last executing test programs: 32.87325865s ago: executing program 0 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) 32.792303524s ago: executing program 0 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x200000000, 0x5, 0x1000007, 0x7ff, 0x0, 0xfffffffe, 0x8000000, 0xffffffff, 0x8000, 0x10000, 0x0, r2, 0x80000734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 31.846614328s ago: executing program 0 (id=82): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}]}) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.537476826s ago: executing program 0 (id=88): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0xfff3}, {0xfff1}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 30.93517154s ago: executing program 0 (id=93): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xffffffff, 0x490420, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x800000000000020, 0x460e, 0x3) 27.677439256s ago: executing program 0 (id=120): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r1 = syz_open_dev$ndb(&(0x7f00000023c0), 0x0, 0x400) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x941) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_DO_IT(r0, 0xab03) 26.997236654s ago: executing program 2 (id=127): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 26.833238734s ago: executing program 2 (id=130): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000440)={[{@nombcache}, {@data_err_ignore}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x44f, &(0x7f00000010c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000028c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x34) lseek(r0, 0x1, 0x1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 26.564378909s ago: executing program 2 (id=133): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004503005800faff"], 0x0) 25.750279335s ago: executing program 2 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000140)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp1251'}}, {}, {@barrier}]}, 0xfc, 0x6ea, &(0x7f0000000f80)="$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") mount$bind(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x883042, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 25.420191934s ago: executing program 2 (id=139): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000580)="1c", 0x1, 0xf95b}]) 24.850714936s ago: executing program 2 (id=141): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x5, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f0000000240)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@data_ordered}, {@nojournal_checksum}, {@errors_remount}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 24.735203933s ago: executing program 32 (id=141): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x5, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f0000000240)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@data_ordered}, {@nojournal_checksum}, {@errors_remount}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$eJzs3d9rW1UcAPDvvW33U10HY6iIFPbgZC5dW39M8GE+ig4H+j5Dm5XRdBlNOtY62PbgXnyRIYg4EN/13cexf8C/YqCDIaPogy+Rm95kaZusWdet2fL5wG3PybnJud977jk5NzeXBDCwxrI/acRrEfFdEnGgrWw48sKx1fVWHlyZzpYk6vUv/k4iyR9rrp/k//fnmVcj4s43EcfSjfVWl5bniuVyaSHPj9fmL45Xl5aPn58vzpZmSxcmp6ZOvjc1+eEH729brG+f+ffHz29/cvLbIys//Hbv4M0kTsVLeVl7HLm0LaReXWvPjMVY/gIjcWrdihOPu/F9qrn/HndH0R+G8n4+EtkYcCCG8l4PvPiuRkQdGFCJ/g8DqjkPaJ7bdzgPfqHd/3j1BGhj/MOrn43Ensa50b6VZM2ZUXa+O7oN9Wd1/P7XrZvZEp0/h1gvWfcxA8CWXLseESeGhzeOf0k+/m3diR7WWV/HoL3/wE66nc1/3uk0/0lb85/oMP/Z36HvbsXm/T+9tw3VdJXN/z7qOP9tXbQaHcpzLzfmfCPJufPlUja2vRIRR2Nkd5Z/1PWckyt3693K2ud/2ZLV35wL5ttxb3j32ufMFGvFJ4m53f3rEa93nP8mrfZPOrR/tj/O9FjH4dKtN7uVbR7/01X/JeKtiLizazXfHn9T8ujrk+ON42G8eVRs9M+Nw3+0Mitry3Y6/qz993U8/lvxjybt12urj1/Hz3v+K0X9aseyrR7/u5IvG+m82eJysVZbmIjYlXy28fHJh89t5pvrZ/EfPfLo8a/T8b83Ir7qMf4bh359o1tZh/jTZ93+Mz21fzYKZu3fOhB6Ttz99OufutW/Jv5r0aX9322kjuaP9DL+9bqBT7LvAAAAAAAAoN+kjXs4k7TQSqdpobD6/Y5DsS8tV6q1Y+cqixdmVu/1HI2RtHml+0Db9yEm8u/DNvOT6/JTEXEwIr4f2tvIF6Yr5ZmdDh4AAAAAAAAAAAAAAAAAAAD6xP4u9/9n/hza6a0Dnjo/+Q2Da9P+vx2/9AT0Je//MLj0fxhc+j8MLv0fBpf+D4Mr7/8u98MA8v4Pg0v/BwAAAAAAAAAAAAAAAAAAAAAAAAAAgG115vTpbKmvPLgyneVnLi0tzlUuHZ8pVecK84vThenKwsXCbKUyWy4Vpivzm71euVK5ODEZi5fHa6Vqbby6tHx2vrJ4oXb2/HxxtnS2NPJMogIAAAAAAAAAAAAAAAAAAIDnS3Vpea5YLpcWJJ7jRBo7V/twv+wEiW1N7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/R8AAP//nI4y/w==") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 24.586267701s ago: executing program 1 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd2d}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x7, 0x3, 0x4, 0x0, 0xfffffffb, 0x7, 0x7, 0x5, 0x0, 0x7, 0x5, 0xe, 0x0, 0x2, 0x1, 0x1, 0x1, 0xf8, 0x4, '\x00', 0x5, 0x7}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0x0, 0x6, 0x6], 0x8080000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.335192596s ago: executing program 1 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff321c806, 0x0, 0xfffc, 0x6, 0x2, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) 23.460672376s ago: executing program 1 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xd57}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.985151652s ago: executing program 1 (id=152): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4e22, 0xff0f}, 0xf0ffffff}}, 0x4c}}, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x6, 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in6=@private2, 0x0, 0x32}, @in=@broadcast, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) 22.034213797s ago: executing program 1 (id=156): syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f0000000340)=@string={0x3, 0x3, 'q'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x22, 0x20000007, 0x3, 0x44233, 0x200000000000007, 0x81, 0x9bf, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.582868023s ago: executing program 1 (id=158): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f00000001c0)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb, 0x1}) close(r0) 21.566345303s ago: executing program 33 (id=158): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f00000001c0)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb, 0x1}) close(r0) 12.589657234s ago: executing program 34 (id=120): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r1 = syz_open_dev$ndb(&(0x7f00000023c0), 0x0, 0x400) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x941) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_DO_IT(r0, 0xab03) 5.060884622s ago: executing program 7 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7fc, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x3bc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905820920"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 4.339201613s ago: executing program 4 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 4.284210387s ago: executing program 4 (id=243): syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x2000060, 0x0, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x62941, 0x2, 0x10}, 0x18) 4.202387331s ago: executing program 4 (id=244): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="78401f6711767c2be80c57c5cd3acd2a7ff24aa2ea5ae7a62c4b44fd282279dec16d2cd2c03a6803a0780af904eae39961436b18b0cc00"/68, 0x44}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000180), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 4.010560592s ago: executing program 4 (id=245): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7f) 3.87505568s ago: executing program 5 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x102, 0x547b, 0x103d, 0x200000000006, 0x20000000000000, 0x3aa, 0x1, 0x1, 0xf, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x4, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.581764947s ago: executing program 3 (id=252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) unshare(0x8040600) sendfile(r1, r2, 0x0, 0x100000500) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 3.486916062s ago: executing program 3 (id=253): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) 3.309756312s ago: executing program 5 (id=254): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x1, 0x1fffffe, 0x82cd, 0x80000000006, 0x9, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x0, 0x2, 0xfffffffd, 0x2}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 3.256692605s ago: executing program 3 (id=256): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_read_part_table(0x107c, &(0x7f0000000000)="$eJzs0LFR7DAQBuBf9und+BFcD3QEGR0QEJCSXSmUQUQjRHRABSwjn2aoAEi+L5Bl/VrvjsOfqmV//Lu83R/m8WksS3KVZE3Ww7yQnuSY5Pya5L1/VlWytjqd54UtdZzFa68R1/hYVbu7eRjB/7GMPm1sbrdLWfseqb+9zM02WrU9XT6yT/PU9+i5xuHjdf/ZvwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv+MrAAD//5RlGGE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) lseek(r0, 0x101, 0x4) 3.109053283s ago: executing program 4 (id=259): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="4003000e"], 0x0, 0x0, 0x0, 0x0}) 2.970258192s ago: executing program 7 (id=260): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@lazytime}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000002b) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 2.655482959s ago: executing program 5 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0xeeef0000, 0x5f7, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x70, '\x00', 0xc}, {0x2, 0x5, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x8}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0xfd, 0x4}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0xd, 0x9, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x3, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf6}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0x7, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x6}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x1, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.64083751s ago: executing program 7 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x800000, {0x2, 0x1, 0x3}, {0x0, 0x0, 0x4}, 0x2, 0x99f499b4b67a323b}, {0x3, 0x3, {0x2, 0xff}, {0x0, 0x0, 0x3}, 0xfe, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 2.420498343s ago: executing program 3 (id=263): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902"], 0x0) sendfile(r2, r2, 0x0, 0xfff) sendfile(r2, r1, 0x0, 0x5) 2.366130316s ago: executing program 5 (id=264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680), 0x3, 0x48c, &(0x7f0000000e80)="$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") chdir(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, &(0x7f0000000040)=""/61, 0x3d) 1.930635371s ago: executing program 5 (id=266): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047e0ffff000040006321", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) 1.498253745s ago: executing program 5 (id=273): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x142, 0x1ff) write$P9_RREAD(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x5e) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="090000000000000005000000000000000100000000000000", @ANYRES32=r1]) 1.42076132s ago: executing program 35 (id=273): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x142, 0x1ff) write$P9_RREAD(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x5e) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="090000000000000005000000000000000100000000000000", @ANYRES32=r1]) 1.394750681s ago: executing program 7 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a608000065f36463d881781500793439394b0e904b0e90f00f7fd89d0fc7af09000000bf000000b9e16dc30101f30f1ef801c3", 0x71}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.394286141s ago: executing program 6 (id=276): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000001c0)={{0x33, @empty, 0x4e21, 0x1, 'sh\x00', 0xc, 0x6, 0x33}, {@multicast2, 0x4e22, 0x10000, 0x3, 0x8, 0x4}}, 0x44) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.192363092s ago: executing program 6 (id=277): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) 1.094479938s ago: executing program 6 (id=278): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) close_range(r0, 0xffffffffffffffff, 0x0) 1.040853371s ago: executing program 6 (id=279): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f00000014c0)={@random="e3210900", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @dev, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xd521, 0x9}}}}}}, 0x0) 955.893476ms ago: executing program 7 (id=280): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 709.85836ms ago: executing program 7 (id=281): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 603.310936ms ago: executing program 6 (id=282): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$ppp(r1, &(0x7f0000000480)="31960ce59e91843c06d36c68431c74b7a6f6cdba3c5604f1654224391221b44977fc86e58588b363f41888be85fbc237b2ff8127f51376583ac59ec5398760d53077e5068d5419842063ebd35a43a911094c2de23575661967b84c13bfece9a030db3cb29320129e2166881c6d40e58929b08458d11f9450ef0247bcc6c4e5a7ccabf03551c48bfba79445139b28ca22c5a57995", 0x94) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 524.13663ms ago: executing program 6 (id=283): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0xa003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x3d, 0x5, &(0x7f00000001c0)={0x19, "0fd62f5244b23de763e6acba8d11e6daa6c4ee99000000000000040200"}}) 300.570183ms ago: executing program 3 (id=284): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000500)={'macsec0\x00', {0x2, 0x0, @remote}}) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)) syz_clone3(&(0x7f0000000440)={0x1000, 0x0, 0x0, 0x0, {0x1d}, &(0x7f00000006c0)=""/200, 0xc8, 0x0, 0x0}, 0x58) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000002a40)=ANY=[@ANYRESOCT, @ANYRES16], 0x0) 68.028417ms ago: executing program 3 (id=285): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) 0s ago: executing program 4 (id=286): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x3}, 0x8) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000014c0)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0xb, 0x1, [0x6]}, 0xa) kernel console output (not intermixed with test programs): 