last executing test programs: 6m24.468596132s ago: executing program 32 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 6m11.815817273s ago: executing program 33 (id=102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000002c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m7.066828565s ago: executing program 34 (id=140): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x40000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40000, 0x687, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80000001, 0x0, 0x2, 0x51, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x4, 0x3, 0x1, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800000, 0x0, 0x0, 0xfffffffd, 0x2000000, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x8000, 0x0, 0x3, 0xfffffffd, 0x0, 0x1, 0x0, 0x7, 0x40, 0x0, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x2, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0x0, 0x800000, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x7ff, 0x0, 0x5, 0x4, 0x2000000, 0x0, 0x7], [0x4, 0xfffffffc, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffd, 0x6d, 0x5, 0x0, 0x0, 0x0, 0x80, 0x4, 0xfffffffc, 0x3, 0x0, 0x0, 0x8f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 5m33.270075346s ago: executing program 35 (id=339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x240000c1, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='highspeed\x00', 0xa) shutdown(r0, 0x1) 4m48.67370374s ago: executing program 36 (id=683): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x194, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x9, 0x3, 0xd, 0xc9, 0x0, 0x1, 0x0, 0x80, 0x2, 0x5, 0x2, 0x8, 0x6}, 0xe) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/30, 0x1e}, 0x102) 4m42.197895088s ago: executing program 37 (id=725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b30000000000000000f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6924849e6098ed884e7cb51726b360fbb37b6fe034bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffd12}, {&(0x7f0000000040)="e1d4313b495283bdb83fb043a67a5e23"}, {&(0x7f00000002c0)="54c1ee4851c1d6ccd3be49c6a43997be020d8142d41acd5f82dd296c4fe48571b034b0d0c0c186b22ac7557fa53f020f80be950a87c577eee3d64c77569b01a8af33b356ab9b4fc9496cce90f65dc100265216fcdffc165d9b7bc3213a515cf38a8ceb0987b6a39d2bf8820cec5386c4020dbe2260735faee151e2ec1b57cdfd952973b09cb7a8639b0332be6f7677a57a22a7"}, {&(0x7f0000000540)="25d134f7ce589fad1e9c6b4946d3d774c02b253755ad8834aee2baf2d1f9e2d9ff957e2a53af"}, {&(0x7f0000000580)="a1692033a99dda4f0f7286eac91acae77e68b78cdd38a104d55ea9ed42cfacc4f9cb5d4e9744b01d10c2c26ecd022e06f120de5decfbf7c0b0caf61dba430d26b03aa372eaee15f2f45bc240187a41283600b76fc943cb3e81dd2b92f8a9d1b13b7d6331f6ffa68d9a560680cfc9bc09700212b7a8a4e5"}, {&(0x7f00000017c0)="b33e741480949fc02e0d88b5993ed8853d44026f0bd4c8fb44e9d67b0d2b40bd2f93aa6d0f320497c003d6ac714ce3ce3433bbb335c0e306ec0c93ea7cc2636dd54b956effdeb959bb3c8b926ac0e8cb052953962d5243765761e3997157c8228bc29acb4c1afc06956af31a213247b6ccd023f3a07cd57ba89c036c38619f8b48639d40cb39d2e6b41a657059ab256a45c77042d0ddf99ed2b20e7bc7f10b431ca80e0a2b93366987b5c8a25b680e09b02194a61ca08f3504ec91915c8d99bd30a9aeebb19ee731b9fc04fa16f01c669add75f2b7d61e574dd1648cab9374dfd947999939cf4095a5ccf6d8626e3f691ec31540cbf17be0aabe552ca475239c82cc39f3fa10cfaaea26e6bd06f268de890a4f55e9b2d0e813b1ca40f549827eff9c68f8499e2889e98d3a9851d9feff06f637e405ce35121902d7f17ad1cec1f8a182a038a77117b6bccd54712fed2ac355f1d4710e5e78eec6c4500a59a3be177d7fee97d6017629ae0d7ee83aa035f11cb9f88c4c414f1d9249ef307ecec379ee0a744f93066167b124b910d68c980e544ff0c7903cdfa4d77bd9cf088d774c32e3c810cd722211824fc6232a8d0f75db188481d10e5811fc7aeec72c9c06d808c142c5b80bd97cd8c4065288b3d013dd31e39a9459da02b3deddfaac6e46ba4a9fa96a58403e8bf66e3fdbba06fac9a3626380b737f721820598dd37cde8576093c105c5bdd82f42030649b438e50b4fce67faeb30ad07d721dd7db7bc5efb434d5c7b99ec735bfda0df32e9a444be1817a921809fe0f9b3d006d6d2b72a92ff9f0995404b984410017e7e1427d541c76a3fa9a8a983cf5f61b24d6078a169386a716910cf8d85767c5d8fe2dee1031aec8bc35fd1456000291aaa29f8cfc89c89c92a91e30152f43fbb3c144c03f634a14035329af26dfa9ca17c734362e3a3c24fcf81eaf81c3069e699b8d392a09fc8111a5443c984f41bc01deb4d19d210a6649e7ed7a3c304179b210fe269d6fbfb61be9a34b4757f45fd68f113fb33b01efd1c6c7a0ef5682338892016b40e2b8d6f8663f612f099713530e6fe22a3d8ad8ef7b721bfade9246000eb417d0aeb07af6295fac2c5c1d45f93e272688eb93b8006e21deaaa0cd238cd991e563c703605339af13945bf894b73a6c97e8c58b15078611544adef8c3375153cd5eda8406afb1121f6579a3ca5f3a1b1aaa17abb644f785394a9b51d68a5b53e01acb88d532339f9e23e4fb671a71161dd7e6b13352aece9bbd29b987bf4a829ffc500808f975fa3fd042ae5b98c0ad544a479d4d9e7a64a50af3a4f0dd0699d07b7d478345d2ef9d8bee081733f3d76eb0f1f8e60e71bcb6d78917304fabd203e358b0833b0e0cef5350df4481af0d25c57e1704af5c4fb9b669a3856d3f489224f83a1e68d594c1fe57041f341179763e6f1f39d3df88608953f5f9460bdf573fdbb5c2f5f050f33bc28d8ec8d9df11a85cb2ecc686e6e769a8ac826e846b38546c09cd61460bc209e88eacce43cdfd9a1db1aa05e73d87c2fb4fe640679a19322eebb3208b05936c7b287696a42fe9336816a462fb8e951395aa085592b87bcfa70e2b55080265a6ccb939a2061143945f91409ed0fad54dfde2fe95b4c5620f6951534b5c9cce26fa3a26e4eabd2bbfe650916d0e3f8e80d05a963ceb4e0160c0fb87e8291291ab011ed9c6d480a073f2146e2452cbb7f4f3b3e10561d1f7a06fbaa52c0b9612b6da1ab1d2df28de9dabf5433c494e120e974c8305c67f4c991f821a57d8fb76996023bb5c917566dc612d270687752694f4f56dbab14a93703af020ef281c20afdb1007d80add6c784a41ffbae37a9d337d3c3f9fb7006c816802dec669d22e4f6e0873018fc41e73665bdb9438f6eb188c2c173edfbf0ee042e4ba0045586c915a1ea2f4a049c446bd07cb2e92a6f071fec138855acc0097f3e30ccdb2a7aaf130dba3368cc94157636f1e8976e6ad0673e0360343eb850aa7bff47a3de49f313692aa29024cbe278a7e58e96ca0d79d2fbd617848a81c0643ecf0427f1d9508249ab9c057f5f8191c77408f6d526d3cfcd799352ac4ab6bfcd75691b3e0ff9ce06ace622b7fb9de51a31d43ea97434c7051c9fc657f152ea5b4eec936891e54bcf2e553b31ac984365d2094cc8e067a4e6100c1e671f0e423e47309e6150114ad0c395192200b957920fea2abdef3a9b70b6fa3aa1ec0c538cd7cfdb7c2cdfe02b1bdeeacdcc5ea986cb23b16239887e2f365b25a21e916ad74c4b138fae5422cab5028a845ed7dff8cc89998a5d1b0975364aec407899ffc700dcb8f95d2b2ff7d8a02547c645d5ad0a993a49a11439db34a27a1c51dbd5120c0548548e0859510be79d1318592cc41c5dbb7c5b78a712cd311c31b7eed133daed3ef000d52b5965415a831db741ce84ffbd114312ab22cf05c88c3c5af2737cc5881d30929e626899f466e58fb0d4d66279c992eed8feef083378d7f132fb4ee79e0a8ce3d769746a4b9912f0b7f4711ecf8c509febf432fc0a1b48b8a8fbe3549a76e2917891837e55296e5e3088208c5c59e1a04c89e119b3389c06b502e4cfa48be95cdc478ee3edc78ac7cba8c09b64bd9c1554a95c7845de975d57cb2b49b368cbcf8bbae4ff737c0fe4a33d47b4c365f9fea378a5611734bc6287e207be0b5b945acd09f2b6f8c307fc3d1fc3ae1361cc94fff3f1d3112b10dcc6029971365c2e98f5c10b4c9ebb03874093cc4f94b70516ca1bc4f8e38d021c88786520b24146701a91411835b87622be4ee6c417aef720c13fe2baed1a8c9cf5729a602a37c05720665638d15ca2b290e35c1433f2ee97d0a2c39cd8adb7900bb01c7941c3bca65803a17f2cff5a4f991889e5b2ab845edfae80f9f5cc5a762e87f89810a9ddd3e99791387b699dda7f1c04da29c049b25ef224d52a9fe02e2ba5f23cca6c53afa6f96f03d0aed58221e7d7237918c0b062f9e7553ade1a752219945404f6a3e8e582ff97aaf176dac329d4781293d06fb69cc70367928a5223ea6de615137643cf670ebf8318ee14f496cd317bfa9630cb83042d58e4cf5b8914ef9f2a3f41adc01bd1dba1dd8ab96292264bd46fe5adc72b1c31eebd4c6e5e8cdedfdf430b27e1801e4f7d4165e1155401feaa105d4fe650dc2e59ae5176eabe2a9ebd75d9261799df0702b4606149000cd4a9cb4cf9325409d054233777c59ce9a568c1fb47e8dc8a60b0f007e355270dd7f69c3b63b92534bdb1e4ed2c837305c7d5b381b0b844f0db7c12839b45b387b6a954bb88f6b99c59c5b7c38f4dfce18cf85953e815c68c193c102f910202086c055d5b2cae9601a37ca8a0077d6fcf752d06fc9719d66432ef4dced269933864e054958edc187e09b2f3a91fd6a77d6feef52448013a1a1c2cd5f0bada4477ca40f6b3c2ccb080c1f7201fa416d96671bd645672785a67f1f4e2ac9b034ab0535cc75595571c9317b9383be1858edcd9b49f3f7167ac2b8fadfea1f0aba640a144d841afa086e1358439a4ecc41c120c5a3f6a2a59d906d4f261aa8f95ae6c3d008a09d91a096df03312902764e3724231d86341bb3ea0a78c57aa780b91ec7e5c6ed7c563add46deeb20d8f5bbb47c0183c0d56f5fa3e6a752707ab7a69381d75ccd342ef9affdef508ae790edf13b2ed6aabdcef4cf16eb6676a5473aa10147fe6f0238bd96264c7f3a13a411e7c492fc104b32f4f152ea2d7f7392006558221b265dc469acf59fe49c4fd5a622c480dbd287f256d50fa734fcd293bda82a73037a8833b261044bb0d031c60cd80423694a65abc3cb45170cca2408ceefce08a7d15b96b60afa2d00f58ceb4989eb449ffaf3a1756b43e093013fe0a5906ee6c840ff60d2eaf92213750c5db198d56b5bb1b1016af46654d724d9983924e8e07f07036ad5d065eb9c1bc34a4844d967c4138caf4ebe40ecebdccf3b98a2e46b217852b6dd76f8e65d8c50904e970cbc16896b84681fc51af539423e45db9f2d0758cf4a6d2299718c79df26aa408f6934ff3ebdccfa20192566af87a1ab4bd7d3a64dd30f81d4591eedf2ff05d4f79d57a2ed80015391355ced7f6624ff572e66b25bdd9630dc71390037bad26ce2a35a2621d2036754c6b82e509b0e118d69cc8461e38c2c715b237df1b251d677a008320bd4ac7404c55eb9e061e6839869f91c055f0bddf30f910d420b05b632ae687152e8fcf939ef09fe1c162ecfc7e09de8e8b52965f6631b24fe9a688c9f4e391cd1030274bdc6812f22a0952e3cd4d697de8c197703d856c176472ea040cf35d62e990154ffa41665dbf7e54d7a95dd2d78fe687039e470a9e51829563e3e6f188edd798671c8c07c971b0458bb5a30318373f27b7808b53405940f76a13323ba0e5cdaca71bf8c35732a0d6e108809c280df449c0d514227dcedcec5de695e17b1f1cd0a0a99d3c66eac0dddcabe8ad409186d48228c5625e33b1a90f0eaef4c11bb817cd83ee1a3b7de4e64343f709e451b820156a551afcf3e9c494054047a5356a29307d7d1c8b53c53631e660f1a7ab96ac2b0740f625df249ab26848a445efa506ec8107f14af42605dd84dc4c635cc85f2992e8b49c3b238e35093c315eb3f9a391d3b6fedc8bc4282ff92c8b140837416c07e96c2e52f78a941a61f4c3392475e9e10927aca3526eca8e8a0816ce4940b71f09993411571c0921a90d0ceee59ac50cce5a08a9ab8884d067f5e8951c872b8954dccca48a3d9c4070bf142ee6858c05f3d9ecc3eb8e867103a2724d43d30b61ddb4f7fbb7ed6d5e4ab9661df9d9588e93e01636590b330ffd1a0de9f78c5f058263456bd431a89e147e6686128326317c598543916b9ce0843be867ede2aee64b8c0ca622eddcd793ebf5c1205b22a7c0bf12760e9e81123fa425d52d886fc16b5d4b7cb114af07618fcaa7c1d0bf80d617ed872f1a0d98d36e621e53b2cdff120a6df81af43013273e6a84933dac9414cdbe4d1d3b64d1d2824f9675c0b9430a961a01a82ba32f7d4d495ecf778ec1f288734dba311034ac2249b4f703a5e2f2de475dfeb698b1169f36a69edcdfa7bfeb5b96fe539b130037985f854501f7bf1e44af31747d6861350618bd6763949b4707d5f76e0be9a9eea7d5c657c311710a3d5eaeef9b79cf668c026392ce4dc73a7475508f97cb3021484da5fc77a098313198ccbcee19018507e5825ea9ec0c4bd4f5b15fe64ca12cb5a6adca03b184bcb2c53afb7ece1c2420b61495fda7a9a2bfad7c04f55d73bcf9ea0ae13136c93e8eef636b8416f3bbc342a5cd310cfdd2470c598dc097b4a120507c43f885e3354b9e313f29bc8d95891b352135bc194d8851de5e38281c0b9023a4a8a801af10c0a811b141a41977b8babfa53d366095e9df37d911032025f9df0bfb7eceb7186897e86c9a58d8f111eebae385add43cd36e62dc3a75fd79fbff06c76fc75c5c277e25335dd7445eeb92021618b8f59ba908d7606eaaf4763d3d5a2a6e4d01ca99ff608c886ddd6d28cc4aaf38cd391eae90cd787e2582e635d5431ab2d8e6fc4ccc925ab041d83d102de86a0945fba1dadd21518d560fe91b246caee8fdc9d8f05f334d9f560cb55b9b2c3acff78a71809e54c16d82718e7263891ff6db5ca09e769aea624016dad9f2c3636fc416e074e7fa967a813101a5bbce05d3b36f433e1b3d012bd4161b2733d3a27574de6878dc0acd1fadf776fc77fde407804926f3aa3fba35cc1312cdb17ec64f69c1c287cf"}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) 4m24.276955099s ago: executing program 38 (id=803): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x40) r0 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x0, @desc2}) chdir(&(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m9.859635746s ago: executing program 39 (id=900): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) 3m35.90916262s ago: executing program 40 (id=1227): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 3m27.710280783s ago: executing program 