last executing test programs: 28.997548283s ago: executing program 0 (id=38): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 28.872199937s ago: executing program 0 (id=41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x8006}]}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 28.70605532s ago: executing program 0 (id=42): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x400080}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 28.405523067s ago: executing program 0 (id=46): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x68000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f00000003c0)='./file0\x00', 0xa) 27.876081699s ago: executing program 0 (id=49): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000640)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 27.524558547s ago: executing program 0 (id=50): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x401b, 0xffff, 0x9, 0x401, 0xa929, 0xa, 0x0, 0x5, 0x96, 0xbe6, 0x401, 0x1, "cb630dab3a0338057401a192309598961f50dc45c87d55a52a28b8f01cfa0d7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000500), 0x2, r1}) 27.34979152s ago: executing program 32 (id=50): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x401b, 0xffff, 0x9, 0x401, 0xa929, 0xa, 0x0, 0x5, 0x96, 0xbe6, 0x401, 0x1, "cb630dab3a0338057401a192309598961f50dc45c87d55a52a28b8f01cfa0d7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000500), 0x2, r1}) 13.286587654s ago: executing program 2 (id=149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 13.088581109s ago: executing program 2 (id=150): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12.952990732s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) write$binfmt_elf64(r1, 0x0, 0xfffffdcf) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x3, 0x20, 0x1000000000001}) 12.371668674s ago: executing program 2 (id=154): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c000, 0x44) 11.869362876s ago: executing program 2 (id=160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001f40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4b, 0x0, 0x0, @private2, @mcast2, {[], "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"}}}}}, 0x0) 11.514012563s ago: executing program 4 (id=161): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000001c0)={0x0, {0x0, 0x0, @qam}}) 11.323628958s ago: executing program 2 (id=162): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x8001, 0xd) 11.21160996s ago: executing program 33 (id=162): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x8001, 0xd) 10.563398054s ago: executing program 4 (id=164): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) write$binfmt_elf64(r1, 0x0, 0xfffffdcf) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x3, 0x20, 0x1000000000001}) 10.033070296s ago: executing program 4 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0x9, 0x81, 0x0, 0x1, 0x9, 0x3, 0x8, 0x1, 0x0, 0x1, 0x40, 0x0, 0x1, 0x1, 0x7, 0xfd, 0x9, 0x2, '\x00', 0x5, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.644143475s ago: executing program 4 (id=169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c000, 0x44) 9.260275164s ago: executing program 4 (id=173): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001180)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x5}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x129, 0x100000001, 0x81, 0x803, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x5, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) 7.511467393s ago: executing program 4 (id=174): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) rmdir(&(0x7f0000000fc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 7.076990962s ago: executing program 34 (id=174): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) rmdir(&(0x7f0000000fc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 5.463380608s ago: executing program 3 (id=184): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) unshare(0x22020600) fcntl$notify(r0, 0x402, 0x80000042) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 5.345977061s ago: executing program 3 (id=185): syz_io_uring_setup(0x1f85, &(0x7f00000000c0)={0x0, 0x3021, 0x0, 0x0, 0x1ec}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) accept4(r0, 0x0, 0x0, 0x80000) 5.005788898s ago: executing program 3 (id=192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x480, &(0x7f0000000d00)="$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") syz_usb_connect$uac3(0x3, 0x97, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000800, &(0x7f0000000340)=ANY=[], 0x7, 0x249, &(0x7f0000000700)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) 4.101745009s ago: executing program 1 (id=188): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 3.858295344s ago: executing program 1 (id=189): unshare(0x6020400) r0 = socket$inet6(0xa, 0x1, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x7fff, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.815577535s ago: executing program 3 (id=190): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000200)='\a', 0xff52, 0x24044080, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x40000000003, 0x0) 3.685023098s ago: executing program 1 (id=191): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x85098878a61b3e8b, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40cf82223eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc1c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f36c410a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6f0000000000000000cc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a251032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847f6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aaf90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e98c869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda41ec9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da2695605200ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f7118db2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b584c0887b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x96) 3.542230741s ago: executing program 1 (id=193): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) 3.534281631s ago: executing program 3 (id=194): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000000380)=ANY=[@ANYBLOB="71756965742c6469725f756d61736b3d30303030303030303030303030303030303030303030372c696f636861727365743d6b6f69382d722c636f6465706167653d6b6f69382d72752c71756965742c66696c655f756d61736b3d30303030303030303030303030303030303030303030362c66696c655f756d61736b3d30303030303030303030303030303030303030313236342c63726561746f723d8c10b0812c66696c655f756d61736b3d30303030303030303030303030303030303030303030322c0063458b8eded22e0b4081b59940f79211dd3e735f57164b50bdf46f8f03a49b"], 0x2, 0x379, &(0x7f0000000880)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='ns\x00') fchdir(r1) 3.428027074s ago: executing program 1 (id=195): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000002c0)={[{@lazytime}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@dax_always}]}, 0xc2, 0x9644, &(0x7f000001c300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x10) 626.214776ms ago: executing program 5 (id=163): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x940, 0x9335aea1c99f88c1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 619.518926ms ago: executing program 1 (id=202): r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 609.405276ms ago: executing program 3 (id=203): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000840)="e55ada0a26b834f902c337d74e5e7238720efb7f8ec4d0727d476db4c872aa904427840eab3b36d1ed0bfbd7d7e69c6ddb2d8226eb56e81bf8ed7bc36a3881f90a5727aff51762c4b5d02893baa44c4fcebd4fc1c1136289c57bb6b9cac240b24cc199cc7edaeaad975966a70c5ca43e81ba4cc0232281bdf279b9b7425198f2bdba0dca17ac5f36268368465090c8440b9760a36dbd8c3c802ddfefc112ebc32dc8b4647b588da74e1bfa3832615c74474e82bf0b93b1de336368ffd64d25c5e41478", 0xc3}, {&(0x7f0000000a00)="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", 0xf3d}, {&(0x7f0000000200)='a', 0x1}], 0x3) 449.06043ms ago: executing program 5 (id=196): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204858, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 0s ago: executing program 5 (id=197): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 60.051067][ T5758] cgroup: Unknown subsys name 'net' [ 