last executing test programs: 10.664321978s ago: executing program 2 (id=166): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0xa, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c80)={r1, &(0x7f0000000b80)}, 0x20) 10.03807766s ago: executing program 1 (id=169): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 10.0375566s ago: executing program 2 (id=170): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x0, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x1, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) unshare(0x2a020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.705825417s ago: executing program 1 (id=172): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) 9.593256969s ago: executing program 2 (id=174): ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={{}, 0x0, 0x0, 0x63aa126f, 0x2, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") creat(0x0, 0x182) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x480c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x13, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000040, &(0x7f00000079c0)=ANY=[], 0xfe, 0xc2d, &(0x7f0000000f40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 8.104108387s ago: executing program 1 (id=179): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 5.953053458s ago: executing program 3 (id=182): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 5.947549348s ago: executing program 1 (id=183): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000100)) io_uring_setup(0x206e, &(0x7f0000000240)={0x0, 0x1, 0x2, 0x0, 0x245}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x900) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="900000004800210628bd7000fcdbdf250a0088"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100004001000287}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000340)={0x8, 0x0, 0xc489, 0x0, 0x6, 0x4, 0xc, 0x8}, &(0x7f0000000380)={0x80, 0x9, 0x2b044a3b, 0xffffffffffffff1a, 0x8, 0x74, 0xa05, 0x6}, &(0x7f00000003c0)={0x2, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0xeaed, 0x7, 0x6}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x81]}, 0x8}) socket$inet6_sctp(0xa, 0x5, 0x84) 5.753957172s ago: executing program 2 (id=184): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) 5.707094603s ago: executing program 3 (id=186): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x678f40a9) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 4.982032006s ago: executing program 3 (id=187): socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$inet6(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) 4.734009691s ago: executing program 1 (id=189): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20f8ff"], 0x0, 0x0, 0x0, 0x0}) 4.593727314s ago: executing program 4 (id=191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x8001, 0x8, 0x7ff, 0x9c3e, r2}, &(0x7f0000000180)=0x10) 4.480885236s ago: executing program 0 (id=192): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56149, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x60}, {0xffff, 0xffff}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.349837388s ago: executing program 2 (id=193): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 4.064939194s ago: executing program 0 (id=194): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x80000, 0x2d63, 0x6c2, 0xffffffff, 0x0, 0x0, 0x0, 0x8}}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.290074868s ago: executing program 2 (id=195): syz_usb_connect(0x5, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x46, 0x36, 0x56, 0x8, 0x4b4, 0x8613, 0x958f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x6e, 0xa5}}]}}]}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@cgroup=r0, r0, 0x2f, 0x38, 0x4, @void, @void, @void, @value=r1}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={0x0}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1200000003200000", @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000a80), 0x29081, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 3.278184838s ago: executing program 4 (id=196): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 3.22203247s ago: executing program 3 (id=197): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x678f40a9) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 3.22178512s ago: executing program 0 (id=198): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 3.129915712s ago: executing program 4 (id=199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000059078ac141400e0000001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="581b2f68f9e3758cd55ab72c51e839aff6"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_open_dev$usbmon(0x0, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000b40)="0abc"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300"], 0x5c}}, 0x20000000) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000000002b000000e0000002000000000000000000000000000000000000000000000000000000000500000000000000000000000000000037d200000000000000000000000000000000000000000000000000000000000000000000000000000100200000000000070000000000000000000000000000000000040000000000000000a800000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb0800180009000000"], 0x10c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0) 3.028921144s ago: executing program 3 (id=200): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x140) 1.461019403s ago: executing program 0 (id=201): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x9}, {0xa, 0x4e1f, 0xfffffffd, @local, 0x94c}, r1}}, 0x48) 1.360403035s ago: executing program 4 (id=202): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eaf", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="350ed161", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="252caf3a209539dd4482324da34840047e322d094abd47ba796c5909ccd4e0046bb1cecbad790873c1e322ec988526e2dde59e7ff8a900c525297eea9df0d0bf652b6c78f435436a6ea7fef2d9effe14ba9d43db9cc558c50b7957a51d7e5bdec3a04a8df3113927462bd0027d86c1cc9fa13a3092e8bb88406aba1359947e1e77921c434c50461a14c4181a2dbb29e3509889c98bea7706731524d4384eba2975aef35fdf60aaf6e020ecce5bea413969fc1b26f1414ad72e997edae8c62952f17609b075a00977b79aae56b93d", 0xce}, {&(0x7f0000000380)}, {&(0x7f0000000cc0)="efec825407ea802f072bfe7a85c949d86af2f9eeea8379b7063a4fdf56cb7766e13663175c079ea01cc3429d50c76b62b6340f25355199f0fdfe2ba32bec0473f29540dc59b1498855cc19e8ae17ca16129504c4ab5f6e9b22ec046c7406ec5faf", 0x61}], 0x3}}], 0x3, 0x0) 1.276311157s ago: executing program 0 (id=203): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.213973947s ago: executing program 3 (id=204): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56149, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x60}, {0xffff, 0xffff}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.07564091s ago: executing program 4 (id=205): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 955.277863ms ago: executing program 0 (id=206): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010022) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010040", 0x7) 81.987469ms ago: executing program 1 (id=207): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00', @ANYRES8=0x0, @ANYBLOB="bda3eba9e7209cd8b0661877141c340d53748b641300fb6855a2b16dc00f63f603f1b7a0128bd59173e2a3c63320a0e7e8f8b0646e35b31c5fcc4065acc432d35802611c774a5056ee7d55818dd69423abe58733e879134e130be455cba7392df1994240c1f9303de080ca539e37479307ab8f55ac"], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 0s ago: executing program 4 (id=208): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x6, 0xc, 0x3, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d81, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x9, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x1, 0x80000009, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x9df, 0x78, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x1, 0x5, 0x6, 0x6, 0x7, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7abe, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x2, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x4, 0xff, 0x140, 0x2, 0x2, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0xffff, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x4, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0xa476, 0x5, 0x29, 0xfffe, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.211' (ED25519) to the list of known hosts. [ 72.442391][ T4255] cgroup: Unknown subsys name 'net' [ 72.550291][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.045590][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.638266][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.653918][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.661768][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.670758][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.671940][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.679894][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.686179][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.693444][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.701092][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.707198][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.714583][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.720938][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.728110][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.736060][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.745033][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.749398][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.756603][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.762401][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.770252][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.777417][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.791243][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.791508][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.798468][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.806073][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.812751][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.820027][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.834068][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.843055][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.894396][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.904085][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.380512][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 76.390864][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 76.408842][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 76.559520][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 76.583320][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 76.593773][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.601595][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.610171][ T4277] device bridge_slave_0 entered promiscuous mode [ 