41 (id=1285): unshare(0x22020400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 3m23.073634664s ago: executing program 42 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x18, 0x20ec, 0x0, 0x100000, 0x0}) 3m20.620382071s ago: executing program 43 (id=1334): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x18, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m9.090799245s ago: executing program 44 (id=1379): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2004, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 3m3.233321044s ago: executing program 45 (id=1407): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 3m3.017517867s ago: executing program 46 (id=1409): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000480)=0x1, 0x4) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324647ae3941d1747380b57bb23a78bd1175c15533631d10cd068c525e1cdf1", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x2b, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}, "2df7990e4ba2b0afb2fe9d5f1108bfb74e6b922142f2e46741066aa292c9ed"}}}}}}, 0x0) 2m3.421398257s ago: executing program 47 (id=1847): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x161, 0x40000867, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 1m57.416441588s ago: executing program 48 (id=1765): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @loopback={0x5f2d, 0x3a}, 0x33a}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1m42.76684617s ago: executing program 49 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd2c, 0xfff2, {0x0, 0x0, 0x0, r3, {0x9, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x4, 0x3, 0x7fff, {0xa, 0x82c614eb2c1442bd, 0x1, 0x445, 0x5, 0xfffffff7}, {0x5, 0x1, 0x6, 0x8001, 0x1, 0x3}, 0x3, 0x9, 0x3}}]}, @TCA_U32_SEL={0x64, 0x5, {0x0, 0xf7, 0x5, 0x0, 0x0, 0x0, 0x200, 0xc, [{0x9, 0x2, 0xf2f, 0x24}, {0x72f, 0x1, 0x3, 0x6}, {0x10000000, 0x3, 0x6, 0x4}, {0x8, 0x400000c9, 0x10000, 0x3}, {0x5, 0x3, 0x5, 0x1b}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 1m30.035325452s ago: executing program 7 (id=2092): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b) 1m29.789650576s ago: executing program 7 (id=2095): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c054}, 0x40000) 1m29.4863683s ago: executing program 7 (id=2102): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0xa1ff) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0xb0, 0x0, r1, [{{0x3, 0x3, 0x9, 0x15b, 0xe60, 0x2, {0x5, 0x80000000, 0x1, 0x8, 0xc2, 0x7, 0xfffffffa, 0x8, 0x18, 0x6000, 0xfffffff8, r2, r3, 0x4e843e11, 0x5}}, {0x0, 0x600000, 0x8, 0xe5, 'rootmode'}}]}, 0xb0) 1m29.297127983s ago: executing program 7 (id=2104): syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1m27.948475953s ago: executing program 7 (id=2115): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xba0f, @rand_addr=' \x01\x00', 0x200}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001e80)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x223, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000000080)="2021bb84", 0x4}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x10, 0x2, 0x4, 0x2, r3}}], 0x20, 0x8000}], 0x1, 0x40004) 1m8.163358292s ago: executing program 9 (id=2315): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@norecovery}, {@grpquota}, {@debug}, {@nombcache}]}, 0xee, 0x4b6, &(0x7f0000000980)="$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") mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0/../file0\x00') 1m7.586305801s ago: executing program 9 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 1m7.116437678s ago: executing program 6 (id=2325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 1m6.815660693s ago: executing program 6 (id=2331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf77572856c888a886", 0xc}, {&(0x7f00000001c0)="00894f", 0x3}], 0x3) 1m6.815038483s ago: executing program 9 (id=2332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x94) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) 1m6.589887456s ago: executing program 51 (id=2332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x94) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) 1m6.527710417s ago: executing program 6 (id=2335): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060097b92422f9a30250a30def79e5ddb933b83b8f8f1a0daad1705db386", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/109, 0x6d}], 0x2}, 0x1a3) sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="55b69a04de68c3e21533a90f73b2ed6fff56719043907e1bb8fc499aaaf5577f", 0x20}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0xc041) 1m6.234377111s ago: executing program 6 (id=2337): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f0000000ac0)={[{@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10c040, &(0x7f0000000380), 0x6, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1m5.873791247s ago: executing program 6 (id=2339): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) 1m3.822897528s ago: executing program 6 (id=2358): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x40, 0xf, 0x5, "ca51f17816"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x9, 0x1}, 0x0, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x7ff}, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "dfc3"}, 0x0, 0x0, 0x0, 0x0}) 1m3.716801919s ago: executing program 52 (id=2358): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x40, 0xf, 0x5, "ca51f17816"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x9, 0x1}, 0x0, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x7ff}, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "dfc3"}, 0x0, 0x0, 0x0, 0x0}) 50.714920806s ago: executing program 4 (id=2470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 48.50381794s ago: executing program 4 (id=2484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1159e4047a6348de, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 48.337170512s ago: executing program 4 (id=2488): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c756e695f786c6174653d312c696f636861727365743d69736f383835392d31342c636f6465706167653d3935302c696f636861727365743d6d616363656e746575726f2c757466383d302c73686f72746e616d653d6c6f7765722c00eb35cd69a309a1cd59f889d47f6ece19f2f93c7c42fee6d42a74a07aedee8d38362cec0a8a369a2bd5754fa3f8c0626979e68e9ae4cf36"], 0x1, 0x367, &(0x7f0000000840)="$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") ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0x10}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0x1000000, 0x0, 0x78, 0x8, 0xfffffffffffffffb, 0x0, 0x0, 0x452124fa, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffff9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffff, 0xf, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa5de, 0x0, 0xfffffffffffffffd, 0x5, 0x1, 0x1]}) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 47.334096077s ago: executing program 4 (id=2493): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x6a0, &(0x7f0000002d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 45.895074389s ago: executing program 4 (id=2501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 45.034104202s ago: executing program 4 (id=2511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="646565f20f2d4522f3ac66baf80cb81c66ae8def66bafc0c66ed26640f005733f20f00d1660fde45b70fc7af0f000000b805000000b93f0141670f01c1660f388190002000000f2059", 0x49}], 0x1, 0xc0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.761249926s ago: executing program 53 (id=2511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="646565f20f2d4522f3ac66baf80cb81c66ae8def66bafc0c66ed26640f005733f20f00d1660fde45b70fc7af0f000000b805000000b93f0141670f01c1660f388190002000000f2059", 0x49}], 0x1, 0xc0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.26843426s ago: executing program 2 (id=2655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x2}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x20, 0x10, 0x4, "c2325589"}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x9d}}) 26.341521224s ago: executing program 2 (id=2698): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x8) 25.32734262s ago: executing program 2 (id=2714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x15fec0d1aab5790c}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 24.308463525s ago: executing program 2 (id=2734): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50e, &(0x7f0000000700)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) 23.500639647s ago: executing program 2 (id=2745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/4, 0x4}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 22.616187011s ago: executing program 2 (id=2758): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x4, 0x0, [{0x4000, 0x5b, &(0x7f0000000340)=""/91}, {0xdddd1000, 0x1000, &(0x7f0000000e80)=""/4096}, {0xf000, 0x19, &(0x7f0000000140)=""/25}, {0x8000000, 0x69, &(0x7f0000000640)=""/105}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 22.339924095s ago: executing program 54 (id=2758): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x4, 0x0, [{0x4000, 0x5b, &(0x7f0000000340)=""/91}, {0xdddd1000, 0x1000, &(0x7f0000000e80)=""/4096}, {0xf000, 0x19, &(0x7f0000000140)=""/25}, {0x8000000, 0x69, &(0x7f0000000640)=""/105}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 8.923429582s ago: executing program 1 (id=2873): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 8.732503864s ago: executing program 1 (id=2874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.693430065s ago: executing program 1 (id=2876): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setgroups(0x1, &(0x7f0000000000)=[r0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) setregid(0x0, r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 8.550675517s ago: executing program 1 (id=2879): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000feffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 8.224138821s ago: executing program 1 (id=2884): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000003c0)={0x20006005}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x200008b0}, 0x20008000) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x81, 0x0, 0x0) 8.051891544s ago: executing program 1 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x33) 5.827855496s ago: executing program 0 (id=2910): mkdir(&(0x7f0000000100)='./file0\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x5}, {0x20, 0x6}}, 0x17, 0x1) 5.712907648s ago: executing program 0 (id=2911): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 4.789906181s ago: executing program 0 (id=2917): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x1, 0x6}, 0x0, &(0x7f0000000400)={0x1d, 0x0, 0x800000000000, 0x400000000000020, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.575899143s ago: executing program 5 (id=2937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x1000000, &(0x7f0000000480)={[{@clear_cache}, {@noacl}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="8af11dfbd2c6a2ce0af38dff9fe616786f8f551f6b1fe46a6ef36b7d33480fbd7024e6d8395908aa88d4d8d776f23d4fb832b250b5a520fa20543c93850b822e8ab246f6add9a1", 0x47}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}], 0x1, 0x1) recvmmsg(r1, &(0x7f000000bc40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/71, 0x47}], 0x1}, 0x9}], 0x1, 0x0, 0x0) 2.023293311s ago: executing program 8 (id=2941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.964901682s ago: executing program 8 (id=2943): pselect6(0x0, 0x0, 