60.151299][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.521644][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.979411][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.987730][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.001467][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.009498][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.016640][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.017088][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.030708][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.031362][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.039620][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.045273][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.056370][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.060354][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.066514][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.073569][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.080192][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.093726][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.094603][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.109100][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.109179][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.116639][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.124081][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.135866][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.139274][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.152294][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.528480][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 63.587154][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 63.644187][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 63.701164][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 63.763735][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.771560][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.779004][ T5770] bridge_slave_0: entered allmulticast mode [ 63.786844][ T5770] bridge_slave_0: entered promiscuous mode [ 63.829544][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.836665][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.843737][ T5770] bridge_slave_1: entered allmulticast mode [ 63.852622][ T5770] bridge_slave_1: entered promiscuous mode [ 63.873579][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.880809][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.888299][ T5772] bridge_slave_0: entered allmulticast mode [ 63.894867][ T5772] bridge_slave_0: entered promiscuous mode [ 63.911715][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.918924][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.926416][ T5771] bridge_slave_0: entered allmulticast mode [ 63.932984][ T5771] bridge_slave_0: entered promiscuous mode [ 63.941826][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.948987][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.956181][ T5771] bridge_slave_1: entered allmulticast mode [ 63.963131][ T5771] bridge_slave_1: entered promiscuous mode [ 63.974076][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.981594][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.988855][ T5772] bridge_slave_1: entered allmulticast mode [ 63.995801][ T5772] bridge_slave_1: entered promiscuous mode [ 64.044164][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.083845][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.094950][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.114655][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.125173][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.132468][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.139671][ T5773] bridge_slave_0: entered allmulticast mode [ 64.147022][ T5773] bridge_slave_0: entered promiscuous mode [ 64.156073][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.175051][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.192921][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.200164][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.207663][ T5773] bridge_slave_1: entered allmulticast mode [ 64.214242][ T5773] bridge_slave_1: entered promiscuous mode [ 64.250715][ T5770] team0: Port device team_slave_0 added [ 64.278034][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.290997][ T5770] team0: Port device team_slave_1 added [ 64.298878][ T5771] team0: Port device team_slave_0 added [ 64.309087][ T5772] team0: Port device team_slave_0 added [ 64.316937][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.334703][ T5771] team0: Port device team_slave_1 added [ 64.344130][ T5772] team0: Port device team_slave_1 added [ 64.402970][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.410228][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.436394][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.448140][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.455092][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.481311][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.502906][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.509918][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.535975][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.550811][ T5773] team0: Port device team_slave_0 added [ 64.557515][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.564463][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.590521][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.611158][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.618238][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.644511][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.656781][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.663741][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.690057][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.715054][ T5773] team0: Port device team_slave_1 added [ 64.771999][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.779023][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.805135][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.825394][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.832423][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.858370][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.874715][ T5770] hsr_slave_0: entered promiscuous mode [ 64.880991][ T5770] hsr_slave_1: entered promiscuous mode [ 64.918017][ T5771] hsr_slave_0: entered promiscuous mode [ 64.924171][ T5771] hsr_slave_1: entered promiscuous mode [ 64.930430][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.938765][ T5771] Cannot create hsr debugfs directory [ 64.971534][ T5772] hsr_slave_0: entered promiscuous mode [ 64.977887][ T5772] hsr_slave_1: entered promiscuous mode [ 64.983861][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.991487][ T5772] Cannot create hsr debugfs directory [ 65.084057][ T5773] hsr_slave_0: entered promiscuous mode [ 65.090749][ T5773] hsr_slave_1: entered promiscuous mode [ 65.096927][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.104479][ T5773] Cannot create hsr debugfs directory [ 65.186417][ T5782] Bluetooth: hci2: command tx timeout [ 65.189099][ T51] Bluetooth: hci3: command tx timeout [ 65.192018][ T5782] Bluetooth: hci1: command tx timeout [ 65.197706][ T51] Bluetooth: hci0: command tx timeout [ 65.424701][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.438716][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.450051][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.459376][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.527159][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.539185][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.551908][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.561551][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.649904][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.669682][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.694761][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.708834][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.775137][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.789926][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.800804][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.810811][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.838823][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.859792][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.891752][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.912815][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.920054][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.935132][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.958673][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.965827][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.977165][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.984267][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.013621][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.020776][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.101993][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.143126][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.218169][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.270722][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.311456][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.318611][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.351811][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.369496][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.376688][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.417171][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.424288][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.463467][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.495232][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.502368][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.597073][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.647969][ T5771] veth0_vlan: entered promiscuous mode [ 66.697414][ T5771] veth1_vlan: entered promiscuous mode [ 66.780336][ T5771] veth0_macvtap: entered promiscuous mode [ 66.828218][ T5771] veth1_macvtap: entered promiscuous mode [ 66.861112][ T5770] veth0_vlan: entered promiscuous mode [ 66.901854][ T5770] veth1_vlan: entered promiscuous mode [ 66.913022][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.933794][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.959861][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.969216][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.978970][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.988420][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.007873][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.043463][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.118773][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.132562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.178342][ T5770] veth0_macvtap: entered promiscuous mode [ 67.187204][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.195037][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.219940][ T5773] veth0_vlan: entered promiscuous mode [ 67.229965][ T5770] veth1_macvtap: entered promiscuous mode [ 67.267485][ T5776] Bluetooth: hci3: command tx timeout [ 67.267684][ T5782] Bluetooth: hci2: command tx timeout [ 67.272881][ T5776] Bluetooth: hci0: command tx timeout [ 67.284562][ T51] Bluetooth: hci1: command tx timeout [ 67.303919][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.315133][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.326964][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.336702][ T5773] veth1_vlan: entered promiscuous mode [ 67.364799][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.378356][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.390654][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.412411][ T5772] veth0_vlan: entered promiscuous mode [ 67.433093][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.460755][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.474575][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.483684][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.509156][ T5772] veth1_vlan: entered promiscuous mode [ 67.579522][ T5773] veth0_macvtap: entered promiscuous mode [ 67.609582][ T5773] veth1_macvtap: entered promiscuous mode [ 67.637557][ T5772] veth0_macvtap: entered promiscuous mode [ 67.677987][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.701588][ T5772] veth1_macvtap: entered promiscuous mode [ 67.707376][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.733826][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.751649][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.762990][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.775753][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.787333][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.837247][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.849161][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.862049][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.875697][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.892371][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.903652][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.929694][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.941563][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.950715][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.959804][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.988663][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.013116][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.034474][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.047275][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.058477][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.083307][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.093878][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.106277][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.114022][ T5840] syz.0.7[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 68.118446][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.146801][ T5840] loop0: detected capacity change from 0 to 512 [ 68.149664][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.175118][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.185900][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.204849][ T5840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.217548][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.227948][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.239087][ T5840] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.239687][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.280964][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.384789][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.400138][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.404109][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.409656][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.430159][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.451539][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.472054][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.580470][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.621753][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.699789][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.734532][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.868210][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.893383][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.975856][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 68.999250][ T5853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'. [ 69.348999][ T51] Bluetooth: hci2: command tx timeout [ 69.354500][ T5776] Bluetooth: hci3: command tx timeout [ 69.360877][ T51] Bluetooth: hci1: command tx timeout [ 69.366863][ T5776] Bluetooth: hci0: command tx timeout [ 69.727946][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.939389][ T5811] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 69.955877][ T5811] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 69.969929][ T5811] usb 2-1: config 1 interface 0 has no altsetting 0 [ 69.981394][ T5811] usb 2-1: string descriptor 0 read error: -22 [ 69.997970][ T5811] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 70.013737][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.029679][ T5885] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 70.479805][ T5811] aureal 0003:0755:2626.0001: unknown main item tag 0x2 [ 70.494506][ T5811] aureal 0003:0755:2626.0001: unexpected long global item [ 70.502745][ T5811] aureal: probe of 0003:0755:2626.0001 failed with error -22 [ 70.776111][ T5812] usb 2-1: USB disconnect, device number 2 [ 71.435630][ T5782] Bluetooth: hci0: command tx timeout [ 71.441070][ T5782] Bluetooth: hci1: command tx timeout [ 71.446733][ T5782] Bluetooth: hci3: command tx timeout [ 71.452140][ T5782] Bluetooth: hci2: command tx timeout [ 71.458655][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.465201][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.735748][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.953273][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 71.990283][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.025009][ T5922] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 72.028380][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.050354][ T5922] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 72.064106][ T5922] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 72.068333][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.088652][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 72.100070][ T5922] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 72.115669][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 72.135759][ T9] usb 2-1: Manufacturer: syz [ 72.153989][ T9] usb 2-1: config 0 descriptor?? [ 72.363733][ T5930] loop2: detected capacity change from 0 to 2048 [ 72.428977][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 