76.652549][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.659885][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.667910][ T4267] device bridge_slave_0 entered promiscuous mode [ 76.676502][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.684114][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.692062][ T4277] device bridge_slave_1 entered promiscuous mode [ 76.700320][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.707651][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.716011][ T4273] device bridge_slave_0 entered promiscuous mode [ 76.730739][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.737881][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.746042][ T4273] device bridge_slave_1 entered promiscuous mode [ 76.766794][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.774045][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.782132][ T4267] device bridge_slave_1 entered promiscuous mode [ 76.860014][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.871044][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.883141][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.901832][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.913553][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.924744][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.014517][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.021663][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.030701][ T4266] device bridge_slave_0 entered promiscuous mode [ 77.050105][ T4273] team0: Port device team_slave_0 added [ 77.057095][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.064616][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.072509][ T4276] device bridge_slave_0 entered promiscuous mode [ 77.084505][ T4267] team0: Port device team_slave_0 added [ 77.093330][ T4277] team0: Port device team_slave_0 added [ 77.099710][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.107492][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.115572][ T4266] device bridge_slave_1 entered promiscuous mode [ 77.124270][ T4273] team0: Port device team_slave_1 added [ 77.130243][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.137484][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.146120][ T4276] device bridge_slave_1 entered promiscuous mode [ 77.154498][ T4267] team0: Port device team_slave_1 added [ 77.170263][ T4277] team0: Port device team_slave_1 added [ 77.226904][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.237693][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.245039][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.271054][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.317020][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.326786][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.333948][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.360116][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.373209][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.383077][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.390138][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.416285][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.428079][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.435325][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.461592][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.487819][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.497663][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.504916][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.531124][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.543229][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.550429][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.576476][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.599211][ T4276] team0: Port device team_slave_0 added [ 77.631320][ T4276] team0: Port device team_slave_1 added [ 77.648146][ T4266] team0: Port device team_slave_0 added [ 77.694643][ T4266] team0: Port device team_slave_1 added [ 77.700878][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.707968][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.734103][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.758298][ T4277] device hsr_slave_0 entered promiscuous mode [ 77.765304][ T4277] device hsr_slave_1 entered promiscuous mode [ 77.788128][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.796070][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.822314][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.837371][ T4267] device hsr_slave_0 entered promiscuous mode [ 77.844919][ T4267] device hsr_slave_1 entered promiscuous mode [ 77.851644][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.859695][ T4267] Cannot create hsr debugfs directory [ 77.899698][ T4273] device hsr_slave_0 entered promiscuous mode [ 77.906802][ T4273] device hsr_slave_1 entered promiscuous mode [ 77.913395][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.921150][ T4273] Cannot create hsr debugfs directory [ 77.927686][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 77.927691][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 77.934118][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 77.939995][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 77.952920][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 77.955719][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.966368][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.992349][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.004756][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.011730][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.037842][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.173283][ T4276] device hsr_slave_0 entered promiscuous mode [ 78.180237][ T4276] device hsr_slave_1 entered promiscuous mode [ 78.186998][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.195107][ T4276] Cannot create hsr debugfs directory [ 78.219454][ T4266] device hsr_slave_0 entered promiscuous mode [ 78.226266][ T4266] device hsr_slave_1 entered promiscuous mode [ 78.232755][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.240725][ T4266] Cannot create hsr debugfs directory [ 78.512421][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.525230][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.539497][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.550627][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.609713][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.619312][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.634457][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.644115][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.725956][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.747610][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.779283][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.800800][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.871053][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.896785][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.926642][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.938832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.948997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.962690][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.984259][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.996010][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.005718][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.017588][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.037103][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.048429][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.058632][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.069490][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.079378][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.086685][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.096643][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.117981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.127846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.138430][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.145660][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.165763][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.204725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.214796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.223574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.235256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.247083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.260420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.269954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.288654][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.299568][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.319256][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.332282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.341327][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.371198][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.383018][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.393198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.402629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.412235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.421649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.430286][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.437517][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.448090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.475798][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.487907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.502744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.519107][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.526303][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.580612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.590151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.602006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.630463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.639871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.650168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.659931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.667847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.688305][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.697042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.709989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.719727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.737314][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.755735][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.776042][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.792628][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.802693][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.818398][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.830315][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.842607][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.849857][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.869041][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.878236][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.887438][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.894607][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.902852][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.939357][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.956507][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.967046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.978759][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.988985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.003934][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 