0x0, &(0x7f0000000300)={0x100, 0xd, 0x2, 0x5, 0x8e, 0x6, 0x6, 0x1}, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@bh}, {@noload}, {@nombcache}, {@noblock_validity}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000b00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x2, 0x4, 0x0, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x2, 0x6, 0x4, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x5, 0xc, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x9, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0x9, 0x7f, 0x81, 0x6, 0x637, 0x4, 0xfb, 0xfff, 0x97, 0x6, 0x791a, 0x0, 0x0, 0x7, 0xab5, 0x0, 0x66ab6d08, 0x11, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0x0, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x4, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x100, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0x4000000f, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x7, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x587, 0x8, 0x1, 0x4, 0x7, 0x6, 0x3ff, 0x0, 0x431, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x3, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff8, 0x5, 0x8, 0xfffeffff, 0x1, 0x0, 0x49fb, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x7, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x9, 0x7fff, 0x5, 0x7ff, 0x800, 0x7, 0x0, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0x8, 0x6, 0x9, 0x0, 0x10000, 0x5, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x80000001, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x5, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x0, 0x0, 0x5, 0xc1, 0x2, 0x401, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe000000"]) 1.727745586s ago: executing program 0 (id=2944): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r2, &(0x7f0000000540)}, 0x20) 1.654245336s ago: executing program 0 (id=2945): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.613517717s ago: executing program 5 (id=2946): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8b251853e0c8764d148aafefed39cdb21f113281088b936c67e78bac7b7f77a554", 0x21}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x6004081) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/15, 0xf}, {&(0x7f0000000b00)=""/90, 0x5a}], 0x2}, 0x1) 1.150757964s ago: executing program 0 (id=2949): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.070831615s ago: executing program 8 (id=2950): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000002280)=ANY=[], 0xb81, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 870.542768ms ago: executing program 5 (id=2951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd08, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 658.522291ms ago: executing program 5 (id=2952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 555.466902ms ago: executing program 5 (id=2954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6010, 0x4) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) sendfile(r0, r1, &(0x7f0000000100), 0x8001) 490.129113ms ago: executing program 5 (id=2956): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) close(0xffffffffffffffff) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000040), 0x2}) 390.114084ms ago: executing program 8 (id=2958): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/76, 0x4c) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000100)='./control\x00') 230.731367ms ago: executing program 3 (id=2960): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 189.326937ms ago: executing program 3 (id=2961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x837, &(0x7f0000001500)={0x0, 0x2b94, 0x0, 0x3, 0x395}, &(0x7f0000001600)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 185.889978ms ago: executing program 8 (id=2963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd08, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 109.146178ms ago: executing program 3 (id=2964): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0xc}}}, &(0x7f0000000040)=0x84) listen(r0, 0x0) 74.239429ms ago: executing program 3 (id=2965): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 52.58013ms ago: executing program 8 (id=2966): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3}) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) 605.12µs ago: executing program 3 (id=2967): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r2, &(0x7f0000000540)}, 0x20) 0s ago: executing program 3 (id=2968): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6010, 0x4) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) sendfile(r0, r1, &(0x7f0000000100), 0x8001) kernel console output (not intermixed with test programs): aving as an active interface with an up link [ 360.468749][T14781] team0: Port device team_slave_0 added [ 360.524647][T14781] team0: Port device team_slave_1 added [ 360.538429][ T6271] Bluetooth: hci3: command 0x0409 tx timeout [ 360.630203][T14781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.680787][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.760334][T14781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.817714][T14781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.851833][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.895206][T14781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.917006][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 361.132153][T14781] device hsr_slave_0 entered promiscuous mode [ 361.200328][T14781] device hsr_slave_1 entered promiscuous mode [ 361.239484][T14781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.274749][T14781] Cannot create hsr debugfs directory [ 361.714977][T14942] loop9: detected capacity change from 0 to 2048 [ 361.794199][T14942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.880396][ T4357] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.013923][ T4391] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 362.038586][T14959] netlink: 'syz.3.2175': attribute type 10 has an invalid length. [ 362.068829][ T4357] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.238517][ T4357] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.318138][ T4357] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.382238][ T4391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.401890][ T4391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.435586][ T4391] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.461899][ T4391] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.481770][ T4391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.505784][ T4391] usb 3-1: config 0 descriptor?? [ 362.623860][T14781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 362.632683][ T6265] Bluetooth: hci3: command 0x041b tx timeout [ 362.648070][T14781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 362.675605][T14781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.691730][ T4188] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 362.702429][T14781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.935624][T14781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.954226][T14989] loop4: detected capacity change from 0 to 512 [ 362.956846][ T4188] usb 10-1: Using ep0 maxpacket: 8 [ 362.990274][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.003785][ T4391] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 363.019385][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.030040][ T4391] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 363.074470][T14781] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.158877][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.191515][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.221054][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.228131][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.259468][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.311066][ T4188] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 363.320297][ T4188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.331301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.349736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.358130][ T4188] usb 10-1: Product: syz [ 363.360158][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.369488][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.373709][ T4188] usb 10-1: Manufacturer: syz [ 363.385442][ T4188] usb 10-1: SerialNumber: syz [ 363.389423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.396532][ T4188] usb 10-1: config 0 descriptor?? [ 363.421497][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.452911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.466636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.478580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.503459][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.523394][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.546076][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.560456][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.573269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.586881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.600620][T14781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.691155][ T4188] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 363.929883][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.947480][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.975140][ T4357] device hsr_slave_0 left promiscuous mode [ 363.981783][ T4357] device hsr_slave_1 left promiscuous mode [ 363.988095][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.996243][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.004159][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.011708][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.019319][ T4357] device bridge_slave_1 left promiscuous mode [ 364.026047][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.034637][ T4357] device bridge_slave_0 left promiscuous mode [ 364.048105][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.059942][ T4357] device veth1_macvtap left promiscuous mode [ 364.069623][ T4357] device veth0_macvtap left promiscuous mode [ 364.075788][ T4357] device veth1_vlan left promiscuous mode [ 364.081958][ T4357] device veth0_vlan left promiscuous mode [ 364.241115][ T4188] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 364.267016][ T4188] usb 10-1: USB disconnect, device number 9 [ 364.321061][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 364.338390][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 364.353546][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.397332][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.490413][ T4357] bond0 (unregistering): Released all slaves [ 364.543487][T14781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.551166][T15012] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2190'. [ 364.703980][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 364.849589][T15033] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2196'. [ 364.907016][T15033] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2196'. [ 365.247736][ T4290] usb 3-1: USB disconnect, device number 21 [ 365.348166][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.367258][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.421260][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 365.463716][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.752151][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.760012][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.825329][T14781] device