72.579236][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 72.603083][ T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 72.614671][ T9] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 72.643550][ T9] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 72.672429][ T5942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.713925][ T5942] netlink: 'syz.2.44': attribute type 12 has an invalid length. [ 72.729948][ T5942] netlink: 'syz.2.44': attribute type 29 has an invalid length. [ 72.757972][ T5942] netlink: 148 bytes leftover after parsing attributes in process `syz.2.44'. [ 72.778396][ T5942] netlink: 'syz.2.44': attribute type 2 has an invalid length. [ 72.789767][ T5945] loop0: detected capacity change from 0 to 128 [ 72.800988][ T5942] netlink: 'syz.2.44': attribute type 3 has an invalid length. [ 72.966011][ T5945] loop0: detected capacity change from 128 to 0 [ 72.984378][ T5945] syz.0.46: attempt to access beyond end of device [ 72.984378][ T5945] loop0: rw=524288, sector=23, nr_sectors = 1 limit=0 [ 73.012374][ T5945] syz.0.46: attempt to access beyond end of device [ 73.012374][ T5945] loop0: rw=524288, sector=24, nr_sectors = 1 limit=0 [ 73.042275][ T5945] syz.0.46: attempt to access beyond end of device [ 73.042275][ T5945] loop0: rw=0, sector=23, nr_sectors = 1 limit=0 [ 73.079847][ T5945] FAT-fs (loop0): Directory bread(block 23) failed [ 73.089491][ T5945] syz.0.46: attempt to access beyond end of device [ 73.089491][ T5945] loop0: rw=0, sector=24, nr_sectors = 1 limit=0 [ 73.102844][ T5945] FAT-fs (loop0): Directory bread(block 24) failed [ 73.109832][ T5945] syz.0.46: attempt to access beyond end of device [ 73.109832][ T5945] loop0: rw=524288, sector=23, nr_sectors = 1 limit=0 [ 73.123148][ T5945] syz.0.46: attempt to access beyond end of device [ 73.123148][ T5945] loop0: rw=524288, sector=24, nr_sectors = 1 limit=0 [ 73.136888][ T5945] syz.0.46: attempt to access beyond end of device [ 73.136888][ T5945] loop0: rw=0, sector=23, nr_sectors = 1 limit=0 [ 73.150183][ T5945] FAT-fs (loop0): Directory bread(block 23) failed [ 73.156773][ T5945] syz.0.46: attempt to access beyond end of device [ 73.156773][ T5945] loop0: rw=0, sector=24, nr_sectors = 1 limit=0 [ 73.169569][ T5945] FAT-fs (loop0): Directory bread(block 24) failed [ 73.176172][ T5945] syz.0.46: attempt to access beyond end of device [ 73.176172][ T5945] loop0: rw=524288, sector=23, nr_sectors = 1 limit=0 [ 73.190559][ T5945] syz.0.46: attempt to access beyond end of device [ 73.190559][ T5945] loop0: rw=524288, sector=24, nr_sectors = 1 limit=0 [ 73.203787][ T5945] FAT-fs (loop0): Directory bread(block 23) failed [ 73.210421][ T5945] FAT-fs (loop0): Directory bread(block 24) failed [ 73.217672][ T5945] FAT-fs (loop0): FAT read failed (blocknr 5) [ 73.252530][ T5771] FAT-fs (loop0): Directory bread(block 23) failed [ 73.262073][ T5771] FAT-fs (loop0): Directory bread(block 24) failed [ 73.283466][ T1088] FAT-fs (loop0): bread failed in fat_clusters_flush [ 73.291817][ T5771] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 73.608017][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.623263][ T5760] usb 2-1: USB disconnect, device number 3 [ 73.758912][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.863296][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.012669][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.056533][ T5963] loop2: detected capacity change from 0 to 512 [ 74.132323][ T5963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.232610][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.242499][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.250212][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.325618][ T27] audit: type=1800 audit(1786716077.494:2): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.54" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 74.337222][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.353923][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.361520][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.474203][ T27] audit: type=1800 audit(1786716077.544:3): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.54" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 74.557987][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.074776][ T5996] loop2: detected capacity change from 0 to 128 [ 75.085727][ T5996] ======================================================= [ 75.085727][ T5996] WARNING: The mand mount option has been deprecated and [ 75.085727][ T5996] and is ignored by this kernel. Remove the mand [ 75.085727][ T5996] option from the mount to silence this warning. [ 75.085727][ T5996] ======================================================= [ 75.140290][ T5994] loop3: detected capacity change from 0 to 2048 [ 75.276628][ T5994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.338482][ T27] audit: type=1800 audit(1786716078.524:4): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 75.359794][ T5994] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.398612][ T5994] EXT4-fs (loop3): Remounting filesystem read-only [ 75.714763][ T5994] syz.3.63 (5994) used greatest stack depth: 19760 bytes left [ 75.768288][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 75.788577][ T5810] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 75.830878][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 75.997584][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 76.031552][ T5810] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 76.041133][ T5810] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 76.074823][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 76.121366][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.166612][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.177166][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.191035][ T5810] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 76.201023][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.212632][ T5810] usb 2-1: config 0 descriptor?? [ 76.385568][ T5782] Bluetooth: hci2: command tx timeout [ 76.450125][ T5810] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 76.519661][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.538926][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.579507][ T5968] bridge_slave_0: entered allmulticast mode [ 76.600871][ T5968] bridge_slave_0: entered promiscuous mode [ 76.626977][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.668231][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.693738][ T5968] bridge_slave_1: entered allmulticast mode [ 76.717891][ T5968] bridge_slave_1: entered promiscuous mode [ 76.744177][ C0] usblp0: nonzero read bulk status received: -71 [ 76.752546][ T8] usb 2-1: USB disconnect, device number 4 [ 76.793654][ T6048] loop2: detected capacity change from 0 to 64 [ 76.971177][ T6007] usblp0: removed [ 76.974119][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.013012][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.052245][ T42] hsr_slave_0: left promiscuous mode [ 77.059584][ T42] hsr_slave_1: left promiscuous mode [ 77.072539][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.080611][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.094752][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.102839][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.118080][ T42] bridge_slave_1: left allmulticast mode [ 77.123864][ T42] bridge_slave_1: left promiscuous mode [ 77.133823][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.154520][ T42] bridge_slave_0: left allmulticast mode [ 77.161539][ T42] bridge_slave_0: left promiscuous mode [ 77.172685][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.214974][ T42] veth1_macvtap: left promiscuous mode [ 77.220999][ T42] veth0_macvtap: left promiscuous mode [ 77.227035][ T42] veth1_vlan: left promiscuous mode [ 77.232579][ T42] veth0_vlan: left promiscuous mode [ 78.012492][ T6075] loop3: detected capacity change from 0 to 1024 [ 78.154386][ T42] team0 (unregistering): Port device team_slave_1 removed [ 78.200708][ T42] team0 (unregistering): Port device team_slave_0 removed [ 78.242765][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.263616][ T5773] hfsplus: node 4:3 still has 1 user(s)! [ 78.299104][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.476270][ T5782] Bluetooth: hci2: command tx timeout [ 78.499658][ T6079] loop3: detected capacity change from 0 to 512 [ 78.511625][ T6079] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.814744][ T42] bond0 (unregistering): Released all slaves [ 78.943507][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 78.968297][ T5968] team0: Port device team_slave_0 added [ 79.002217][ T5968] team0: Port device team_slave_1 added [ 