ 897.467784][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.507133][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.560312][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.609573][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.642855][ T42] bridge_slave_1: left allmulticast mode [ 897.648584][ T42] bridge_slave_1: left promiscuous mode [ 897.685071][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.750970][ T42] bridge_slave_0: left allmulticast mode [ 897.774769][ T42] bridge_slave_0: left promiscuous mode [ 897.793156][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.972439][ T42] veth1_macvtap: left promiscuous mode [ 897.981598][ T42] veth0_macvtap: left promiscuous mode [ 897.987305][ T42] veth1_vlan: left promiscuous mode [ 898.011319][ T42] veth0_vlan: left promiscuous mode [ 898.060662][ T5771] Bluetooth: hci0: command tx timeout [ 898.259342][T15108] loop1: detected capacity change from 0 to 40427 [ 898.302260][T15108] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 898.334321][T15108] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 898.364780][T15108] F2FS-fs (loop1): invalid crc value [ 898.398488][T15108] F2FS-fs (loop1): Found nat_bits in checkpoint [ 898.662578][T15108] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 898.690178][T15108] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 900.144099][ T5771] Bluetooth: hci0: command tx timeout [ 900.180781][ T42] team0 (unregistering): Port device team_slave_1 removed [ 900.244438][ T42] team0 (unregistering): Port device team_slave_0 removed [ 900.345210][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.580790][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.846273][T15203] xt_time: unknown flags 0xc [ 903.112513][ T42] bond0 (unregistering): Released all slaves [ 903.848545][T15207] loop0: detected capacity change from 0 to 512 [ 903.894490][T15207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.902357][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2737'. [ 903.907665][T15207] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 903.924750][T15119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.021064][T15207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 904.053621][T15207] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 904.067837][T15119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.107160][T13857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.215394][T15049] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.232684][T15049] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.249723][T15049] bridge_slave_0: entered allmulticast mode [ 904.262775][T15049] bridge_slave_0: entered promiscuous mode [ 904.298223][T15049] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.312628][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.331626][T15049] bridge_slave_1: entered allmulticast mode [ 904.345891][T15049] bridge_slave_1: entered promiscuous mode [ 905.208241][T15049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.394300][T15049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.535343][T15049] team0: Port device team_slave_0 added [ 905.546983][T15049] team0: Port device team_slave_1 added [ 905.632288][T15049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.676693][T15049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.702693][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.777256][T15049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.953052][T15049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.962371][T15049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.993568][T15049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.022988][T15234] netlink: 620 bytes leftover after parsing attributes in process `syz.2.2753'. [ 906.938056][T15049] hsr_slave_0: entered promiscuous mode [ 906.997363][T15049] hsr_slave_1: entered promiscuous mode [ 907.156401][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 907.199342][T15246] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.586963][T15049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 908.949880][T15049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 909.233101][T15266] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 909.284634][T15049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 909.420591][T15049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 909.537474][T15280] netlink: 620 bytes leftover after parsing attributes in process `syz.2.2762'. [ 909.652664][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 909.744365][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 909.937600][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 910.931307][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 910.948671][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 910.970054][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 910.995655][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 911.035524][T15294] loop0: detected capacity change from 0 to 256 [ 911.038625][T15049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.055489][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 911.117153][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 