veth0_vlan entered promiscuous mode [ 365.859440][T14781] device veth1_vlan entered promiscuous mode [ 365.960180][T15063] sctp: [Deprecated]: syz.4.2205 (pid 15063) Use of int in maxseg socket option. [ 365.960180][T15063] Use struct sctp_assoc_value instead [ 365.996611][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.048582][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.117911][T14781] device veth0_macvtap entered promiscuous mode [ 366.165642][T14781] device veth1_macvtap entered promiscuous mode [ 366.215038][T15080] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 366.254253][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.297296][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.297731][T15083] loop2: detected capacity change from 0 to 7 [ 366.330913][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.371605][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.382598][ T4329] loop2: [ 366.385571][ T4329] loop2: partition table partially beyond EOD, truncated [ 366.397442][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.416470][T15083] loop2: [ 366.419513][T15083] loop2: partition table partially beyond EOD, truncated [ 366.440786][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.485978][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.510858][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.551222][T14781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.558895][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.579146][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.663971][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.699682][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.742877][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.763189][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 366.813459][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.850401][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.887184][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.919399][T15099] loop4: detected capacity change from 0 to 2048 [ 366.934866][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.964085][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.997040][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.028022][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.065845][T14781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.090967][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.107877][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.133212][T15099] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 367.156852][T14781] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.183534][T14781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.204283][T15099] EXT4-fs (loop4): Ignoring removed nobh option [ 367.217498][T14781] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.247341][T14781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.295243][T15099] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,nobh,bsddf,. Quota mode: none. [ 367.380885][ T4290] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 367.497730][ T9269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.513734][ T9269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.578460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.598917][ T9269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.630417][ T9269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.715454][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.751226][ T4290] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 367.779016][ T4290] usb 10-1: config 0 interface 0 has no altsetting 0 [ 367.956358][ T4290] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 367.988474][ T4290] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 368.015697][ T4290] usb 10-1: Product: syz [ 368.034291][ T4290] usb 10-1: Manufacturer: syz [ 368.047926][ T4290] usb 10-1: SerialNumber: syz [ 368.084353][ T4290] usb 10-1: config 0 descriptor?? [ 368.158540][ T4290] usb 10-1: selecting invalid altsetting 0 [ 368.370314][ T4188] usb 10-1: USB disconnect, device number 10 [ 368.415719][ T4234] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 368.851602][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.871963][ T4234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.990960][ T4234] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.010261][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.032868][ T4234] usb 3-1: SerialNumber: syz [ 369.374376][ T4234] usb 3-1: 0:2 : does not exist [ 369.451021][ T4234] usb 3-1: unit 3 not found! [ 369.482531][ T4234] usb 3-1: USB disconnect, device number 22 [ 369.706379][T15194] loop6: detected capacity change from 0 to 512 [ 369.782817][ T4329] udevd[4329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.251628][T15222] loop6: detected capacity change from 0 to 128 [ 370.307134][T15222] ufs: You didn't specify the type of your ufs filesystem [ 370.307134][T15222] [ 370.307134][T15222] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 370.307134][T15222] [ 370.307134][T15222] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 370.532925][T15222] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 370.622111][T15237] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 370.929460][T15250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.937865][T15250] IPv6: NLM_F_CREATE should be set when creating new route [ 371.449224][T15277] loop2: detected capacity change from 0 to 512 [ 371.565799][T15277] EXT4-fs (loop2): Ignoring removed nobh option [ 371.595884][T15277] EXT4-fs (loop2): Test dummy encryption mode enabled [ 371.638338][T15277] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 371.701823][T15293] loop9: detected capacity change from 0 to 512 [ 371.727759][T15277] EXT4-fs (loop2): 1 truncate cleaned up [ 371.744256][T15277] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,test_dummy_encryption,acl,,errors=continue. Quota mode: none. [ 371.875198][T15293] EXT4-fs (loop9): orphan cleanup on readonly fs [ 372.002175][T15293] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2264: bg 0: block 248: padding at end of block bitmap is not set [ 372.146386][T15293] Quota error (device loop9): write_blk: dquota write failed [ 372.170232][T15293] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 372.218291][T15293] EXT4-fs error (device loop9): ext4_acquire_dquot:6207: comm syz.9.2264: Failed to acquire dquot type 1 [ 372.376332][T15293] EXT4-fs (loop9): 1 truncate cleaned up [ 372.421301][T15314] netlink: 'syz.2.2268': attribute type 5 has an invalid length. [ 372.431634][T15293] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,acl,noload,auto_da_alloc=0x000000005b196a02,,errors=continue. Quota mode: writeback. [ 372.509405][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2268'. [ 372.625138][T15311] loop4: detected capacity change from 0 to 65536 [ 372.899813][T15311] XFS (loop4): Mounting V5 Filesystem [ 373.132773][T15311] XFS (loop4): Ending clean mount [ 373.139278][T15311] XFS (loop4): Quotacheck needed: Please wait. [ 373.240875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.315910][T15358] loop9: detected capacity change from 0 to 164 [ 373.323949][T15311] XFS (loop4): Quotacheck: Done. [ 373.472799][T11140] XFS (loop4): Unmounting Filesystem [ 373.651986][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2287'. [ 373.735372][T15372] netlink: 'syz.6.2287': attribute type 14 has an invalid length. [ 373.775331][T15372] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.784256][T15372] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.793048][T15372] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.801794][T15372] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.850880][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2287'. [ 373.859850][T15372] netlink: 'syz.6.2287': attribute type 14 has an invalid length. [ 374.310926][ T13] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 374.550877][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 374.628148][T15371] loop9: detected capacity change from 0 to 32768 [ 374.671197][ T13] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 374.681788][T15371] gfs2: Unknown parameter '00000000000000000000003' [ 374.708888][ T13] usb 7-1: config 0 has no interface number 0 [ 374.725675][ T13] usb 7-1: config 0 interface 184 has no altsetting 0 [ 374.769642][T15402] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3676332853 (29410662824 ns) > initial count (8669248288 ns). Using initial count to start timer. [ 374.915435][ T13] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 374.946549][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.980986][ T13] usb 7-1: Product: syz [ 374.985235][ T13] usb 7-1: Manufacturer: syz [ 375.020313][ T13] usb 7-1: SerialNumber: syz [ 375.041640][ T13] usb 7-1: config 0 descriptor?? [ 375.083662][ T13] smsc75xx v1.0.0 [ 375.170413][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2300'. [ 375.182400][T15419] loop4: detected capacity change from 0 to 8192 [ 375.236707][T15419] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 375.286761][T15419] REISERFS (device loop4): using ordered data mode [ 375.293681][T15419] reiserfs: using flush barriers [ 375.310461][T15419] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 375.327407][T15419] REISERFS (device loop4): checking transaction log (loop4) [ 375.389892][T15427] device hsr_slave_0 left promiscuous mode [ 375.455687][T15419] REISERFS (device loop4): Using tea hash to sort names [ 375.486622][T15419] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 375.740939][ T13] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 375.761713][ T13] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 376.138430][T15470] loop9: detected capacity change from 0 to 512 [ 376.264695][T15470] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 376.285112][T15470] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 376.327073][T15470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 376.335345][T15470] System zones: 1-12 [ 376.341630][T15470] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2228: inode #15: comm syz.9.2311: corrupted in-inode xattr [ 376.354191][T15470] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.2311: couldn't read orphan inode 15 (err -117) [ 376.368191][T15470] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 376.447693][T15470] EXT4-fs warning (device loop9): dx_probe:833: inode #2: comm syz.9.2311: Unrecognised inode hash code 4 [ 376.471983][ T13] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 376.491110][T15470] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.2311: Corrupt directory, running e2fsck is recommended [ 376.503338][ T13] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 376.527832][ T13] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 376.547753][ T13] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 376.567282][ T13] usb 7-1: USB disconnect, device number 10 [ 376.819989][T15486] loop9: detected capacity change from 0 to 512 [ 376.872301][T15486] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 376.889659][T15486] EXT4-fs (loop9): invalid journal inode [ 376.900940][T15486] EXT4-fs (loop9): can't get journal size [ 376.943897][T15486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002] [ 376.989668][T15486] System zones: 1-12, 13-13 [ 