2][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.222580][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.231267][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.271773][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.291341][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.301304][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.319132][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.331696][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.340984][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.350209][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.357621][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.382168][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.392476][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.402356][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.411944][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.421347][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.430612][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.437708][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.465341][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.490991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.501797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.522282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.532745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.549973][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.564031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.583620][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.593116][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.610337][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.617934][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.626750][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.636003][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.646612][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.662112][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.672773][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.685905][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.694997][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.708926][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.717657][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.727436][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.736859][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.747569][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.754689][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.762232][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.770689][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.779235][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.788110][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.797305][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.804591][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.812404][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.821191][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.829156][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.848925][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.866944][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.886064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.894321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.932159][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.941288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.958893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.969060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.978396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.987046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.996459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.006281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.029167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.038053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.047412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.057717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.066308][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.073433][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.081624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.091328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.100056][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.107169][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.115070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.125410][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.168149][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.179605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.189138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.200161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.208127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.217104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.226843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.271761][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.285035][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.297919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.308367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.317321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.326365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.335097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.343984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.353150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.363029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.371543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.380378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.390421][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.425990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.433457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.451472][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.468485][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.486630][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.493891][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.502797][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.511010][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.519299][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.528265][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.536628][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.553737][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.561318][ T4185] device veth0_vlan entered promiscuous mode [ 48.577855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.593257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.603057][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.610657][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.624831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.635311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.643210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.652694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.661799][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.669287][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.677558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.687636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.719841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.730694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.738769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.748529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.757696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.766361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.775397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.783718][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.790840][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.806995][ T4185] device veth1_vlan entered promiscuous mode [ 48.814326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.823844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.832198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.840793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.849522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.858218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.867114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.878841][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.890549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.899654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.929171][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.937900][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.947172][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.956023][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.968165][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.969561][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 48.977308][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.983948][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 48.990807][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.993499][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.002427][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 49.020939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.044821][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.054111][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.062758][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 49.069204][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 49.087898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.098021][ T4185] device veth0_macvtap entered promiscuous mode [ 49.109145][ T4185] device veth1_macvtap entered promiscuous mode [ 49.127004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.137273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.147432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.160313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.171201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.182111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.191821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.200118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.209263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.234611][ T4191] device veth0_vlan entered promiscuous mode [ 49.243293][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.253437][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.262575][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.271320][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.280301][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.288875][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.297856][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.306359][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.315162][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.323158][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.338798][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.351918][ T4184] device veth0_vlan entered promiscuous mode [ 49.362280][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.371833][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.381526][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.390316][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.400613][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.413659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.422492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.432353][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.447474][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.457121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.467463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.476778][ T4191] device veth1_vlan entered promiscuous mode [ 49.495125][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.504037][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.513533][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.523577][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.541821][ T4184] device veth1_vlan entered promiscuous mode [ 49.630286][ T4191] device veth0_macvtap entered promiscuous mode [ 49.647588][ T4191] device veth1_macvtap entered promiscuous mode [ 49.654961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.663080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.671320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.680205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.690088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.698918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.709463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.717470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.726231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.736062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.775005][ T4184] device veth0_macvtap entered promiscuous mode [ 49.780499][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.789320][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.799903][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.818725][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.836344][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.850059][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.858728][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.867637][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.876257][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.883642][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.891451][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.900526][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.911715][ T4184] device veth1_macvtap entered promiscuous mode [ 49.942398][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.960602][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.972617][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.994766][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.002744][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.015717][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.026122][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.034214][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.046223][ T4190] device veth0_vlan entered promiscuous mode [ 50.056935][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.072145][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.083501][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.095422][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.106983][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.119762][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.129577][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.138632][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.147999][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.158119][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.168927][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.177054][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.186136][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.202539][ T4190] device veth1_vlan entered promiscuous mode [ 50.211268][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.222117][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.233905][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.246413][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.258073][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.271814][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.281791][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.290542][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.299311][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.315516][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.325819][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.341457][ T349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.350480][ T349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.371224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.390353][ T4190] device veth0_macvtap entered promiscuous mode [ 50.422541][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.442883][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.457581][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.467333][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.477667][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.528670][ T4190] device veth1_macvtap entered promiscuous mode [ 50.560044][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.574170][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.583052][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.615719][ T4183] device veth0_vlan entered promiscuous mode [ 50.623563][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.632799][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.642787][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.661688][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.680108][ T4183] device veth1_vlan entered promiscuous mode [ 50.699621][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.714639][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.725825][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.737273][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.748032][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.759038][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.770757][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.791647][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.792469][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.816067][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.817482][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.832810][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.842012][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.852840][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.879601][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.919786][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.929827][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.946784][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.956549][ T4295] loop0: detected capacity change from 0 to 4096 [ 50.959470][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.975526][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.987313][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.996435][ T4295] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 51.033487][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.038394][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.051221][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 51.059696][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 51.066267][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.076481][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.094815][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 51.101910][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.114775][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.122459][ T26] audit: type=1800 audit(1769040679.421:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file2" dev="loop0" ino=24 res=0 errno=0 [ 51.143843][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 51.150170][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 51.153663][ T4295] ntfs3: loop0: ino=5, "/" directory corrupted [ 51.181935][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.191463][ T349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.192393][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.203393][ T349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.222616][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.231398][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.252744][ T4183] device veth0_macvtap entered promiscuous mode [ 51.265151][ T4185] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 51.274098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.280995][ T4185] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 51.285242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.289133][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 51.302843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.313729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.344263][ T4183] device veth1_macvtap entered promiscuous mode [ 51.470970][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.497507][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.515439][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.533455][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.546075][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.562477][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.574650][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.589995][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.603633][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.624959][ T4305] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.674247][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.712183][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.740252][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.770547][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.790215][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.830014][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.855768][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.886806][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.906982][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.936823][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.965024][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.995890][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.017584][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.036457][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.055975][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.073145][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 52.109899][ T4318] ======================================================= [ 52.109899][ T4318] WARNING: The mand mount option has been deprecated and [ 52.109899][ T4318] and is ignored by this kernel. Remove the mand [ 52.109899][ T4318] option from the mount to silence this warning. [ 52.109899][ T4318] ======================================================= [ 52.150526][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.161227][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.192739][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.207234][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.231799][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.298277][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.315523][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.323413][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.340848][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.351012][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.364071][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.403231][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.424144][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.435067][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.041795][ T4333] loop3: detected capacity change from 0 to 32768 [ 53.080259][ T4333] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.15 (4333) [ 53.313051][ T4335] loop4: detected capacity change from 0 to 32768 [ 53.390484][ T4335] JBD2: Ignoring recovery information on journal [ 53.398367][ T4335] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 53.406989][ T4335] JBD2: bad block at offset 32 [ 53.432136][ T4335] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 53.584349][ C0] sched: RT throttling activated [ 53.586920][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 53.598189][ T4251] Bluetooth: hci1: command 0x0419 tx timeout [ 53.620157][ T4335] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 53.641502][ T4335] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 53.651397][ T4335] OCFS2: File system is now read-only. [ 53.656932][ T4335] (syz.4.16,4335,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 53.665244][ T4335] (syz.4.16,4335,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 53.673232][ T4335] (syz.4.16,4335,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 53.682038][ T4335] (syz.4.16,4335,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 53.691202][ T4335] (syz.4.16,4335,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 53.699610][ T4335] (syz.4.16,4335,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 53.707856][ T4335] (syz.4.16,4335,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 53.716549][ T4335] (syz.4.16,4335,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 53.725044][ T4335] (syz.4.16,4335,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 53.733965][ T4335] (syz.4.16,4335,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 53.743265][ T4335] (syz.4.16,4335,1):ocfs2_lock_allocators:2671 ERROR: status = -30 [ 53.751230][ T4335] (syz.4.16,4335,1):ocfs2_extend_allocation:591 ERROR: status = -30 [ 53.759302][ T4335] (syz.4.16,4335,1):ocfs2_allocate_unwritten_extents:1502 ERROR: status = -30 [ 53.768807][ T4335] (syz.4.16,4335,1):__ocfs2_change_file_space:2048 ERROR: status = -30 [ 53.870026][ T4335] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 53.892068][ T4335] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 53.902326][ T4335] (syz.4.16,4335,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 53.910728][ T4335] (syz.4.16,4335,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 53.918763][ T4335] (syz.4.16,4335,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 53.927588][ T4335] (syz.4.16,4335,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 53.936267][ T4335] (syz.4.16,4335,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 53.944882][ T4335] (syz.4.16,4335,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 53.953883][ T4335] (syz.4.16,4335,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 53.962918][ T4335] (syz.4.16,4335,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 53.971613][ T4335] (syz.4.16,4335,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 53.980460][ T4335] (syz.4.16,4335,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 53.990380][ T4335] (syz.4.16,4335,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 53.999378][ T4335] (syz.4.16,4335,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 54.008239][ T4335] (syz.4.16,4335,1):ocfs2_write_begin_nolock:1745 ERROR: status = -30 [ 54.016483][ T4335] (syz.4.16,4335,1):ocfs2_write_begin:1908 ERROR: status = -30 [ 54.057890][ T4328] loop1: detected capacity change from 0 to 262144 [ 54.065029][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 54.071169][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 54.077263][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 54.090227][ T4333] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 54.100226][ T4333] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 54.110470][ T4333] BTRFS info (device loop3): use zstd compression, level 3 [ 54.117831][ T4333] BTRFS info (device loop3): using free space tree [ 54.126469][ T4333] BTRFS info (device loop3): has skinny extents [ 54.143691][ T4328] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.13 (4328) [ 54.208353][ T4328] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 54.217679][ T4328] BTRFS info (device loop1): using free space tree [ 54.224283][ T4328] BTRFS info (device loop1): has skinny extents [ 54.230638][ T4328] BTRFS info (device loop1): flagging fs with big metadata feature [ 54.254914][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 54.305554][ T4322] loop0: detected capacity change from 0 to 32768 [ 54.358914][ T4322] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.12 (4322) [ 54.410914][ T4322] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 54.434772][ T4322] BTRFS info (device loop0): using free space tree [ 54.441315][ T4322] BTRFS info (device loop0): has skinny extents [ 54.486855][ T4360] loop4: detected capacity change from 0 to 8192 [ 54.703590][ T4333] BTRFS info (device loop3): enabling ssd optimizations [ 54.719733][ T4328] BTRFS info (device loop1): enabling ssd optimizations [ 54.811483][ T4397] loop2: detected capacity change from 0 to 512 [ 55.036649][ T4397] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.21: inode #1: comm syz.2.21: iget: illegal inode # [ 55.116502][ T4417] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.140992][ T4322] BTRFS info (device loop0): enabling ssd optimizations [ 55.153968][ T4397] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.21: error while reading EA inode 1 err=-117 [ 55.234870][ T4397] EXT4-fs (loop2): 1 orphan inode deleted [ 55.241941][ T4397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.298500][ T4397] device syzkaller1 entered promiscuous mode [ 56.152217][ T4456] loop3: detected capacity change from 0 to 256 [ 56.188386][ T4453] loop4: detected capacity change from 0 to 4096 [ 56.195422][ T4460] process 'syz.2.31' launched './file0' with NULL argv: empty string added [ 56.325351][ T4456] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 56.503295][ T4453] ntfs3: loop4: failed to convert "0080" to maciceland [ 56.545129][ T4453] ntfs3: loop4: failed to convert name for inode 1e. [ 56.842281][ T4465] fuse: root generation should be zero [ 56.875933][ T4463] loop3: detected capacity change from 0 to 32768 [ 56.892225][ T4463] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.32 (4463) [ 56.912047][ T4463] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 56.913284][ T4468] loop4: detected capacity change from 0 to 1024 [ 56.920785][ T4463] BTRFS info (device loop3): setting nodatacow, compression disabled [ 56.920881][ T4463] BTRFS info (device loop3): force clearing of disk cache [ 56.920898][ T4463] BTRFS info (device loop3): enabling ssd optimizations [ 56.920910][ T4463] BTRFS info (device loop3): using spread ssd allocation scheme [ 56.920925][ T4463] BTRFS info (device loop3): turning off barriers [ 56.920957][ T4463] BTRFS info (device loop3): disabling free space tree [ 56.972178][ T4463] BTRFS info (device loop3): not using ssd optimizations [ 56.979447][ T4463] BTRFS info (device loop3): not using spread ssd allocation scheme [ 56.988483][ T4463] BTRFS info (device loop3): has skinny extents [ 57.118834][ T4468] EXT4-fs (loop4): Ignoring removed nobh option [ 57.155899][ T4468] EXT4-fs (loop4): inline encryption not supported [ 57.191099][ T4468] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.250089][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,grpjquota=,resgid=0x0000000000000000,nojournal_checksum,discard,nobh,inlinecrypt,journal_ioprio=0x0000000000000002,dioread_nolock,,errors=continue. Quota mode: none. [ 57.313889][ T4463] BTRFS info (device loop3): clearing free space tree [ 57.321136][ T4463] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 57.331393][ T4463] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 57.444613][ T4341] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.495135][ T26] audit: type=1800 audit(1769040685.801:3): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.32" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 57.523030][ T4468] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.33: Allocating blocks 385-513 which overlap fs metadata [ 57.787223][ T4468] EXT4-fs (loop4): pa ffff888073c9f380: logic 16, phys. 129, len 24 [ 57.795802][ T4468] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 57.944812][ T4341] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.958252][ T4341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 58.169051][ T4341] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 58.181922][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.237085][ T4341] usb 1-1: Product: syz [ 58.246013][ T4519] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.272826][ T4341] usb 1-1: Manufacturer: syz [ 58.303875][ T4341] usb 1-1: SerialNumber: syz [ 58.329271][ T4341] usb 1-1: config 0 descriptor?? [ 58.402659][ T4341] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 58.471737][ T4341] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 58.545129][ T4341] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 58.554463][ T4341] usb 1-1: media controller created [ 58.604607][ T4545] loop4: detected capacity change from 0 to 1024 [ 58.608612][ T4547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 58.616428][ T4341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.669871][ T4545] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 58.754918][ T4545] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 58.756453][ T4523] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.795863][ T4341] DVB: Unable to find symbol tda10046_attach() [ 58.806180][ T4341] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 58.819064][ T4341] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 58.975624][ T4524] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.074600][ T4228] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.144514][ T4523] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 59.153439][ T4523] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 59.168649][ T4523] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 59.179375][ T4523] usb 3-1: config 220 has no interface number 2 [ 59.191366][ T4523] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 59.216699][ T4523] usb 3-1: config 220 interface 0 has no altsetting 0 [ 59.223513][ T4523] usb 3-1: config 220 interface 76 has no altsetting 0 [ 59.236302][ T4523] usb 3-1: config 220 interface 1 has no altsetting 0 [ 59.260939][ T4565] Illegal XDP return value 4294967294, expect packet loss! [ 59.334500][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 59.334575][ T4524] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 59.353015][ T4524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.384749][ T4341] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 59.397693][ T4341] usb 1-1: USB disconnect, device number 2 [ 59.406685][ T4523] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 59.421536][ T4523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.429961][ T4523] usb 3-1: Product: syz [ 59.434146][ T4523] usb 3-1: Manufacturer: syz [ 59.443964][ T4523] usb 3-1: SerialNumber: syz [ 59.458627][ T4524] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 59.468733][ T4524] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 59.481715][ T4524] usb 2-1: Manufacturer: syz [ 59.484613][ T4228] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.500090][ T4524] usb 2-1: config 0 descriptor?? [ 59.519464][ T4228] usb 4-1: config 0 interface 0 has no altsetting 0 [ 59.527144][ T4228] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 59.539089][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.548917][ T4228] usb 4-1: config 0 descriptor?? [ 59.604533][ T4524] rc_core: IR keymap rc-hauppauge not found [ 59.610753][ T4524] Registered IR keymap rc-empty [ 59.614576][ T4429] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.619770][ T4524] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 59.641983][ T4524] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 59.776122][ T4341] usb 2-1: USB disconnect, device number 2 [ 59.805445][ T4523] uvcvideo 3-1:220.1: Unknown video format 04000000-0000-0002-0000-000400000000 [ 59.814980][ T4523] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 59.821960][ T4523] usb 3-1: No valid video chain found. [ 59.828017][ T4523] usb 3-1: selecting invalid altsetting 0 [ 59.915260][ T4523] usb 3-1: selecting invalid altsetting 0 [ 59.921147][ T4523] usbtest: probe of 3-1:220.1 failed with error -22 [ 59.934940][ T4523] usb 3-1: USB disconnect, device number 2 [ 60.026925][ T4429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.043389][ T4429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.063217][ T4429] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 60.089172][ T4228] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 60.109267][ T4429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.123820][ T4429] usb 5-1: config 0 descriptor?? [ 60.463435][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.492937][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.511055][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.529042][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.553571][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.576797][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.600749][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.629458][ T4429] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 60.647592][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.660517][ T4429] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 60.674402][ T4429] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 60.681662][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.701903][ T4429] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 60.717218][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.743932][ T4429] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 60.754094][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.778626][ T4429] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 60.787123][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.799006][ T4429] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 60.814417][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.834264][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.843295][ T4429] cp2112 0003:10C4:EA90.0003: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 60.870114][ T4578] loop0: detected capacity change from 0 to 131072 [ 60.871315][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.892963][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.900960][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.914081][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.943502][ T4578] F2FS-fs (loop0): invalid crc value [ 60.963413][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 60.979662][ T4582] loop1: detected capacity change from 0 to 32768 [ 60.979917][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.008164][ T4578] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.014634][ T4429] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 61.033360][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.047329][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.060206][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.063913][ T4578] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 61.084423][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.088528][ T4578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 61.093704][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.107519][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.114999][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.122686][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.130199][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.150154][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.156759][ T4582] XFS (loop1): Mounting V5 Filesystem [ 61.193153][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.214685][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.226329][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.235280][ T4523] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 61.241470][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.258500][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.270504][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.278487][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.286209][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.293825][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.301594][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.309635][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.319978][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.327649][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.335565][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.343172][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.351261][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.360318][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.368423][ T4251] hid-generic 0000:0000:0003.0002: unknown main item tag 0x0 [ 61.369399][ T4582] XFS (loop1): Ending clean mount [ 61.381204][ T4251] hid-generic 0000:0000:0003.0002: hidraw2: HID v0.00 Device [syz0] on syz1 [ 61.405695][ T4251] usb 4-1: USB disconnect, device number 2 [ 61.437628][ T4582] XFS (loop1): Quotacheck needed: Please wait. [ 61.598258][ T4582] XFS (loop1): Quotacheck: Done. [ 61.625663][ T4429] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 61.649585][ T4523] usb 3-1: config 0 has no interfaces? [ 61.659878][ T4429] usb 5-1: USB disconnect, device number 2 [ 61.660233][ T4523] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 61.709682][ T4523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.746435][ T4523] usb 3-1: config 0 descriptor?? [ 61.808112][ T4606] fido_id[4606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 61.954284][ T4184] XFS (loop1): Unmounting Filesystem [ 62.176052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.782183][ T4429] usb 3-1: USB disconnect, device number 3 [ 63.294373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.304145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 63.321034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 63.329904][ T4612] ODEBUG: Out of memory. ODEBUG disabled [ 63.337795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 63.347407][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.358039][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.368175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.379262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.388550][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.457600][ T4612] syz.3.64 (4612): drop_caches: 2 [ 63.824557][ T4640] loop2: detected capacity change from 0 to 512 [ 63.833332][ T4642] loop1: detected capacity change from 0 to 128 [ 63.863687][ T4649] loop3: detected capacity change from 0 to 16 [ 63.900607][ T4640] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 64.000153][ T4652] attempt to access beyond end of device [ 64.000153][ T4652] loop1: rw=2049, want=281, limit=128 [ 64.200035][ T4655] loop4: detected capacity change from 0 to 512 [ 64.253044][ T4655] EXT4-fs (loop4): Ignoring removed bh option [ 64.408904][ T4658] loop2: detected capacity change from 0 to 40427 [ 64.422835][ T4658] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 64.431658][ T4658] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x724 [ 64.449523][ T4658] F2FS-fs (loop2): invalid crc value [ 64.470362][ T4665] loop1: detected capacity change from 0 to 1024 [ 64.483418][ T4655] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,usrquota,bh,,errors=continue. Quota mode: writeback. [ 64.502177][ T4655] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.505066][ T4658] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.538691][ T4658] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 64.564155][ T4665] EXT4-fs (loop1): Ignoring removed nobh option [ 64.564217][ T4658] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.585086][ T4665] EXT4-fs (loop1): inline encryption not supported [ 64.591764][ T4665] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.629729][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 64.656546][ T4658] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6a4/0x1dc0 [ 64.685133][ T4658] attempt to access beyond end of device [ 64.685133][ T4658] loop2: rw=2049, want=45104, limit=40427 [ 64.790942][ T4191] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x66/0x1b0 [ 64.952688][ T4191] attempt to access beyond end of device [ 64.952688][ T4191] loop2: rw=2051, want=45104, limit=40427 [ 65.057176][ T4191] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 65.197327][ T4686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=896 (1792 ns) > initial count (768 ns). Using initial count to start timer. [ 65.199271][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.232503][ T4691] syz.3.87 uses obsolete (PF_INET,SOCK_PACKET) [ 65.311899][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.332471][ T4696] loop1: detected capacity change from 0 to 128 [ 65.355637][ T4696] EXT4-fs (loop1): Test dummy encryption mode enabled [ 65.394593][ T4696] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 65.427212][ T4682] netlink: 'syz.0.88': attribute type 16 has an invalid length. [ 65.438688][ T4682] netlink: 'syz.0.88': attribute type 17 has an invalid length. [ 65.479365][ T4698] loop4: detected capacity change from 0 to 512 [ 65.486613][ T4682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.624170][ T4698] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.657392][ T4698] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.700268][ T4698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.745670][ T4698] EXT4-fs (loop4): 1 truncate cleaned up [ 65.751533][ T4698] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 65.894783][ T4698] EXT4-fs (loop4): shut down requested (1) [ 66.032283][ T4712] loop4: detected capacity change from 0 to 128 [ 66.219455][ T4250] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.431994][ T4712] loop4: detected capacity change from 0 to 32768 [ 66.523280][ T4712] XFS (loop4): Mounting V5 Filesystem [ 66.634580][ T4250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 66.679652][ T4716] XFS (loop1): Mounting V5 Filesystem [ 66.693194][ T4712] XFS (loop4): Ending clean mount [ 66.710945][ T4712] XFS (loop4): Quotacheck needed: Please wait. [ 66.720866][ T4716] XFS (loop1): Ending clean mount [ 66.740955][ T4733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 66.834131][ T4712] XFS (loop4): Quotacheck: Done. [ 66.854429][ T4250] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 66.863586][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.872230][ T4250] usb 4-1: Product: syz [ 66.876496][ T4250] usb 4-1: Manufacturer: syz [ 66.881097][ T4250] usb 4-1: SerialNumber: syz [ 66.889373][ T4716] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 66.903135][ T4250] usb 4-1: config 0 descriptor?? [ 66.967853][ T4250] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 66.997250][ T4250] gm12u320: probe of 4-1:0.0 failed with error -5 [ 67.013494][ T4250] usb-storage 4-1:0.0: USB Mass Storage device detected [ 67.051161][ T4184] XFS (loop1): Unmounting Filesystem [ 67.062979][ T4250] usb-storage 4-1:0.0: device ignored [ 67.063578][ T4183] XFS (loop4): Unmounting Filesystem [ 67.219204][ T4428] usb 4-1: USB disconnect, device number 3 [ 67.505514][ T4753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.610138][ T4755] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.104: inode has both inline data and extents flags [ 67.631532][ T4755] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.104: couldn't read orphan inode 15 (err -117) [ 67.661310][ T4755] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.710685][ T4755] syz.1.104 (pid 4755) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 