912.470764][T15049] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.490497][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.497758][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.655779][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.663038][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.893362][T15049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.722931][T15316] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 915.309064][T15049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.021301][T15358] __nla_validate_parse: 31 callbacks suppressed [ 917.021319][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 917.091424][T15049] veth0_vlan: entered promiscuous mode [ 917.114040][T15049] veth1_vlan: entered promiscuous mode [ 917.247601][T15049] veth0_macvtap: entered promiscuous mode [ 917.275353][T15049] veth1_macvtap: entered promiscuous mode [ 917.345164][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.381193][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.414680][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.440833][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.451416][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.473685][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.513066][T15049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.529932][T15342] loop0: detected capacity change from 0 to 40427 [ 917.566782][T15342] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 917.581388][T15049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.597880][T15342] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 917.626348][T15049] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.661303][T15049] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.701689][T15049] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.709389][T15342] F2FS-fs (loop0): Found nat_bits in checkpoint [ 917.741336][T15049] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.870557][T15342] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 917.932248][T15342] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 918.045282][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.076581][T15179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.094117][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.115661][T15179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.545124][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 918.822267][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 920.932190][T15408] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 921.201490][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 921.731663][T11702] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 921.817591][ T28] audit: type=1326 audit(2000000089.540:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15422 comm="syz.1.2788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43a7d9bf79 code=0x0 [ 921.972258][T11702] usb 1-1: Using ep0 maxpacket: 16 [ 922.027568][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'. [ 922.081526][T11702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 922.111572][T11702] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 922.132251][T11702] usb 1-1: can't read configurations, error -71 [ 922.838178][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 923.993161][T15458] loop0: detected capacity change from 0 to 256 [ 924.002905][T15458] exfat: Unknown parameter '18446744073709551615ÿÿ' [ 925.079511][T15464] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 925.288921][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 926.052250][ T2128] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 926.271448][ T2128] usb 1-1: Using ep0 maxpacket: 16 [ 927.104844][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 927.166674][ T2128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 927.221178][ T2128] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 927.228836][ T2128] usb 1-1: can't read configurations, error -71 [ 928.839936][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'. [ 929.166950][ T28] audit: type=1326 audit(2000000096.890:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 929.256313][T15517] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2809'. [ 929.304021][ T28] audit: type=1326 audit(2000000096.910:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 929.358475][ T28] audit: type=1326 audit(2000000096.930:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 929.977841][T15524] 9pnet: Could not find request transport: tcp*por0000000004e22 [ 930.050053][ T28] audit: type=1326 audit(2000000096.940:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 930.161192][ T28] audit: type=1326 audit(2000000096.940:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 930.181693][T15530] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2811'. [ 930.231199][ T28] audit: type=1326 audit(2000000096.940:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 930.288197][ T28] audit: type=1326 audit(2000000096.940:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 930.364577][ T28] audit: type=1326 audit(2000000096.940:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 930.413263][ T28] audit: type=1326 audit(2000000096.940:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 930.467789][T15536] netlink: 'syz.5.2813': attribute type 4 has an invalid length. [ 930.491659][ T28] audit: type=1326 audit(2000000096.940:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11f8f9bf79 code=0x7ffc0000 [ 