377.007423][T15486] EXT4-fs (loop9): 1 truncate cleaned up [ 377.049837][T15486] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,grpquota,debug,nombcache,,errors=continue. Quota mode: writeback. [ 377.138416][T15496] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 377.300092][T15486] overlayfs: invalid redirect ((null)) [ 377.355751][T13696] EXT4-fs error (device loop9): __ext4_iget:4894: inode #11: block 1828716567: comm syz-executor: invalid block [ 377.459392][T13696] EXT4-fs error (device loop9): __ext4_iget:4894: inode #11: block 1828716567: comm syz-executor: invalid block [ 378.364813][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.381529][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.771112][T15560] loop6: detected capacity change from 0 to 128 [ 378.873681][T15560] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,min_batch_time=0x0000000000000401,,errors=continue. Quota mode: none. [ 378.908392][T15560] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.988129][T15560] EXT4-fs warning (device loop6): ext4_dirblock_csum_set:427: inode #2: comm syz.6.2337: No space for directory leaf checksum. Please run e2fsck -D. [ 379.008906][T15561] lo speed is unknown, defaulting to 1000 [ 379.047206][ T4329] udevd[4329]: incorrect jbd checksum on /dev/loop6 [ 379.083584][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 0 [ 379.128071][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 1024 [ 379.176420][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 2048 [ 379.224174][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 3072 [ 379.278659][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 4096 [ 379.337477][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 5120 [ 379.375706][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 6144 [ 379.453371][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 7168 [ 379.499409][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 8192 [ 379.524912][T14781] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /18/file0/lost+found: directory fails checksum at offset 9216 [ 379.580942][ T4402] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 379.628301][T15561] chnl_net:caif_netlink_parms(): no params data found [ 379.760480][T15561] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.768092][T15561] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.820454][T15561] device bridge_slave_0 entered promiscuous mode [ 379.898150][T15561] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.917335][T15561] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.981122][ T4402] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 379.990479][ T4402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.008143][T15561] device bridge_slave_1 entered promiscuous mode [ 380.045588][ T4402] usb 5-1: config 0 descriptor?? [ 380.110669][T15561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.144949][T15561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.221937][T15561] team0: Port device team_slave_0 added [ 380.230395][T15561] team0: Port device team_slave_1 added [ 380.291387][T15561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.298343][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.324408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061becc00: rx timeout, send abort [ 380.341585][T15561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.413909][T15561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.440919][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 380.442130][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.482626][T15561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.629584][T15561] device hsr_slave_0 entered promiscuous mode [ 380.636892][T15561] device hsr_slave_1 entered promiscuous mode [ 380.656688][T15561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.697277][T15561] Cannot create hsr debugfs directory [ 380.771466][T15632] loop2: detected capacity change from 0 to 2048 [ 380.797534][T15632] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.800703][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060622400: rx timeout, send abort [ 380.824546][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061becc00: abort rx timeout. Force session deactivation [ 380.922964][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 381.050483][ T1236] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.062941][ T1236] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.138336][ T1236] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.169325][ T1236] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.193885][ T4402] pegasus: probe of 5-1:0.0 failed with error -121 [ 381.233126][ T1236] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.253758][ T1236] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.314556][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060622400: abort rx timeout. Force session deactivation [ 381.350844][ T1236] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.386297][ T1236] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.532696][T15656] lo speed is unknown, defaulting to 1000 [ 381.807654][T15670] loop2: detected capacity change from 0 to 512 [ 381.836504][T15561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.874903][T15670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 381.893430][T15561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.967098][T15561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.983665][T15670] EXT4-fs (loop2): 1 truncate cleaned up [ 381.989440][T15670] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.009375][T15561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.343138][T15656] chnl_net:caif_netlink_parms(): no params data found [ 382.424525][ T4399] usb 5-1: USB disconnect, device number 12 [ 382.538082][T15561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.586676][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.597116][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.639836][T15561] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.709632][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.732204][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.762393][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.769456][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.801354][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.810360][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.819485][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.826631][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.845606][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.860296][T15656] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.881053][T15656] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.888859][T15656] device bridge_slave_0 entered promiscuous mode [ 382.951216][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.959444][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.976321][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.003308][ T6271] Bluetooth: hci2: command 0x041b tx timeout [ 383.005455][T15706] loop2: detected capacity change from 0 to 32768 [ 383.013893][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.032840][T15656] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.040612][T15656] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.060206][T15706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2365 (15706) [ 383.065349][T15656] device bridge_slave_1 entered promiscuous mode [ 383.088755][T15706] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 383.105622][T15706] BTRFS info (device loop2): turning off barriers [ 383.127077][T15706] BTRFS info (device loop2): setting nodatasum [ 383.133791][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.139239][T15706] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 383.153361][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.158357][T15706] BTRFS info (device loop2): use zstd compression, level 3 [ 383.170025][T15706] BTRFS info (device loop2): using free space tree [ 383.176042][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.188983][T15706] BTRFS info (device loop2): has skinny extents [ 383.240176][T15656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.288084][T15561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.326702][T15561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.399784][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.411119][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.455649][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.460029][T15706] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 383.511495][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.557361][T15656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.571344][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 383.592517][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.114628][T15656] team0: Port device team_slave_0 added [ 384.149853][T15770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2377'. [ 384.195650][T15776] capability: warning: `syz.4.2378' uses 32-bit capabilities (legacy support in use) [ 384.207014][T15656] team0: Port device team_slave_1 added [ 384.306852][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.337768][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.406512][T15561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.432972][T15790] overlayfs: failed to clone upperpath [ 384.475173][T15656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.500102][T15790] overlayfs: failed to clone upperpath [ 384.506238][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.600079][T15796] loop4: detected capacity change from 0 to 1024 [ 384.611588][T15656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.619545][T15800] loop2: detected capacity change from 0 to 256 [ 384.656486][ T1236] device hsr_slave_0 left promiscuous mode [ 384.669897][T15803] ptrace attach of "./syz-executor exec"[11285] was attempted by "./syz-executor exec"[15803] [ 384.673138][T15796] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 384.695159][ T1236] device hsr_slave_1 left promiscuous mode [ 384.701820][T15800] exfat: Unknown parameter 'keep_last_dots' [ 384.712432][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.719879][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.753568][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.761153][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.784985][ T1236] device bridge_slave_1 left promiscuous mode [ 384.828297][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.869925][ T1236] device bridge_slave_0 left promiscuous mode [ 384.880932][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.936373][ T1236] device veth1_macvtap left promiscuous mode [ 384.951096][ T1236] device veth0_macvtap left promiscuous mode [ 384.957222][ T1236] device veth1_vlan left promiscuous mode [ 384.991976][ T1236] device veth0_vlan left promiscuous mode [ 385.085803][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 385.264947][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 385.281386][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 385.296426][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.312803][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.393361][ T1236] bond0 (unregistering): Released all slaves [ 