67.728119][ T4755] EXT4-fs (loop1): shut down requested (1) [ 67.735586][ T4755] fscrypt (loop1, inode 18): Error -5 getting encryption context [ 67.883664][ T4759] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 67.898475][ T4759] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 68.152455][ T4779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.175166][ T4780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.300288][ T4783] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.320758][ T4787] mkiss: ax0: crc mode is auto. [ 68.354526][ T4783] EXT4-fs (loop4): Ignoring removed oldalloc option [ 68.399204][ T4783] EXT4-fs (loop4): 1 truncate cleaned up [ 68.419206][ T4783] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 68.482008][ T4791] netlink: 'syz.2.116': attribute type 5 has an invalid length. [ 68.636569][ T4783] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.113: Invalid inode table block 2937811401 in block_group 0 [ 68.663386][ T4201] block nbd0: Receive control failed (result -104) [ 68.963464][ T4785] set_capacity_and_notify: 5 callbacks suppressed [ 68.963478][ T4785] loop3: detected capacity change from 0 to 32768 [ 69.034090][ T4806] loop2: detected capacity change from 0 to 128 [ 69.100575][ T4785] [ 69.100575][ T4785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.100575][ T4785] [ 69.102729][ T4806] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.216916][ T4806] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.307560][ T4190] [ 69.307560][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.307560][ T4190] [ 69.338742][ T4190] [ 69.338742][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.338742][ T4190] [ 69.685440][ T4829] loop1: detected capacity change from 0 to 128 [ 69.704726][ T4830] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.127'. [ 69.766695][ T4834] loop2: detected capacity change from 0 to 512 [ 69.792338][ T4829] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.805790][ T4829] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.826782][ T4834] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 69.834140][ T4834] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.871880][ T4834] EXT4-fs (loop2): 1 truncate cleaned up [ 69.887966][ T4834] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,data_err=ignore,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 70.097866][ T4840] netlink: 280 bytes leftover after parsing attributes in process `syz.1.132'. [ 70.129644][ T4840] netlink: 280 bytes leftover after parsing attributes in process `syz.1.132'. [ 70.142879][ T4826] loop3: detected capacity change from 0 to 32768 [ 70.281438][ T4838] loop4: detected capacity change from 0 to 40427 [ 70.306121][ T4846] loop1: detected capacity change from 0 to 256 [ 70.320983][ T4846] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.336308][ T4846] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 70.346168][ T4838] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 70.354364][ T4838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.367479][ T4838] F2FS-fs (loop4): invalid crc value [ 70.369545][ T4826] XFS (loop3): Mounting V5 Filesystem [ 70.418896][ T4846] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 70.440568][ T4838] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.536574][ T4826] XFS (loop3): Ending clean mount [ 70.544221][ T4826] XFS (loop3): Quotacheck needed: Please wait. [ 70.585071][ T4838] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.592233][ T4826] XFS (loop3): Quotacheck: Done. [ 70.594629][ T4838] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.762012][ T4190] XFS (loop3): Unmounting Filesystem [ 70.891733][ T4858] loop1: detected capacity change from 0 to 32768 [ 70.955916][ T4861] loop2: detected capacity change from 0 to 1024 [ 71.076647][ T4858] XFS (loop1): Mounting V5 Filesystem [ 71.157989][ T4191] hfsplus: walked past end of dir [ 71.196691][ T4858] XFS (loop1): Ending clean mount [ 71.242053][ T4858] XFS (loop1): Quotacheck needed: Please wait. [ 71.289162][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.296520][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.339219][ T4858] XFS (loop1): Quotacheck: Done. [ 71.415853][ T4871] loop3: detected capacity change from 0 to 8192 [ 71.426633][ T4184] XFS (loop1): Unmounting Filesystem [ 71.501588][ T4871] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 71.512382][ T4871] REISERFS (device loop3): using ordered data mode [ 71.520249][ T4871] reiserfs: using flush barriers [ 71.558463][ T4871] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.585257][ T4871] REISERFS (device loop3): checking transaction log (loop3) [ 71.826184][ T4871] REISERFS (device loop3): Using tea hash to sort names [ 71.847205][ T4871] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 71.885850][ T4871] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 72.133114][ T4883] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.296633][ T4881] chnl_net:caif_netlink_parms(): no params data found [ 72.325090][ T4892] capability: warning: `syz.1.145' uses deprecated v2 capabilities in a way that may be insecure [ 72.341607][ T4890] kvm: pic: non byte read [ 72.358150][ T4890] kvm: pic: non byte read [ 72.362871][ T4890] kvm: pic: level sensitive irq not supported [ 72.362947][ T4890] kvm: pic: non byte read [ 72.374100][ T4890] kvm: pic: level sensitive irq not supported [ 72.374158][ T4890] kvm: pic: non byte read [ 72.385266][ T4890] kvm: pic: non byte read [ 72.390815][ T4890] kvm: pic: single mode not supported [ 72.390891][ T4890] kvm: pic: non byte read [ 72.401119][ T4890] kvm: pic: non byte read [ 72.406793][ T4890] kvm: pic: non byte read [ 72.408835][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.411613][ T4890] kvm: pic: non byte read [ 72.425369][ T4881] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.445413][ T4881] device bridge_slave_0 entered promiscuous mode [ 72.462846][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.484507][ T4881] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.492899][ T4881] device bridge_slave_1 entered promiscuous mode [ 72.518998][ T4881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.531342][ T4881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.564184][ T4881] team0: Port device team_slave_0 added [ 72.575125][ T4881] team0: Port device team_slave_1 added [ 72.596466][ T4881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.603546][ T4881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.646390][ T4881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.702002][ T4881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.724242][ T4881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.763454][ T4881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.816978][ T4881] device hsr_slave_0 entered promiscuous mode [ 72.823998][ T4881] device hsr_slave_1 entered promiscuous mode [ 72.831526][ T4881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.839361][ T4881] Cannot create hsr debugfs directory [ 73.081845][ T4881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.112536][ T4881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.149904][ T4881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.167208][ T4881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.298796][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.305963][ T4881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.313320][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.320637][ T4881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.450487][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.490668][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.515221][ T4881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.561526][ T4908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.150 (4908) [ 73.568456][ T4881] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.598327][ T4908] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 73.617696][ T4908] BTRFS info (device loop3): using free space tree [ 73.627904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.638569][ T4908] BTRFS info (device loop3): has skinny extents [ 73.641221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.673393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.698214][ T4919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.735204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.751921][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.759094][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.790721][ T4919] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.843292][ T4919] EXT4-fs (loop1): 1 truncate cleaned up [ 73.860535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.861747][ T4919] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,dioread_lock,quota,,errors=continue. Quota mode: writeback. [ 73.888243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.907106][ T4908] BTRFS info (device loop3): enabling ssd optimizations [ 73.935437][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.942525][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.961818][ T4908] BTRFS info (device loop3): checking UUID tree [ 73.984022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.007463][ T4919] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 74.028764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.042272][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 74.052205][ T4919] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #18: comm syz.1.152: mark_inode_dirty error [ 74.084112][ T4919] EXT4-fs error (device loop1): ext4_get_max_inline_size:115: inode #18: comm syz.1.152: can't get inode location 18 [ 74.085630][ T4521] Bluetooth: hci3: command 0x0409 tx timeout [ 74.118728][ T4919] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 74.129806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.145984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.164426][ T4919] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #18: comm syz.1.152: mark_inode_dirty error [ 74.189466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.213264][ T4919] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.152: Invalid block bitmap block 0 in block_group 0 [ 74.227704][ T4881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.257140][ T4919] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 74.284935][ T4919] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #18: comm syz.1.152: mark_inode_dirty error [ 74.285690][ T4881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.305348][ T4919] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 74.386013][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.414630][ T4919] EXT4-fs error (device loop1): ext4_truncate:4279: inode #18: comm syz.1.152: mark_inode_dirty error [ 74.421379][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.466366][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.475183][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.489840][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.565100][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.583998][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.787446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.795393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.808276][ T4881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.920156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.929235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.053787][ T3023] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.080249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.094951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.108149][ T4881] device veth0_vlan entered promiscuous mode [ 75.127730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.145164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.171396][ T3023] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.192481][ T4881] device veth1_vlan entered promiscuous mode [ 75.273174][ T3023] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.296848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.308279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.316509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.325388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.340200][ T3023] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.363395][ T4881] device veth0_macvtap entered promiscuous mode [ 75.390060][ T4881] device veth1_macvtap entered promiscuous mode [ 75.417111][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.428056][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.438351][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.450333][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.460563][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.471843][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.482300][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.493634][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.503816][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.515478][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.531398][ T4881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.542202][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.553098][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.563962][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.579497][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.589858][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.601009][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.611676][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.622382][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.632421][ T4881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.643088][ T4881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.654046][ T4881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.663399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.672526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.680742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.690908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.700298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.709339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.739787][ T4970] chnl_net:caif_netlink_parms(): no params data found [ 75.761518][ T4881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.772809][ T4881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784625][ T4881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.793388][ T4881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854449][ T4521] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.933962][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.962270][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.972516][ T4970] device bridge_slave_0 entered promiscuous mode [ 75.992409][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.001484][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.014140][ T4970] device bridge_slave_1 entered promiscuous mode [ 76.088859][ T4982] block device autoloading is deprecated and will be removed. [ 76.096776][ T4521] usb 4-1: Using ep0 maxpacket: 32 [ 76.140369][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.152217][ T4970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.164609][ T4430] Bluetooth: hci3: command 0x041b tx timeout [ 76.201313][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.217052][ T4521] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 76.238004][ T4521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.243257][ T4990] netlink: 7 bytes leftover after parsing attributes in process `syz.4.163'. [ 76.268881][ T4521] usb 4-1: config 0 descriptor?? [ 76.289734][ T4970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.303177][ T4994] set_capacity_and_notify: 2 callbacks suppressed [ 76.303190][ T4994] loop4: detected capacity change from 0 to 128 [ 76.334589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.356337][ T4521] gspca_main: sunplus-2.14.0 probing 041e:400b [ 76.356591][ T4970] team0: Port device team_slave_0 added [ 76.408276][ T1111] cfg80211: failed to load regulatory.db [ 76.434238][ T4614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.453480][ T4614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.540276][ T4970] team0: Port device team_slave_1 added [ 76.560459][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.693988][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.711539][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.753494][ T4970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.880768][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.894501][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.952807][ T4970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.101551][ T4970] device hsr_slave_0 entered promiscuous mode [ 77.122933][ T4970] device hsr_slave_1 entered promiscuous mode [ 77.157826][ T4970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.206772][ T4970] Cannot create hsr debugfs directory [ 77.293850][ T4429] Bluetooth: hci0: command 0x0409 tx timeout [ 77.514419][ T5024] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.537924][ T5024] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.818293][ T3023] device hsr_slave_0 left promiscuous mode [ 77.831805][ T3023] device hsr_slave_1 left promiscuous mode [ 77.864620][ T3023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.883487][ T3023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.911337][ T3023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.934834][ T3023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.952639][ T3023] device bridge_slave_1 left promiscuous mode [ 77.967350][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.982744][ T3023] device bridge_slave_0 left promiscuous mode [ 77.992740][ T3023] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.012542][ T3023] device veth1_macvtap left promiscuous mode [ 78.019934][ T3023] device veth0_macvtap left promiscuous mode [ 78.028011][ T3023] device veth1_vlan left promiscuous mode [ 78.033901][ T3023] device veth0_vlan left promiscuous mode [ 78.114560][ T4521] gspca_sunplus: reg_w_riv err -71 [ 78.120291][ T4521] sunplus: probe of 4-1:0.0 failed with error -71 [ 78.138663][ T4521] usb 4-1: USB disconnect, device number 4 [ 78.218493][ T3023] team0 (unregistering): Port device team_slave_1 removed [ 78.236121][ T3023] team0 (unregistering): Port device team_slave_0 removed [ 78.244845][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 78.258152][ T3023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.271906][ T3023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.344993][ T3023] bond0 (unregistering): Released all slaves [ 78.420400][ T4970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.447877][ T4970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.462987][ T4970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.483173][ T4970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 78.727866][ T4970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.746173][ T4970] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.753380][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.783161][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.791624][ T5062] loop5: detected capacity change from 0 to 512 [ 78.832814][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.895063][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.922597][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.929743][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.987137][ T5062] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.006421][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.031888][ T5062] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.063191][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.129463][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.136815][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.152604][ T5074] loop3: detected capacity change from 0 to 512 [ 79.160816][ T5062] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.175: corrupted inode contents [ 79.192434][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.210912][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.221120][ T5064] loop4: detected capacity change from 0 to 32768 [ 79.228680][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.241504][ T5062] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.175: mark_inode_dirty error [ 79.252993][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.266638][ T5062] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.175: corrupted inode contents [ 79.280512][ T5062] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.175: mark_inode_dirty error [ 79.282639][ T5074] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.308513][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.364566][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 79.382189][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.404140][ T5074] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.418046][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.441718][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.455174][ T5064] XFS (loop4): Mounting V5 Filesystem [ 79.516975][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.585524][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.644082][ T5074] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.178: Invalid inode table block 0 in block_group 0 [ 79.664424][ T5064] XFS (loop4): Ending clean mount [ 79.669999][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.705099][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.745044][ T5074] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 79.747336][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.784875][ T5074] EXT4-fs error (device loop3): __ext4_unlink:3327: inode #2: comm syz.3.178: mark_inode_dirty error [ 79.960192][ T4614] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm kworker/u4:9: Invalid inode table block 0 in block_group 0 [ 80.147286][ T4183] XFS (loop4): Unmounting Filesystem [ 80.205416][ T5105] loop5: detected capacity change from 0 to 2048 [ 80.249568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.263333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.282396][ T4970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.350634][ T5109] loop3: detected capacity change from 0 to 2048 [ 80.375967][ T4341] Bluetooth: hci3: command 0x0419 tx timeout [ 80.382980][ T5105] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e01c, mo2=0002] [ 80.438636][ T5105] System zones: 0-7 [ 80.448025][ T5105] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,nouid32,debug,acl,,errors=continue. Quota mode: none. [ 80.581951][ T26] audit: type=1800 audit(1769040708.881:4): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.182" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 80.585242][ T5105] EXT4-fs (loop5): shut down requested (0) [ 80.612864][ T5109] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 81.232272][ T5109] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.293243][ T5138] loop5: detected capacity change from 0 to 32768 [ 81.301756][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.311225][ T5109] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 396 with error 28 [ 81.315051][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.326665][ T5109] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.326665][ T5109] [ 81.350766][ T5109] EXT4-fs (loop3): Total free blocks count 0 [ 81.357430][ T5109] EXT4-fs (loop3): Free/Dirty block details [ 81.363478][ T5109] EXT4-fs (loop3): free_blocks=2415919104 [ 81.369714][ T5109] EXT4-fs (loop3): dirty_blocks=400 [ 81.375387][ T5109] EXT4-fs (loop3): Block reservation details [ 81.381471][ T5138] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.184 (5138) [ 81.412162][ T5138] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 81.421272][ T5138] BTRFS info (device loop5): using free space tree [ 81.428359][ T5138] BTRFS info (device loop5): has skinny extents [ 81.436226][ T5109] EXT4-fs (loop3): i_reserved_data_blocks=25 [ 81.444479][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 81.477859][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.533648][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.548204][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.556315][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.572784][ T4970] device veth0_vlan entered promiscuous mode [ 81.682883][ T4970] device veth1_vlan entered promiscuous mode [ 81.803260][ T4970] device veth0_macvtap entered promiscuous mode [ 81.856045][ T5138] BTRFS info (device loop5): enabling ssd optimizations [ 81.913875][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.930767][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.982605][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.989936][ T5140] loop4: detected capacity change from 0 to 32768 [ 81.996405][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.015092][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.061881][ T4970] device veth1_macvtap entered promiscuous mode [ 82.151053][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.193877][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.222708][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.273568][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.295066][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.330611][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.364508][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.419698][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.457412][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.498639][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.543144][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.583005][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.621172][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.658678][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.718091][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.747784][ T26] audit: type=1800 audit(1769040711.051:5): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.188" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=37268 res=0 errno=0 [ 82.749612][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.891577][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.927603][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.957406][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.972967][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.994372][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.015927][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.025951][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.036501][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.055681][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.070690][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.080008][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.101547][ T4970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.124210][ T4970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.146201][ T5204] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.165238][ T4970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.175208][ T4970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.324732][ T4614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.333011][ T4614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.405191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.427741][ T5210] netlink: 84 bytes leftover after parsing attributes in process `syz.4.191'. [ 83.443319][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.457980][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.505031][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.524820][ T4520] Bluetooth: hci0: command 0x0419 tx timeout [ 83.656322][ T5222] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.844573][ T5182] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 83.924679][ T4238] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 84.204688][ T5182] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.227580][ T5182] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 84.264419][ T5182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.304727][ T4238] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.313407][ T5182] usb 7-1: config 0 descriptor?? [ 84.319798][ T4238] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.333390][ T4238] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.342518][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.361942][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 84.366444][ T5182] pwc: Askey VC010 type 2 USB webcam detected. [ 84.439028][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.446357][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.455010][ T5255] device bridge_slave_0 entered promiscuous mode [ 84.464019][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.471498][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.479942][ T5255] device bridge_slave_1 entered promiscuous mode [ 84.511654][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.529720][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.572301][ T5251] loop5: detected capacity change from 0 to 32768 [ 84.593424][ T5251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.200 (5251) [ 84.595956][ T5255] team0: Port device team_slave_0 added [ 84.607222][ T4238] usb 5-1: usb_control_msg returned -32 [ 84.619264][ T4238] usbtmc 5-1:16.0: can't read capabilities [ 84.642737][ T5255] team0: Port device team_slave_1 added [ 84.662801][ T5251] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 84.689843][ T5251] BTRFS info (device loop5): using free space tree [ 84.714553][ T5251] BTRFS info (device loop5): has skinny extents [ 84.722466][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.730254][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.768576][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.796017][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.803028][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.804523][ T5182] pwc: recv_control_msg error -32 req 02 val 2b00 [ 84.831004][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.885004][ T5251] BTRFS info (device loop5): enabling ssd optimizations [ 84.918882][ T5255] device hsr_slave_0 entered promiscuous mode [ 84.939014][ T5255] device hsr_slave_1 entered promiscuous mode [ 84.952871][ T5255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.961119][ T5255] Cannot create hsr debugfs directory [ 85.004601][ T5182] pwc: recv_control_msg error -32 req 02 val 2700 [ 85.044892][ T5182] pwc: recv_control_msg error -32 req 02 val 2c00 [ 85.114429][ T5182] pwc: recv_control_msg error -32 req 04 val 1000 [ 85.154568][ T5182] pwc: recv_control_msg error -32 req 04 val 1300 [ 85.371958][ T5255] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 85.415160][ T5182] pwc: recv_control_msg error -71 req 02 val 2000 [ 85.435051][ T5182] pwc: recv_control_msg error -71 req 02 val 2100 [ 85.461552][ T5182] pwc: recv_control_msg error -71 req 04 val 1500 [ 85.494426][ T5182] pwc: recv_control_msg error -71 req 02 val 2500 [ 85.524813][ T5182] pwc: recv_control_msg error -71 req 02 val 2400 [ 85.535810][ T5255] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 85.546507][ T5182] pwc: recv_control_msg error -71 req 02 val 2600 [ 85.549436][ T5283] loop3: detected capacity change from 0 to 32768 [ 85.566821][ T5255] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 85.600926][ T5182] pwc: recv_control_msg error -71 req 02 val 2900 [ 85.634487][ T5182] pwc: recv_control_msg error -71 req 02 val 2800 [ 85.635504][ T5255] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 85.657773][ T5182] pwc: recv_control_msg error -71 req 04 val 1100 [ 85.694860][ T5182] pwc: recv_control_msg error -71 req 04 val 1200 [ 85.726466][ T5305] loop5: detected capacity change from 0 to 1024 [ 85.751655][ T5182] pwc: Registered as video103. [ 85.753578][ T5283] UFO tlock:0xffffc90002912120 [ 85.759864][ T5182] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 85.788382][ T5283] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 85.788382][ T5283] [ 85.818575][ T5182] usb 7-1: USB disconnect, device number 2 [ 85.844152][ T5283] ERROR: (device loop3): remounting filesystem as read-only [ 85.873715][ T5283] jfs_mkdir: dtSearch returned -5 [ 85.879885][ T5305] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.946908][ T4445] usb 5-1: USB disconnect, device number 3 [ 86.008449][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.059800][ T5305] EXT4-fs error (device loop5) in ext4_setattr:5626: Out of memory [ 86.102481][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.113604][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.129290][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.164839][ T4238] Bluetooth: hci5: command 0x0409 tx timeout [ 86.175975][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.186018][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.209654][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.216854][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.247012][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.265678][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.274800][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.331828][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.339065][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.404893][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.427735][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.449484][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.511208][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.536418][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.554530][ T5330] netlink: 'syz.3.204': attribute type 12 has an invalid length. [ 86.575346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.592586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.629840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.640322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.667557][ T5255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.684565][ T4520] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.701577][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.714808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.738700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.987958][ T5346] loop6: detected capacity change from 0 to 2048 [ 87.010681][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.028055][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.050426][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.121373][ T5346] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.184826][ T4520] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.197352][ T5346] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 87.202273][ T4520] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 87.217007][ T5346] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 87.236467][ T5346] EXT4-fs (loop6): This should not happen!! Data will be lost [ 87.236467][ T5346] [ 87.247275][ T5346] EXT4-fs (loop6): Total free blocks count 0 [ 87.248121][ T5356] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 87.253448][ T5346] EXT4-fs (loop6): Free/Dirty block details [ 87.276346][ T5346] EXT4-fs (loop6): free_blocks=2415919504 [ 87.282376][ T5346] EXT4-fs (loop6): dirty_blocks=16 [ 87.299625][ T5346] EXT4-fs (loop6): Block reservation details [ 87.314528][ T4520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.344129][ T5346] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 87.361693][ T5358] EXT4-fs (loop6): Cannot specify journal on remount [ 87.377156][ T4520] usb 6-1: config 0 descriptor?? [ 87.481102][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.521842][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.576632][ T5255] device veth0_vlan entered promiscuous mode [ 87.591268][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.602029][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.610435][ T5347] loop3: detected capacity change from 0 to 40427 [ 87.632239][ T5255] device veth1_vlan entered promiscuous mode [ 87.660004][ T5347] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 87.677116][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.685672][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.693031][ T5347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 87.702386][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.712310][ T5348] loop4: detected capacity change from 0 to 40427 [ 87.749789][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.758147][ T5348] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 87.760928][ T5347] F2FS-fs (loop3): invalid crc value [ 87.791098][ T5347] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 87.808894][ T5255] device veth0_macvtap entered promiscuous mode [ 87.814480][ T5348] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.839598][ T5362] loop6: detected capacity change from 0 to 4096 [ 87.862998][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.872209][ T5348] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.880073][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.905710][ T5362] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 87.916464][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.926187][ T5347] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 87.933258][ T5347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.965729][ T5255] device veth1_macvtap entered promiscuous mode [ 88.036846][ T5348] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 88.057784][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.062818][ T5348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.103661][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.116821][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.127548][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.164837][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.184903][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.206452][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.217370][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.234764][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.245429][ T5300] Bluetooth: hci5: command 0x041b tx timeout [ 88.251692][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.261937][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.286612][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.309599][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.330327][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.348820][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.410386][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.461517][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.493774][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.516511][ T5347] attempt to access beyond end of device [ 88.516511][ T5347] loop3: rw=2049, want=57344, limit=40427 [ 88.530587][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.541002][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.565927][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.577616][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.595743][ T4520] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 88.596262][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.619638][ T5347] attempt to access beyond end of device [ 88.619638][ T5347] loop3: rw=2049, want=53248, limit=40427 [ 88.643528][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.662183][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.683979][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.695517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.704263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.768015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.789271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.825187][ T5347] attempt to access beyond end of device [ 88.825187][ T5347] loop3: rw=2049, want=68928, limit=40427 [ 88.838490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.853201][ T4521] usb 6-1: USB disconnect, device number 2 [ 88.860717][ T5255] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.882081][ T5255] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.913854][ T5255] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.935474][ T5255] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.955593][ T5377] netlink: 41402 bytes leftover after parsing attributes in process `syz.6.216'. [ 89.072106][ T4190] attempt to access beyond end of device [ 89.072106][ T4190] loop3: rw=2049, want=45104, limit=40427 [ 89.090412][ T5380] overlayfs: failed to clone upperpath [ 89.131667][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.155111][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.174253][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.202947][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.225299][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.266845][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.530628][ T5391] loop7: detected capacity change from 0 to 4096 [ 89.600526][ T4521] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 89.629544][ T5391] NILFS (loop7): invalid segment: Checksum error in segment payload [ 89.657281][ T5391] NILFS (loop7): trying rollback from an earlier position [ 89.722548][ T5391] NILFS (loop7): recovery complete [ 89.771879][ T5402] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.024161][ T4521] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.043533][ T4521] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.076858][ T4521] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.083594][ T4521] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 90.124501][ T5391] NILFS (loop7): unrecognized mount option "ÿÿ01777777777777777777777¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 90.143210][ T5396] loop5: detected capacity change from 0 to 32768 [ 90.149791][ T4521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.192344][ T5396] JBD2: Ignoring recovery information on journal [ 90.202436][ T4521] usb 5-1: config 0 descriptor?? [ 90.299023][ T5403] loop3: detected capacity change from 0 to 32768 [ 90.324510][ T5300] Bluetooth: hci5: command 0x040f tx timeout [ 90.392114][ T5396] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 90.427228][ T5403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.223 (5403) [ 90.498829][ T5403] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 90.583669][ T5403] BTRFS info (device loop3): using free space tree [ 90.630597][ T5403] BTRFS info (device loop3): has skinny extents [ 90.736039][ T5396] (syz.5.221,5396,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 90.772665][ T5396] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 90.815866][ T5396] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 90.828086][ T5396] OCFS2: File system is now read-only. [ 90.833578][ T5396] (syz.5.221,5396,0):ocfs2_test_suballoc_bit:2792 ERROR: read group 17056 failed -30 [ 90.843304][ T5396] (syz.5.221,5396,0):ocfs2_test_suballoc_bit:2803 ERROR: status = -30 [ 90.852851][ T5396] (syz.5.221,5396,0):ocfs2_test_inode_bit:2865 ERROR: test suballoc bit failed -30 [ 90.867095][ T5396] (syz.5.221,5396,0):ocfs2_test_inode_bit:2874 ERROR: status = -30 [ 90.878771][ T5396] (syz.5.221,5396,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -30 [ 90.914247][ T5424] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.934555][ T5424] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 90.960261][ T5403] BTRFS info (device loop3): enabling ssd optimizations [ 90.996038][ T4521] usbhid 5-1:0.0: can't add hid device: -71 [ 91.002127][ T4521] usbhid: probe of 5-1:0.0 failed with error -71 [ 91.010637][ T4521] usb 5-1: USB disconnect, device number 4 [ 91.568037][ T4881] ocfs2: Unmounting device (7,5) on (node local) [ 91.914479][ T4444] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 92.015774][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 92.069038][ T5482] bond0: (slave bond_slave_1): Releasing backup interface [ 92.235633][ T5480] loop5: detected capacity change from 0 to 32768 [ 92.329349][ T4444] usb 8-1: unable to get BOS descriptor or descriptor too short [ 92.337265][ T5480] XFS (loop5): Mounting V5 Filesystem [ 92.384949][ T4444] usb 8-1: not running at top speed; connect to a high speed hub [ 92.405002][ T4434] Bluetooth: hci5: command 0x0419 tx timeout [ 92.431708][ T5480] XFS (loop5): Ending clean mount [ 92.465281][ T4444] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.475744][ T4444] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 92.487345][ T4444] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 92.645175][ T5502] fuse: Bad value for 'fd' [ 92.654572][ T4444] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.684032][ T4444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.697681][ T4444] usb 8-1: Product: syz [ 92.701883][ T4444] usb 8-1: Manufacturer: syz [ 92.706674][ T4444] usb 8-1: SerialNumber: syz [ 92.720568][ T4881] XFS (loop5): Unmounting Filesystem [ 93.074775][ T4444] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.098098][ T4444] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 93.122799][ T4444] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 93.144125][ T5520] mkiss: ax0: crc mode is auto. [ 93.182254][ T4444] usb 8-1: USB disconnect, device number 2 [ 93.436297][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.658577][ T5546] loop7: detected capacity change from 0 to 1024 [ 93.690942][ T5546] EXT4-fs (loop7): Ignoring removed orlov option [ 93.734533][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.742663][ T5526] loop3: detected capacity change from 