79.141242][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.183963][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.238460][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.279641][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.301203][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.341038][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.472683][ T5968] hsr_slave_0: entered promiscuous mode [ 79.501612][ T5968] hsr_slave_1: entered promiscuous mode [ 79.507741][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.535478][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.544212][ T5968] Cannot create hsr debugfs directory [ 79.697848][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 79.712283][ T788] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 79.721557][ T788] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 79.743776][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 79.756527][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.770641][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.796088][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.812592][ T788] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 79.848841][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.881565][ T788] usb 4-1: config 0 descriptor?? [ 80.052596][ T5968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.064292][ T5968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.081890][ T5968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.095353][ T5968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.155954][ T788] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 80.257906][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.293707][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.301349][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.332076][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.339255][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.360384][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.367556][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.431744][ T5955] usb 4-1: USB disconnect, device number 2 [ 80.444829][ T5955] usblp0: removed [ 80.499302][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 80.515506][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 80.539357][ T8] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 80.555992][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.556597][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.570341][ T5782] Bluetooth: hci2: command tx timeout [ 80.585846][ T8] usb 2-1: Product: syz [ 80.590044][ T8] usb 2-1: Manufacturer: syz [ 80.605194][ T8] usb 2-1: SerialNumber: syz [ 80.628146][ T6126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 80.649478][ T6126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 80.683145][ T8] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 80.699884][ T8] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 80.711162][ T8] usbserial_generic 2-1:1.0: generic converter detected [ 80.730888][ T8] usb 2-1: generic converter now attached to ttyUSB0 [ 80.761864][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.779294][ T788] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 80.800744][ T788] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 80.829310][ T788] usb 3-1: config 1 interface 0 has no altsetting 0 [ 80.849026][ T788] usb 3-1: string descriptor 0 read error: -22 [ 80.856513][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 80.875715][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.156635][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 81.368711][ T5955] usb 2-1: USB disconnect, device number 5 [ 81.370755][ T788] logitech 0003:046D:C626.0003: unknown main item tag 0x2 [ 81.393221][ T5955] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 81.405129][ T5955] usbserial_generic 2-1:1.0: device disconnected [ 81.420489][ T788] logitech 0003:046D:C626.0003: unexpected long global item [ 81.447464][ T788] logitech 0003:046D:C626.0003: parse failed [ 81.463793][ T788] logitech: probe of 0003:046D:C626.0003 failed with error -22 [ 81.575364][ T5968] veth0_vlan: entered promiscuous mode [ 81.595236][ T5968] veth1_vlan: entered promiscuous mode [ 81.641900][ T5968] veth0_macvtap: entered promiscuous mode [ 81.645287][ T788] usb 3-1: USB disconnect, device number 2 [ 81.678471][ T5968] veth1_macvtap: entered promiscuous mode [ 81.702167][ T28] cfg80211: failed to load regulatory.db [ 81.718113][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.741255][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.775586][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.795524][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.805353][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.823254][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.847102][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.896539][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.908857][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.919902][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.945565][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.971312][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.983207][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.025146][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.058904][ T5968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.084419][ T5968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.104057][ T5968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.115154][ T5968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.422222][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.423694][ T6178] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 82.434639][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.519587][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.539785][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.625646][ T5782] Bluetooth: hci2: command tx timeout [ 82.928439][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.966823][ T8] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.412721][ T6210] netlink: 'syz.2.116': attribute type 10 has an invalid length. [ 84.610450][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 84.857065][ T6255] loop3: detected capacity change from 0 to 512 [ 84.879782][ T6255] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.906452][ T6255] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.947428][ T6255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.981008][ T6255] EXT4-fs (loop3): 1 truncate cleaned up [ 85.039694][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.253148][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.701464][ T6276] raw_sendmsg: syz.3.134 forgot to set AF_INET. Fix it! [ 86.515435][ C0] sched: RT throttling activated [ 86.588190][ T6274] loop4: detected capacity change from 0 to 131072 [ 86.613534][ T6293] loop1: detected capacity change from 0 to 512 [ 86.635946][ T6274] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 86.642875][ T6274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.665347][ T6274] F2FS-fs (loop4): invalid crc value [ 86.692954][ T6274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.766892][ T6293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.781347][ T6274] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.788696][ T6274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 86.837752][ T6293] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.905119][ T27] audit: type=1800 audit(1786716090.084:5): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.133" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 86.923074][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 87.281259][ T6313] Bluetooth: MGMT ver 1.22 [ 87.319500][ T6313] Bluetooth: hci0: service_discovery: too big uuid_count value 47230 [ 87.350507][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.531852][ T6320] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 88.254562][ T6343] Zero length message leads to an empty skb [ 88.260930][ T6346] loop2: detected capacity change from 0 to 512 [ 88.314309][ T6346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.386651][ T6346] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.772745][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.958506][ T6364] loop2: detected capacity change from 0 to 1024 [ 89.004738][ T6364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.171829][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 89.202310][ T6375] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.211426][ T6375] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.220315][ T6375] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.229528][ T6375] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.239428][ T6375] vxlan0: entered promiscuous mode [ 