385.453492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.465427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.474915][T15656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.487343][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.514231][T15656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.532586][T15809] lo speed is unknown, defaulting to 1000 [ 385.573765][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 385.640928][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 385.647014][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.671718][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.690410][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.738113][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.763969][T15561] device veth0_vlan entered promiscuous mode [ 385.808198][T15656] device hsr_slave_0 entered promiscuous mode [ 385.866233][T15656] device hsr_slave_1 entered promiscuous mode [ 385.894899][T15656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.921422][T15656] Cannot create hsr debugfs directory [ 385.933849][T15561] device veth1_vlan entered promiscuous mode [ 385.957709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.985421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.998512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.020192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.041721][T15561] device veth0_macvtap entered promiscuous mode [ 386.204147][T15561] device veth1_macvtap entered promiscuous mode [ 386.345429][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.357173][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.374163][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.386569][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.397080][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.407599][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.418054][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.428562][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.439882][T15561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.515250][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.527968][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.536622][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.553182][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.586867][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.644189][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.668227][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.681885][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.701203][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.715675][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.725925][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.737556][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.749138][T15561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.790289][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.802290][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.828839][T15561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.840587][T15561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.850170][T15561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.861979][T15561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.973652][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 387.174332][ T6271] Bluetooth: hci2: command 0x0419 tx timeout [ 387.361245][ T4402] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 387.377056][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.420976][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.492243][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.536023][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.560318][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.597678][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.610807][ T4402] usb 5-1: Using ep0 maxpacket: 32 [ 387.663435][T15902] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2407'. [ 387.730998][ T4402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.731021][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 387.760958][ T4402] usb 5-1: config 0 has no interfaces? [ 387.789889][T15656] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 387.796794][ T4402] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 387.822807][ T4402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.869158][ T4402] usb 5-1: config 0 descriptor?? [ 387.908512][T15656] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 387.973875][T15656] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.014747][T15656] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.142264][ T4394] usb 5-1: USB disconnect, device number 13 [ 388.391912][T15656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.442148][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.467165][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.526492][T15656] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.558511][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.591359][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.627120][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.634268][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.690771][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.748115][T15944] loop0: detected capacity change from 0 to 8 [ 388.763981][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.784805][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.809385][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.816532][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.830870][T15944] /dev/loop0: Can't open blockdev [ 388.935365][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.978429][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 389.038860][T15953] loop0: detected capacity change from 0 to 512 [ 389.049013][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 389.090550][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.152565][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.194267][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.245302][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.297908][T15656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.342240][T15656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.397141][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.442153][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.504232][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.549720][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.567001][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.618349][T15960] lo speed is unknown, defaulting to 1000 [ 389.811659][ T6271] Bluetooth: hci3: command 0x0419 tx timeout [ 390.031929][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2425'. [ 390.185727][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.217949][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.271853][T15656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.324973][T16005] loop4: detected capacity change from 0 to 128 [ 390.444726][T16005] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/222/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 390.978110][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.204836][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.255459][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 391.302417][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.324132][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.363691][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.407425][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.449932][T15656] device veth0_vlan entered promiscuous mode [ 391.522389][T15656] device veth1_vlan entered promiscuous mode [ 391.627460][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.674218][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.692049][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.728658][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.766597][T15656] device veth0_macvtap entered promiscuous mode [ 391.799240][T15656] device veth1_macvtap entered promiscuous mode [ 391.875922][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.952157][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.952187][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.952201][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.952214][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.952225][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.952251][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.952264][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.952285][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.952297][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.960056][T15656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.960411][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 391.962239][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 391.962878][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.963390][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.003455][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.003477][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.003489][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.003500][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.003511][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.003523][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.003534][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.003545][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.003556][T15656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.003567][T15656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.012169][T15656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.012361][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.012992][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.017238][T15656] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.017271][T15656] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.017296][T15656] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.017320][T15656] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.394853][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.400611][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.427409][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 392.498147][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'. [ 392.502287][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.502364][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.516267][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 392.725301][T16076] loop2: detected capacity change from 0 to 164 [ 392.849989][T16076] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 392.969613][T16085] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2359'. [ 393.064186][ T26] audit: type=1326 audit(1752766090.944:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.4.2447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2f7566929 code=0x0 [ 393.102673][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2359'. [ 393.197749][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'. [ 393.869354][T16141] loop2: detected capacity change from 0 to 7 [ 393.943361][ T4329] Dev loop2: unable to read RDB block 7 [ 393.954933][ T4329] loop2: unable to read partition table [ 393.978112][ T4329] loop2: partition table beyond EOD, truncated [ 394.027223][T16141] Dev loop2: unable to read RDB block 7 [ 394.051607][T16151] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2467'. [ 