last executing test programs: 11.623289095s ago: executing program 4 (id=650): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x2) 11.213449531s ago: executing program 4 (id=655): syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0xf3, &(0x7f0000000500)=""/243}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="c93e073c6216dc420a1e1c7286", 0xd}], 0x1}}], 0x1, 0x8080) 10.896940896s ago: executing program 4 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006100)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d1902203007a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd2050000000000000068853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e668391bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf7f5de901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445478a3b71a5f06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fde037a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b6bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c20ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d10000000000000000736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b14746400", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0xa, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.640782786s ago: executing program 4 (id=665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020305030000000000000000000016b9080001000157a292deef9f8de86e8a15a7ff2c2d063b47220b936ff5a5d38147d7c4517e32f0f41e824ab9179b314ce51833eac60de2f2fde5fd2334587e8a417aaaf106e152d7751e49a2356f47c7254d0860446ca8653d944a58b2a844012961abaea8f2b5b678f28e5e4f4e078812b9e2c23205fa4818486ccaee2fb5fe2ba117d0555629867d27aec10ce27306aec1fc74027d897fc880a6eb46e4ebb15fb06e5880159f719f626148039903ca0b47bb54cd452f9c044d"], 0x1c}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 9.086003895s ago: executing program 4 (id=667): syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000005d40)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 8.865267689s ago: executing program 4 (id=669): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) 5.036564509s ago: executing program 3 (id=697): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0xdd52, 0x7, 0x40, 0x3}, 0x0, 0x2, 0x0, 0xc, 0x0, 0x1}}) 4.866150362s ago: executing program 3 (id=699): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2a, 0x354, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.690041381s ago: executing program 0 (id=704): r0 = semget(0x2, 0x2, 0x0) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000340)=""/126) 3.689775341s ago: executing program 0 (id=705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0, 0xfffffffffffffee5}], 0x1, 0x1, 0x0, 0x1a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.638436912s ago: executing program 1 (id=706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.487594034s ago: executing program 3 (id=708): socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 3.261999258s ago: executing program 1 (id=709): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/148, 0x1a, 0x94, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.150089499s ago: executing program 0 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, &(0x7f0000001680)=""/234, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001500)={0x1, 0x0, [{0x10000, 0x2b, &(0x7f00000014c0)=""/43}]}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r3}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2.918031613s ago: executing program 0 (id=712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf252800000008000300", @ANYRES32=r3, @ANYBLOB="24002d800500040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) 2.917742293s ago: executing program 1 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x3, "9142f2557f836662bdd2be1f755fe30000000000000000000000000000004c00", 0x32314247}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.846363685s ago: executing program 0 (id=714): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x40, 0x6, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x8, [{@multicast2, 0x4ae9fc87}, {@local, 0x2e6b}]}]}}}}}) mkdir(&(0x7f0000000200)='./file1\x00', 0x63) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000180)) 2.633966698s ago: executing program 2 (id=716): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 2.633771158s ago: executing program 0 (id=717): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001680)="f3", 0x1) syz_usb_disconnect(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) 1.500944526s ago: executing program 2 (id=718): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2a, 0x354, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.396723937s ago: executing program 3 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYRES8=r2]) 1.364341538s ago: executing program 1 (id=720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.157991241s ago: executing program 3 (id=721): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x240, 0x0, 0x0) 1.086485852s ago: executing program 3 (id=722): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r2, 0x121, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xf, 0xa}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x50, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x9bd, 0xfff9, 0x451, 0x2d67824b}, {0xf7, 0x2, 0x0, 0x6, 0x0, 0xff}, 0xfffffe47, 0x100, 0x363}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd790d71a72a7389}, @TCA_TBF_PRATE64={0xc, 0x5, 0x136a61a3059a0039}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb1cda9c01df52b}]}}]}, 0x7c}}, 0x4000) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 570.66759ms ago: executing program 2 (id=723): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 366.134114ms ago: executing program 2 (id=724): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0x100000001]}) 350.835134ms ago: executing program 2 (id=725): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000140)) 189.115146ms ago: executing program 2 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x7, 0x2, 0x2, 0x800002, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x40000, 0x7, 0x7f, 0x9, 0x1000000000400001, 0xfffffffffffffffd, 0x1002], 0x1, 0x3e0602}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0xfd, 0x4, 0x7, '\x00', 0x1765}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 125.642797ms ago: executing program 1 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0xdb}) 0s ago: executing program 1 (id=728): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): s ready [ 64.829686][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.839241][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.849055][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.858554][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.867459][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.876360][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.886189][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.896873][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.905390][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.913531][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.945851][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.957286][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.008823][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.020377][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.028786][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.039578][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.055852][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.063076][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.071768][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.081048][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.089982][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.097180][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.107793][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.142442][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.157221][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.171399][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.184587][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.194145][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.204459][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.216363][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.226965][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.240092][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.251415][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.259998][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.267099][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.278712][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.288836][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.299189][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.311619][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.347017][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.356946][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.365922][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.373044][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.381149][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.389972][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.398987][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.406104][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.414025][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.421498][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.429036][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.437686][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.446558][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.455342][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.464956][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.472029][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.480280][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.489752][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.513633][ T4167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.526281][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.545238][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.554603][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.564304][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.573061][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.582112][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.591023][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.599852][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.609389][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.620417][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.642087][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.653473][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.700688][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.710723][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.719389][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 65.730182][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.740117][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.749709][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.759536][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.768400][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.778060][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.787347][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.797172][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.803746][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 65.805875][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.819832][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.820765][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.837220][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.846116][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.856855][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.866251][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.883590][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 65.890123][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 65.895238][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.898198][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 65.917362][ T4173] device veth0_vlan entered promiscuous mode [ 65.939272][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.965992][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.981954][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.999178][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.010731][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.019914][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.028626][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.037118][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.045640][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.054854][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.064482][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.094493][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.110391][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.129959][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.137109][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.145711][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.154783][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.165258][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.172327][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.180840][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.199128][ T4173] device veth1_vlan entered promiscuous mode [ 66.222038][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.233430][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.242342][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.258964][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.269729][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.288458][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.321190][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.329763][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.339994][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.351176][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.361673][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.370112][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.404650][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.414814][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.424886][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.440373][ T4173] device veth0_macvtap entered promiscuous mode [ 66.454964][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.467139][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.479127][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.491758][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.500966][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.510335][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.520324][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.530380][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.541155][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.555380][ T4173] device veth1_macvtap entered promiscuous mode [ 66.606038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.615854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.627318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.644922][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.664716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.678945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.688205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.697824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.726549][ T4167] device veth0_vlan entered promiscuous mode [ 66.737516][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.758958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.772070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.795634][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.813746][ T4167] device veth1_vlan entered promiscuous mode [ 66.821073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.832667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.841796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.852185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.862103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.874513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.882003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.896957][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.906911][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917349][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.926810][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.954684][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.992073][ T4176] device veth0_vlan entered promiscuous mode [ 67.001789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.011038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.019861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.028788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.037721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.054141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.063543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.112142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.125016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.157911][ T4176] device veth1_vlan entered promiscuous mode [ 67.189170][ T4167] device veth0_macvtap entered promiscuous mode [ 67.208158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.217092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.225810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.238888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.247551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.259780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.268048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.285000][ T4172] device veth0_vlan entered promiscuous mode [ 67.298526][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.299916][ T4167] device veth1_macvtap entered promiscuous mode [ 67.310876][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.331476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.341966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.353749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.371727][ T4176] device veth0_macvtap entered promiscuous mode [ 67.389120][ T4176] device veth1_macvtap entered promiscuous mode [ 67.400263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.409476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.418979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.427115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.438806][ T4172] device veth1_vlan entered promiscuous mode [ 67.462343][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.475657][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.488869][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.505726][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.516789][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.527080][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.537932][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.549868][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.568775][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.578837][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.588191][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.597475][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.606856][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.615748][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.624775][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.632633][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.644779][ T4175] device veth0_vlan entered promiscuous mode [ 67.655635][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.666443][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.666557][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.684618][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.693317][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.712037][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.728049][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.738946][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.749724][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.761040][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.770994][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.780402][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.790820][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.799312][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 67.800443][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.814823][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.828145][ T4176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.838541][ T4176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.848351][ T4176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.857173][ T4176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.883161][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 67.893394][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.902209][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.921104][ T4172] device veth0_macvtap entered promiscuous mode [ 67.941847][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.951934][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.966098][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 67.973826][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 67.979954][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.989404][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 67.995480][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.012097][ T4175] device veth1_vlan entered promiscuous mode [ 68.022021][ T4172] device veth1_macvtap entered promiscuous mode [ 68.119878][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.140554][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.152659][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.170285][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.181430][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.200924][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.220625][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.231685][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.250237][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.261113][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.282937][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.294552][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.305308][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.316725][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.347387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.356979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.368223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.377353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.391878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.407394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.427935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.471683][ T4243] sg_write: data in/out 85/8 bytes for SCSI command 0xff-- guessing data in; [ 68.471683][ T4243] program syz.1.2 not setting count and/or reply_len properly [ 68.588411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.862805][ T4175] device veth0_macvtap entered promiscuous mode [ 69.149643][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.170958][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.180338][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.195781][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.252957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.261772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.285237][ T4175] device veth1_macvtap entered promiscuous mode [ 69.294760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.304224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.381869][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.392607][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.393783][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.412109][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.419636][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.430411][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.440854][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.451708][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.463267][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.474579][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.486665][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.511670][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.519913][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.530727][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.548918][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.559697][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.576795][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.587548][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.597983][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.608627][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.618576][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.629125][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.640695][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.664813][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.674230][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.686087][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.686530][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.694879][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.710985][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.720316][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.730187][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.747932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.755368][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.782719][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.800805][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.833468][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.863705][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.873612][ T2362] Bluetooth: hci0: command 0x0419 tx timeout [ 69.964877][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.973512][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.981552][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.027597][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.070321][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.110014][ T4249] loop1: detected capacity change from 0 to 32768 [ 70.121972][ T4244] Bluetooth: hci1: command 0x0419 tx timeout [ 70.128657][ T4244] Bluetooth: hci3: command 0x0419 tx timeout [ 70.135692][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.139790][ T4244] Bluetooth: hci2: command 0x0419 tx timeout [ 70.149195][ T4244] Bluetooth: hci4: command 0x0419 tx timeout [ 70.156872][ T4249] ======================================================= [ 70.156872][ T4249] WARNING: The mand mount option has been deprecated and [ 70.156872][ T4249] and is ignored by this kernel. Remove the mand [ 70.156872][ T4249] option from the mount to silence this warning. [ 70.156872][ T4249] ======================================================= [ 70.210146][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.254478][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.297400][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.354345][ T4249] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 70.379648][ T4249] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 70.425397][ T4251] loop0: detected capacity change from 0 to 32768 [ 70.438089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.486133][ T4249] process 'syz.1.7' launched './file0' with NULL argv: empty string added [ 70.504374][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.556559][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.579743][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.785913][ T4251] XFS (loop0): Mounting V5 Filesystem [ 71.656250][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.662994][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.759306][ T4251] XFS (loop0): Ending clean mount [ 71.873305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.882360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 71.891474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 71.900566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 71.909558][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.918659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.927742][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.936842][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.945846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.954955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.783065][ T4173] ocfs2: Unmounting device (7,1) on (node local) [ 73.185076][ T4167] XFS (loop0): Unmounting Filesystem [ 73.754154][ T4296] tipc: Started in network mode [ 73.759335][ T4296] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 73.769654][ T4296] tipc: Enabled bearer , priority 10 [ 74.686721][ T4298] loop3: detected capacity change from 0 to 2048 [ 74.745600][ T4301] loop1: detected capacity change from 0 to 1024 [ 74.883751][ T4207] tipc: Node number set to 1 [ 74.903471][ T4298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.944818][ T4301] EXT4-fs (loop1): inline encryption not supported [ 75.721196][ T26] audit: type=1800 audit(1744017456.889:2): pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 75.791520][ T4301] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 2: comm syz.1.8: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.889585][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 75.901691][ T4301] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 75.963210][ T4301] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 48: comm syz.1.8: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.995199][ T4309] loop4: detected capacity change from 0 to 8 [ 76.002521][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 76.013528][ T4301] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 76.022630][ T4301] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.8: Failed to acquire dquot type 0 [ 76.043690][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 76.050534][ T4301] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 76.082865][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 76.095313][ T4301] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.8: mark_inode_dirty error [ 76.123584][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 76.137098][ T4301] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 76.202973][ T4301] EXT4-fs (loop1): 1 orphan inode deleted [ 76.208934][ T4301] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,errors=remount-ro,data=ordered,inlinecrypt,. Quota mode: none. [ 76.238647][ T4288] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.284209][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 76.297810][ T4288] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 76.308354][ T4288] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:8: Failed to release dquot type 0 [ 76.336772][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 76.379006][ T4301] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm syz.1.8: Invalid inode table block 1 in block_group 0 [ 76.632961][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 76.639517][ T4301] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 76.685138][ T4323] loop4: detected capacity change from 0 to 32768 [ 77.128322][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 77.262386][ T4301] EXT4-fs error (device loop1): ext4_quota_off:6486: inode #3: comm syz.1.8: mark_inode_dirty error [ 77.296480][ T4301] EXT4-fs (loop1): Remounting filesystem read-only [ 77.441514][ T4323] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 77.538997][ T4323] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 77.801894][ T4333] loop0: detected capacity change from 0 to 32768 [ 77.884104][ T4333] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.21 (4333) [ 77.913203][ T4172] ocfs2: Unmounting device (7,4) on (node local) [ 77.942925][ T4333] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 77.951931][ T4333] BTRFS info (device loop0): enabling auto defrag [ 77.958711][ T4333] BTRFS info (device loop0): doing ref verification [ 77.965363][ T4333] BTRFS info (device loop0): use no compression [ 77.971649][ T4333] BTRFS info (device loop0): force clearing of disk cache [ 77.978921][ T4333] BTRFS info (device loop0): max_inline at 4096 [ 77.985224][ T4333] BTRFS info (device loop0): disabling free space tree [ 77.992221][ T4333] BTRFS info (device loop0): has skinny extents [ 78.061162][ T4320] loop3: detected capacity change from 0 to 32768 [ 78.199808][ T4337] loop1: detected capacity change from 0 to 32768 [ 78.271799][ T4320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.17 (4320) [ 78.333638][ T4337] XFS (loop1): Mounting V5 Filesystem [ 78.395093][ T4320] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 78.486198][ T4320] BTRFS info (device loop3): using free space tree [ 78.494679][ T4333] BTRFS info (device loop0): enabling ssd optimizations [ 78.507043][ T4333] BTRFS info (device loop0): clearing free space tree [ 78.514636][ T4333] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.525189][ T4333] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.527875][ T4320] BTRFS info (device loop3): has skinny extents [ 78.559909][ T4337] XFS (loop1): Ending clean mount [ 80.334059][ T26] audit: type=1800 audit(1744017460.419:3): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 80.364626][ T26] audit: type=1800 audit(1744017461.449:4): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 80.935259][ T4173] XFS (loop1): Unmounting Filesystem [ 80.971785][ T4320] BTRFS error (device loop3): open_ctree failed: -12 [ 82.142950][ T4401] tipc: Started in network mode [ 82.147888][ T4401] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.157218][ T4401] tipc: Enabled bearer , priority 10 [ 82.491955][ T4400] loop4: detected capacity change from 0 to 8 [ 82.501503][ T1107] cfg80211: failed to load regulatory.db [ 82.935565][ T4406] loop2: detected capacity change from 0 to 2048 [ 83.426814][ T4406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.453891][ T1326] tipc: Node number set to 1 [ 83.511273][ T26] audit: type=1800 audit(1744017464.679:5): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.29" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 84.525490][ T4416] loop1: detected capacity change from 0 to 16 [ 84.981975][ T4416] erofs: (device loop1): mounted with root inode @ nid 36. [ 85.292214][ T4420] loop2: detected capacity change from 0 to 1024 [ 85.406898][ T4420] EXT4-fs (loop2): inline encryption not supported [ 85.783372][ T4423] loop0: detected capacity change from 0 to 32768 [ 85.807515][ T4429] overlayfs: workdir and upperdir must be separate subtrees [ 86.348817][ T4420] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 2: comm syz.2.32: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.384003][ T4423] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 86.407131][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 86.533391][ T4420] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 86.545496][ T4420] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 48: comm syz.2.32: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.570291][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 86.578011][ T4423] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 86.704549][ T4420] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 86.733163][ T4420] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.32: Failed to acquire dquot type 0 [ 87.063282][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 87.070003][ T4420] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 87.362236][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 87.418945][ T4420] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.32: mark_inode_dirty error [ 87.575683][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 87.684714][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 87.725118][ T4420] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 88.295714][ T4458] loop1: detected capacity change from 0 to 8 [ 88.303508][ T4420] EXT4-fs (loop2): 1 orphan inode deleted [ 88.315094][ T4420] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,noblock_validity,user_xattr,errors=remount-ro,data=ordered,inlinecrypt,. Quota mode: none. [ 88.348975][ T9] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.771536][ T9] EXT4-fs (loop2): Remounting filesystem read-only [ 88.794820][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 89.323595][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6220: comm kworker/u4:0: Failed to release dquot type 0 [ 89.337683][ T9] EXT4-fs (loop2): Remounting filesystem read-only [ 89.349789][ T4420] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.32: Invalid inode table block 1 in block_group 0 [ 89.463070][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 89.570712][ T4420] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 90.378413][ T4475] loop4: detected capacity change from 0 to 512 [ 90.397910][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 90.428335][ T4474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.45'. [ 90.446477][ T4420] EXT4-fs error (device loop2): ext4_quota_off:6486: inode #3: comm syz.2.32: mark_inode_dirty error [ 90.462965][ T4420] EXT4-fs (loop2): Remounting filesystem read-only [ 90.477284][ T4475] EXT4-fs (loop4): Ignoring removed oldalloc option [ 90.485242][ T4475] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.506281][ T4475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.593821][ T4475] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 90.610420][ T4475] EXT4-fs (loop4): 1 truncate cleaned up [ 90.623466][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 90.916883][ T4485] device bond1 entered promiscuous mode [ 91.134831][ T4494] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.356294][ T4495] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.548879][ T4499] loop4: detected capacity change from 0 to 64 [ 91.623390][ T4495] Zero length message leads to an empty skb [ 92.905524][ T4507] capability: warning: `syz.2.56' uses deprecated v2 capabilities in a way that may be insecure [ 92.959106][ T4509] loop1: detected capacity change from 0 to 8 [ 93.443083][ T4516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.596028][ T4518] loop2: detected capacity change from 0 to 8 [ 95.360805][ T4497] ODEBUG: Out of memory. ODEBUG disabled [ 95.466054][ T4511] SQUASHFS error: lzo decompression failed, data probably corrupt [ 95.516309][ T4511] SQUASHFS error: Failed to read block 0x71: -5 [ 95.551551][ T4511] SQUASHFS error: lzo decompression failed, data probably corrupt [ 95.589217][ T4511] SQUASHFS error: Failed to read block 0x71: -5 [ 95.682837][ T26] audit: type=1800 audit(1744017476.849:6): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.58" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 95.831875][ T4527] loop1: detected capacity change from 0 to 512 [ 96.053422][ T4530] loop4: detected capacity change from 0 to 128 [ 96.599841][ T4527] EXT4-fs (loop1): Ignoring removed oldalloc option [ 97.521147][ T4530] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 97.548164][ T4527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.561630][ T4530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.616810][ T4530] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 96) [ 97.744957][ T4527] EXT4-fs (loop1): 1 truncate cleaned up [ 97.745471][ T4527] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 99.189419][ T4553] loop4: detected capacity change from 0 to 8 [ 102.127551][ T4497] Set syz1 is full, maxelem 65536 reached [ 102.247116][ T4589] loop0: detected capacity change from 0 to 64 [ 102.614860][ T4593] loop0: detected capacity change from 0 to 512 [ 102.756436][ T4593] EXT4-fs (loop0): Ignoring removed oldalloc option [ 102.817014][ T4593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.043941][ T4593] EXT4-fs (loop0): 1 truncate cleaned up [ 103.120340][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 104.156082][ T4590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.802621][ T4601] loop2: detected capacity change from 0 to 128 [ 104.864862][ T4601] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.882792][ T4601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.918065][ T4601] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 96) [ 106.613442][ T4613] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.659341][ T4616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.86'. [ 107.752270][ T4616] syz.0.86 (4616) used greatest stack depth: 19672 bytes left [ 109.219803][ T4641] loop0: detected capacity change from 0 to 512 [ 109.321834][ T4641] EXT4-fs (loop0): Ignoring removed oldalloc option [ 109.378591][ T4641] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.452373][ T4641] EXT4-fs (loop0): 1 truncate cleaned up [ 109.467136][ T4641] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 110.252555][ T4656] loop1: detected capacity change from 0 to 128 [ 110.314440][ T4656] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 110.343625][ T4656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.385562][ T4656] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 96) [ 113.038489][ T4686] loop4: detected capacity change from 0 to 512 [ 113.297526][ T4686] EXT4-fs (loop4): Ignoring removed oldalloc option [ 113.309025][ T4686] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.632327][ T4686] EXT4-fs (loop4): 1 truncate cleaned up [ 113.684637][ T4686] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 115.036573][ T4701] loop3: detected capacity change from 0 to 128 [ 115.094034][ T4701] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 115.115264][ T4701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.153200][ T4701] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 96) [ 116.752323][ T4721] syz.3.115 uses obsolete (PF_INET,SOCK_PACKET) [ 119.477789][ T4737] loop0: detected capacity change from 0 to 32768 [ 119.576029][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 119.669898][ T4737] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 119.740711][ T4737] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 119.777881][ T4737] XFS (loop0): DAX and reflink cannot be used together! [ 120.499493][ T4757] loop4: detected capacity change from 0 to 128 [ 120.573227][ T4757] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 120.595824][ T4757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.632653][ T4757] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 96) [ 121.259466][ T4765] loop0: detected capacity change from 0 to 256 [ 121.420921][ T4765] FAT-fs (loop0): Directory bread(block 64) failed [ 121.563996][ T4765] FAT-fs (loop0): Directory bread(block 65) failed [ 121.618480][ T4765] FAT-fs (loop0): Directory bread(block 66) failed [ 121.816857][ T4765] FAT-fs (loop0): Directory bread(block 67) failed [ 121.984005][ T4765] FAT-fs (loop0): Directory bread(block 68) failed [ 122.166366][ T4765] FAT-fs (loop0): Directory bread(block 69) failed [ 122.186822][ T4765] FAT-fs (loop0): Directory bread(block 70) failed [ 122.209870][ T4765] FAT-fs (loop0): Directory bread(block 71) failed [ 122.229047][ T4765] FAT-fs (loop0): Directory bread(block 72) failed [ 122.259259][ T4765] FAT-fs (loop0): Directory bread(block 73) failed [ 122.423512][ T4390] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.853665][ T4782] netlink: 'syz.0.130': attribute type 4 has an invalid length. [ 123.672608][ T4782] syz.0.130 (4782) used greatest stack depth: 19064 bytes left [ 123.912010][ T4784] loop4: detected capacity change from 0 to 32768 [ 123.942426][ T4784] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.134 (4784) [ 124.005102][ T4390] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.032988][ T4390] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 124.051158][ T4390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.085961][ T4390] usb 2-1: config 0 descriptor?? [ 124.110369][ T4784] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 124.119272][ T4784] BTRFS info (device loop4): enabling auto defrag [ 124.125890][ T4784] BTRFS info (device loop4): doing ref verification [ 124.132516][ T4784] BTRFS info (device loop4): use no compression [ 124.138985][ T4784] BTRFS info (device loop4): force clearing of disk cache [ 124.146262][ T4784] BTRFS info (device loop4): max_inline at 4096 [ 124.151339][ T4390] pwc: Askey VC010 type 2 USB webcam detected. [ 124.152534][ T4784] BTRFS