80.010031][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 80.016153][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.022878][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 80.029132][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 80.030118][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.042111][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 80.050095][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.061180][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.070010][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.077193][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.091949][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.103059][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.117421][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.129375][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.141451][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.148660][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.162210][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.170817][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.180505][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.189479][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.196651][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.207628][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.232149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.241184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.249835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.259669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.268565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.278284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.287400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.297334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.306559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.317057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.326547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.347543][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.369933][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.388229][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.415090][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.429398][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.438385][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.449450][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.458876][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.473204][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.489305][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.496483][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.505852][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.515565][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.524667][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.546334][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.560829][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.597393][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.612135][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.622952][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.640167][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.667103][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.688658][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.702375][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.719796][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.729597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.740187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.749206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.762952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.773869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.781520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.857450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.874491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.904170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.934161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.954947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.981637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.995156][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.018441][ T4277] device veth0_vlan entered promiscuous mode [ 81.042140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.051425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.074798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.099694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.119878][ T4277] device veth1_vlan entered promiscuous mode [ 81.206846][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.216229][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.235192][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.243361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.274097][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.286033][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.308655][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.334843][ T4277] device veth0_macvtap entered promiscuous mode [ 81.374256][ T4277] device veth1_macvtap entered promiscuous mode [ 81.403455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.419468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.429298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.455928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.500225][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.517365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.532136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.545149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.574271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.586909][ T4273] device veth0_vlan entered promiscuous mode [ 81.608035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.621460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.651446][ T4273] device veth1_vlan entered promiscuous mode [ 81.666726][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.706570][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.724027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.745406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.760331][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.770321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.788058][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.797362][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.806185][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.816197][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.842509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.851302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.900856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.910134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.920026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.930218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.955728][ T4273] device veth0_macvtap entered promiscuous mode [ 81.970598][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.025801][ T4273] device veth1_macvtap entered promiscuous mode [ 82.035109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.044779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.062350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.071485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.084053][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 82.090121][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 82.090226][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 82.096247][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 82.096302][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 82.116087][ T4266] device veth0_vlan entered promiscuous mode [ 82.132420][ T4267] device veth0_vlan entered promiscuous mode [ 82.144048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.152405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.161595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.170772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.179997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.190008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.205592][ T4266] device veth1_vlan entered promiscuous mode [ 82.221244][ T4267] device veth1_vlan entered promiscuous mode [ 82.256530][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.267300][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.282464][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.290845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.299575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.307583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.316581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.325805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.334879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.344705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.352840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.363058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.417472][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.425925][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.428947][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.443233][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.444579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.460209][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.469758][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.478073][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.497385][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.512217][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.526077][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.533651][ T4276] device veth0_vlan entered promiscuous mode [ 82.547288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.556407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.566901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.576232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.595311][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.604911][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.614232][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.622981][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.645920][ T4276] device veth1_vlan entered promiscuous mode [ 82.657960][ T4266] device veth0_macvtap entered promiscuous mode [ 82.678405][ T4267] device veth0_macvtap entered promiscuous mode [ 82.685441][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.693491][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.694455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.710147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.719068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.737010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.758661][ T4266] device veth1_macvtap entered promiscuous mode [ 82.771164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.789924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.799131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.811544][ T4267] device veth1_macvtap entered promiscuous mode [ 82.841043][ T4276] device veth0_macvtap entered promiscuous mode [ 82.858106][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.871825][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.882444][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.896252][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.908455][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.931192][ T4276] device veth1_macvtap entered promiscuous mode [ 82.949823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.958400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.970010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.978631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.987997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.006097][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.022790][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.032914][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.048167][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.061992][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.072546][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.086276][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.107881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.125090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.139449][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.150974][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.174747][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.202859][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.221266][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.240799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.253631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 83.286143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.340866][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.390300][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.413830][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.424558][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.450272][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.460617][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.472192][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.495061][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.557753][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.606788][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.638448][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.652793][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.668547][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.679059][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.793377][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.802921][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.811810][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.821170][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.905227][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.950459][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.961156][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.990129][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.007539][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.019658][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.032403][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.053569][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.069643][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.095360][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.112607][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.135110][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.143056][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.153324][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.163992][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 84.170051][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 84.170668][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 84.176309][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 84.182083][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 84.222525][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.235425][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.245745][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.256412][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.266961][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.277612][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.287671][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.298325][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.310388][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.342910][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.352520][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.361906][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.371770][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.382563][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.409555][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.431844][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.444696][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.515795][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.637678][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.677984][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.699540][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.709561][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.726389][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.747050][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.779219][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.789103][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.835316][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.878461][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.879407][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.923061][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.978836][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.013257][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.056314][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.066329][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.102199][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.164189][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.603306][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 86.806106][ T127] cfg80211: failed to load regulatory.db [ 87.044757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.953731][ T4311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.153732][ T4311] usb 5-1: Using ep0 maxpacket: 16 [ 88.168959][ T4311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.224692][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.314414][ T4311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.354106][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.362765][ T4311] usb 5-1: Product: syz [ 88.404411][ T4311] usb 5-1: Manufacturer: syz [ 88.423823][ T4311] usb 5-1: SerialNumber: syz [ 88.698555][ T4311] usb 5-1: 0:2 : does not exist [ 88.730688][ T4311] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 88.871300][ T4311] usb 5-1: USB disconnect, device number 2 [ 89.132190][ T4438] affs: No valid root block on device nullb0 [ 89.137686][ T4437] loop3: detected capacity change from 0 to 8 [ 89.191777][ T4437] SQUASHFS error: xz decompression failed, data probably corrupt [ 89.206064][ T4437] SQUASHFS error: Failed to read block 0x108: -5 [ 89.212691][ T4437] SQUASHFS error: Unable to read metadata cache entry [106] [ 89.226106][ T4437] SQUASHFS error: Unable to read inode 0x11f [ 89.234585][ T4441] loop2: detected capacity change from 0 to 256 [ 89.259984][ T4272] Bluetooth: hci3: Malformed LE Event: 0x1b [ 89.348401][ T4441] FAT-fs (loop2): Directory bread(block 64) failed [ 89.367546][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.419665][ T4441] FAT-fs (loop2): Directory bread(block 65) failed [ 89.427707][ T4441] FAT-fs (loop2): Directory bread(block 66) failed [ 89.435196][ T4441] FAT-fs (loop2): Directory bread(block 67) failed [ 89.442080][ T4441] FAT-fs (loop2): Directory bread(block 68) failed [ 89.449589][ T4441] FAT-fs (loop2): Directory bread(block 69) failed [ 89.456568][ T4441] FAT-fs (loop2): Directory bread(block 70) failed [ 89.463154][ T4441] FAT-fs (loop2): Directory bread(block 71) failed [ 89.470882][ T4441] FAT-fs (loop2): Directory bread(block 72) failed [ 89.477757][ T4441] FAT-fs (loop2): Directory bread(block 73) failed [ 89.570241][ T4445] loop3: detected capacity change from 0 to 512 [ 89.583673][ T4445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.597741][ T4445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.666757][ T4445] EXT4-fs (loop3): 1 truncate cleaned up [ 89.681914][ T4447] loop4: detected capacity change from 0 to 1024 [ 89.685110][ T4445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.726173][ T4447] ======================================================= [ 89.726173][ T4447] WARNING: The mand mount option has been deprecated and [ 89.726173][ T4447] and is ignored by this kernel. Remove the mand [ 89.726173][ T4447] option from the mount to silence this warning. [ 89.726173][ T4447] ======================================================= [ 90.000010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.035941][ T4447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.418487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 90.426949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 90.435328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 90.443712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 90.452151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 91.081408][ T4464] loop2: detected capacity change from 0 to 128 [ 91.351523][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 91.358193][ T4462] befs: (nullb0): No write support. Marking filesystem read-only [ 91.372512][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 