930.523349][T15536] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2813'. [ 930.850207][T15063] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 931.132105][T15063] usb 6-1: Using ep0 maxpacket: 32 [ 931.364087][T15063] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 931.388107][T15063] usb 6-1: config 0 has no interface number 0 [ 931.399622][T15063] usb 6-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 12320, setting to 1024 [ 931.434091][T15063] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 931.472846][T15063] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 931.501311][T15063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.509674][T15063] usb 6-1: Product: syz [ 931.536590][T15063] usb 6-1: Manufacturer: syz [ 931.552043][T15063] usb 6-1: SerialNumber: syz [ 931.562559][T15063] usb 6-1: config 0 descriptor?? [ 931.568531][T15539] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 931.608839][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'. [ 931.671470][ T2128] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 931.816317][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.822947][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.852628][T15536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 931.871843][ T2128] usb 2-1: Using ep0 maxpacket: 16 [ 931.877601][T15556] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2819'. [ 931.903615][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2814'. [ 931.934017][ T2128] usb 2-1: unable to get BOS descriptor or descriptor too short [ 931.952316][ T2128] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 931.971547][ T2128] usb 2-1: can't read configurations, error -71 [ 933.374030][T15063] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 933.416278][T15573] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2821'. [ 933.431430][T15063] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 933.466255][T15063] asix: probe of 6-1:0.188 failed with error -61 [ 934.757656][T13742] usb 6-1: USB disconnect, device number 2 [ 935.052633][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'. [ 935.200199][T15601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2828'. [ 935.357390][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 935.385928][T15610] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2831'. [ 935.396280][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 935.422433][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 935.520470][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 935.542884][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 935.552896][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 935.572468][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 935.601359][T13742] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 936.601475][T13742] usb 6-1: Using ep0 maxpacket: 16 [ 936.620897][T13742] usb 6-1: unable to get BOS descriptor or descriptor too short [ 936.656650][T13742] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 936.676074][T13742] usb 6-1: can't read configurations, error -71 [ 937.430735][T15631] loop1: detected capacity change from 0 to 256 [ 937.505248][T15633] netlink: 'syz.5.2840': attribute type 72 has an invalid length. [ 937.597054][T15631] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 938.793383][T15641] loop1: detected capacity change from 0 to 16 [ 938.833185][T15641] erofs: (device loop1): mounted with root inode @ nid 36. [ 938.968555][T15641] syz.1.2842: attempt to access beyond end of device [ 938.968555][T15641] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 939.004288][T15641] syz.1.2842: attempt to access beyond end of device [ 939.004288][T15641] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 939.021284][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 939.034726][T15641] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 939.050472][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 939.050484][ T28] audit: type=1800 audit(2000000106.780:391): pid=15641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2842" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 939.137082][T15641] syz.1.2842 (15641) used greatest stack depth: 20336 bytes left [ 940.301978][T15662] __nla_validate_parse: 34 callbacks suppressed [ 940.301996][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 940.380770][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2846'. [ 940.445088][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.512764][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.544184][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.572069][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.595739][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.632281][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.681447][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.716666][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 940.762582][T15675] netlink: 'syz.2.2850': attribute type 72 has an invalid length. [ 941.889788][T15684] can: request_module (can-proto-0) failed. [ 943.146298][T15694] loop1: detected capacity change from 0 to 2048 [ 943.286973][T15694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.428812][T15694] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 944.632105][T15716] netlink: 'syz.0.2861': attribute type 72 has an invalid length. [ 