0 to 32768 [ 93.743228][ T5546] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,data_err=ignore,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nombcache,lazytime,,errors=continue. Quota mode: none. [ 93.866501][ T5526] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 93.974403][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 94.058295][ T5557] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2952314385 (47237030160 ns) > initial count (6874958208 ns). Using initial count to start timer. [ 94.099247][ T13] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 94.115018][ T13] usb 5-1: config 0 has no interface number 0 [ 94.143169][ T13] usb 5-1: config 0 interface 89 has no altsetting 0 [ 94.175181][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 94.271758][ T5562] loop5: detected capacity change from 0 to 512 [ 94.281720][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.262'. [ 94.304805][ T13] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 94.321484][ T5562] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.264: inode #1: comm syz.5.264: iget: illegal inode # [ 94.336125][ T5562] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.264: error while reading EA inode 1 err=-117 [ 94.345703][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.378320][ T5562] EXT4-fs (loop5): 1 orphan inode deleted [ 94.384247][ T5562] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.384702][ T13] usb 5-1: Product: syz [ 94.444572][ T13] usb 5-1: Manufacturer: syz [ 94.470070][ T13] usb 5-1: SerialNumber: syz [ 94.487356][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f8ee400: rx timeout, send abort [ 94.517594][ T13] usb 5-1: config 0 descriptor?? [ 94.556345][ T13] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 94.604401][ T13] em28xx 5-1:0.89: Video interface 89 found: bulk [ 94.625379][ T4881] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 94.765464][ T4523] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.893548][ T5585] fuse: Bad value for 'fd' [ 94.931864][ T5588] fuse: Bad value for 'fd' [ 95.060350][ T349] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.140250][ T349] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.155392][ T4523] usb 4-1: config 0 has no interfaces? [ 95.194496][ T13] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 95.233132][ T349] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.264577][ T5611] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.320869][ T5607] user requested TSC rate below hardware speed [ 95.334601][ T4523] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 95.336240][ T349] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.347656][ T4523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.376416][ T4523] usb 4-1: Product: syz [ 95.380986][ T4523] usb 4-1: Manufacturer: syz [ 95.394437][ T4523] usb 4-1: SerialNumber: syz [ 95.422042][ T4523] usb 4-1: config 0 descriptor?? [ 95.445471][ T5612] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 95.454258][ T5612] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 95.717823][ T4444] usb 4-1: USB disconnect, device number 5 [ 95.944578][ T13] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 95.980061][ T13] em28xx 5-1:0.89: board has no eeprom [ 96.005488][ T5617] chnl_net:caif_netlink_parms(): no params data found [ 96.110343][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.124417][ T13] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 96.139404][ T13] em28xx 5-1:0.89: analog set to bulk mode. [ 96.144488][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.153513][ T5617] device bridge_slave_0 entered promiscuous mode [ 96.183118][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.192594][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.195350][ T4434] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 96.201105][ T5617] device bridge_slave_1 entered promiscuous mode [ 96.223062][ T13] usb 5-1: USB disconnect, device number 5 [ 96.230356][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.242473][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.277126][ T13] em28xx 5-1:0.89: Disconnecting em28xx [ 96.288964][ T4444] em28xx 5-1:0.89: Registering V4L2 extension [ 96.303181][ T5617] team0: Port device team_slave_0 added [ 96.335073][ T5617] team0: Port device team_slave_1 added [ 96.395905][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.413012][ T4444] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 96.413298][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.424513][ T4444] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 96.447250][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.470414][ T4444] em28xx 5-1:0.89: No AC97 audio processor [ 96.473587][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.495191][ T4444] usb 5-1: Decoder not found [ 96.504625][ T4434] usb 8-1: Using ep0 maxpacket: 32 [ 96.523751][ T4444] em28xx 5-1:0.89: failed to create media graph [ 96.551767][ T4444] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 96.576064][ T4444] em28xx 5-1:0.89: Registering snapshot button... [ 96.587361][ T5659] ================================================================== [ 96.596099][ T5659] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 96.603065][ T5659] Read of size 8 at addr ffff88804e014900 by task v4l_id/5659 [ 96.608064][ T4444] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input7 [ 96.610518][ T5659] [ 96.610559][ T5659] CPU: 1 PID: 5659 Comm: v4l_id Not tainted syzkaller #0 [ 96.627039][ T4444] em28xx 5-1:0.89: Remote control support is not available for this card. [ 96.630428][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.639325][ T4434] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.649097][ T5659] Call Trace: [ 96.649111][ T5659] [ 96.649119][ T5659] dump_stack_lvl+0x188/0x250 [ 96.649146][ T5659] ? show_regs_print_info+0x20/0x20 [ 96.675167][ T13] em28xx 5-1:0.89: Closing input extension [ 96.676083][ T5659] ? _printk+0xda/0x130 [ 96.676108][ T5659] ? v4l2_fh_open+0xc6/0x430 [ 96.682802][ T13] em28xx 5-1:0.89: Deregistering snapshot button [ 96.686544][ T5659] ? load_image+0x400/0x400 [ 96.686575][ T5659] print_address_description+0x60/0x2d0 [ 96.686593][ T5659] ? v4l2_fh_open+0xc6/0x430 [ 96.686610][ T5659] kasan_report+0xdf/0x130 [ 96.686627][ T5659] ? v4l2_fh_open+0xc6/0x430 [ 96.686646][ T5659] v4l2_fh_open+0xc6/0x430 [ 96.686670][ T5659] em28xx_v4l2_open+0x152/0x990 [ 96.686687][ T5659] ? __lock_acquire+0x7d10/0x7d10 [ 96.686715][ T5659] v4l2_open+0x20b/0x360 [ 96.686734][ T5659] chrdev_open+0x5c5/0x6a0 [ 96.686751][ T5659] ? cd_forget+0x160/0x160 [ 96.686771][ T5659] ? fsnotify_perm+0x3a7/0x560 [ 96.686790][ T5659] ? cd_forget+0x160/0x160 [ 96.686806][ T5659] do_dentry_open+0x7ff/0xf80 [ 96.686841][ T5659] path_openat+0x26f5/0x2fa0 [ 96.686876][ T5659] ? verify_lock_unused+0x140/0x140 [ 96.686896][ T5659] ? slab_post_alloc_hook+0x4c/0x380 [ 96.686918][ T5659] ? do_filp_open+0x410/0x410 [ 96.686950][ T5659] do_filp_open+0x1e2/0x410 [ 96.686972][ T5659] ? vfs_tmpfile+0x300/0x300 [ 96.687006][ T5659] ? _raw_spin_unlock+0x24/0x40 [ 96.687024][ T5659] ? alloc_fd+0x598/0x630 [ 96.687047][ T5659] do_sys_openat2+0x150/0x4b0 [ 96.687062][ T5659] ? __lock_acquire+0x7d10/0x7d10 [ 96.687081][ T5659] ? do_sys_open+0xe0/0xe0 [ 96.687100][ T5659] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 96.687121][ T5659] ? lock_chain_count+0x20/0x20 [ 96.687138][ T5659] ? vtime_user_exit+0x2c8/0x3e0 [ 96.687160][ T5659] __x64_sys_openat+0x135/0x160 [ 96.687179][ T5659] do_syscall_64+0x4c/0xa0 [ 96.687194][ T5659] ? clear_bhb_loop+0x30/0x80 [ 96.687209][ T5659] ? clear_bhb_loop+0x30/0x80 [ 96.687224][ T5659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.687251][ T5659] RIP: 0033:0x7fa44b4ec407 [ 96.687269][ T5659] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 96.687282][ T5659] RSP: 002b:00007ffdc4ee8bf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 96.687302][ T5659] RAX: ffffffffffffffda RBX: 00007fa44b3fe880 RCX: 00007fa44b4ec407 [ 96.687314][ T5659] RDX: 0000000000000000 RSI: 00007ffdc4ee9f1d RDI: ffffffffffffff9c [ 96.687326][ T5659] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 96.687336][ T5659] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 96.687346][ T5659] R13: 00007ffdc4ee8e40 R14: 00007fa44bc7a000 R15: 000055d9aa1d54d8 [ 96.687368][ T5659] [ 96.687375][ T5659] [ 96.701344][ T4434] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.702749][ T5659] The buggy address belongs to the page: [ 96.702761][ T5659] page:ffffea0001380500 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e014 [ 96.702778][ T5659] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.702798][ T5659] raw: 00fff00000000000 ffffea0001d79908 ffff8880b90409f0 0000000000000000 [ 96.824642][ T4434] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 96.826684][ T5659] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 96.826696][ T5659] page dumped because: kasan: bad access detected [ 96.826715][ T5659] page_owner tracks the page as freed [ 96.839470][ T4434] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 96.841025][ T5659] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x102800(GFP_NOWAIT|__GFP_NOWARN|__GFP_HARDWALL), pid 4444, ts 96607947258, free_ts 96607952064 [ 96.860165][ T4434] usb 8-1: Product: syz [ 96.860681][ T5659] get_page_from_freelist+0x1bbd/0x1ca0 [ 96.901245][ T4434] usb 8-1: Manufacturer: syz [ 96.904900][ T5659] __alloc_pages+0x1ee/0x480 [ 96.904925][ T5659] stack_depot_save+0x342/0x440 [ 96.904941][ T5659] kasan_set_track+0x62/0x70 [ 96.904955][ T5659] kasan_set_free_info+0x1f/0x40 [ 96.904969][ T5659] ____kasan_slab_free+0xd5/0x110 [ 96.904982][ T5659] slab_free_freelist_hook+0xea/0x170 [ 96.904994][ T5659] kmem_cache_free+0x8f/0x210 [ 96.905004][ T5659] kobject_uevent_net_broadcast+0x40d/0x530 [ 96.905017][ T5659] kobject_uevent_env+0x556/0x890 [ 96.905030][ T5659] device_add+0x91c/0xfb0 [ 96.905044][ T5659] input_register_device+0xa5b/0x1140 [ 96.905059][ T5659] em28xx_register_snapshot_button+0x2d8/0x460 [ 96.905077][ T5659] em28xx_ir_init+0x625/0x1db0 [ 96.905092][ T5659] em28xx_init_extension+0x118/0x1b0 [ 96.905104][ T5659] process_one_work+0x85f/0x1010 [ 96.965722][ T4434] hub 8-1:4.0: USB hub found [ 96.968178][ T5659] page last free stack trace: [ 97.131288][ T5659] free_unref_page_prepare+0x637/0x6c0 [ 97.136755][ T5659] free_unref_page+0x8f/0x2a0 [ 97.141540][ T5659] stack_depot_save+0x418/0x440 [ 97.146393][ T5659] kasan_set_track+0x62/0x70 [ 97.150986][ T5659] kasan_set_free_info+0x1f/0x40 [ 97.155935][ T5659] ____kasan_slab_free+0xd5/0x110 [ 97.160959][ T5659] slab_free_freelist_hook+0xea/0x170 [ 97.166406][ T5659] kmem_cache_free+0x8f/0x210 [ 97.171290][ T5659] kobject_uevent_net_broadcast+0x40d/0x530 [ 97.177370][ T5659] kobject_uevent_env+0x556/0x890 [ 97.182397][ T5659] device_add+0x91c/0xfb0 [ 97.184588][ T4434] hub 8-1:4.0: 2 ports detected [ 97.186712][ T5659] input_register_device+0xa5b/0x1140 [ 97.197076][ T5659] em28xx_register_snapshot_button+0x2d8/0x460 [ 97.203454][ T5659] em28xx_ir_init+0x625/0x1db0 [ 97.208245][ T5659] em28xx_init_extension+0x118/0x1b0 [ 97.213551][ T5659] process_one_work+0x85f/0x1010 [ 97.218570][ T5659] [ 97.220911][ T5659] Memory state around the buggy address: [ 97.226628][ T5659] ffff88804e014800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.234785][ T5659] ffff88804e014880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.242936][ T5659] >ffff88804e014900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.251083][ T5659] ^ [ 97.255142][ T5659] ffff88804e014980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.263308][ T5659] ffff88804e014a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.271625][ T5659] ================================================================== [ 97.279700][ T5659] Disabling lock debugging due to kernel taint [ 97.285972][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.295138][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.304259][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.331081][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.339349][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.350482][ T5659] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.357681][ T5659] CPU: 1 PID: 5659 Comm: v4l_id Tainted: G B syzkaller #0 [ 97.366270][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.376599][ T5659] Call Trace: [ 97.379882][ T5659] [ 97.382825][ T5659] dump_stack_lvl+0x188/0x250 [ 97.387510][ T5659] ? show_regs_print_info+0x20/0x20 [ 97.392846][ T5659] ? load_image+0x400/0x400 [ 97.397452][ T5659] panic+0x2e5/0x810 [ 97.401410][ T5659] ? bpf_jit_dump+0xd0/0xd0 [ 97.405922][ T5659] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 97.411980][ T5659] ? _raw_spin_unlock+0x40/0x40 [ 97.416823][ T5659] ? print_memory_metadata+0x314/0x400 [ 97.422288][ T5659] ? v4l2_fh_open+0xc6/0x430 [ 97.426873][ T5659] check_panic_on_warn+0x80/0xa0 [ 97.431799][ T5659] ? v4l2_fh_open+0xc6/0x430 [ 97.436381][ T5659] end_report+0x6d/0xf0 [ 97.440544][ T5659] kasan_report+0x102/0x130 [ 97.445063][ T5659] ? v4l2_fh_open+0xc6/0x430 [ 97.449687][ T5659] v4l2_fh_open+0xc6/0x430 [ 97.454118][ T5659] em28xx_v4l2_open+0x152/0x990 [ 97.458978][ T5659] ? __lock_acquire+0x7d10/0x7d10 [ 97.464202][ T5659] v4l2_open+0x20b/0x360 [ 97.468459][ T5659] chrdev_open+0x5c5/0x6a0 [ 97.472892][ T5659] ? cd_forget+0x160/0x160 [ 97.477364][ T5659] ? fsnotify_perm+0x3a7/0x560 [ 97.482142][ T5659] ? cd_forget+0x160/0x160 [ 97.486567][ T5659] do_dentry_open+0x7ff/0xf80 [ 97.491252][ T5659] path_openat+0x26f5/0x2fa0 [ 97.495840][ T5659] ? verify_lock_unused+0x140/0x140 [ 97.501043][ T5659] ? slab_post_alloc_hook+0x4c/0x380 [ 97.506323][ T5659] ? do_filp_open+0x410/0x410 [ 97.511006][ T5659] do_filp_open+0x1e2/0x410 [ 97.515589][ T5659] ? vfs_tmpfile+0x300/0x300 [ 97.520192][ T5659] ? _raw_spin_unlock+0x24/0x40 [ 97.525166][ T5659] ? alloc_fd+0x598/0x630 [ 97.529507][ T5659] do_sys_openat2+0x150/0x4b0 [ 97.534196][ T5659] ? __lock_acquire+0x7d10/0x7d10 [ 97.539230][ T5659] ? do_sys_open+0xe0/0xe0 [ 97.543753][ T5659] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 97.549846][ T5659] ? lock_chain_count+0x20/0x20 [ 97.554710][ T5659] ? vtime_user_exit+0x2c8/0x3e0 [ 97.559758][ T5659] __x64_sys_openat+0x135/0x160 [ 97.564613][ T5659] do_syscall_64+0x4c/0xa0 [ 97.569034][ T5659] ? clear_bhb_loop+0x30/0x80 [ 97.573733][ T5659] ? clear_bhb_loop+0x30/0x80 [ 97.578462][ T5659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.584376][ T5659] RIP: 0033:0x7fa44b4ec407 [ 97.588790][ T5659] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 97.605863][ T4251] Bluetooth: hci3: command 0x0409 tx timeout [ 97.608383][ T5659] RSP: 002b:00007ffdc4ee8bf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 97.608407][ T5659] RAX: ffffffffffffffda RBX: 00007fa44b3fe880 RCX: 00007fa44b4ec407 [ 97.608417][ T5659] RDX: 0000000000000000 RSI: 00007ffdc4ee9f1d RDI: ffffffffffffff9c [ 97.608426][ T5659] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 97.608434][ T5659] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 97.608443][ T5659] R13: 00007ffdc4ee8e40 R14: 00007fa44bc7a000 R15: 000055d9aa1d54d8 [ 97.608459][ T5659] [ 97.608771][ T5659] Kernel Offset: disabled [ 97.670413][ T5659] Rebooting in 86400 seconds..