394.070425][T16141] loop2: unable to read partition table [ 394.100322][T16141] loop2: partition table beyond EOD, truncated [ 394.131009][T16141] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 394.418196][T16168] loop8: detected capacity change from 0 to 64 [ 394.611105][ T6271] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 395.021252][ T6271] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 395.077716][ T6271] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 395.141483][ T6271] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 395.197143][ T6271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.612940][T16200] loop8: detected capacity change from 0 to 4096 [ 395.801093][ T6271] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 395.818638][ T6271] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input27 [ 396.114144][ T6271] input: failed to attach handler kbd to device input27, error: -5 [ 396.230000][ T6271] usb 5-1: USB disconnect, device number 14 [ 396.291630][T16181] loop0: detected capacity change from 0 to 262144 [ 396.751837][T16225] loop4: detected capacity change from 0 to 256 [ 396.972301][T16225] FAT-fs (loop4): Directory bread(block 64) failed [ 396.999376][T16225] FAT-fs (loop4): Directory bread(block 65) failed [ 397.015637][T16201] loop2: detected capacity change from 0 to 32768 [ 397.027451][T16232] loop0: detected capacity change from 0 to 2048 [ 397.040961][T16225] FAT-fs (loop4): Directory bread(block 66) failed [ 397.051217][T16225] FAT-fs (loop4): Directory bread(block 67) failed [ 397.065125][T16225] FAT-fs (loop4): Directory bread(block 68) failed [ 397.111117][T16225] FAT-fs (loop4): Directory bread(block 69) failed [ 397.117742][T16225] FAT-fs (loop4): Directory bread(block 70) failed [ 397.175503][T16225] FAT-fs (loop4): Directory bread(block 71) failed [ 397.221032][T16225] FAT-fs (loop4): Directory bread(block 72) failed [ 397.231112][T16225] FAT-fs (loop4): Directory bread(block 73) failed [ 397.257523][T16241] loop8: detected capacity change from 0 to 128 [ 397.261840][T16201] XFS (loop2): Mounting V5 Filesystem [ 397.349185][T16225] attempt to access beyond end of device [ 397.349185][T16225] loop4: rw=524288, want=1164, limit=256 [ 397.387451][T16241] EXT4-fs (loop8): Ignoring removed nobh option [ 397.421880][T16225] attempt to access beyond end of device [ 397.421880][T16225] loop4: rw=0, want=1164, limit=256 [ 397.469196][T16241] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 397.577014][T16241] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.588943][T16201] XFS (loop2): Ending clean mount [ 397.839817][T16258] loop4: detected capacity change from 0 to 1024 [ 398.089612][ T26] audit: type=1800 audit(1752766095.964:138): pid=16258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2493" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 398.295925][T11289] XFS (loop2): Unmounting Filesystem [ 398.520139][T16258] Trying to write to read-only block-device loop4 [ 398.581882][T16258] attempt to access beyond end of device [ 398.581882][T16258] loop4: rw=2049, want=5780, limit=1024 [ 398.662881][T16258] buffer_io_error: 23 callbacks suppressed [ 398.662898][T16258] Buffer I/O error on dev loop4, logical block 2889, lost async page write [ 398.757280][T16258] Trying to write to read-only block-device loop4 [ 398.779834][T16258] Trying to write to read-only block-device loop4 [ 398.830971][T16258] Trying to write to read-only block-device loop4 [ 398.884567][T16258] Trying to write to read-only block-device loop4 [ 399.042944][T11140] hfsplus: bad catalog entry type [ 399.275364][T16294] tipc: Failed to remove unknown binding: 66,1,1/0:1762578620/1762578622 [ 399.554086][ T4441] Trying to write to read-only block-device loop4 [ 399.560577][ T4441] Trying to write to read-only block-device loop4 [ 399.603020][ T4441] Trying to write to read-only block-device loop4 [ 399.640169][ T4441] Trying to write to read-only block-device loop4 [ 399.670514][ T4441] Trying to write to read-only block-device loop4 [ 399.942520][T16323] loop8: detected capacity change from 0 to 1024 [ 400.006936][T16323] EXT4-fs (loop8): Ignoring removed nobh option [ 400.018158][T16323] EXT4-fs (loop8): Ignoring removed bh option [ 400.081306][T16323] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 400.158210][T16323] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,delalloc,grpquota,nobh,user_xattr,bh,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 400.319001][T16323] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3876: comm syz.8.2510: Allocating blocks 257-513 which overlap fs metadata [ 400.385468][T16337] loop2: detected capacity change from 0 to 1764 [ 400.428292][T16323] EXT4-fs error (device loop8): mb_free_blocks:1865: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 400.444504][T16323] EXT4-fs (loop8): pa ffff88805fc847e0: logic 16, phys. 129, len 3 [ 400.452717][T16323] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4893: group 0, free 3, pa_free 2 [ 400.605321][T16342] lo speed is unknown, defaulting to 1000 [ 400.871671][T16357] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 400.885532][T16357] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 401.298280][T16382] lo speed is unknown, defaulting to 1000 [ 401.394192][T16342] chnl_net:caif_netlink_parms(): no params data found [ 401.440693][T16390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2529'. [ 401.836773][T16381] loop0: detected capacity change from 0 to 32768 [ 401.854630][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2531'. [ 401.870993][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2531'. [ 401.890962][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2531'. [ 401.901177][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2531'. [ 401.930682][T16408] netlink: 'syz.3.2531': attribute type 6 has an invalid length. [ 401.984607][T16342] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.023537][T16342] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.056807][T16342] device bridge_slave_0 entered promiscuous mode [ 402.114110][T16342] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.137817][ T4329] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4329) [ 402.155016][T16342] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.182770][T16342] device bridge_slave_1 entered promiscuous mode [ 402.521065][ T4391] Bluetooth: hci1: command 0x0409 tx timeout [ 402.532754][T16342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.616093][T16342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.869323][T16430] overlayfs: failed to clone upperpath [ 402.995672][T16342] team0: Port device team_slave_0 added [ 403.030554][T16433] loop0: detected capacity change from 0 to 2048 [ 403.072986][T16342] team0: Port device team_slave_1 added [ 403.169110][T16342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.187448][T16342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.301034][T16342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.430009][T16342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.439468][T16342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.566897][T16342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.659552][T16470] "syz.2.2548" (16470) uses obsolete ecb(arc4) skcipher [ 403.783670][T16342] device hsr_slave_0 entered promiscuous mode [ 403.810406][T16342] device hsr_slave_1 entered promiscuous mode [ 403.830474][T16342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.842360][T16342] Cannot create hsr debugfs directory [ 403.923051][T16479] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 404.101293][T16461] loop8: detected capacity change from 0 to 32768 [ 404.140181][T16461] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.2543 (16461) [ 404.186915][T16484] lo speed is unknown, defaulting to 1000 [ 404.194645][T16461] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 404.205293][T16461] BTRFS info (device loop8): force zlib compression, level 3 [ 404.213739][T16461] BTRFS info (device loop8): force clearing of disk cache [ 404.236500][T16461] BTRFS info (device loop8): setting nodatasum [ 404.257310][T16461] BTRFS info (device loop8): allowing degraded mounts [ 404.291197][T16461] BTRFS info (device loop8): enabling disk space caching [ 404.322054][T16461] BTRFS info (device loop8): disk space caching is enabled [ 404.347521][T16461] BTRFS info (device loop8): has skinny extents [ 404.559553][T16512] loop2: detected capacity change from 0 to 7 [ 404.604484][ T4402] Bluetooth: hci1: command 0x041b tx timeout [ 404.627292][T16512] Dev loop2: unable to read RDB block 7 [ 404.634410][T16461] BTRFS info (device loop8): clearing free space tree [ 404.641609][T16461] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 404.652394][T16512] loop2: unable to read partition table [ 404.653662][T16461] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.692162][T16512] loop2: partition table beyond EOD, truncated [ 404.698360][T16512] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 404.865118][T16342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.906975][T16342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.955734][T16342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.272676][ T26] audit: type=1326 audit(1752766103.154:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.0.2551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f303eeec929 code=0x0 [ 405.416358][T16523] overlayfs: failed to clone upperpath [ 405.658507][T16342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.764488][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 405.819071][T16542] loop8: detected capacity change from 0 to 256 [ 405.850978][ T4297] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 405.903092][T16542] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xff48ad06, utbl_chksum : 0xe619d30d) [ 405.956789][T16342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.989773][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.014327][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.045659][T16342] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.091716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.109375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.124130][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.131296][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.168043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.208115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.239786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.291956][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.299043][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.321190][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 406.342818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 406.352592][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 406.382344][ T4297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 406.422779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.440813][ T4297] usb 3-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 406.449888][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.459710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 406.482890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.512617][ T4297] usb 3-1: config 0 descriptor?? [ 406.531717][T16525] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 