91.379816][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 91.409392][ T4462] befs: (nullb0): invalid magic header [ 92.591554][ T4472] loop4: detected capacity change from 0 to 40427 [ 92.670367][ T4472] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 92.678494][ T4472] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 92.690905][ T4472] F2FS-fs (loop4): invalid crc value [ 92.730461][ T4472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.810437][ T4472] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 92.817966][ T4472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.987970][ T4507] loop2: detected capacity change from 0 to 512 [ 94.738381][ T4507] EXT4-fs (loop2): Test dummy encryption mode enabled [ 94.765560][ T4507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.824723][ T4507] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.36: bad orphan inode 131083 [ 94.850224][ T4507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.098966][ T4507] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 95.116418][ T4517] loop4: detected capacity change from 0 to 4096 [ 95.356452][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 95.550729][ T4509] loop1: detected capacity change from 0 to 32768 [ 95.633201][ T4509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.35 (4509) [ 95.755517][ T4528] loop0: detected capacity change from 0 to 256 [ 95.812352][ T4509] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.840311][ T4509] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 95.854066][ T4267] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 95.886582][ T4267] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 95.905864][ T4509] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 95.964079][ T4509] BTRFS info (device loop1): use lzo compression, level 0 [ 95.971296][ T4509] BTRFS info (device loop1): using free space tree [ 96.053866][ T4345] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.303662][ T4345] usb 3-1: Using ep0 maxpacket: 16 [ 96.340479][ T4345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.185324][ T4345] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.223773][ T4345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.509429][ T4345] usb 3-1: Product: syz [ 97.564613][ T4345] usb 3-1: Manufacturer: syz [ 97.626905][ T4509] BTRFS error (device loop1): open_ctree failed: -12 [ 97.798576][ T4345] usb 3-1: SerialNumber: syz [ 97.824793][ T4345] usb 3-1: config 0 descriptor?? [ 97.904673][ T4345] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.917774][ T4345] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 99.514212][ T4345] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 100.110006][ T4582] loop4: detected capacity change from 0 to 131072 [ 100.197967][ T4582] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 100.206166][ T4582] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.247794][ T4582] F2FS-fs (loop4): invalid crc value [ 100.484972][ T4582] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.657840][ T4582] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.664984][ T4582] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 100.715671][ T4345] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 101.140218][ T4345] em28xx 3-1:0.0: board has no eeprom [ 101.465986][ T4345] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 101.486042][ T4345] em28xx 3-1:0.0: dvb set to bulk mode. [ 101.494071][ T4383] em28xx 3-1:0.0: Binding DVB extension [ 101.558882][ T4345] usb 3-1: USB disconnect, device number 2 [ 101.579589][ T4345] em28xx 3-1:0.0: Disconnecting em28xx [ 102.568672][ T4383] em28xx 3-1:0.0: Registering input extension [ 102.597893][ T4345] em28xx 3-1:0.0: Closing input extension [ 102.734663][ T4345] em28xx 3-1:0.0: Freeing device [ 102.824734][ T4610] loop1: detected capacity change from 0 to 2048 [ 102.881132][ T4610] NILFS (loop1): invalid segment: Magic number mismatch [ 102.909711][ T4610] NILFS (loop1): trying rollback from an earlier position [ 103.002312][ T4610] NILFS (loop1): recovery complete [ 103.046744][ T4614] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.053691][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.099829][ T4616] loop3: detected capacity change from 0 to 512 [ 103.103707][ T4345] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.310872][ T22] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 103.332363][ T22] usb 5-1: config 0 has no interface number 0 [ 103.363789][ T4616] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.377910][ T22] usb 5-1: config 0 interface 235 has no altsetting 0 [ 103.402538][ T4616] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.470957][ T22] usb 5-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 103.711050][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.931283][ T22] usb 5-1: Product: syz [ 103.990700][ T4616] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.61: corrupted inode contents [ 104.053631][ T22] usb 5-1: Manufacturer: syz [ 104.058307][ T22] usb 5-1: SerialNumber: syz [ 104.151511][ T22] usb 5-1: config 0 descriptor?? [ 104.161549][ T4345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.172788][ T4616] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz.3.61: mark_inode_dirty error [ 104.184418][ T4345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.198602][ T4345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.214798][ T4345] usb 3-1: Product: syz [ 104.219067][ T4345] usb 3-1: Manufacturer: syz [ 104.238997][ T4345] usb 3-1: SerialNumber: syz [ 104.265963][ T4616] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.61: corrupted inode contents [ 104.344773][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 104.435478][ T22] usb 5-1: USB disconnect, device number 3 [ 104.476414][ T4345] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 104.521842][ T4345] usb 3-1: USB disconnect, device number 3 [ 104.554484][ T4345] usblp0: removed [ 104.592326][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 104.670439][ T4632] loop0: detected capacity change from 0 to 256 [ 104.784194][ T4632] FAT-fs (loop0): Directory bread(block 64) failed [ 104.816206][ T4632] FAT-fs (loop0): Directory bread(block 65) failed [ 104.955015][ T4632] FAT-fs (loop0): Directory bread(block 66) failed [ 104.961683][ T4632] FAT-fs (loop0): Directory bread(block 67) failed [ 105.005292][ T4632] FAT-fs (loop0): Directory bread(block 68) failed [ 105.076814][ T4632] FAT-fs (loop0): Directory bread(block 69) failed [ 105.351814][ T4632] FAT-fs (loop0): Directory bread(block 70) failed [ 105.576482][ T4632] FAT-fs (loop0): Directory bread(block 71) failed [ 105.703887][ T4632] FAT-fs (loop0): Directory bread(block 72) failed [ 105.761358][ T4632] FAT-fs (loop0): Directory bread(block 73) failed [ 106.223808][ T4311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.090766][ T4665] loop4: detected capacity change from 0 to 256 [ 107.102693][ T4658] can: request_module (can-proto-0) failed. [ 107.113668][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 107.184180][ T4383] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.195026][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.242547][ T4311] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.271251][ T4665] FAT-fs (loop4): Directory bread(block 64) failed [ 107.288390][ T4665] FAT-fs (loop4): Directory bread(block 65) failed [ 107.295945][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.316770][ T4665] FAT-fs (loop4): Directory bread(block 66) failed [ 107.323462][ T4665] FAT-fs (loop4): Directory bread(block 67) failed [ 107.330537][ T4311] usb 3-1: Product: syz [ 107.346696][ T4311] usb 3-1: Manufacturer: syz [ 107.355573][ T4311] usb 3-1: SerialNumber: syz [ 107.363878][ T4665] FAT-fs (loop4): Directory bread(block 68) failed [ 107.370458][ T4665] FAT-fs (loop4): Directory bread(block 69) failed [ 107.380622][ T4311] usb 3-1: config 0 descriptor?? [ 107.398345][ T4311] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.413749][ T4383] usb 2-1: Using ep0 maxpacket: 32 [ 107.418213][ T4665] FAT-fs (loop4): Directory bread(block 70) failed [ 107.421052][ T4383] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 107.437429][ T4665] FAT-fs (loop4): Directory bread(block 71) failed [ 107.447478][ T4311] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 107.460524][ T4665] FAT-fs (loop4): Directory bread(block 72) failed [ 107.475686][ T4665] FAT-fs (loop4): Directory bread(block 73) failed [ 107.479541][ T4383] usb 2-1: config 0 has no interface number 0 [ 107.501090][ T4383] usb 2-1: config 0 interface 12 has no altsetting 0 [ 107.736862][ T4383] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 107.864346][ T4345] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 108.087546][ T4383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.203774][ T4383] usb 2-1: Product: syz [ 108.208100][ T4383] usb 2-1: Manufacturer: syz [ 108.238478][ T4383] usb 2-1: SerialNumber: syz [ 108.256299][ T4345] usb 1-1: config 1 interface 0 has no altsetting 0 [ 108.274808][ T4345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.292105][ T4383] usb 2-1: config 0 descriptor?? [ 108.307524][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.347408][ T4345] usb 1-1: Product: syz [ 108.373777][ T4345] usb 1-1: Manufacturer: syz [ 108.378484][ T4345] usb 1-1: SerialNumber: syz [ 108.553974][ T4311] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 108.638484][ T4311] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 108.659264][ T4311] em28xx 3-1:0.0: board has no eeprom [ 108.757146][ T4311] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.774031][ T4311] em28xx 3-1:0.0: dvb set to bulk mode. [ 108.818182][ T4311] em28xx 3-1:0.0: Binding DVB extension [ 109.539799][ T4345] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 109.728927][ T4383] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 109.753706][ T4383] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 109.757869][ T4311] em28xx 3-1:0.0: Registering input extension [ 109.761096][ T4383] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 109.761191][ T4383] f81534: probe of 2-1:0.12 failed with error -71 [ 109.807312][ T4691] loop3: detected capacity change from 0 to 1024 [ 109.829737][ T4383] usb 2-1: USB disconnect, device number 2 [ 109.859311][ T4311] usb 3-1: USB disconnect, device number 4 [ 109.870646][ T4311] em28xx 3-1:0.0: Disconnecting em28xx [ 109.899122][ T4311] em28xx 3-1:0.0: Closing input extension [ 109.909974][ T4691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.944354][ T4311] em28xx 3-1:0.0: Freeing device [ 110.007263][ T4696] loop2: detected capacity change from 0 to 128 [ 110.020619][ T4696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.058398][ T4696] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.110222][ T4696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.173451][ T4696] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.038985][ T4551] usb 1-1: USB disconnect, device number 2 [ 111.106370][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 111.116727][ T4551] usblp0: removed [ 111.161919][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 111.557544][ T4723] loop0: detected capacity change from 0 to 256 [ 111.642572][ T4727] tmpfs: Unknown parameter 'quota' [ 112.102158][ T4723] FAT-fs (loop0): Directory bread(block 64) failed [ 112.183789][ T4723] FAT-fs (loop0): Directory bread(block 65) failed [ 112.249550][ T4723] FAT-fs (loop0): Directory bread(block 66) failed [ 112.315328][ T4717] sctp: failed to load transform for md5: -4 [ 112.327386][ T4723] FAT-fs (loop0): Directory bread(block 67) failed [ 112.327555][ T4724] sctp: failed to load transform for md5: -4 [ 112.335116][ T4723] FAT-fs (loop0): Directory bread(block 68) failed [ 112.347838][ T4723] FAT-fs (loop0): Directory bread(block 69) failed [ 112.403488][ T4723] FAT-fs (loop0): Directory bread(block 70) failed [ 112.462787][ T4723] FAT-fs (loop0): Directory bread(block 71) failed [ 112.489972][ T4723] FAT-fs (loop0): Directory bread(block 72) failed [ 112.517090][ T4723] FAT-fs (loop0): Directory bread(block 73) failed [ 113.681172][ T4751] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.691770][ T4751] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.701097][ T4751] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.709886][ T4751] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.743730][ T4333] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.891952][ T4719] loop2: detected capacity change from 0 to 32768 [ 113.943877][ T4333] usb 5-1: Using ep0 maxpacket: 8 [ 113.953286][ T4333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.990504][ T4333] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 114.003658][ T4383] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.315440][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.395624][ T4383] usb 4-1: Using ep0 maxpacket: 16 [ 114.432083][ T4333] usb 5-1: config 0 descriptor?? [ 114.513306][ T4333] usb 5-1: Found UVC 0.00 device (05a9:2630) [ 114.562471][ T4333] usb 5-1: No valid video chain found. [ 115.650265][ T4551] usb 5-1: USB disconnect, device number 4 [ 115.656880][ T4383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 115.782334][ T4383] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.798633][ T4383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.814008][ T4383] usb 4-1: Product: syz [ 115.822390][ T4383] usb 4-1: Manufacturer: syz [ 115.843920][ T4383] usb 4-1: SerialNumber: syz [ 115.855698][ T4383] usb 4-1: config 0 descriptor?? [ 115.873911][ T4770] loop0: detected capacity change from 0 to 1024 [ 115.881562][ T4770] EXT4-fs: inline encryption not supported [ 115.893299][ T4770] EXT4-fs: Ignoring removed i_version option [ 115.925156][ T4383] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.943899][ T4383] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 115.988372][ T4770] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.99: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.017165][ T4770] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 116.073330][ T4770] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.99: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.120980][ T4770] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 116.153733][ T4770] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.99: Failed to acquire dquot type 0 [ 116.167618][ T4770] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 116.192710][ T4770] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.99: mark_inode_dirty error [ 116.239761][ T4770] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 116.271121][ T4770] EXT4-fs (loop0): 1 orphan inode deleted [ 116.285635][ T4295] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.317916][ T4770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.353008][ T4295] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 116.404996][ T4295] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:5: Failed to release dquot type 0 [ 116.587508][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 116.594723][ T4780] loop2: detected capacity change from 0 to 256 [ 116.603768][ T4276] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.631951][ T4276] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 116.642142][ T4383] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 116.692484][ T4276] EXT4-fs error (device loop0): ext4_quota_off:7122: inode #3: comm syz-executor: mark_inode_dirty error [ 116.713003][ T4780] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 117.014851][ T4780] exFAT-fs (loop2): error, invalid size(size(2) > aligned(9223372036854777344) [ 117.014851][ T4780] [ 117.028350][ T4787] loop4: detected capacity change from 0 to 16 [ 117.067498][ T4780] exFAT-fs (loop2): Filesystem has been set read-only [ 117.080653][ T4383] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 117.094927][ T4787] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 117.111874][ T4383] em28xx 4-1:0.0: board has no eeprom [ 118.553672][ T4383] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 118.561698][ T4383] em28xx 4-1:0.0: dvb set to bulk mode. [ 118.622725][ T4551] em28xx 4-1:0.0: Binding DVB extension [ 118.879028][ T4551] em28xx 4-1:0.0: Registering input extension [ 119.233130][ T4798] input: syz1 as /devices/virtual/input/input9 [ 119.349136][ T4785] loop0: detected capacity change from 0 to 32768 [ 119.515174][ T4551] usb 4-1: USB disconnect, device number 2 [ 119.543178][ T4551] em28xx 4-1:0.0: Disconnecting em28xx [ 119.590918][ T4551] em28xx 4-1:0.0: Closing input extension [ 119.710226][ T4551] em28xx 4-1:0.0: Freeing device [ 119.718083][ T4806] loop3: detected capacity change from 0 to 16 [ 119.730658][ T4785] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.746218][ T4806] erofs: (device loop3): mounted with root inode @ nid 36. [ 120.813447][ T4813] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 120.838091][ T4813] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 120.847459][ T4813] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 120.857170][ T4813] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 120.866536][ T4813] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 120.883816][ T4813] syz.3.110: attempt to access beyond end of device [ 120.883816][ T4813] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 120.899482][ T4813] syz.3.110: attempt to access beyond end of device [ 120.899482][ T4813] loop3: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 120.913542][ T4813] syz.3.110: attempt to access beyond end of device [ 120.913542][ T4813] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 120.927604][ T4813] syz.3.110: attempt to access beyond end of device [ 120.927604][ T4813] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 120.941820][ T4813] syz.3.110: attempt to access beyond end of device [ 120.941820][ T4813] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 121.508039][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 121.953779][ T4345] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.173669][ T4345] usb 1-1: Using ep0 maxpacket: 32 [ 122.180795][ T4345] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 122.237191][ T4345] usb 1-1: config 0 has no interface number 0 [ 122.264280][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 122.266985][ T4345] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 122.273103][ T4829] netlink: 660 bytes leftover after parsing attributes in process `syz.3.117'. [ 122.311523][ T4825] loop1: detected capacity change from 0 to 32768 [ 122.342219][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.369711][ T4825] (syz.1.115,4825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.383354][ T4345] usb 1-1: Product: syz [ 122.403931][ T4345] usb 1-1: Manufacturer: syz [ 122.408650][ T4345] usb 1-1: SerialNumber: syz [ 122.423740][ T4825] (syz.1.115,4825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.441055][ T4345] usb 1-1: config 0 descriptor?? [ 122.464058][ T4345] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 122.509163][ T4825] JBD2: Ignoring recovery information on journal [ 122.666626][ T4825] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 122.669306][ T4345] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.752927][ T4345] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.874476][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 192 [ 123.085518][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.093283][ T4551] usb 1-1: USB disconnect, device number 3 [ 123.103959][ T4551] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.161307][ T4551] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.193058][ T4551] quatech2 1-1:0.51: device disconnected [ 123.193102][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 124.514476][ T4878] loop0: detected capacity change from 0 to 1024 [ 124.830400][ T4878] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.903508][ T4878] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.459331][ T4921] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 2: comm syz.0.123: lblock 2 mapped to illegal pblock 2 (length 4) [ 125.885836][ T4925] netlink: 168 bytes leftover after parsing attributes in process `syz.1.135'. [ 127.694133][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 129.770815][ T4961] tmpfs: Unknown parameter 'quota' [ 130.828406][ T4942] loop3: detected capacity change from 0 to 32768 [ 130.839045][ T4272] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 130.921928][ T4970] befs: (nullb0): No write support. Marking filesystem read-only [ 130.939926][ T4970] befs: (nullb0): invalid magic header [ 131.023552][ T4970] loop1: detected capacity change from 0 to 128 [ 131.946455][ T4976] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 132.636623][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 132.887837][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894551][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.911725][ T4965] loop0: detected capacity change from 0 to 40427 [ 132.991808][ T4965] F2FS-fs (loop0): invalid crc value [ 133.031395][ T4986] loop4: detected capacity change from 0 to 2048 [ 133.045131][ T4965] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.233685][ T4992] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.266316][ T4965] F2FS-fs (loop0): Start checkpoint disabled! [ 133.332607][ T4994] ALSA: mixer_oss: invalid OSS volume '·h7' [ 133.374288][ T4965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 133.427004][ T27] audit: type=1800 audit(1757810241.131:2): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.138" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 133.548042][ T27] audit: type=1804 audit(1757810241.251:3): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.138" name="/newroot/23/file0/file1" dev="loop0" ino=10 res=1 errno=0 [ 134.004621][ T5009] befs: (nullb0): No write support. Marking filesystem read-only [ 134.021385][ T5009] befs: (nullb0): invalid magic header [ 134.127502][ T5009] loop1: detected capacity change from 0 to 128 [ 134.519460][ T5011] loop4: detected capacity change from 0 to 512 [ 134.630801][ T11] kworker/u4:1: attempt to access beyond end of device [ 134.630801][ T11] loop0: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 134.686542][ T11] kworker/u4:1: attempt to access beyond end of device [ 134.686542][ T11] loop0: rw=1, sector=53272, nr_sectors = 24 limit=40427 [ 134.731525][ T5011] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.154: bad orphan inode 11862016 [ 134.754728][ T5011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.798866][ T5011] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.814257][ T11] kworker/u4:1: attempt to access beyond end of device [ 134.814257][ T11] loop0: rw=1, sector=53304, nr_sectors = 24 limit=40427 [ 134.849023][ T11] kworker/u4:1: attempt to access beyond end of device [ 134.849023][ T11] loop0: rw=1, sector=53360, nr_sectors = 16 limit=40427 [ 134.904277][ T11] kworker/u4:1: attempt to access beyond end of device [ 134.904277][ T11] loop0: rw=1, sector=53408, nr_sectors = 16 limit=40427 [ 134.975293][ T11] kworker/u4:1: attempt to access beyond end of device [ 134.975293][ T11] loop0: rw=1, sector=53440, nr_sectors = 24 limit=40427 [ 135.013997][ T11] kworker/u4:1: attempt to access beyond end of device [ 135.013997][ T11] loop0: rw=1, sector=53496, nr_sectors = 16 limit=40427 [ 135.239325][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 135.241939][ T11] kworker/u4:1: attempt to access beyond end of device [ 135.241939][ T11] loop0: rw=1, sector=53544, nr_sectors = 32 limit=40427 [ 135.259793][ T11] kworker/u4:1: attempt to access beyond end of device [ 135.259793][ T11] loop0: rw=1, sector=53592, nr_sectors = 32 limit=40427 [ 135.289961][ T11] kworker/u4:1: attempt to access beyond end of device [ 135.289961][ T11] loop0: rw=1, sector=53632, nr_sectors = 32 limit=40427 [ 135.477602][ T5023] loop4: detected capacity change from 0 to 256 [ 135.723276][ T5023] FAT-fs (loop4): Directory bread(block 64) failed [ 135.777363][ T5023] FAT-fs (loop4): Directory bread(block 65) failed [ 135.822351][ T5023] FAT-fs (loop4): Directory bread(block 66) failed [ 135.843809][ T5023] FAT-fs (loop4): Directory bread(block 67) failed [ 135.893969][ T5023] FAT-fs (loop4): Directory bread(block 68) failed [ 135.900573][ T5023] FAT-fs (loop4): Directory bread(block 69) failed [ 135.944509][ T5023] FAT-fs (loop4): Directory bread(block 70) failed [ 135.945400][ T5029] loop3: detected capacity change from 0 to 512 [ 135.951377][ T5023] FAT-fs (loop4): Directory bread(block 71) failed [ 135.983968][ T5023] FAT-fs (loop4): Directory bread(block 72) failed [ 135.993882][ T5023] FAT-fs (loop4): Directory bread(block 73) failed [ 136.092438][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.113474][ T5029] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.127882][ T5033] loop2: detected capacity change from 0 to 128 [ 136.245033][ T5033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.325898][ T5033] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.085377][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 137.337354][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 137.629821][ T5049] loop3: detected capacity change from 0 to 256 [ 137.757553][ T5049] FAT-fs (loop3): Directory bread(block 64) failed [ 137.789564][ T5049] FAT-fs (loop3): Directory bread(block 65) failed [ 137.830427][ T5049] FAT-fs (loop3): Directory bread(block 66) failed [ 137.853776][ T5049] FAT-fs (loop3): Directory bread(block 67) failed [ 137.868358][ T5049] FAT-fs (loop3): Directory bread(block 68) failed [ 137.888483][ T5049] FAT-fs (loop3): Directory bread(block 69) failed [ 137.929596][ T5049] FAT-fs (loop3): Directory bread(block 70) failed [ 137.969987][ T5049] FAT-fs (loop3): Directory bread(block 71) failed [ 137.994824][ T5049] FAT-fs (loop3): Directory bread(block 72) failed [ 138.010129][ T5049] FAT-fs (loop3): Directory bread(block 73) failed [ 138.253762][ T4272] Bluetooth: Wrong link type (-22) [ 138.585731][ T5068] loop0: detected capacity change from 0 to 256 [ 138.675750][ T5069] loop2: detected capacity change from 0 to 512 [ 138.741006][ T5069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.791458][ T5069] EXT4-fs (loop2): 1 truncate cleaned up [ 138.797460][ T5069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.103094][ T5068] FAT-fs (loop0): Directory bread(block 64) failed [ 139.171066][ T5068] FAT-fs (loop0): Directory bread(block 65) failed [ 139.514055][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 139.523112][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 139.533015][ T48] Bluetooth: hci2: hardware error 0x00 [ 139.539171][ T5068] FAT-fs (loop0): Directory bread(block 66) failed [ 139.659147][ T5068] FAT-fs (loop0): Directory bread(block 67) failed [ 139.712933][ T5068] FAT-fs (loop0): Directory bread(block 68) failed [ 139.767418][ T5068] FAT-fs (loop0): Directory bread(block 69) failed [ 139.823968][ T5068] FAT-fs (loop0): Directory bread(block 70) failed [ 139.830567][ T5068] FAT-fs (loop0): Directory bread(block 71) failed [ 139.878673][ T5068] FAT-fs (loop0): Directory bread(block 72) failed [ 139.929637][ T5068] FAT-fs (loop0): Directory bread(block 73) failed [ 141.530023][ T5090] befs: (nullb0): No write support. Marking filesystem read-only [ 141.569142][ T5090] befs: (nullb0): invalid magic header [ 141.646682][ T5090] loop4: detected capacity change from 0 to 128 [ 141.694040][ T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 142.164561][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 142.235717][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.251074][ T5101] netlink: 116 bytes leftover after parsing attributes in process `syz.1.183'. [ 142.328730][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.336005][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.348507][ T5104] netlink: 'syz.4.185': attribute type 3 has an invalid length. [ 142.993465][ T5108] loop2: detected capacity change from 0 to 2048 [ 143.091933][ T5108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.132851][ T27] audit: type=1326 audit(1757810250.831:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5114 comm="syz.3.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3767d8eba9 code=0x0 [ 143.287834][ T5120] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.318574][ T5120] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 132 with error 28 [ 143.401109][ T5120] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.401109][ T5120] [ 143.420629][ T5120] EXT4-fs (loop2): Total free blocks count 0 [ 143.442799][ T5120] EXT4-fs (loop2): Free/Dirty block details [ 143.450635][ T5120] EXT4-fs (loop2): free_blocks=2415919104 [ 143.463119][ T5120] EXT4-fs (loop2): dirty_blocks=144 [ 143.471782][ T5120] EXT4-fs (loop2): Block reservation details [ 143.483206][ T5120] EXT4-fs (loop2): i_reserved_data_blocks=9 [ 143.483894][ T4551] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.552268][ T4880] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 143.684054][ T4551] usb 2-1: Using ep0 maxpacket: 32 [ 143.695565][ T4551] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 143.718265][ T4551] usb 2-1: config 0 has no interface number 0 [ 143.741594][ T4551] usb 2-1: config 0 interface 89 has no altsetting 0 [ 143.752524][ T4551] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 143.781592][ T4551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.803163][ T4551] usb 2-1: Product: syz [ 143.812442][ T4551] usb 2-1: Manufacturer: syz [ 143.820116][ T4551] usb 2-1: SerialNumber: syz [ 143.859475][ T4551] usb 2-1: config 0 descriptor?? [ 143.888064][ T4551] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 144.005691][ T4551] em28xx 2-1:0.89: Video interface 89 found: bulk [ 144.634509][ T4551] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 146.358558][ T5160] binder: 5149:5160 ioctl 40046205 0 returned -22 [ 146.471940][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.637429][ T4551] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 146.666023][ T4551] em28xx 2-1:0.89: board has no eeprom [ 146.693800][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 146.710608][ T22] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 146.734898][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.743049][ T22] usb 3-1: Product: syz [ 146.759062][ T22] usb 3-1: Manufacturer: syz [ 146.763808][ T4551] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 146.763832][ T4551] em28xx 2-1:0.89: analog set to bulk mode. [ 146.764564][ T4345] em28xx 2-1:0.89: Registering V4L2 extension [ 146.771325][ T22] usb 3-1: SerialNumber: syz [ 146.779654][ T4551] usb 2-1: USB disconnect, device number 3 [ 146.808742][ T22] usb 3-1: config 0 descriptor?? [ 146.824878][ T4551] em28xx 2-1:0.89: Disconnecting em28xx [ 146.826828][ T22] usbtest 3-1:0.0: FX2 device [ 146.843743][ T22] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 146.992407][ T4345] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 147.020930][ T4345] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 147.029360][ T4345] em28xx 2-1:0.89: No AC97 audio processor [ 147.066350][ T4345] usb 2-1: Decoder not found [ 147.084495][ T4345] em28xx 2-1:0.89: failed to create media graph [ 147.134789][ T4345] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 147.747023][ T5184] Bluetooth: MGMT ver 1.22 [ 147.989505][ T4326] usb 3-1: USB disconnect, device number 5 [ 147.992873][ T4345] em28xx 2-1:0.89: Registering snapshot button... [ 148.002380][ T5179] ================================================================== [ 148.010480][ T5179] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 148.017458][ T5179] Read of size 8 at addr ffff888079fc8738 by task v4l_id/5179 [ 148.025036][ T5179] [ 148.027398][ T5179] CPU: 0 PID: 5179 Comm: v4l_id Not tainted syzkaller #0 [ 148.034455][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.044562][ T5179] Call Trace: [ 148.047871][ T5179] [ 148.050827][ T5179] dump_stack_lvl+0x168/0x22e [ 148.055605][ T5179] ? __lock_acquire+0x7c50/0x7c50 [ 148.060681][ T5179] ? show_regs_print_info+0x12/0x12 [ 148.065918][ T5179] ? load_image+0x3b0/0x3b0 [ 148.070462][ T5179] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 148.075914][ T5179] ? __virt_addr_valid+0x188/0x540 [ 148.081041][ T5179] ? __virt_addr_valid+0x465/0x540 [ 148.086263][ T5179] ? v4l2_fh_open+0xc6/0x430 [ 148.090952][ T5179] print_report+0xa8/0x210 [ 148.095412][ T5179] kasan_report+0x10b/0x140 [ 148.099961][ T5179] ? v4l2_fh_open+0xc6/0x430 [ 148.104590][ T5179] v4l2_fh_open+0xc6/0x430 [ 148.109043][ T5179] em28xx_v4l2_open+0x152/0x990 [ 148.113931][ T5179] ? __lock_acquire+0x7c50/0x7c50 [ 148.119019][ T5179] v4l2_open+0x20b/0x360 [ 148.123314][ T5179] chrdev_open+0x597/0x670 [ 