89.266766][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.281910][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.296956][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.308214][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.319833][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.331385][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.342516][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.353963][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.365403][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.378727][ T5770] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 89.702526][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.728979][ T3503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.834092][ T3503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.936909][ T3503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.050917][ T3503] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.211720][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.223567][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.232487][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.241191][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.250309][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.258161][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.648532][ T6401] loop4: detected capacity change from 0 to 512 [ 90.679950][ T6402] loop1: detected capacity change from 0 to 1024 [ 90.700528][ T6387] chnl_net:caif_netlink_parms(): no params data found [ 90.760159][ T6401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.786211][ T6401] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.998677][ T5772] hfsplus: node 4:3 still has 1 user(s)! [ 91.114300][ T5968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.392381][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.400611][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.408311][ T6387] bridge_slave_0: entered allmulticast mode [ 91.416616][ T6387] bridge_slave_0: entered promiscuous mode [ 91.438312][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.445533][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.452660][ T6387] bridge_slave_1: entered allmulticast mode [ 91.460953][ T6387] bridge_slave_1: entered promiscuous mode [ 91.558802][ T6429] loop4: detected capacity change from 0 to 1024 [ 91.601609][ T6429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.627284][ T6426] netlink: 112 bytes leftover after parsing attributes in process `syz.3.170'. [ 91.668286][ T6387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.777671][ T6387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.881370][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 91.894914][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 91.918913][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 91.951693][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 91.963115][ T3503] hsr_slave_0: left promiscuous mode [ 91.969930][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 91.983551][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 91.998549][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 92.009738][ T3503] hsr_slave_1: left promiscuous mode [ 92.010400][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 92.026278][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.034282][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 92.050421][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.060306][ T5968] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 92.072388][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.113227][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.124086][ T3503] bridge_slave_1: left allmulticast mode [ 92.132990][ T3503] bridge_slave_1: left promiscuous mode [ 92.140343][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.150615][ T3503] bridge_slave_0: left allmulticast mode [ 92.157941][ T3503] bridge_slave_0: left promiscuous mode [ 92.167316][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.219722][ T3503] veth1_macvtap: left promiscuous mode [ 92.225286][ T3503] veth0_macvtap: left promiscuous mode [ 92.233121][ T3503] veth1_vlan: left promiscuous mode [ 92.239341][ T3503] veth0_vlan: left promiscuous mode [ 92.309497][ T5782] Bluetooth: hci0: command tx timeout [ 92.793838][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 92.829385][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 92.863045][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.899587][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.138625][ T3503] bond0 (unregistering): Released all slaves [ 93.231802][ T6387] team0: Port device team_slave_0 added [ 93.284032][ T6387] team0: Port device team_slave_1 added [ 93.333669][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.341763][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.368187][ T6387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.380743][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.388277][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.418970][ T6387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.482864][ T5968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.493090][ T6387] hsr_slave_0: entered promiscuous mode [ 93.499827][ T6387] hsr_slave_1: entered promiscuous mode [ 93.976049][ T6387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.989031][ T6387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.011559][ T6387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.087017][ T3503] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.139748][ T6387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.220081][ T3503] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.347456][ T3503] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.385974][ T5782] Bluetooth: hci0: command tx timeout [ 94.463014][ T3503] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.571583][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.584679][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.595375][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.604098][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.617505][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.630805][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.635239][ T6387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.673701][ T6387] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.898197][ T6482] loop3: detected capacity change from 0 to 4096 [ 94.904944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.912108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.946630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.953814][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.961839][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.267967][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 95.333142][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.333142][ T11] [ 95.382893][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 95.390416][ T11] EXT4-fs (loop3): Free/Dirty block details [ 95.397279][ T11] EXT4-fs (loop3): free_blocks=0 [ 95.402540][ T11] EXT4-fs (loop3): dirty_blocks=0 [ 95.407940][ T11] EXT4-fs (loop3): Block reservation details [ 95.417986][ T11] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 95.437222][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.669133][ T6476] chnl_net:caif_netlink_parms(): no params data found [ 95.969660][ T6387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.011671][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.035819][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.043010][ T6476] bridge_slave_0: entered allmulticast mode [ 96.085625][ T6476] bridge_slave_0: entered promiscuous mode [ 96.164929][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.196168][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.203413][ T6476] bridge_slave_1: entered allmulticast mode [ 96.224502][ T6527] loop1: detected capacity change from 0 to 2048 [ 96.229959][ T6526] loop3: detected capacity change from 0 to 512 [ 96.244774][ T6476] bridge_slave_1: entered promiscuous mode [ 96.262370][ T6526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.305342][ T6527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 96.341457][ T27] audit: type=1800 audit(1786716099.524:6): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 96.362432][ T6526] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.192: invalid indirect mapped block 32768 (level 2) [ 96.389464][ T6527] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.417180][ T6526] EXT4-fs (loop3): Remounting filesystem read-only [ 96.431703][ T6526] EXT4-fs (loop3): 1 orphan inode deleted [ 96.454194][ T6526] EXT4-fs (loop3): 1 truncate cleaned up [ 96.460715][ T6527] EXT4-fs (loop1): Remounting filesystem read-only [ 96.467758][ T51] Bluetooth: hci0: command tx timeout [ 