944.719925][T12955] ------------[ cut here ]------------ [ 944.725589][T12955] kernel BUG at fs/ext4/inode.c:2603! [ 944.772720][T12955] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 944.778859][T12955] CPU: 0 PID: 12955 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 944.786523][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 944.796574][T12955] Workqueue: writeback wb_workfn (flush-7:1) [ 944.802568][T12955] RIP: 0010:ext4_do_writepages+0x398e/0x3990 [ 944.808547][T12955] Code: c1 03 38 c1 0f 8c 7d fd ff ff 4c 89 e7 e8 ea af ab ff e9 70 fd ff ff e8 f0 86 53 ff 0f 0b e8 e9 86 53 ff 0f 0b e8 e2 86 53 ff <0f> 0b 66 0f 1f 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 944.828151][T12955] RSP: 0018:ffffc90003496e80 EFLAGS: 00010293 [ 944.834302][T12955] RAX: ffffffff82338cbe RBX: 0000004210000000 RCX: ffff888073f79e00 [ 944.842275][T12955] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 944.850255][T12955] RBP: ffffc900034971f0 R08: ffff8880769c3257 R09: 1ffff1100ed3864a [ 944.858220][T12955] R10: dffffc0000000000 R11: ffffed100ed3864b R12: 0000000000000001 [ 944.866188][T12955] R13: ffff8880769c34b0 R14: 0000004000000000 R15: dffffc0000000000 [ 944.874160][T12955] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 944.883085][T12955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.889696][T12955] CR2: 00007f11f9d456b8 CR3: 000000002f07b000 CR4: 00000000003506f0 [ 944.897666][T12955] Call Trace: [ 944.900968][T12955] [ 944.903901][T12955] ? __stack_depot_save+0x1f/0x630 [ 944.909011][T12955] ? verify_lock_unused+0x140/0x140 [ 944.914203][T12955] ? __lock_acquire+0x1347/0x7d40 [ 944.919226][T12955] ? __kmem_cache_free+0xba/0x1e0 [ 944.924256][T12955] ? ieee80211_iface_work+0x717/0xc70 [ 944.929632][T12955] ? kthread+0x2fa/0x390 [ 944.933870][T12955] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 944.940806][T12955] ? rcu_read_lock_any_held+0xb4/0x140 [ 944.946256][T12955] ? __lock_acquire+0x1347/0x7d40 [ 944.951277][T12955] ext4_writepages+0x1dd/0x350 [ 944.956041][T12955] ? ext4_read_folio+0x2f0/0x2f0 [ 944.960974][T12955] ? __rwlock_init+0x150/0x150 [ 944.965742][T12955] ? do_raw_spin_unlock+0x121/0x230 [ 944.970946][T12955] ? ext4_read_folio+0x2f0/0x2f0 [ 944.975897][T12955] do_writepages+0x3b3/0x630 [ 944.980506][T12955] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 944.986227][T12955] ? writeback_sb_inodes+0x4b0/0xf50 [ 944.991510][T12955] ? __lock_acquire+0x7d40/0x7d40 [ 944.996529][T12955] ? do_raw_spin_lock+0x11f/0x2c0 [ 945.001552][T12955] __writeback_single_inode+0x153/0xec0 [ 945.007101][T12955] writeback_sb_inodes+0x7cd/0xf50 [ 945.012210][T12955] ? move_expired_inodes+0x321/0x730 [ 945.017596][T12955] ? queue_io+0x550/0x550 [ 945.021928][T12955] ? rcu_is_watching+0x15/0xb0 [ 945.026689][T12955] wb_writeback+0x46a/0xbf0 [ 945.031197][T12955] ? queue_io+0x351/0x550 [ 945.035527][T12955] ? percpu_ref_tryget+0x250/0x250 [ 945.040633][T12955] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 945.046618][T12955] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.051815][T12955] wb_workfn+0x400/0xe60 [ 945.056146][T12955] ? inode_wait_for_writeback+0x230/0x230 [ 945.061863][T12955] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 945.067837][T12955] ? read_lock_is_recursive+0x20/0x20 [ 945.073310][T12955] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.078513][T12955] ? process_scheduled_works+0x96f/0x15d0 [ 945.084228][T12955] ? process_scheduled_works+0x96f/0x15d0 [ 945.089960][T12955] process_scheduled_works+0xa5d/0x15d0 [ 945.095531][T12955] ? assign_work+0x430/0x430 [ 945.100116][T12955] ? assign_work+0x3d0/0x430 [ 945.104713][T12955] worker_thread+0xa55/0xfc0 [ 945.109314][T12955] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 945.115222][T12955] ? _raw_spin_unlock+0x40/0x40 [ 945.120085][T12955] kthread+0x2fa/0x390 [ 945.124152][T12955] ? pr_cont_work+0x560/0x560 [ 945.128827][T12955] ? kthread_blkcg+0xd0/0xd0 [ 945.133411][T12955] ret_from_fork+0x48/0x80 [ 945.137833][T12955] ? kthread_blkcg+0xd0/0xd0 [ 945.142442][T12955] ret_from_fork_asm+0x11/0x20 [ 945.147216][T12955] [ 945.150228][T12955] Modules linked in: [ 945.791182][T12955] ---[ end trace 0000000000000000 ]--- [ 945.813767][T12955] RIP: 0010:ext4_do_writepages+0x398e/0x3990 [ 945.830327][T12955] Code: c1 03 38 c1 0f 8c 7d fd ff ff 4c 89 e7 e8 ea af ab ff e9 70 fd ff ff e8 f0 86 53 ff 0f 0b e8 e9 86 53 ff 0f 0b e8 e2 86 53 ff <0f> 0b 66 0f 1f 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 945.903784][T12955] RSP: 0018:ffffc90003496e80 EFLAGS: 00010293 [ 945.923681][T12955] RAX: ffffffff82338cbe RBX: 0000004210000000 RCX: ffff888073f79e00 [ 945.952095][T12955] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 945.977063][T12955] RBP: ffffc900034971f0 R08: ffff8880769c3257 R09: 1ffff1100ed3864a [ 946.044430][T12955] R10: dffffc0000000000 R11: ffffed100ed3864b R12: 0000000000000001 [ 946.067491][T12955] R13: ffff8880769c34b0 R14: 0000004000000000 R15: dffffc0000000000 [ 946.084482][T12955] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 946.141320][T12955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.149409][T12955] CR2: 00007f1a166a8e9c CR3: 000000000cf32000 CR4: 00000000003506f0 [ 946.211136][T12955] Kernel panic - not syncing: Fatal exception [ 946.217671][T12955] Kernel Offset: disabled [ 946.221997][T12955] Rebooting in 86400 seconds..