148.127796][ T5179] ? cd_forget+0x160/0x160 [ 148.132244][ T5179] ? tomoyo_file_open+0xe9/0x170 [ 148.137216][ T5179] ? fsnotify_perm+0x39b/0x550 [ 148.142011][ T5179] ? cd_forget+0x160/0x160 [ 148.146461][ T5179] do_dentry_open+0x7e9/0x10d0 [ 148.151264][ T5179] path_openat+0x25c6/0x2e70 [ 148.155884][ T5179] ? do_sys_openat2+0xcf/0x490 [ 148.160660][ T5179] ? __x64_sys_openat+0x135/0x160 [ 148.165754][ T5179] ? do_syscall_64+0x4c/0xa0 [ 148.170353][ T5179] ? do_filp_open+0x3c0/0x3c0 [ 148.175035][ T5179] do_filp_open+0x1c1/0x3c0 [ 148.179561][ T5179] ? vfs_tmpfile+0x480/0x480 [ 148.184159][ T5179] ? _raw_spin_unlock+0x24/0x40 [ 148.189019][ T5179] ? alloc_fd+0x58f/0x630 [ 148.193359][ T5179] do_sys_openat2+0x142/0x490 [ 148.198048][ T5179] ? up_read+0x20/0x20 [ 148.202126][ T5179] ? do_faccessat+0x681/0xa40 [ 148.206823][ T5179] ? kmem_cache_free+0xf7/0x290 [ 148.211700][ T5179] ? do_sys_open+0xe0/0xe0 [ 148.216130][ T5179] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 148.222129][ T5179] ? lock_chain_count+0x20/0x20 [ 148.227081][ T5179] __x64_sys_openat+0x135/0x160 [ 148.231942][ T5179] do_syscall_64+0x4c/0xa0 [ 148.236370][ T5179] ? clear_bhb_loop+0x60/0xb0 [ 148.241071][ T5179] ? clear_bhb_loop+0x60/0xb0 [ 148.245778][ T5179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.251719][ T5179] RIP: 0033:0x7f27bb6a7407 [ 148.256200][ T5179] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 148.275828][ T5179] RSP: 002b:00007fff0f879e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 148.284275][ T5179] RAX: ffffffffffffffda RBX: 00007f27bbe74880 RCX: 00007f27bb6a7407 [ 148.292270][ T5179] RDX: 0000000000000000 RSI: 00007fff0f87bf1c RDI: ffffffffffffff9c [ 148.300247][ T5179] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 148.308230][ T5179] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 148.316212][ T5179] R13: 00007fff0f87a090 R14: 00007f27bbfd3000 R15: 0000560162aef4d8 [ 148.324219][ T5179] [ 148.327244][ T5179] [ 148.329568][ T5179] Allocated by task 4345: [ 148.333893][ T5179] kasan_set_track+0x4b/0x70 [ 148.338500][ T5179] __kasan_kmalloc+0x8e/0xa0 [ 148.343106][ T5179] em28xx_v4l2_init+0x107/0x2e70 [ 148.348054][ T5179] em28xx_init_extension+0x118/0x1b0 [ 148.353366][ T5179] process_one_work+0x898/0x1160 [ 148.358308][ T5179] worker_thread+0xaa2/0x1250 [ 148.362986][ T5179] kthread+0x29d/0x330 [ 148.367068][ T5179] ret_from_fork+0x1f/0x30 [ 148.371494][ T5179] [ 148.373815][ T5179] Freed by task 4345: [ 148.377791][ T5179] kasan_set_track+0x4b/0x70 [ 148.382384][ T5179] kasan_save_free_info+0x2d/0x50 [ 148.387419][ T5179] ____kasan_slab_free+0x126/0x1e0 [ 148.392538][ T5179] slab_free_freelist_hook+0x131/0x1a0 [ 148.398021][ T5179] __kmem_cache_free+0xb6/0x1f0 [ 148.402874][ T5179] em28xx_v4l2_init+0x166c/0x2e70 [ 148.407900][ T5179] em28xx_init_extension+0x118/0x1b0 [ 148.413263][ T5179] process_one_work+0x898/0x1160 [ 148.418220][ T5179] worker_thread+0xaa2/0x1250 [ 148.422935][ T5179] kthread+0x29d/0x330 [ 148.427048][ T5179] ret_from_fork+0x1f/0x30 [ 148.431479][ T5179] [ 148.433801][ T5179] Last potentially related work creation: [ 148.439546][ T5179] kasan_save_stack+0x3a/0x60 [ 148.444240][ T5179] __kasan_record_aux_stack+0xb2/0xc0 [ 148.449627][ T5179] call_rcu+0x154/0x980 [ 148.453803][ T5179] generic_shutdown_super+0x130/0x340 [ 148.459183][ T5179] kill_block_super+0x7c/0xe0 [ 148.463864][ T5179] deactivate_locked_super+0x93/0xf0 [ 148.469151][ T5179] cleanup_mnt+0x463/0x4f0 [ 148.473582][ T5179] task_work_run+0x1ca/0x250 [ 148.478190][ T5179] exit_to_user_mode_loop+0xe6/0x110 [ 148.483484][ T5179] exit_to_user_mode_prepare+0xee/0x180 [ 148.489034][ T5179] syscall_exit_to_user_mode+0x16/0x40 [ 148.494503][ T5179] do_syscall_64+0x58/0xa0 [ 148.498932][ T5179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.504869][ T5179] [ 148.507227][ T5179] The buggy address belongs to the object at ffff888079fc8000 [ 148.507227][ T5179] which belongs to the cache kmalloc-8k of size 8192 [ 148.521306][ T5179] The buggy address is located 1848 bytes inside of [ 148.521306][ T5179] 8192-byte region [ffff888079fc8000, ffff888079fca000) [ 148.534798][ T5179] [ 148.537145][ T5179] The buggy address belongs to the physical page: [ 148.543596][ T5179] page:ffffea0001e7f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79fc8 [ 148.553770][ T5179] head:ffffea0001e7f200 order:3 compound_mapcount:0 compound_pincount:0 [ 148.562102][ T5179] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 148.570119][ T5179] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442280 [ 148.578714][ T5179] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 148.587321][ T5179] page dumped because: kasan: bad access detected [ 148.593755][ T5179] page_owner tracks the page as allocated [ 148.599480][ T5179] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4259, tgid 4259 (syz-executor), ts 72703578513, free_ts 64565785262 [ 148.620070][ T5179] post_alloc_hook+0x173/0x1a0 [ 148.624861][ T5179] get_page_from_freelist+0x1a26/0x1ac0 [ 148.630427][ T5179] __alloc_pages+0x1df/0x4e0 [ 148.635048][ T5179] alloc_slab_page+0x5d/0x160 [ 148.639766][ T5179] new_slab+0x87/0x2c0 [ 148.643851][ T5179] ___slab_alloc+0xbc6/0x1230 [ 148.648552][ T5179] __kmem_cache_alloc_node+0x1a0/0x260 [ 148.654018][ T5179] kmalloc_trace+0x26/0xe0 [ 148.658446][ T5179] tomoyo_init_log+0x1081/0x1f50 [ 148.663387][ T5179] tomoyo_supervisor+0x326/0x10b0 [ 148.668415][ T5179] tomoyo_env_perm+0x146/0x1e0 [ 148.673178][ T5179] tomoyo_find_next_domain+0x157a/0x1a40 [ 148.678840][ T5179] tomoyo_bprm_check_security+0x100/0x150 [ 148.684571][ T5179] security_bprm_check+0x5e/0x90 [ 148.689515][ T5179] bprm_execve+0xa77/0x18a0 [ 148.694025][ T5179] do_execveat_common+0x51b/0x6c0 [ 148.699588][ T5179] page last free stack trace: [ 148.704269][ T5179] free_unref_page_prepare+0x8b4/0x9a0 [ 148.709744][ T5179] free_unref_page+0x2e/0x3f0 [ 148.714453][ T5179] __unfreeze_partials+0x1a5/0x200 [ 148.719572][ T5179] put_cpu_partial+0x17c/0x250 [ 148.724342][ T5179] qlist_free_all+0x76/0xe0 [ 148.728859][ T5179] kasan_quarantine_reduce+0x144/0x160 [ 148.734324][ T5179] __kasan_slab_alloc+0x1e/0x80 [ 148.739182][ T5179] slab_post_alloc_hook+0x4b/0x480 [ 148.744302][ T5179] kmem_cache_alloc_lru+0x11a/0x2e0 [ 148.749511][ T5179] new_inode_pseudo+0x7e/0x1c0 [ 148.754279][ T5179] create_pipe_files+0x4b/0x700 [ 148.759141][ T5179] __do_pipe_flags+0x46/0x1f0 [ 148.763827][ T5179] do_pipe2+0x99/0x170 [ 148.767904][ T5179] __x64_sys_pipe2+0x56/0x60 [ 148.772530][ T5179] do_syscall_64+0x4c/0xa0 [ 148.776948][ T5179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.782864][ T5179] [ 148.785217][ T5179] Memory state around the buggy address: [ 148.790872][ T5179] ffff888079fc8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.798939][ T5179] ffff888079fc8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.807001][ T5179] >ffff888079fc8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.815056][ T5179] ^ [ 148.820941][ T5179] ffff888079fc8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.829000][ T5179] ffff888079fc8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.837076][ T5179] ================================================================== [ 148.845160][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.872877][ T4345] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input13 [ 148.929698][ T4345] em28xx 2-1:0.89: Remote control support is not available for this card. [ 148.958978][ T4551] em28xx 2-1:0.89: Closing input extension [ 148.978084][ T4551] em28xx 2-1:0.89: Deregistering snapshot button [ 148.981556][ T5188] loop1: detected capacity change from 0 to 256 [ 149.000241][ T5179] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.007503][ T5179] CPU: 0 PID: 5179 Comm: v4l_id Not tainted syzkaller #0 [ 149.014577][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.024655][ T5179] Call Trace: [ 149.027963][ T5179] [ 149.030923][ T5179] dump_stack_lvl+0x168/0x22e [ 149.035651][ T5179] ? memcpy+0x3c/0x60 [ 149.039689][ T5179] ? show_regs_print_info+0x12/0x12 [ 149.043425][ T5188] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 149.056894][ T5179] ? load_image+0x3b0/0x3b0 [ 149.061446][ T5179] panic+0x2c9/0x710 [ 149.065392][ T5179] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 149.071594][ T5179] ? bpf_jit_dump+0xd0/0xd0 [ 149.076140][ T5179] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 149.082075][ T5179] ? _raw_spin_unlock+0x40/0x40 [ 149.086981][ T5179] check_panic_on_warn+0x80/0xa0 [ 149.091956][ T5179] ? v4l2_fh_open+0xc6/0x430 [ 149.096629][ T5179] end_report+0x66/0x110 [ 149.100921][ T5179] kasan_report+0x118/0x140 [ 149.105472][ T5179] ? v4l2_fh_open+0xc6/0x430 [ 149.110108][ T5179] v4l2_fh_open+0xc6/0x430 [ 149.114553][ T5179] em28xx_v4l2_open+0x152/0x990 [ 149.119435][ T5179] ? __lock_acquire+0x7c50/0x7c50 [ 149.124516][ T5179] v4l2_open+0x20b/0x360 [ 149.128813][ T5179] chrdev_open+0x597/0x670 [ 149.133260][ T5179] ? cd_forget+0x160/0x160 [ 149.137705][ T5179] ? tomoyo_file_open+0xe9/0x170 [ 149.142683][ T5179] ? fsnotify_perm+0x39b/0x550 [ 149.147484][ T5179] ? cd_forget+0x160/0x160 [ 149.151929][ T5179] do_dentry_open+0x7e9/0x10d0 [ 149.156780][ T5179] path_openat+0x25c6/0x2e70 [ 149.161453][ T5179] ? do_sys_openat2+0xcf/0x490 [ 149.166262][ T5179] ? __x64_sys_openat+0x135/0x160 [ 149.171315][ T5179] ? do_syscall_64+0x4c/0xa0 [ 149.175944][ T5179] ? do_filp_open+0x3c0/0x3c0 [ 149.180678][ T5179] do_filp_open+0x1c1/0x3c0 [ 149.185207][ T5179] ? vfs_tmpfile+0x480/0x480 [ 149.189835][ T5179] ? _raw_spin_unlock+0x24/0x40 [ 149.194724][ T5179] ? alloc_fd+0x58f/0x630 [ 149.199092][ T5179] do_sys_openat2+0x142/0x490 [ 149.203799][ T5179] ? up_read+0x20/0x20 [ 149.207899][ T5179] ? do_faccessat+0x681/0xa40 [ 149.212615][ T5179] ? kmem_cache_free+0xf7/0x290 [ 149.217518][ T5179] ? do_sys_open+0xe0/0xe0 [ 149.221982][ T5179] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 149.228004][ T5179] ? lock_chain_count+0x20/0x20 [ 149.232896][ T5179] __x64_sys_openat+0x135/0x160 [ 149.237787][ T5179] do_syscall_64+0x4c/0xa0 [ 149.242237][ T5179] ? clear_bhb_loop+0x60/0xb0 [ 149.246945][ T5179] ? clear_bhb_loop+0x60/0xb0 [ 149.251658][ T5179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.257602][ T5179] RIP: 0033:0x7f27bb6a7407 [ 149.262050][ T5179] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 149.281871][ T5179] RSP: 002b:00007fff0f879e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 149.290325][ T5179] RAX: ffffffffffffffda RBX: 00007f27bbe74880 RCX: 00007f27bb6a7407 [ 149.298345][ T5179] RDX: 0000000000000000 RSI: 00007fff0f87bf1c RDI: ffffffffffffff9c [ 149.306346][ T5179] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 149.314345][ T5179] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 149.322358][ T5179] R13: 00007fff0f87a090 R14: 00007f27bbfd3000 R15: 0000560162aef4d8 [ 149.330393][ T5179] [ 149.333744][ T5179] Kernel Offset: disabled [ 149.338093][ T5179] Rebooting in 86400 seconds..