96.508973][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.521998][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.579860][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.705638][ T51] Bluetooth: hci2: command tx timeout [ 96.729840][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 96.820843][ T6541] loop1: detected capacity change from 0 to 512 [ 96.829659][ T6541] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.830382][ T6476] team0: Port device team_slave_0 added [ 96.870091][ T6476] team0: Port device team_slave_1 added [ 96.984583][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.993036][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.019982][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.053705][ T6387] veth0_vlan: entered promiscuous mode [ 97.092733][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.111914][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.138491][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.163535][ T3503] hsr_slave_0: left promiscuous mode [ 97.186521][ T3503] hsr_slave_1: left promiscuous mode [ 97.192682][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.200336][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.227534][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.234959][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.258076][ T3503] bridge_slave_1: left allmulticast mode [ 97.263742][ T3503] bridge_slave_1: left promiscuous mode [ 97.300433][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.317955][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.337139][ T3503] bridge_slave_0: left allmulticast mode [ 97.355706][ T3503] bridge_slave_0: left promiscuous mode [ 97.362103][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.481309][ T3503] veth1_macvtap: left promiscuous mode [ 97.494166][ T3503] veth0_macvtap: left promiscuous mode [ 97.500263][ T3503] veth1_vlan: left promiscuous mode [ 97.511611][ T3503] veth0_vlan: left promiscuous mode [ 97.734219][ T6560] loop3: detected capacity change from 0 to 64 [ 98.307788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.409100][ T6562] loop1: detected capacity change from 0 to 32768 [ 98.461523][ T6562] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 98.488969][ T6562] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.550336][ T51] Bluetooth: hci0: command tx timeout [ 98.559593][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 98.601451][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 98.640390][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.645575][ T6562] XFS (loop1): Ending clean mount [ 98.689210][ T6562] XFS (loop1): Quotacheck needed: Please wait. [ 98.706506][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.767379][ T6562] XFS (loop1): Quotacheck: Done. [ 98.788659][ T51] Bluetooth: hci2: command tx timeout [ 98.849084][ T27] audit: type=1800 audit(1786716102.034:7): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.195" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 99.254587][ T3503] bond0 (unregistering): Released all slaves [ 99.405482][ T6387] veth1_vlan: entered promiscuous mode [ 99.512661][ T6476] hsr_slave_0: entered promiscuous mode [ 99.521300][ T6476] hsr_slave_1: entered promiscuous mode [ 99.529103][ T6476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.537321][ T6476] Cannot create hsr debugfs directory [ 99.539158][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.653871][ T6387] veth0_macvtap: entered promiscuous mode [ 99.719679][ T6387] veth1_macvtap: entered promiscuous mode [ 99.772160][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.784937][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.803226][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.813981][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.830990][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.913674][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.925952][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.940378][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.952138][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.963610][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.991000][ T6387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.002878][ T6387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.018757][ T6387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.029797][ T6387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.119236][ T6476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.143313][ T6476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.159736][ T6476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.184368][ T6476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.255808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.263659][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.362624][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.383329][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.461995][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.491814][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.540144][ T6593] loop5: detected capacity change from 0 to 128 [ 100.554744][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.561979][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.608794][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.616004][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.696124][ T6387] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 100.735570][ T6387] FAT-fs (loop5): Filesystem has been set read-only [ 100.747318][ T6476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.861931][ T6602] loop5: detected capacity change from 0 to 512 [ 100.870725][ T51] Bluetooth: hci2: command tx timeout [ 100.881208][ T6602] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.070030][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.343606][ T6615] ================================================================== [ 101.351721][ T6615] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 101.359384][ T6615] Read of size 8 at addr ffff888026f76c18 by task syz.5.197/6615 [ 101.367112][ T6615] [ 101.369459][ T6615] CPU: 0 PID: 6615 Comm: syz.5.197 Not tainted syzkaller #0 [ 101.376755][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.386832][ T6615] Call Trace: [ 101.390136][ T6615] [ 101.393075][ T6615] dump_stack_lvl+0x18c/0x250 [ 101.397769][ T6615] ? read_lock_is_recursive+0x20/0x20 [ 101.403157][ T6615] ? show_regs_print_info+0x20/0x20 [ 101.408377][ T6615] ? load_image+0x420/0x420 [ 101.412903][ T6615] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 101.418394][ T6615] ? __virt_addr_valid+0x10c/0x380 [ 101.423526][ T6615] ? __virt_addr_valid+0x10c/0x380 [ 101.428659][ T6615] ? __virt_addr_valid+0x10c/0x380 [ 101.433790][ T6615] print_report+0xa8/0x210 [ 101.438219][ T6615] ? dvb_device_open+0xc9/0x360 [ 101.443084][ T6615] kasan_report+0x117/0x150 [ 101.447605][ T6615] ? chrdev_open+0x385/0x600 [ 101.452212][ T6615] ? dvb_device_open+0xc9/0x360 [ 101.457081][ T6615] dvb_device_open+0xc9/0x360 [ 101.461780][ T6615] chrdev_open+0x58c/0x600 [ 101.466214][ T6615] ? cd_forget+0x160/0x160 [ 101.470651][ T6615] ? fsnotify_perm+0x3ed/0x5e0 [ 101.475436][ T6615] do_dentry_open+0x880/0x14b0 [ 101.480222][ T6615] ? cd_forget+0x160/0x160 [ 101.484655][ T6615] path_openat+0x284f/0x3270 [ 101.489272][ T6615] ? do_sys_openat2+0xda/0x1d0 [ 101.494051][ T6615] ? __x64_sys_openat+0x139/0x160 [ 101.499089][ T6615] ? verify_lock_unused+0x140/0x140 [ 101.504304][ T6615] ? do_filp_open+0x430/0x430 [ 101.509008][ T6615] do_filp_open+0x1f2/0x430 [ 101.513524][ T6615] ? vfs_tmpfile+0x620/0x620 [ 101.518141][ T6615] ? _raw_spin_unlock+0x28/0x40 [ 101.523011][ T6615] ? alloc_fd+0x590/0x640 [ 101.527365][ T6615] do_sys_openat2+0x134/0x1d0 [ 101.532056][ T6615] ? do_sys_open+0xe0/0xe0 [ 101.536486][ T6615] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 101.542481][ T6615] ? lock_chain_count+0x20/0x20 [ 101.547358][ T6615] __x64_sys_openat+0x139/0x160 [ 101.552228][ T6615] do_syscall_64+0x55/0xb0 [ 101.556659][ T6615] ? clear_bhb_loop+0x40/0x90 [ 101.561361][ T6615] ? clear_bhb_loop+0x40/0x90 [ 101.566053][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.571963][ T6615] RIP: 0033:0x7ff5ba55e90e [ 101.576402][ T6615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.596022][ T6615] RSP: 002b:00007ff5bb41cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.604453][ T6615] RAX: ffffffffffffffda RBX: 00007ff5bb41d6c0 RCX: 00007ff5ba55e90e [ 101.612440][ T6615] RDX: 0000000000000002 RSI: 00007ff5bb41cc00 RDI: ffffffffffffff9c [ 101.620426][ T6615] RBP: 00007ff5bb41cc00 R08: 0000000000000000 R09: 0000000000000000 [ 101.628407][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 101.636387][ T6615] R13: 00007ff5ba826038 R14: 00007ff5ba825fa0 R15: 00007fff8d7b2cb8 [ 101.644379][ T6615] [ 101.647406][ T6615] [ 101.649731][ T6615] Allocated by task 1: [ 101.653803][ T6615] kasan_set_track+0x4e/0x70 [ 101.658418][ T6615] __kasan_kmalloc+0x8f/0xa0 [ 101.663026][ T6615] dvb_register_device+0x309/0x1df0 [ 101.668244][ T6615] dvb_register_frontend+0x62d/0x900 [ 101.673550][ T6615] vidtv_bridge_probe+0x9d6/0xf60 [ 101.678600][ T6615] platform_probe+0x13b/0x1c0 [ 101.683292][ T6615] really_probe+0x247/0xae0 [ 101.687813][ T6615] __driver_probe_device+0x1f5/0x390 [ 101.693120][ T6615] driver_probe_device+0x4f/0x420 [ 101.698155][ T6615] __driver_attach+0x444/0x6d0 [ 101.702936][ T6615] bus_for_each_dev+0x235/0x2b0 [ 101.707801][ T6615] bus_add_driver+0x340/0x630 [ 101.712494][ T6615] driver_register+0x23a/0x310 [ 101.717269][ T6615] vidtv_bridge_init+0x49/0x80 [ 101.722051][ T6615] do_one_initcall+0x242/0x790 [ 101.726831][ T6615] do_initcall_level+0x13d/0x1f0 [ 101.731790][ T6615] do_initcalls+0x69/0xd0 [ 101.736138][ T6615] kernel_init_freeable+0x3d9/0x560 [ 101.741358][ T6615] kernel_init+0x1d/0x1c0 [ 101.745704][ T6615] ret_from_fork+0x48/0x80 [ 101.750137][ T6615] ret_from_fork_asm+0x11/0x20 [ 101.754917][ T6615] [ 101.757244][ T6615] Freed by task 6543: [ 101.761241][ T6615] kasan_set_track+0x4e/0x70 [ 101.765846][ T6615] kasan_save_free_info+0x28/0x40 [ 101.770891][ T6615] ____kasan_slab_free+0x126/0x1f0 [ 101.776019][ T6615] slab_free_freelist_hook+0x130/0x1a0 [ 101.781490][ T6615] __kmem_cache_free+0xba/0x1f0 [ 101.786355][ T6615] dvb_device_open+0x2d9/0x360 [ 101.791126][ T6615] chrdev_open+0x58c/0x600 [ 101.795557][ T6615] do_dentry_open+0x880/0x14b0 [ 101.800338][ T6615] path_openat+0x284f/0x3270 [ 101.804939][ T6615] do_filp_open+0x1f2/0x430 [ 101.809452][ T6615] do_sys_openat2+0x134/0x1d0 [ 101.814145][ T6615] __x64_sys_openat+0x139/0x160 [ 101.819013][ T6615] do_syscall_64+0x55/0xb0 [ 101.823444][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.829351][ T6615] [ 101.831678][ T6615] The buggy address belongs to the object at ffff888026f76c00 [ 101.831678][ T6615] which belongs to the cache kmalloc-256 of size 256 [ 101.845737][ T6615] The buggy address is located 24 bytes inside of [ 101.845737][ T6615] freed 256-byte region [ffff888026f76c00, ffff888026f76d00) [ 101.859454][ T6615] [ 101.861785][ T6615] The buggy address belongs to the physical page: [ 101.868214][ T6615] page:ffffea00009bdd80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26f76 [ 101.878377][ T6615] head:ffffea00009bdd80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.887326][ T6615] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 101.895312][ T6615] page_type: 0xffffffff() [ 101.899663][ T6615] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 101.908255][ T6615] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 101.916841][ T6615] page dumped because: kasan: bad access detected [ 101.923263][ T6615] page_owner tracks the page as allocated [ 101.928981][ T6615] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11537535304, free_ts 0 [ 101.944003][ T6476] veth0_vlan: entered promiscuous mode [ 101.948713][ T6615] post_alloc_hook+0x1c1/0x200 [ 101.948741][ T6615] get_page_from_freelist+0x2181/0x22a0 [ 101.948757][ T6615] __alloc_pages+0x1f0/0x460 [ 101.948771][ T6615] alloc_page_interleave+0x24/0x1e0 [ 101.974270][ T6615] alloc_slab_page+0x5d/0x180 [ 101.978956][ T6615] new_slab+0x87/0x2d0 [ 101.983033][ T6615] ___slab_alloc+0xc5c/0x12f0 [ 101.987719][ T6615] __kmem_cache_alloc_node+0x11f/0x250 [ 101.993191][ T6615] kmalloc_trace+0x2a/0xe0 [ 101.997621][ T6615] bus_add_driver+0x162/0x630 [ 102.002316][ T6615] driver_register+0x23a/0x310 [ 102.007092][ T6615] usb_register_driver+0x205/0x3c0 [ 102.012222][ T6615] pvr_init+0x7b/0x130 [ 102.016299][ T6615] do_one_initcall+0x242/0x790 [ 102.021081][ T6615] do_initcall_level+0x13d/0x1f0 [ 102.023505][ T6476] veth1_vlan: entered promiscuous mode [ 102.026018][ T6615] do_initcalls+0x69/0xd0 [ 102.026044][ T6615] page_owner free stack trace missing [ 102.026059][ T6615] [ 102.026063][ T6615] Memory state around the buggy address: [ 102.026072][ T6615] ffff888026f76b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.057185][ T6615] ffff888026f76b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.065251][ T6615] >ffff888026f76c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.073315][ T6615] ^ [ 102.078168][ T6615] ffff888026f76c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.086236][ T6615] ffff888026f76d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.094305][ T6615] ================================================================== [ 102.107878][ T6476] veth0_macvtap: entered promiscuous mode [ 102.135639][ T6615] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.142853][ T6615] CPU: 0 PID: 6615 Comm: syz.5.197 Not tainted syzkaller #0 [ 102.150143][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.160203][ T6615] Call Trace: [ 102.163490][ T6615] [ 102.166430][ T6615] dump_stack_lvl+0x18c/0x250 [ 102.170172][ T6476] veth1_macvtap: entered promiscuous mode [ 102.176843][ T6615] ? show_regs_print_info+0x20/0x20 [ 102.182056][ T6615] ? load_image+0x420/0x420 [ 102.186584][ T6615] panic+0x2ca/0x720 [ 102.190499][ T6615] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.196669][ T6615] ? bpf_jit_dump+0xd0/0xd0 [ 102.201193][ T6615] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 102.207191][ T6615] ? _raw_spin_unlock+0x40/0x40 [ 102.208319][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.208334][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.208341][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.208350][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.208359][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.208368][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.211953][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.214459][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.214472][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.214479][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.214489][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.214497][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.214506][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.219451][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.228854][ T6476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.228883][ T6476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.228907][ T6476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.228930][ T6476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.382168][ T6615] ? dvb_device_open+0xc9/0x360 [ 102.387040][ T6615] check_panic_on_warn+0x84/0xa0 [ 102.392000][ T6615] ? dvb_device_open+0xc9/0x360 [ 102.396867][ T6615] end_report+0x6f/0x130 [ 102.401127][ T6615] kasan_report+0x128/0x150 [ 102.405647][ T6615] ? chrdev_open+0x385/0x600 [ 102.410254][ T6615] ? dvb_device_open+0xc9/0x360 [ 102.415126][ T6615] dvb_device_open+0xc9/0x360 [ 102.419823][ T6615] chrdev_open+0x58c/0x600 [ 102.424253][ T6615] ? cd_forget+0x160/0x160 [ 102.428688][ T6615] ? fsnotify_perm+0x3ed/0x5e0 [ 102.433477][ T6615] do_dentry_open+0x880/0x14b0 [ 102.438260][ T6615] ? cd_forget+0x160/0x160 [ 102.442693][ T6615] path_openat+0x284f/0x3270 [ 102.447304][ T6615] ? do_sys_openat2+0xda/0x1d0 [ 102.452084][ T6615] ? __x64_sys_openat+0x139/0x160 [ 102.457123][ T6615] ? verify_lock_unused+0x140/0x140 [ 102.462335][ T6615] ? do_filp_open+0x430/0x430 [ 102.467031][ T6615] do_filp_open+0x1f2/0x430 [ 102.471553][ T6615] ? vfs_tmpfile+0x620/0x620 [ 102.476165][ T6615] ? _raw_spin_unlock+0x28/0x40 [ 102.481038][ T6615] ? alloc_fd+0x590/0x640 [ 102.485387][ T6615] do_sys_openat2+0x134/0x1d0 [ 102.490087][ T6615] ? do_sys_open+0xe0/0xe0 [ 102.494517][ T6615] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.500514][ T6615] ? lock_chain_count+0x20/0x20 [ 102.505377][ T6615] __x64_sys_openat+0x139/0x160 [ 102.510251][ T6615] do_syscall_64+0x55/0xb0 [ 102.514684][ T6615] ? clear_bhb_loop+0x40/0x90 [ 102.519376][ T6615] ? clear_bhb_loop+0x40/0x90 [ 102.524075][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.529981][ T6615] RIP: 0033:0x7ff5ba55e90e [ 102.534406][ T6615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.554029][ T6615] RSP: 002b:00007ff5bb41cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.562455][ T6615] RAX: ffffffffffffffda RBX: 00007ff5bb41d6c0 RCX: 00007ff5ba55e90e [ 102.570444][ T6615] RDX: 0000000000000002 RSI: 00007ff5bb41cc00 RDI: ffffffffffffff9c [ 102.578429][ T6615] RBP: 00007ff5bb41cc00 R08: 0000000000000000 R09: 0000000000000000 [ 102.586416][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 102.594395][ T6615] R13: 00007ff5ba826038 R14: 00007ff5ba825fa0 R15: 00007fff8d7b2cb8 [ 102.602391][ T6615] [ 102.605661][ T6615] Kernel Offset: disabled [ 102.609974][ T6615] Rebooting in 86400 seconds..