info (device loop4): disabling free space tree [ 124.152562][ T4784] BTRFS info (device loop4): has skinny extents [ 124.307132][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 124.461621][ T4390] pwc: send_video_command error -71 [ 124.473414][ T4390] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 124.483534][ T4390] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 124.495939][ T4390] usb 2-1: USB disconnect, device number 2 [ 125.254954][ T4784] BTRFS info (device loop4): enabling ssd optimizations [ 125.264682][ T4784] BTRFS info (device loop4): clearing free space tree [ 125.271609][ T4784] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.282166][ T4784] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.723164][ T26] audit: type=1800 audit(1744017507.899:7): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.134" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 127.050521][ T4784] sched: RT throttling activated [ 127.070453][ T4829] sctp: [Deprecated]: syz.2.139 (pid 4829) Use of int in max_burst socket option. [ 127.070453][ T4829] Use struct sctp_assoc_value instead [ 127.356934][ T26] audit: type=1800 audit(1744017508.529:8): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.134" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 128.797398][ T4851] loop3: detected capacity change from 0 to 8 [ 129.142125][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 130.390121][ T4870] device vlan2 entered promiscuous mode [ 130.432881][ T4870] device syz_tun entered promiscuous mode [ 131.559936][ T4892] loop3: detected capacity change from 0 to 8 [ 132.676574][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.682921][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.277608][ T4922] loop4: detected capacity change from 0 to 128 [ 133.668026][ T4922] EXT4-fs (loop4): Test dummy encryption mode enabled [ 133.699444][ T4922] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 133.739640][ T4922] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.796410][ T4918] loop3: detected capacity change from 0 to 32768 [ 134.848060][ T4944] loop0: detected capacity change from 0 to 8 [ 134.940595][ T4942] loop4: detected capacity change from 0 to 32768 [ 134.972938][ T4918] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.168 (4918) [ 135.214381][ T4918] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 135.232195][ T4918] BTRFS info (device loop3): enabling auto defrag [ 135.240158][ T4918] BTRFS info (device loop3): use no compression [ 135.267968][ T4918] BTRFS info (device loop3): force clearing of disk cache [ 135.288661][ T4918] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 135.302911][ T4918] BTRFS info (device loop3): trying to use backup root at mount time [ 135.331812][ T4918] BTRFS info (device loop3): max_inline at 4096 [ 135.378736][ T4918] BTRFS info (device loop3): disabling free space tree [ 135.426769][ T4918] BTRFS info (device loop3): has skinny extents [ 135.774678][ T4966] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.178'. [ 135.812980][ T4918] BTRFS info (device loop3): enabling ssd optimizations [ 135.823919][ T4918] BTRFS info (device loop3): clearing free space tree [ 135.839303][ T4918] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.851332][ T4918] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.603207][ T4997] loop1: detected capacity change from 0 to 64 [ 137.877756][ T5000] sg_write: data in/out 85/8 bytes for SCSI command 0xff-- guessing data in; [ 137.877756][ T5000] program syz.4.186 not setting count and/or reply_len properly [ 139.555931][ T5012] loop4: detected capacity change from 0 to 32768 [ 139.639789][ T5012] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.191 (5012) [ 139.755191][ T5012] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 139.764487][ T5012] BTRFS info (device loop4): enabling auto defrag [ 139.771751][ T5012] BTRFS info (device loop4): doing ref verification [ 139.778438][ T5012] BTRFS info (device loop4): use no compression [ 139.784838][ T5012] BTRFS info (device loop4): force clearing of disk cache [ 139.791996][ T5012] BTRFS info (device loop4): max_inline at 4096 [ 139.798291][ T5012] BTRFS info (device loop4): disabling free space tree [ 139.805222][ T5012] BTRFS info (device loop4): has skinny extents [ 140.139568][ T5012] BTRFS info (device loop4): enabling ssd optimizations [ 140.147906][ T5012] BTRFS info (device loop4): clearing free space tree [ 140.154785][ T5012] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.164607][ T5012] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.057621][ T26] audit: type=1800 audit(1744017522.849:9): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.191" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 142.155089][ T26] audit: type=1800 audit(1744017523.209:10): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.191" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 142.533041][ T4209] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 142.769082][ T5054] loop0: detected capacity change from 0 to 2048 [ 143.026691][ T5054] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.061904][ T4209] usb 4-1: config 1 interface 0 has no altsetting 0 [ 143.076980][ T4266] udevd[4266]: incorrect nilfs2 checksum on /dev/loop0 [ 143.209617][ T5064] sg_write: data in/out 85/8 bytes for SCSI command 0xff-- guessing data in; [ 143.209617][ T5064] program syz.2.200 not setting count and/or reply_len properly [ 143.560852][ T4209] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 144.285256][ T4209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.293378][ T4209] usb 4-1: Product: syz [ 144.298335][ T5063] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.299562][ T4209] usb 4-1: Manufacturer: syz [ 144.313591][ T4209] usb 4-1: SerialNumber: syz [ 144.351747][ T5068] loop2: detected capacity change from 0 to 64 [ 144.371486][ T5066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.610423][ T5054] syz.0.199 (5054) used greatest stack depth: 18800 bytes left [ 144.663877][ T5071] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.039930][ T4209] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 146.012454][ T4169] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 146.022821][ T4169] CPU: 1 PID: 4169 Comm: kworker/u5:1 Not tainted 5.15.179-syzkaller #0 [ 146.031179][ T4169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.041300][ T4169] Workqueue: hci1 hci_rx_work [ 146.046041][ T4169] Call Trace: [ 146.049336][ T4169] [ 146.052283][ T4169] dump_stack_lvl+0x1e3/0x2d0 [ 146.056986][ T4169] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 146.062640][ T4169] ? panic+0x860/0x860 [ 146.066728][ T4169] ? sysfs_create_dir_ns+0x282/0x390 [ 146.072035][ T4169] sysfs_create_dir_ns+0x2c6/0x390 [ 146.077172][ T4169] ? sysfs_warn_dup+0xa0/0xa0 [ 146.081871][ T4169] ? do_raw_spin_unlock+0x137/0x8b0 [ 146.087101][ T4169] kobject_add_internal+0x6e0/0xe00 [ 146.092325][ T4169] kobject_add+0x14e/0x210 [ 146.096835][ T4169] ? device_add+0x3c2/0xfd0 [ 146.101344][ T4169] ? kobject_init+0x1d0/0x1d0 [ 146.106025][ T4169] ? __raw_spin_lock_init+0x41/0x100 [ 146.111313][ T4169] ? get_device_parent+0x128/0x400 [ 146.116440][ T4169] device_add+0x476/0xfd0 [ 146.120780][ T4169] hci_conn_add_sysfs+0xe4/0x1f0 [ 146.125724][ T4169] le_conn_complete_evt+0xc15/0x1500 [ 146.131020][ T4169] ? cs_le_create_conn+0x5f0/0x5f0 [ 146.136146][ T4169] hci_le_meta_evt+0x28c/0x3f50 [ 146.141018][ T4169] ? __lock_acquire+0x1ff0/0x1ff0 [ 146.146044][ T4169] ? __mutex_lock_common+0x444/0x25a0 [ 146.151427][ T4169] ? hci_remote_host_features_evt+0x280/0x280 [ 146.157492][ T4169] ? __mutex_unlock_slowpath+0x218/0x750 [ 146.163121][ T4169] ? hci_event_packet+0x3b4/0x1550 [ 146.168235][ T4169] ? mutex_unlock+0x10/0x10 [ 146.172740][ T4169] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 146.178733][ T4169] ? print_irqtrace_events+0x210/0x210 [ 146.184191][ T4169] hci_event_packet+0xc41/0x1550 [ 146.189240][ T4169] ? rcu_lock_release+0x20/0x20 [ 146.194100][ T4169] ? hci_send_to_monitor+0x99/0x4d0 [ 146.199300][ T4169] hci_rx_work+0x237/0xa10 [ 146.203725][ T4169] process_one_work+0x8a1/0x10c0 [ 146.208717][ T4169] ? worker_detach_from_pool+0x260/0x260 [ 146.214366][ T4169] ? _raw_spin_lock_irqsave+0x120/0x120 [ 146.219949][ T4169] ? kthread_data+0x4e/0xc0 [ 146.224464][ T4169] ? wq_worker_running+0x97/0x170 [ 146.229494][ T4169] worker_thread+0xaca/0x1280 [ 146.234192][ T4169] kthread+0x3f6/0x4f0 [ 146.238258][ T4169] ? rcu_lock_release+0x20/0x20 [ 146.243106][ T4169] ? kthread_blkcg+0xd0/0xd0 [ 146.247693][ T4169] ret_from_fork+0x1f/0x30 [ 146.252121][ T4169] [ 146.256512][ T4169] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 146.269797][ T4169] Bluetooth: hci1: failed to register connection device [ 146.315753][ T5075] loop1: detected capacity change from 0 to 32768 [ 146.465970][ T5075] XFS (loop1): Mounting V5 Filesystem [ 146.551393][ T5075] XFS (loop1): Ending clean mount [ 146.571894][ T5075] XFS (loop1): Quotacheck needed: Please wait. [ 146.605195][ T2362] usb 4-1: USB disconnect, device number 2 [ 146.648621][ T2362] usblp0: removed [ 146.662282][ T5075] XFS (loop1): Quotacheck: Done. [ 146.900416][ T4173] XFS (loop1): Unmounting Filesystem [ 149.078868][ T5131] loop0: detected capacity change from 0 to 128 [ 149.267275][ T5131] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.289053][ T5131] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.988071][ T5133] loop3: detected capacity change from 0 to 4096 [ 150.624174][ T26] audit: type=1800 audit(1744017531.789:11): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.221" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 150.890982][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 151.530045][ T5158] loop1: detected capacity change from 0 to 512 [ 151.674265][ T5158] EXT4-fs (loop1): orphan cleanup on readonly fs [ 151.702346][ T5158] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 151.761482][ T5158] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 151.774795][ T5158] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.229: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 151.793736][ T5158] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.229: couldn't read orphan inode 13 (err -117) [ 151.811028][ T5158] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.673072][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 156.246500][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 156.909421][ T5221] loop1: detected capacity change from 0 to 164 [ 157.221402][ T5221] loop1: detected capacity change from 0 to 256 [ 157.324288][ T5221] FAT-fs (loop1): Directory bread(block 64) failed [ 157.331087][ T5221] FAT-fs (loop1): Directory bread(block 65) failed [ 157.338156][ T5221] FAT-fs (loop1): Directory bread(block 66) failed [ 157.345101][ T5221] FAT-fs (loop1): Directory bread(block 67) failed [ 157.352042][ T5221] FAT-fs (loop1): Directory bread(block 68) failed [ 157.358896][ T5221] FAT-fs (loop1): Directory bread(block 69) failed [ 157.366038][ T5221] FAT-fs (loop1): Directory bread(block 70) failed [ 157.372939][ T5221] FAT-fs (loop1): Directory bread(block 71) failed [ 157.379977][ T5221] FAT-fs (loop1): Directory bread(block 72) failed [ 157.386997][ T5221] FAT-fs (loop1): Directory bread(block 73) failed [ 158.406361][ T5127] Set syz1 is full, maxelem 65536 reached [ 158.505237][ T5233] loop4: detected capacity change from 0 to 256 [ 158.704872][ T5233] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 158.803516][ T5238] loop1: detected capacity change from 0 to 4096 [ 158.921588][ T5237] loop0: detected capacity change from 0 to 32768 [ 158.975415][ T5237] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.248 (5237) [ 158.999042][ T5238] NILFS (loop1): invalid segment: Checksum error in segment payload [ 159.145112][ T5238] NILFS (loop1): trying rollback from an earlier position [ 159.172292][ T5238] NILFS (loop1): recovery complete [ 159.180862][ T5237] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 159.189603][ T5237] BTRFS info (device loop0): enabling auto defrag [ 159.196107][ T5237] BTRFS info (device loop0): doing ref verification [ 159.202755][ T5237] BTRFS info (device loop0): use no compression [ 159.209073][ T5237] BTRFS info (device loop0): force clearing of disk cache [ 159.216348][ T5237] BTRFS info (device loop0): max_inline at 4096 [ 159.222620][ T5237] BTRFS info (device loop0): disabling free space tree [ 159.229793][ T5237] BTRFS info (device loop0): has skinny extents [ 160.010785][ T5244] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.088382][ T26] audit: type=1800 audit(1744017541.259:12): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.247" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 161.294894][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 162.352991][ T5237] BTRFS error (device loop0): open_ctree failed: -22 [ 164.864194][ T5311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 164.871199][ T5311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 164.880007][ T5311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 164.886406][ T5311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 164.893037][ T5311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 164.899402][ T5311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 164.905931][ T5311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 164.912288][ T5311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 164.918869][ T5311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 164.925276][ T5311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 165.052648][ T5314] loop2: detected capacity change from 0 to 512 [ 165.282358][ T5314] EXT4-fs (loop2): Ignoring removed oldalloc option [ 165.295154][ T5314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.352382][ T5314] EXT4-fs (loop2): 1 truncate cleaned up [ 165.380002][ T5314] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 165.593817][ T5321] loop4: detected capacity change from 0 to 32768 [ 165.636377][ T5321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.264 (5321) [ 165.654891][ T5321] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 165.663674][ T5321] BTRFS info (device loop4): enabling auto defrag [ 165.670124][ T5321] BTRFS info (device loop4): doing ref verification [ 165.677179][ T5321] BTRFS info (device loop4): use no compression [ 165.683799][ T5321] BTRFS info (device loop4): force clearing of disk cache [ 165.691062][ T5321] BTRFS info (device loop4): max_inline at 4096 [ 165.697383][ T5321] BTRFS info (device loop4): disabling free space tree [ 165.704407][ T5321] BTRFS info (device loop4): has skinny extents [ 165.720796][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 165.766436][ T5321] BTRFS info (device loop4): enabling ssd optimizations [ 165.776144][ T5321] BTRFS info (device loop4): clearing free space tree [ 165.783494][ T5321] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.793286][ T5321] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.365239][ T26] audit: type=1800 audit(1744017547.469:13): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.264" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 166.639219][ T26] audit: type=1800 audit(1744017547.509:14): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.264" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 167.298457][ T5369] loop3: detected capacity change from 0 to 256 [ 167.414087][ T5372] serio: Serial port ptm0 [ 167.420658][ T5369] exfat: Deprecated parameter 'utf8' [ 167.501074][ T5369] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 167.629551][ T5371] loop2: detected capacity change from 0 to 4096 [ 167.826356][ T5371] NILFS (loop2): invalid segment: Checksum error in segment payload [ 167.859159][ T5371] NILFS (loop2): trying rollback from an earlier position [ 167.905428][ T5371] NILFS (loop2): recovery complete [ 167.966916][ T5381] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.387663][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 169.131572][ T5397] loop4: detected capacity change from 0 to 128 [ 169.394178][ T5399] loop3: detected capacity change from 0 to 32768 [ 169.456430][ T5399] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.282 (5399) [ 169.520300][ T5397] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 169.539119][ T5397] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.542155][ T5399] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 169.558660][ T5399] BTRFS info (device loop3): enabling auto defrag [ 169.565178][ T5399] BTRFS info (device loop3): doing ref verification [ 169.572539][ T5399] BTRFS info (device loop3): use no compression [ 169.575467][ T26] audit: type=1800 audit(1744017550.719:15): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.271" name="bus" dev="loop4" ino=13 res=0 errno=0 [ 169.578901][ T5399] BTRFS info (device loop3): force clearing of disk cache [ 169.606155][ T5399] BTRFS info (device loop3): max_inline at 4096 [ 169.612425][ T5399] BTRFS info (device loop3): disabling free space tree [ 169.619289][ T5399] BTRFS info (device loop3): has skinny extents [ 171.247466][ T5399] BTRFS info (device loop3): enabling ssd optimizations [ 171.256107][ T5399] BTRFS info (device loop3): clearing free space tree [ 171.263010][ T5399] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.272660][ T5399] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.326538][ T26] audit: type=1800 audit(1744017553.099:16): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 172.535457][ T5451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.654170][ T26] audit: type=1800 audit(1744017553.099:17): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 173.130102][ T5459] netlink: 104 bytes leftover after parsing attributes in process `syz.0.290'. [ 174.603398][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 176.576002][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 180.582343][ T5533] loop4: detected capacity change from 0 to 128 [ 180.860417][ T5533] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 183.095948][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 186.294758][ T5467] Bluetooth: hci3: command 0x0406 tx timeout [ 186.302409][ T5467] Bluetooth: hci0: command 0x0406 tx timeout [ 186.310521][ T5467] Bluetooth: hci1: command 0x0406 tx timeout [ 186.511865][ T5467] Bluetooth: hci2: command 0x0406 tx timeout [ 187.002867][ T5467] Bluetooth: hci4: command 0x0406 tx timeout [ 188.907796][ T5602] loop2: detected capacity change from 0 to 512 [ 189.068576][ T5602] EXT4-fs (loop2): Ignoring removed oldalloc option [ 189.129013][ T5602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.196838][ T5602] EXT4-fs (loop2): 1 truncate cleaned up [ 189.205991][ T5602] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 189.399140][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 189.938698][ T5621] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.042105][ T5632] loop4: detected capacity change from 0 to 1764 [ 191.462758][ T5467] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.530521][ T5467] usb 4-1: Using ep0 maxpacket: 8 [ 192.779592][ T4288] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.808054][ T4288] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.850977][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 192.873161][ T5467] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 192.903549][ T5467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.911586][ T5467] usb 4-1: Product: syz [ 192.928705][ T5467] usb 4-1: Manufacturer: syz [ 192.934141][ T5467] usb 4-1: SerialNumber: syz [ 192.976172][ T5467] usb 4-1: config 0 descriptor?? [ 193.030578][ T5467] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 193.044496][ T5467] usb 4-1: setting power ON [ 193.050144][ T5467] dvb-usb: bulk message failed: -22 (2/0) [ 193.074384][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 193.087420][ T5467] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.123305][ T5467] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 193.132223][ T5467] usb 4-1: media controller created [ 193.180676][ T5467] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.252182][ T5624] dvb-usb: bulk message failed: -22 (3/0) [ 193.270205][ T5624] usb 4-1: gpio_write failed. [ 193.282817][ T5624] cxusb: i2c rd: len=99 is too big! [ 193.282817][ T5624] [ 193.302561][ T5654] cxusb: i2c rd: len=216 is too big! [ 193.302561][ T5654] [ 193.454375][ T5467] usb 4-1: selecting invalid altsetting 6 [ 193.460699][ T5467] usb 4-1: digital interface selection failed (-22) [ 193.467984][ T5467] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 193.513285][ T5467] usb 4-1: setting power OFF [ 193.520947][ T5467] dvb-usb: bulk message failed: -22 (2/0) [ 193.529173][ T5467] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 193.541248][ T5467] (NULL device *): no alternate interface [ 194.212347][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231112][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.320456][ T5467] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 194.375421][ T5467] usb 4-1: USB disconnect, device number 3 [ 194.849093][ T5467] Bluetooth: hci5: command 0x1003 tx timeout [ 194.864840][ T4180] Bluetooth: hci5: sending frame failed (-49) [ 194.888841][ T5664] loop0: detected capacity change from 0 to 512 [ 195.109542][ T5664] EXT4-fs (loop0): Ignoring removed oldalloc option [ 195.130299][ T5664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.230990][ T5671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.582290][ T5664] EXT4-fs (loop0): 1 truncate cleaned up [ 195.797944][ T5664] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 195.843833][ T5674] loop3: detected capacity change from 0 to 1024 [ 196.005381][ T5674] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.616759][ T5473] Bluetooth: hci5: command 0x1001 tx timeout [ 198.622925][ T4180] Bluetooth: hci5: sending frame failed (-49) [ 199.869208][ T5699] loop0: detected capacity change from 0 to 32768 [ 199.886236][ T5699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.353 (5699) [ 201.043785][ T5473] Bluetooth: hci5: command 0x1009 tx timeout [ 201.053017][ T5699] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 201.061695][ T5699] BTRFS info (device loop0): enabling auto defrag [ 201.068228][ T5699] BTRFS info (device loop0): doing ref verification [ 201.074856][ T5699] BTRFS info (device loop0): use no compression [ 201.081091][ T5699] BTRFS info (device loop0): force clearing of disk cache [ 201.088277][ T5699] BTRFS info (device loop0): max_inline at 4096 [ 201.094633][ T5699] BTRFS info (device loop0): disabling free space tree [ 201.101540][ T5699] BTRFS info (device loop0): has skinny extents [ 202.049734][ T5693] loop1: detected capacity change from 0 to 32768 [ 202.059691][ T5699] BTRFS info (device loop0): enabling ssd optimizations [ 202.068258][ T5699] BTRFS info (device loop0): clearing free space tree [ 202.075198][ T5699] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.085048][ T5699] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.127736][ T5693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.352 (5693) [ 202.340061][ T5693] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 203.064737][ T26] audit: type=1800 audit(1744017584.179:18): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 203.091517][ T5693] BTRFS info (device loop1): turning on async discard [ 203.132033][ T5693] BTRFS info (device loop1): using free space tree [ 203.182661][ T5693] BTRFS info (device loop1): has skinny extents [ 203.243136][ T26] audit: type=1800 audit(1744017584.229:19): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 204.926730][ T5693] BTRFS error (device loop1): open_ctree failed: -12 [ 205.073833][ T5766] loop4: detected capacity change from 0 to 512 [ 205.233496][ T5766] EXT4-fs (loop4): Ignoring removed oldalloc option [ 205.252949][ T5766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.441425][ T5766] EXT4-fs (loop4): 1 truncate cleaned up [ 205.447235][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 208.072851][ T4390] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.326723][ T4390] usb 2-1: Using ep0 maxpacket: 16 [ 208.592302][ T4390] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 208.608276][ T4390] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 208.619121][ T4390] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 208.632422][ T4390] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 209.020180][ T4390] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 209.177795][ T4390] usb 2-1: config 0 has no interface number 0 [ 209.372779][ T4390] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 210.308739][ T4390] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 210.319394][ T4390] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.330151][ T4390] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.203236][ T5820] netlink: 64 bytes leftover after parsing attributes in process `syz.3.376'. [ 212.215939][ T5815] loop2: detected capacity change from 0 to 512 [ 212.302407][ T4390] usb 2-1: config 0 interface 125 has no altsetting 0 [ 212.311456][ T4390] usb 2-1: config 0 interface 125 has no altsetting 2 [ 212.439376][ T5815] EXT4-fs (loop2): Ignoring removed oldalloc option [ 212.466526][ T5815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.887690][ T4390] usb 2-1: string descriptor 0 read error: -71 [ 212.929922][ T4390] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 212.962753][ T4390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.970387][ T5822] tmpfs: Unknown parameter 'quota' [ 212.981424][ T4390] usb 2-1: config 0 descriptor?? [ 212.994192][ T5815] EXT4-fs (loop2): 1 truncate cleaned up [ 213.000304][ T5832] loop9: detected capacity change from 0 to 7 [ 213.011001][ T4390] usb 2-1: can't set config #0, error -71 [ 213.014184][ T5815] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 213.018346][ T4390] usb 2-1: USB disconnect, device number 3 [ 213.059555][ T5832] Dev loop9: unable to read RDB block 7 [ 213.065664][ T5832] loop9: unable to read partition table [ 213.071438][ T5832] loop9: partition table beyond EOD, truncated [ 213.077651][ T5832] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 213.077651][ T5832] U) failed (rc=-5) [ 214.622968][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 215.482910][ T1110] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.502970][ T1110] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 215.518291][ T1110] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 215.528240][ T1110] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.543332][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.554606][ T1110] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 216.578997][ T1110] usb 5-1: USB disconnect, device number 2 [ 218.534047][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.886920][ T5873] loop1: detected capacity change from 0 to 32768 [ 218.982917][ T5879] loop3: detected capacity change from 0 to 512 [ 219.019995][ T5873] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.394 (5873) [ 219.150485][ T5879] EXT4-fs (loop3): Ignoring removed oldalloc option [ 219.157249][ T5873] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 219.166184][ T5873] BTRFS info (device loop1): enabling auto defrag [ 219.172600][ T5873] BTRFS info (device loop1): doing ref verification [ 219.179231][ T5873] BTRFS info (device loop1): use no compression [ 219.185505][ T5873] BTRFS info (device loop1): force clearing of disk cache [ 219.192829][ T5873] BTRFS info (device loop1): max_inline at 4096 [ 219.199090][ T5873] BTRFS info (device loop1): disabling free space tree [ 219.206030][ T5873] BTRFS info (device loop1): has skinny extents [ 219.265977][ T5884] loop2: detected capacity change from 0 to 256 [ 219.274624][ T5879] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.009299][ T5884] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 220.031908][ T5879] EXT4-fs (loop3): 1 truncate cleaned up [ 220.041125][ T5879] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 222.539349][ T5917] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 223.187559][ T5873] BTRFS error (device loop1): open_ctree failed: -12 [ 223.369817][ T4266] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4266) [ 224.663648][ T5934] loop3: detected capacity change from 0 to 1764 [ 226.600614][ T5950] loop3: detected capacity change from 0 to 4096 [ 226.684975][ T5950] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 227.729118][ T5965] loop4: detected capacity change from 0 to 512 [ 227.847375][ T5965] EXT4-fs (loop4): Ignoring removed oldalloc option [ 227.884560][ T5965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 228.221785][ T5965] EXT4-fs (loop4): 1 truncate cleaned up [ 228.390855][ T5965] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 228.891766][ T5978] loop3: detected capacity change from 0 to 32768 [ 228.964432][ T1326] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 228.973228][ T5961] loop0: detected capacity change from 0 to 32768 [ 229.448167][ T5961] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 229.487524][ T5961] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 229.649429][ T5978] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 229.658165][ T5978] BTRFS info (device loop3): enabling auto defrag [ 229.664697][ T5978] BTRFS info (device loop3): doing ref verification [ 229.671315][ T5978] BTRFS info (device loop3): use no compression [ 229.677666][ T5978] BTRFS info (device loop3): force clearing of disk cache [ 229.685651][ T5978] BTRFS info (device loop3): max_inline at 4096 [ 229.692298][ T5978] BTRFS info (device loop3): disabling free space tree [ 229.699719][ T5978] BTRFS info (device loop3): has skinny extents [ 229.799977][ T5961] overlayfs: upper fs does not support tmpfile. [ 229.814133][ T5961] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 229.821295][ T5961] overlayfs: failed to set xattr on upper [ 229.827229][ T5961] overlayfs: ...falling back to index=off,metacopy=off. [ 229.834315][ T5961] overlayfs: upper fs missing required features. [ 229.922589][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 229.958602][ T5991] loop2: detected capacity change from 0 to 32768 [ 229.984404][ T1326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.002607][ T1326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.013686][ T1326] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 230.015925][ T5991] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.420 (5991) [ 230.032735][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.059819][ T1326] usb 2-1: config 0 descriptor?? [ 230.436877][ T5998] loop4: detected capacity change from 0 to 32768 [ 230.469620][ T5978] BTRFS info (device loop3): enabling ssd optimizations [ 230.612546][ T6013] loop2: detected capacity change from 0 to 1024 [ 230.719935][ T5978] BTRFS info (device loop3): clearing free space tree [ 230.726918][ T5978] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.736613][ T5978] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.118045][ T26] audit: type=1800 audit(1744017612.229:20): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 231.310561][ T1326] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 231.318992][ T1326] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 231.330387][ T1326] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input9 [ 231.354743][ T5998] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.419 (5998) [ 231.402938][ T1326] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 231.403864][ T26] audit: type=1800 audit(1744017612.259:21): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 231.602129][ T1110] usb 2-1: USB disconnect, device number 4 [ 234.281182][ T6039] loop1: detected capacity change from 0 to 512 [ 234.536764][ T6039] EXT4-fs (loop1): Ignoring removed oldalloc option [ 234.569922][ T6039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 234.902092][ T6050] loop4: detected capacity change from 0 to 512 [ 235.053416][ T6039] EXT4-fs (loop1): 1 truncate cleaned up [ 235.071044][ T6039] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 235.473831][ T6050] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.548335][ T6050] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.642248][ T6050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.434: bg 0: block 18: invalid block bitmap [ 235.752996][ T6050] Quota error (device loop4): write_blk: dquota write failed [ 235.771505][ T6050] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 235.853699][ T6066] Quota error (device loop4): write_blk: dquota write failed [ 235.894265][ T6050] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.434: Failed to acquire dquot type 1 [ 235.894541][ T6068] loop0: detected capacity change from 0 to 32768 [ 235.915221][ T6066] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 235.925762][ T6066] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.434: Failed to acquire dquot type 1 [ 235.932803][ T5284] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.967741][ T6050] syz.4.434 (6050) used greatest stack depth: 18176 bytes left [ 236.012545][ T6068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.437 (6068) [ 236.035700][ T6072] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 236.128027][ T6068] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 236.137560][ T6068] BTRFS info (device loop0): enabling auto defrag [ 236.141834][ T6076] loop4: detected capacity change from 0 to 64 [ 236.144878][ T6068] BTRFS info (device loop0): doing ref verification [ 236.156900][ T6068] BTRFS info (device loop0): use no compression [ 236.163208][ T6068] BTRFS info (device loop0): force clearing of disk cache [ 236.170383][ T6068] BTRFS info (device loop0): max_inline at 4096 [ 236.178041][ T6068] BTRFS info (device loop0): disabling free space tree [ 236.184957][ T6068] BTRFS info (device loop0): has skinny extents [ 236.295030][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.439'. [ 236.483379][ T5284] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 236.538146][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.623202][ T5284] usb 4-1: Product: syz [ 236.756861][ T5284] usb 4-1: Manufacturer: syz [ 236.904936][ T5284] usb 4-1: SerialNumber: syz [ 236.926124][ T6068] BTRFS info (device loop0): enabling ssd optimizations [ 236.936380][ T6068] BTRFS info (device loop0): clearing free space tree [ 236.943322][ T6068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 236.953253][ T6068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.144843][ T5284] usb 4-1: config 0 descriptor?? [ 237.256035][ T6106] netlink: 116 bytes leftover after parsing attributes in process `syz.4.442'. [ 237.329048][ T5284] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 004 [ 237.863069][ T26] audit: type=1800 audit(1744017618.959:22): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.437" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 237.903345][ T5284] (null): failure reading functionality [ 238.083660][ T5284] i2c i2c-1: failure reading functionality [ 238.105501][ T5284] i2c i2c-1: connected i2c-tiny-usb device [ 238.145103][ T26] audit: type=1800 audit(1744017618.989:23): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.437" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 238.343864][ T5284] usb 4-1: USB disconnect, device number 4 [ 239.537560][ T6132] device syz_tun entered promiscuous mode [ 239.768037][ T6132] device batadv_slave_0 entered promiscuous mode [ 239.795015][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 239.885979][ T26] audit: type=1326 audit(1744017621.049:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7129a47169 code=0x7ffc0000 [ 240.653088][ T26] audit: type=1326 audit(1744017621.049:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7129a47169 code=0x7ffc0000 [ 240.859000][ T26] audit: type=1326 audit(1744017621.059:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f7129a47169 code=0x7ffc0000 [ 240.885983][ T26] audit: type=1326 audit(1744017621.059:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7129a47169 code=0x7ffc0000 [ 241.002814][ T26] audit: type=1326 audit(1744017621.059:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7129a47169 code=0x7ffc0000 [ 243.529946][ T6163] loop1: detected capacity change from 0 to 256 [ 243.702850][ T6163] FAT-fs (loop1): Directory bread(block 64) failed [ 243.854445][ T6163] FAT-fs (loop1): Directory bread(block 65) failed [ 243.861192][ T6163] FAT-fs (loop1): Directory bread(block 66) failed [ 243.872949][ T6163] FAT-fs (loop1): Directory bread(block 67) failed [ 243.883379][ T6163] FAT-fs (loop1): Directory bread(block 68) failed [ 243.890319][ T6163] FAT-fs (loop1): Directory bread(block 69) failed [ 243.897736][ T6163] FAT-fs (loop1): Directory bread(block 70) failed [ 243.904620][ T6163] FAT-fs (loop1): Directory bread(block 71) failed [ 243.921779][ T6163] FAT-fs (loop1): Directory bread(block 72) failed [ 243.928745][ T6163] FAT-fs (loop1): Directory bread(block 73) failed [ 244.111788][ T26] audit: type=1326 audit(1744017625.279:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c860a1169 code=0x7ffc0000 [ 244.214908][ T6171] netlink: 'syz.1.459': attribute type 4 has an invalid length. [ 244.952773][ T26] audit: type=1326 audit(1744017625.299:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6c860a1169 code=0x7ffc0000 [ 245.783097][ T26] audit: type=1326 audit(1744017625.309:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c860a1169 code=0x7ffc0000 [ 245.827657][ T26] audit: type=1326 audit(1744017625.309:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c8609fad0 code=0x7ffc0000 [ 246.196984][ T26] audit: type=1326 audit(1744017625.329:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c860a1169 code=0x7ffc0000 [ 246.219277][ T26] audit: type=1326 audit(1744017625.809:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c860a1169 code=0x7ffc0000 [ 246.405953][ T6181] loop4: detected capacity change from 0 to 32768 [ 246.414167][ T26] audit: type=1326 audit(1744017625.809:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c860a1169 code=0x7ffc0000 [ 248.326979][ T6181] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.463 (6181) [ 248.365677][ T6181] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 248.374396][ T6181] BTRFS info (device loop4): enabling auto defrag [ 248.380909][ T6181] BTRFS info (device loop4): doing ref verification [ 248.387585][ T6181] BTRFS info (device loop4): use no compression [ 248.393930][ T6181] BTRFS info (device loop4): force clearing of disk cache [ 248.401074][ T6181] BTRFS info (device loop4): max_inline at 4096 [ 248.407479][ T6181] BTRFS info (device loop4): disabling free space tree [ 248.414386][ T6181] BTRFS info (device loop4): has skinny extents [ 248.632721][ T1326] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 248.756193][ T6181] BTRFS info (device loop4): enabling ssd optimizations [ 248.765088][ T6181] BTRFS info (device loop4): clearing free space tree [ 248.771907][ T6181] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 248.781603][ T6181] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 249.642564][ T6217] loop1: detected capacity change from 0 to 64 [ 249.756707][ T1326] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 250.105522][ T1326] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.115089][ T1326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.127445][ T1326] usb 4-1: Product: syz [ 250.131838][ T1326] usb 4-1: Manufacturer: syz [ 250.809501][ T1326] usb 4-1: SerialNumber: syz [ 251.197167][ T1326] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 251.822998][ T1326] usb 4-1: USB disconnect, device number 5 [ 252.222842][ T1326] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 252.322507][ T6230] loop2: detected capacity change from 0 to 256 [ 252.434865][ T6232] binder: 6231:6232 ioctl c0306201 0 returned -14 [ 252.457430][ T6230] FAT-fs (loop2): Directory bread(block 64) failed [ 252.482453][ T6230] FAT-fs (loop2): Directory bread(block 65) failed [ 252.503694][ T6230] FAT-fs (loop2): Directory bread(block 66) failed [ 252.510274][ T6230] FAT-fs (loop2): Directory bread(block 67) failed [ 252.526198][ T6230] FAT-fs (loop2): Directory bread(block 68) failed [ 252.536689][ T6230] FAT-fs (loop2): Directory bread(block 69) failed [ 252.546067][ T6230] FAT-fs (loop2): Directory bread(block 70) failed [ 252.552613][ T6230] FAT-fs (loop2): Directory bread(block 71) failed [ 252.565494][ T6230] FAT-fs (loop2): Directory bread(block 72) failed [ 252.572137][ T6230] FAT-fs (loop2): Directory bread(block 73) failed [ 252.673318][ T1326] usb 4-1: device not accepting address 6, error -71 [ 253.246053][ T6238] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 254.009154][ T6244] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002 [ 254.101254][ T6247] loop3: detected capacity change from 0 to 16 [ 254.553519][ T6247] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 254.879614][ T6253] loop0: detected capacity change from 0 to 32768 [ 254.962741][ T6253] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.481 (6253) [ 255.573682][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.582312][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.733774][ T6253] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 255.742516][ T6253] BTRFS info (device loop0): enabling auto defrag [ 255.749062][ T6253] BTRFS info (device loop0): doing ref verification [ 255.755777][ T6253] BTRFS info (device loop0): use no compression [ 255.762082][ T6253] BTRFS info (device loop0): force clearing of disk cache [ 255.769336][ T6253] BTRFS info (device loop0): max_inline at 4096 [ 255.775642][ T6253] BTRFS info (device loop0): disabling free space tree [ 255.782498][ T6253] BTRFS info (device loop0): has skinny extents [ 255.816069][ T6265] loop3: detected capacity change from 0 to 256 [ 256.023383][ T6265] exfat: Bad value for 'uid' [ 256.918547][ T6280] loop3: detected capacity change from 0 to 2048 [ 256.946602][ T6285] loop4: detected capacity change from 0 to 256 [ 257.143887][ T6280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.302427][ T6253] BTRFS info (device loop0): enabling ssd optimizations [ 257.311262][ T6253] BTRFS info (device loop0): clearing free space tree [ 257.313122][ T6285] FAT-fs (loop4): Directory bread(block 64) failed [ 257.318403][ T6253] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 257.334659][ T6253] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 257.563369][ T6285] FAT-fs (loop4): Directory bread(block 65) failed [ 257.571032][ T6285] FAT-fs (loop4): Directory bread(block 66) failed [ 257.578107][ T6285] FAT-fs (loop4): Directory bread(block 67) failed [ 257.683699][ T6285] FAT-fs (loop4): Directory bread(block 68) failed [ 257.691150][ T6285] FAT-fs (loop4): Directory bread(block 69) failed [ 257.702820][ T6285] FAT-fs (loop4): Directory bread(block 70) failed [ 257.893323][ T6285] FAT-fs (loop4): Directory bread(block 71) failed [ 257.903820][ T6285] FAT-fs (loop4): Directory bread(block 72) failed [ 257.955003][ T6285] FAT-fs (loop4): Directory bread(block 73) failed [ 258.072401][ T4452] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4452) [ 258.771770][ T6308] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 259.444687][ T6316] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 259.528636][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.567347][ T6316] bond0: (slave team0): Enslaving as an active interface with an up link [ 259.598084][ T6319] loop1: detected capacity change from 0 to 128 [ 259.691456][ T6319] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 259.959289][ T6319] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.045705][ T6329] loop0: detected capacity change from 0 to 32768 [ 260.677886][ T6319] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.498: No space for directory leaf checksum. Please run e2fsck -D. [ 260.718932][ T6319] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.498: checksumming directory block 0 [ 260.942164][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.974303][ T6319] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.498: No space for directory leaf checksum. Please run e2fsck -D. [ 261.053369][ T6319] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.498: Directory block failed checksum [ 261.273971][ T6329] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 261.283250][ T6329] BTRFS info (device loop0): enabling auto defrag [ 261.289810][ T6329] BTRFS info (device loop0): doing ref verification [ 261.296497][ T6329] BTRFS info (device loop0): use no compression [ 261.302843][ T6329] BTRFS info (device loop0): force clearing of disk cache [ 261.310015][ T6329] BTRFS info (device loop0): max_inline at 4096 [ 261.316468][ T6329] BTRFS info (device loop0): disabling free space tree [ 261.323586][ T6329] BTRFS info (device loop0): has skinny extents [ 262.222980][ T6329] BTRFS info (device loop0): enabling ssd optimizations [ 262.234013][ T6329] BTRFS info (device loop0): clearing free space tree [ 262.240854][ T6329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.251330][ T6329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.866392][ T26] audit: type=1800 audit(1744017643.999:36): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 263.152960][ T26] audit: type=1800 audit(1744017644.029:37): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 263.211874][ T6376] loop3: detected capacity change from 0 to 256 [ 263.538086][ T6383] binder: 6375:6383 ioctl c0306201 0 returned -14 [ 264.232146][ T6376] FAT-fs (loop3): Directory bread(block 64) failed [ 264.241301][ T6376] FAT-fs (loop3): Directory bread(block 65) failed [ 264.259096][ T6376] FAT-fs (loop3): Directory bread(block 66) failed [ 264.284756][ T6376] FAT-fs (loop3): Directory bread(block 67) failed [ 264.292289][ T6376] FAT-fs (loop3): Directory bread(block 68) failed [ 264.298960][ T6376] FAT-fs (loop3): Directory bread(block 69) failed [ 264.305773][ T6376] FAT-fs (loop3): Directory bread(block 70) failed [ 264.312443][ T6376] FAT-fs (loop3): Directory bread(block 71) failed [ 264.319309][ T6376] FAT-fs (loop3): Directory bread(block 72) failed [ 264.326601][ T6376] FAT-fs (loop3): Directory bread(block 73) failed [ 264.916648][ T6396] netlink: 'syz.3.507': attribute type 4 has an invalid length. [ 268.151200][ T6419] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 268.639001][ T6427] loop4: detected capacity change from 0 to 32768 [ 268.737189][ T6427] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.521 (6427) [ 268.852298][ T6427] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 268.861034][ T6427] BTRFS info (device loop4): enabling auto defrag [ 268.867545][ T6427] BTRFS info (device loop4): doing ref verification [ 268.874182][ T6427] BTRFS info (device loop4): use no compression [ 268.880440][ T6427] BTRFS info (device loop4): force clearing of disk cache [ 268.888219][ T6427] BTRFS info (device loop4): max_inline at 4096 [ 268.894608][ T6427] BTRFS info (device loop4): disabling free space tree [ 268.901625][ T6427] BTRFS info (device loop4): has skinny extents [ 269.482817][ T6427] BTRFS info (device loop4): enabling ssd optimizations [ 269.496219][ T6427] BTRFS info (device loop4): clearing free space tree [ 269.503159][ T6427] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.513094][ T6427] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 270.058069][ T26] audit: type=1800 audit(1744017651.189:38): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.521" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 270.097715][ T26] audit: type=1800 audit(1744017651.219:39): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.521" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 271.681821][ T6466] loop1: detected capacity change from 0 to 256 [ 271.813565][ T6466] FAT-fs (loop1): Directory bread(block 64) failed [ 271.820151][ T6466] FAT-fs (loop1): Directory bread(block 65) failed [ 271.899138][ T6466] FAT-fs (loop1): Directory bread(block 66) failed [ 271.932810][ T6466] FAT-fs (loop1): Directory bread(block 67) failed [ 271.939525][ T6466] FAT-fs (loop1): Directory bread(block 68) failed [ 271.992929][ T6466] FAT-fs (loop1): Directory bread(block 69) failed [ 271.999691][ T6466] FAT-fs (loop1): Directory bread(block 70) failed [ 272.048589][ T6466] FAT-fs (loop1): Directory bread(block 71) failed [ 272.072062][ T6466] FAT-fs (loop1): Directory bread(block 72) failed [ 272.128896][ T6466] FAT-fs (loop1): Directory bread(block 73) failed [ 273.373436][ T6477] netlink: 'syz.1.527': attribute type 4 has an invalid length. [ 273.842033][ T5285] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 274.212845][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 274.533246][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.233403][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.249835][ T5285] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.263073][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.281145][ T5285] usb 5-1: config 0 descriptor?? [ 275.324128][ T5285] hub 5-1:0.0: USB hub found [ 275.395650][ T6496] loop3: detected capacity change from 0 to 2048 [ 275.543177][ T5285] hub 5-1:0.0: 1 port detected [ 275.594987][ T6496] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.888933][ T5285] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 276.324556][ T5285] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 276.512933][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 276.519083][ T5285] usbhid: probe of 5-1:0.0 failed with error -71 [ 276.569121][ T6509] loop0: detected capacity change from 0 to 1024 [ 276.595811][ T6511] loop4: detected capacity change from 0 to 256 [ 276.636879][ T5285] usb 5-1: USB disconnect, device number 3 [ 276.668402][ T6509] hfsplus: failed to load attributes file [ 276.696122][ T6513] loop3: detected capacity change from 0 to 64 [ 276.744825][ T6511] FAT-fs (loop4): Directory bread(block 64) failed [ 276.778204][ T6511] FAT-fs (loop4): Directory bread(block 65) failed [ 276.953013][ T6511] FAT-fs (loop4): Directory bread(block 66) failed [ 276.976889][ T6511] FAT-fs (loop4): Directory bread(block 67) failed [ 277.588983][ T6511] FAT-fs (loop4): Directory bread(block 68) failed [ 277.668937][ T6511] FAT-fs (loop4): Directory bread(block 69) failed [ 277.723060][ T6511] FAT-fs (loop4): Directory bread(block 70) failed [ 277.737001][ T6511] FAT-fs (loop4): Directory bread(block 71) failed [ 277.744001][ T6511] FAT-fs (loop4): Directory bread(block 72) failed [ 277.750588][ T6511] FAT-fs (loop4): Directory bread(block 73) failed [ 277.781317][ T6520] loop1: detected capacity change from 0 to 128 [ 278.154596][ T6525] netlink: 'syz.4.540': attribute type 4 has an invalid length. [ 280.527597][ T6562] overlayfs: failed to set xattr on upper [ 280.540365][ T6562] overlayfs: ...falling back to index=off,metacopy=off. [ 281.351851][ T6567] loop0: detected capacity change from 0 to 256 [ 281.585820][ T6567] FAT-fs (loop0): Directory bread(block 64) failed [ 281.601511][ T6567] FAT-fs (loop0): Directory bread(block 65) failed [ 281.712112][ T6567] FAT-fs (loop0): Directory bread(block 66) failed [ 281.847820][ T6567] FAT-fs (loop0): Directory bread(block 67) failed [ 281.871213][ T6567] FAT-fs (loop0): Directory bread(block 68) failed [ 281.912216][ T6567] FAT-fs (loop0): Directory bread(block 69) failed [ 281.936566][ T6567] FAT-fs (loop0): Directory bread(block 70) failed [ 281.979178][ T6567] FAT-fs (loop0): Directory bread(block 71) failed [ 282.008670][ T6567] FAT-fs (loop0): Directory bread(block 72) failed [ 282.042843][ T6567] FAT-fs (loop0): Directory bread(block 73) failed [ 282.050717][ T6578] loop4: detected capacity change from 0 to 512 [ 282.141891][ T6578] EXT4-fs (loop4): Ignoring removed oldalloc option [ 282.174344][ T6578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.486378][ T6578] EXT4-fs (loop4): 1 truncate cleaned up [ 282.492434][ T6578] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 282.579300][ T6591] netlink: 'syz.0.555': attribute type 4 has an invalid length. [ 284.582835][ T5375] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.872825][ T5375] usb 5-1: Using ep0 maxpacket: 32 [ 285.106913][ T5375] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 285.147049][ T5375] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 285.163726][ T5375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 285.199061][ T5375] usb 5-1: config 1 has no interface number 0 [ 285.262011][ T5375] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.442775][ T5375] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 285.506777][ T5375] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 285.559883][ T5375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.666569][ T5375] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 285.918607][ T5375] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 286.364168][ T6638] loop2: detected capacity change from 0 to 512 [ 286.438951][ T6638] EXT4-fs (loop2): Ignoring removed oldalloc option [ 286.455275][ T6638] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.490115][ T6638] EXT4-fs (loop2): 1 truncate cleaned up [ 286.495992][ T6638] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 286.995177][ T5375] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 287.099847][ T6644] loop0: detected capacity change from 0 to 256 [ 287.196941][ T6644] FAT-fs (loop0): Directory bread(block 64) failed [ 287.222855][ T6644] FAT-fs (loop0): Directory bread(block 65) failed [ 287.229829][ T6644] FAT-fs (loop0): Directory bread(block 66) failed [ 287.250584][ T6644] FAT-fs (loop0): Directory bread(block 67) failed [ 287.259133][ T1110] usb 5-1: USB disconnect, device number 4 [ 287.264486][ T6644] FAT-fs (loop0): Directory bread(block 68) failed [ 287.291505][ T1110] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 287.295063][ T6644] FAT-fs (loop0): Directory bread(block 69) failed [ 287.310916][ T6644] FAT-fs (loop0): Directory bread(block 70) failed [ 287.328089][ T6644] FAT-fs (loop0): Directory bread(block 71) failed [ 287.341092][ T6644] FAT-fs (loop0): Directory bread(block 72) failed [ 287.380633][ T6644] FAT-fs (loop0): Directory bread(block 73) failed [ 287.829520][ T6665] netlink: 'syz.0.576': attribute type 4 has an invalid length. [ 289.228502][ T6681] loop4: detected capacity change from 0 to 512 [ 289.302743][ T6681] EXT4-fs (loop4): Ignoring removed oldalloc option [ 289.312825][ T6681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.347930][ T6686] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 289.371381][ T6681] EXT4-fs (loop4): 1 truncate cleaned up [ 289.418958][ T6681] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,jqfmt=vfsv1,. Quota mode: writeback. [ 289.547316][ T6693] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 290.178045][ T6700] loop4: detected capacity change from 0 to 256 [ 290.297657][ T6700] FAT-fs (loop4): Directory bread(block 64) failed [ 290.306833][ T6700] FAT-fs (loop4): Directory bread(block 65) failed [ 290.314175][ T6700] FAT-fs (loop4): Directory bread(block 66) failed [ 290.321139][ T6700] FAT-fs (loop4): Directory bread(block 67) failed [ 290.342839][ T6700] FAT-fs (loop4): Directory bread(block 68) failed [ 290.349675][ T6700] FAT-fs (loop4): Directory bread(block 69) failed [ 290.363853][ T6700] FAT-fs (loop4): Directory bread(block 70) failed [ 290.370777][ T6700] FAT-fs (loop4): Directory bread(block 71) failed [ 290.381633][ T6700] FAT-fs (loop4): Directory bread(block 72) failed [ 290.391867][ T6700] FAT-fs (loop4): Directory bread(block 73) failed [ 290.635756][ T6712] 9pnet_virtio: no channels available for device syz [ 290.726971][ T6715] netlink: 'syz.4.594': attribute type 4 has an invalid length. [ 292.350907][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 292.482956][ T5473] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 292.862868][ T5473] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 292.873402][ T6754] loop4: detected capacity change from 0 to 256 [ 292.886168][ T5473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.002992][ T5473] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 293.029296][ T5473] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 293.038184][ T6754] FAT-fs (loop4): Directory bread(block 64) failed [ 293.068429][ T6754] FAT-fs (loop4): Directory bread(block 65) failed [ 293.085718][ T5473] usb 2-1: Manufacturer: syz [ 293.111705][ T6754] FAT-fs (loop4): Directory bread(block 66) failed [ 293.128881][ T5473] usb 2-1: config 0 descriptor?? [ 293.159675][ T6754] FAT-fs (loop4): Directory bread(block 67) failed [ 293.184094][ T6754] FAT-fs (loop4): Directory bread(block 68) failed [ 293.190721][ T6754] FAT-fs (loop4): Directory bread(block 69) failed [ 293.197519][ T6754] FAT-fs (loop4): Directory bread(block 70) failed [ 293.204135][ T6754] FAT-fs (loop4): Directory bread(block 71) failed [ 293.211182][ T6754] FAT-fs (loop4): Directory bread(block 72) failed [ 293.217861][ T6754] FAT-fs (loop4): Directory bread(block 73) failed [ 293.437068][ T5473] rc_core: IR keymap rc-hauppauge not found [ 293.451659][ T5473] Registered IR keymap rc-empty [ 293.470590][ T5473] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 293.482535][ T5473] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 293.767583][ T5473] usb 2-1: USB disconnect, device number 5 [ 295.960372][ T6806] loop3: detected capacity change from 0 to 256 [ 296.065351][ T6806] FAT-fs (loop3): Directory bread(block 64) failed [ 296.072519][ T6806] FAT-fs (loop3): Directory bread(block 65) failed [ 296.080276][ T6806] FAT-fs (loop3): Directory bread(block 66) failed [ 296.087845][ T6806] FAT-fs (loop3): Directory bread(block 67) failed [ 296.122022][ T6806] FAT-fs (loop3): Directory bread(block 68) failed [ 296.143981][ T6806] FAT-fs (loop3): Directory bread(block 69) failed [ 296.165892][ T6806] FAT-fs (loop3): Directory bread(block 70) failed [ 296.180535][ T6806] FAT-fs (loop3): Directory bread(block 71) failed [ 296.188586][ T6806] FAT-fs (loop3): Directory bread(block 72) failed [ 296.201659][ T6806] FAT-fs (loop3): Directory bread(block 73) failed [ 296.550913][ T6814] netlink: 'syz.3.627': attribute type 4 has an invalid length. [ 299.502352][ T6828] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 299.511332][ T6828] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 299.605719][ T6832] lo speed is unknown, defaulting to 1000 [ 299.611970][ T6832] lo speed is unknown, defaulting to 1000 [ 299.621150][ T6832] lo speed is unknown, defaulting to 1000 [ 299.631984][ T6832] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 299.646017][ T6832] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 299.712440][ T6832] lo speed is unknown, defaulting to 1000 [ 299.719836][ T6832] lo speed is unknown, defaulting to 1000 [ 299.727223][ T6832] lo speed is unknown, defaulting to 1000 [ 299.734004][ T6832] lo speed is unknown, defaulting to 1000 [ 299.740680][ T6832] lo speed is unknown, defaulting to 1000 [ 300.054112][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 300.087985][ T6856] loop1: detected capacity change from 0 to 256 [ 300.274648][ T6856] FAT-fs (loop1): Directory bread(block 64) failed [ 300.321966][ T6856] FAT-fs (loop1): Directory bread(block 65) failed [ 300.365075][ T6856] FAT-fs (loop1): Directory bread(block 66) failed [ 300.367776][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 300.371652][ T6856] FAT-fs (loop1): Directory bread(block 67) failed [ 300.371744][ T6856] FAT-fs (loop1): Directory bread(block 68) failed [ 301.162816][ T6856] FAT-fs (loop1): Directory bread(block 69) failed [ 301.169473][ T6856] FAT-fs (loop1): Directory bread(block 70) failed [ 301.235651][ T6856] FAT-fs (loop1): Directory bread(block 71) failed [ 301.501966][ T6856] FAT-fs (loop1): Directory bread(block 72) failed [ 301.522879][ T6856] FAT-fs (loop1): Directory bread(block 73) failed [ 301.925633][ T6881] 9pnet_virtio: no channels available for device syz [ 301.998684][ T4180] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 302.039461][ T6889] netlink: 'syz.1.642': attribute type 4 has an invalid length. [ 302.373395][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 302.596363][ T6899] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x356) [ 302.861503][ T6909] overlayfs: failed to clone upperpath [ 304.600406][ T6932] loop1: detected capacity change from 0 to 256 [ 304.792430][ T6932] FAT-fs (loop1): Directory bread(block 64) failed [ 304.817041][ T6932] FAT-fs (loop1): Directory bread(block 65) failed [ 304.848193][ T6932] FAT-fs (loop1): Directory bread(block 66) failed [ 304.868009][ T6932] FAT-fs (loop1): Directory bread(block 67) failed [ 304.876329][ T6932] FAT-fs (loop1): Directory bread(block 68) failed [ 304.887747][ T6932] FAT-fs (loop1): Directory bread(block 69) failed [ 304.895783][ T6932] FAT-fs (loop1): Directory bread(block 70) failed [ 304.902590][ T6932] FAT-fs (loop1): Directory bread(block 71) failed [ 304.917437][ T6932] FAT-fs (loop1): Directory bread(block 72) failed [ 304.948565][ T6932] FAT-fs (loop1): Directory bread(block 73) failed [ 305.459829][ T6946] netlink: 'syz.1.668': attribute type 4 has an invalid length. [ 305.861868][ T1110] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 305.891756][ T1110] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 305.911855][ T1110] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 305.983319][ T1110] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 306.491692][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 306.602335][ T6964] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 306.628237][ T6964] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 306.640134][ T6974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.832810][ T4387] Bluetooth: hci5: command 0x1003 tx timeout [ 306.838952][ T4169] Bluetooth: hci5: sending frame failed (-49) [ 306.851193][ T6981] lo speed is unknown, defaulting to 1000 [ 307.059027][ T6984] loop0: detected capacity change from 0 to 256 [ 307.190210][ T6984] FAT-fs (loop0): Directory bread(block 64) failed [ 307.214210][ T6984] FAT-fs (loop0): Directory bread(block 65) failed [ 307.222500][ T6984] FAT-fs (loop0): Directory bread(block 66) failed [ 307.263936][ T6984] FAT-fs (loop0): Directory bread(block 67) failed [ 307.271283][ T6984] FAT-fs (loop0): Directory bread(block 68) failed [ 307.282222][ T6984] FAT-fs (loop0): Directory bread(block 69) failed [ 307.292181][ T6984] FAT-fs (loop0): Directory bread(block 70) failed [ 307.306587][ T6984] FAT-fs (loop0): Directory bread(block 71) failed [ 307.316073][ T6984] FAT-fs (loop0): Directory bread(block 72) failed [ 307.327993][ T6984] FAT-fs (loop0): Directory bread(block 73) failed [ 307.625926][ T6989] netlink: 'syz.0.684': attribute type 4 has an invalid length. [ 308.206980][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 308.289608][ T7011] 9pnet_virtio: no channels available for device syz [ 308.489384][ T7018] device bond0 entered promiscuous mode [ 308.508021][ T7018] device bond_slave_0 entered promiscuous mode [ 308.508173][ T7018] device bond_slave_1 entered promiscuous mode [ 308.668059][ T7028] loop3: detected capacity change from 0 to 256 [ 308.717473][ T7028] FAT-fs (loop3): Directory bread(block 64) failed [ 308.751341][ T7028] FAT-fs (loop3): Directory bread(block 65) failed [ 308.793994][ T7028] FAT-fs (loop3): Directory bread(block 66) failed [ 308.814347][ T7028] FAT-fs (loop3): Directory bread(block 67) failed [ 308.820998][ T7028] FAT-fs (loop3): Directory bread(block 68) failed [ 308.874170][ T7028] FAT-fs (loop3): Directory bread(block 69) failed [ 308.880815][ T7028] FAT-fs (loop3): Directory bread(block 70) failed [ 308.913466][ T4387] Bluetooth: hci5: command 0x1001 tx timeout [ 308.919712][ T4169] Bluetooth: hci5: sending frame failed (-49) [ 309.022998][ T7028] FAT-fs (loop3): Directory bread(block 71) failed [ 309.035585][ T7028] FAT-fs (loop3): Directory bread(block 72) failed [ 309.058120][ T7028] FAT-fs (loop3): Directory bread(block 73) failed [ 309.871554][ T7044] netlink: 'syz.3.699': attribute type 4 has an invalid length. [ 310.583362][ T7063] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 310.614406][ T7063] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 310.992793][ T4387] Bluetooth: hci5: command 0x1009 tx timeout [ 312.135930][ T7086] loop2: detected capacity change from 0 to 256 [ 312.266241][ T7086] FAT-fs (loop2): Directory bread(block 64) failed [ 312.300233][ T7086] FAT-fs (loop2): Directory bread(block 65) failed [ 312.313519][ T7086] FAT-fs (loop2): Directory bread(block 66) failed [ 312.340485][ T7086] FAT-fs (loop2): Directory bread(block 67) failed [ 312.369474][ T7086] FAT-fs (loop2): Directory bread(block 68) failed [ 312.385079][ T7086] FAT-fs (loop2): Directory bread(block 69) failed [ 312.391983][ T7086] FAT-fs (loop2): Directory bread(block 70) failed [ 312.406787][ T7086] FAT-fs (loop2): Directory bread(block 71) failed [ 312.418668][ T7086] FAT-fs (loop2): Directory bread(block 72) failed [ 312.429347][ T7086] FAT-fs (loop2): Directory bread(block 73) failed [ 312.751826][ T7100] netlink: 'syz.2.718': attribute type 4 has an invalid length. [ 313.522026][ T7111] ------------[ cut here ]------------ [ 313.538316][ T7111] WARNING: CPU: 0 PID: 7111 at arch/x86/kvm/vmx/vmx.c:1711 vmx_queue_exception+0x2d2/0x480 [ 313.569461][ T7111] Modules linked in: [ 313.610468][ T7111] CPU: 0 PID: 7111 Comm: syz.2.726 Not tainted 5.15.179-syzkaller #0 [ 313.628441][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.643624][ T7111] RIP: 0010:vmx_queue_exception+0x2d2/0x480 [ 313.650471][ T7111] Code: 9e 01 00 00 e8 df aa 5d 00 eb 0c e8 d8 aa 5d 00 eb 05 e8 d1 aa 5d 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f c3 e8 be aa 5d 00 <0f> 0b e9 a2 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 55 fd ff ff e8 c5 [ 313.678718][ T7111] RSP: 0018:ffffc9000322f558 EFLAGS: 00010283 [ 313.685547][ T7111] RAX: ffffffff8122f202 RBX: 0000000000000001 RCX: 0000000000080000 [ 313.700972][ T7111] RDX: ffffc90005d99000 RSI: 0000000000000450 RDI: 0000000000000451 [ 313.709460][ T7111] RBP: ffffc9000322fc50 R08: ffffffff8122f09e R09: fffffbfff1c153f6 [ 313.725158][ T7111] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805636c000 [ 313.737628][ T7111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000080000804 [ 313.747478][ T7111] FS: 00007f6c83f0a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 313.802257][ T7111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.808987][ T7111] CR2: 000000110c362690 CR3: 000000001eec4000 CR4: 00000000003526f0 [ 313.817117][ T7111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.829403][ T7111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.838586][ T7111] Call Trace: [ 313.841901][ T7111] [ 313.845316][ T7111] ? __warn+0x15b/0x300 [ 313.849518][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 313.856171][ T7111] ? report_bug+0x1b7/0x2e0 [ 313.867292][ T7111] ? handle_bug+0x3d/0x70 [ 313.961583][ T7111] ? exc_invalid_op+0x16/0x40 [ 314.007403][ T7111] ? asm_exc_invalid_op+0x16/0x20 [ 314.056118][ T7111] ? vmx_queue_exception+0x16e/0x480 [ 314.414301][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 314.752909][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 314.758294][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 314.798923][ T7111] ? kvm_inject_exception+0x16b/0x330 [ 314.804704][ T7111] vcpu_enter_guest+0x8f5/0x9850 [ 314.822907][ T7111] ? __lock_acquire+0x1ff0/0x1ff0 [ 314.828010][ T7111] ? unwind_next_frame+0x1437/0x1fa0 [ 314.835618][ T7111] ? deref_stack_reg+0xbe/0x110 [ 314.840555][ T7111] ? validate_chain+0x112/0x5930 [ 314.845989][ T7111] ? is_bpf_text_address+0x24f/0x260 [ 314.852955][ T7111] ? local_bh_enable+0x20/0x20 [ 314.858757][ T7111] ? stack_trace_save+0x1c0/0x1c0 [ 314.866892][ T7111] ? unwind_get_return_address+0x49/0x80 [ 314.880615][ T7111] ? stack_trace_snprint+0xe0/0xe0 [ 314.889467][ T7111] ? format_decode+0x72f/0x1f10 [ 314.902453][ T7111] ? reacquire_held_locks+0x660/0x660 [ 314.910835][ T7111] ? kfree+0xf1/0x270 [ 314.918401][ T7111] ? kasan_set_track+0x62/0x80 [ 314.926216][ T7111] ? kasan_set_track+0x4b/0x80 [ 314.962811][ T7111] ? kasan_set_free_info+0x1f/0x40 [ 314.969164][ T7111] ? ____kasan_slab_free+0xd8/0x120 [ 314.974979][ T7111] ? slab_free_freelist_hook+0xdd/0x160 [ 314.980702][ T7111] ? mark_lock+0x98/0x340 [ 314.985881][ T7111] ? __lock_acquire+0x1295/0x1ff0 [ 314.990945][ T7111] ? mark_lock+0x98/0x340 [ 314.995881][ T7111] ? __lock_acquire+0x1295/0x1ff0 [ 315.000948][ T7111] ? __vmx_interrupt_blocked+0x191/0x1d0 [ 315.006693][ T7111] ? vmx_check_nested_events+0xfb8/0x24b0 [ 315.012712][ T7111] ? local_bh_enable+0x5/0x20 [ 315.017419][ T7111] ? _local_bh_enable+0xa0/0xa0 [ 315.022290][ T7111] ? handle_vmfunc+0xf30/0xf30 [ 315.027262][ T7111] kvm_arch_vcpu_ioctl_run+0xa5e/0x1f80 [ 315.033239][ T7111] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 315.038036][ T7111] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 315.043767][ T7111] ? __fget_files+0x413/0x480 [ 315.048515][ T7111] ? bpf_lsm_file_ioctl+0x5/0x10 [ 315.055068][ T7111] ? security_file_ioctl+0x7d/0xa0 [ 315.060206][ T7111] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 315.065939][ T7111] __se_sys_ioctl+0xf1/0x160 [ 315.070568][ T7111] do_syscall_64+0x3b/0xb0 [ 315.076922][ T7111] ? clear_bhb_loop+0x15/0x70 [ 315.081790][ T7111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.087823][ T7111] RIP: 0033:0x7f6c860a1169 [ 315.092265][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.112087][ T7111] RSP: 002b:00007f6c83f0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.120594][ T7111] RAX: ffffffffffffffda RBX: 00007f6c862b9fa0 RCX: 00007f6c860a1169 [ 315.128668][ T7111] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 315.136725][ T7111] RBP: 00007f6c861222a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.144810][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.152842][ T7111] R13: 0000000000000000 R14: 00007f6c862b9fa0 R15: 00007ffc2d8a2278 [ 315.160994][ T7111] [ 315.166080][ T7111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 315.173406][ T7111] CPU: 1 PID: 7111 Comm: syz.2.726 Not tainted 5.15.179-syzkaller #0 [ 315.181500][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.191579][ T7111] Call Trace: [ 315.194880][ T7111] [ 315.197837][ T7111] dump_stack_lvl+0x1e3/0x2d0 [ 315.202549][ T7111] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 315.208214][ T7111] ? panic+0x860/0x860 [ 315.212312][ T7111] ? vmx_queue_exception+0x2d0/0x480 [ 315.217619][ T7111] ? vmx_queue_exception+0x2d0/0x480 [ 315.222926][ T7111] panic+0x318/0x860 [ 315.226844][ T7111] ? __warn+0x16a/0x300 [ 315.231019][ T7111] ? fb_is_primary_device+0xd0/0xd0 [ 315.236233][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 315.241531][ T7111] __warn+0x2b2/0x300 [ 315.245539][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 315.250840][ T7111] report_bug+0x1b7/0x2e0 [ 315.255176][ T7111] handle_bug+0x3d/0x70 [ 315.259332][ T7111] exc_invalid_op+0x16/0x40 [ 315.263841][ T7111] asm_exc_invalid_op+0x16/0x20 [ 315.268738][ T7111] RIP: 0010:vmx_queue_exception+0x2d2/0x480 [ 315.274653][ T7111] Code: 9e 01 00 00 e8 df aa 5d 00 eb 0c e8 d8 aa 5d 00 eb 05 e8 d1 aa 5d 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f c3 e8 be aa 5d 00 <0f> 0b e9 a2 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 55 fd ff ff e8 c5 [ 315.294387][ T7111] RSP: 0018:ffffc9000322f558 EFLAGS: 00010283 [ 315.300459][ T7111] RAX: ffffffff8122f202 RBX: 0000000000000001 RCX: 0000000000080000 [ 315.308438][ T7111] RDX: ffffc90005d99000 RSI: 0000000000000450 RDI: 0000000000000451 [ 315.316432][ T7111] RBP: ffffc9000322fc50 R08: ffffffff8122f09e R09: fffffbfff1c153f6 [ 315.324415][ T7111] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805636c000 [ 315.332426][ T7111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000080000804 [ 315.340499][ T7111] ? vmx_queue_exception+0x16e/0x480 [ 315.345795][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 315.351105][ T7111] ? vmx_queue_exception+0x2d2/0x480 [ 315.356385][ T7111] ? kvm_inject_exception+0x16b/0x330 [ 315.361758][ T7111] vcpu_enter_guest+0x8f5/0x9850 [ 315.366707][ T7111] ? __lock_acquire+0x1ff0/0x1ff0 [ 315.371753][ T7111] ? unwind_next_frame+0x1437/0x1fa0 [ 315.377041][ T7111] ? deref_stack_reg+0xbe/0x110 [ 315.381895][ T7111] ? validate_chain+0x112/0x5930 [ 315.386839][ T7111] ? is_bpf_text_address+0x24f/0x260 [ 315.392141][ T7111] ? local_bh_enable+0x20/0x20 [ 315.396904][ T7111] ? stack_trace_save+0x1c0/0x1c0 [ 315.401930][ T7111] ? unwind_get_return_address+0x49/0x80 [ 315.407614][ T7111] ? stack_trace_snprint+0xe0/0xe0 [ 315.412746][ T7111] ? format_decode+0x72f/0x1f10 [ 315.417600][ T7111] ? reacquire_held_locks+0x660/0x660 [ 315.422983][ T7111] ? kfree+0xf1/0x270 [ 315.426983][ T7111] ? kasan_set_track+0x62/0x80 [ 315.431783][ T7111] ? kasan_set_track+0x4b/0x80 [ 315.436542][ T7111] ? kasan_set_free_info+0x1f/0x40 [ 315.441645][ T7111] ? ____kasan_slab_free+0xd8/0x120 [ 315.446838][ T7111] ? slab_free_freelist_hook+0xdd/0x160 [ 315.452399][ T7111] ? mark_lock+0x98/0x340 [ 315.456725][ T7111] ? __lock_acquire+0x1295/0x1ff0 [ 315.461744][ T7111] ? mark_lock+0x98/0x340 [ 315.466117][ T7111] ? __lock_acquire+0x1295/0x1ff0 [ 315.471182][ T7111] ? __vmx_interrupt_blocked+0x191/0x1d0 [ 315.476823][ T7111] ? vmx_check_nested_events+0xfb8/0x24b0 [ 315.482556][ T7111] ? local_bh_enable+0x5/0x20 [ 315.487235][ T7111] ? _local_bh_enable+0xa0/0xa0 [ 315.492114][ T7111] ? handle_vmfunc+0xf30/0xf30 [ 315.496890][ T7111] kvm_arch_vcpu_ioctl_run+0xa5e/0x1f80 [ 315.502468][ T7111] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 315.507161][ T7111] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 315.512849][ T7111] ? __fget_files+0x413/0x480 [ 315.517531][ T7111] ? bpf_lsm_file_ioctl+0x5/0x10 [ 315.522467][ T7111] ? security_file_ioctl+0x7d/0xa0 [ 315.527588][ T7111] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 315.533262][ T7111] __se_sys_ioctl+0xf1/0x160 [ 315.537875][ T7111] do_syscall_64+0x3b/0xb0 [ 315.542288][ T7111] ? clear_bhb_loop+0x15/0x70 [ 315.546976][ T7111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.552894][ T7111] RIP: 0033:0x7f6c860a1169 [ 315.557350][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.576953][ T7111] RSP: 002b:00007f6c83f0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.585376][ T7111] RAX: ffffffffffffffda RBX: 00007f6c862b9fa0 RCX: 00007f6c860a1169 [ 315.593370][ T7111] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 315.601343][ T7111] RBP: 00007f6c861222a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.609322][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.617294][ T7111] R13: 0000000000000000 R14: 00007f6c862b9fa0 R15: 00007ffc2d8a2278 [ 315.625294][ T7111] [ 315.628642][ T7111] Kernel Offset: disabled [ 315.633274][ T7111] Rebooting in 86400 seconds..