406.539044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.571827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.602404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.652503][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.677664][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.686079][ T4412] Bluetooth: hci1: command 0x040f tx timeout [ 406.699050][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 406.726341][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.737942][T16342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.983418][ T4297] hid-generic 0003:045E:008E.001A: unbalanced collection at end of report description [ 407.003852][ T4297] hid-generic: probe of 0003:045E:008E.001A failed with error -22 [ 407.220856][ T4297] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 407.239512][ T13] usb 3-1: USB disconnect, device number 23 [ 407.256448][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.266628][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.299299][T16342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.369672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.408801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.452105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.471844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.500838][ T4297] usb 9-1: Using ep0 maxpacket: 8 [ 407.504914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.541387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.552907][T16342] device veth0_vlan entered promiscuous mode [ 407.580529][T16342] device veth1_vlan entered promiscuous mode [ 407.634445][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 407.654730][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 407.665203][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.685536][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.708976][T16342] device veth0_macvtap entered promiscuous mode [ 407.742107][T16342] device veth1_macvtap entered promiscuous mode [ 407.791573][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.811829][ T4297] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 407.827054][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.841056][ T4297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.864400][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.876576][ T4297] usb 9-1: Product: syz [ 407.881029][ T4297] usb 9-1: Manufacturer: syz [ 407.886561][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.910719][ T4297] usb 9-1: SerialNumber: syz [ 407.927885][ T4297] usb 9-1: config 0 descriptor?? [ 407.937138][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.958641][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.975352][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.993701][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.016841][ T4297] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 408.029854][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.062241][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.080270][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.098115][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.108285][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.131077][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.155883][T16342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.189023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.203408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.228874][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.250109][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.271838][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.290788][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.290959][ T4394] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 408.312913][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.331738][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.360807][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.388849][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.418460][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.443925][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.463894][T16342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.496499][T16342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.516636][T16342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.541750][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.559346][ T9269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.583842][T16581] device bridge1 entered promiscuous mode [ 408.592645][T16342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.605446][T16342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.639364][T16342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.659017][T16342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.701254][ T4394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.728094][ T4394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.747837][T16586] device lo entered promiscuous mode [ 408.766009][ T4394] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.809740][ T4394] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.843078][ T4394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.865312][ T4389] Bluetooth: hci1: command 0x0419 tx timeout [ 408.878712][ T4394] usb 3-1: config 0 descriptor?? [ 408.930509][T16586] device lo left promiscuous mode [ 409.024192][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.057607][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.074294][ T9269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.117617][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.134482][ T9269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.154638][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 409.174130][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.323172][ T4297] input: sonixj as /devices/platform/dummy_hcd.8/usb9/9-1/input/input28 [ 409.373117][ T4394] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 409.459580][ T4394] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 409.549673][ T4290] usb 9-1: USB disconnect, device number 8 [ 410.265880][ C0] Unknown status report in ack skb [ 410.673907][T16666] loop1: detected capacity change from 0 to 8 [ 410.794533][ T4389] usb 3-1: USB disconnect, device number 24 [ 411.007190][T16651] loop8: detected capacity change from 0 to 32768 [ 411.014803][T16671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 411.179798][T16651] XFS (loop8): Mounting V5 Filesystem [ 411.258559][T16651] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 411.356506][T16651] XFS (loop8): Starting recovery (logdev: internal) [ 411.446652][T16689] loop1: detected capacity change from 0 to 512 [ 411.454986][T16651] XFS (loop8): Ending recovery (logdev: internal) [ 411.511163][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 411.561785][T16689] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 411.583467][T16689] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.706304][T16689] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 411.756070][T15656] XFS (loop8): Unmounting Filesystem [ 412.118094][ T13] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 412.162168][ T13] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 412.180799][ T13] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 412.200883][ T13] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 412.230816][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.239757][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 412.304710][T16704] overlayfs: failed to clone upperpath [ 412.495499][T16716] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2607'. [ 412.546978][T16724] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 412.567325][ T13] usb 1-1: string descriptor 0 read error: -22 [ 412.574007][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.586697][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.619414][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2611'. [ 412.632978][T16684] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 412.642612][ T13] usb 1-1: 0:2 : does not exist [ 412.650839][ T4504] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 412.669253][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2611'. [ 412.901570][ T13] usb 1-1: USB disconnect, device number 12 [ 412.932169][ T4504] usb 2-1: Using ep0 maxpacket: 32 [ 413.091534][ T4504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.104162][ T4504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.114532][ T4504] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.124162][ T4504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.135426][ T4504] usb 2-1: config 0 descriptor?? [ 413.185062][ T4504] hub 2-1:0.0: USB hub found [ 413.401159][ T4504] hub 2-1:0.0: 1 port detected [ 413.530968][T16756] ptrace attach of "./syz-executor exec"[15561] was attempted by "./syz-executor exec"[16756] [ 414.441065][ T4504] hub 2-1:0.0: activate --> -90 [ 414.459077][T16773] loop0: detected capacity change from 0 to 40427 [ 414.641481][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 414.793794][ T4504] usb 2-1-port1: cannot disable (err = -71) [ 414.796123][ T4391] usb 2-1: USB disconnect, device number 13 [ 414.818925][T16803] ptrace attach of "./syz-executor exec"[11289] was attempted by "./syz-executor exec"[16803] [ 415.869685][T16843] ptrace attach of "./syz-executor exec"[16342] was attempted by "./syz-executor exec"[16843] [ 416.000960][ T4389] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 416.098692][T16845] netlink: 'syz.0.2659': attribute type 12 has an invalid length. [ 416.130198][T16845] netlink: 'syz.0.2659': attribute type 29 has an invalid length. [ 416.141780][T16845] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2659'. [ 416.152390][T16845] netlink: 'syz.0.2659': attribute type 2 has an invalid length. [ 416.160311][T16845] netlink: 'syz.0.2659': attribute type 3 has an invalid length. [ 416.168338][T16845] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2659'. [ 416.281111][ T4389] usb 3-1: Using ep0 maxpacket: 32 [ 416.305495][T16847] loop0: detected capacity change from 0 to 1024 [ 416.401060][ T4389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.426011][ T4389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.446009][ T4389] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 416.449649][T16847] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 416.457055][ T4389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.484741][T16847] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 416.501578][ T4389] usb 3-1: config 0 descriptor?? [ 416.511338][T16847] EXT4-fs error (device loop0): ext4_get_journal_inode:5158: comm syz.0.2660: inode #1: comm syz.0.2660: iget: illegal inode # [ 416.538765][T16847] EXT4-fs (loop0): no journal found [ 416.545370][ T4389] hub 3-1:0.0: USB hub found [ 416.761123][ T4389] hub 3-1:0.0: 1 port detected [ 416.931756][T16871] netlink: 1092 bytes leftover after parsing attributes in process `syz.0.2671'. [ 416.949367][T16871] netlink: 1092 bytes leftover after parsing attributes in process `syz.0.2671'. [ 417.019150][T16875] loop8: detected capacity change from 0 to 2048 [ 417.095183][T16875] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 417.108637][T16881] tipc: Started in network mode [ 417.125284][T16881] tipc: Node identity 7, cluster identity 4711 [ 417.131942][T16875] NILFS (loop8): unrecognized mount option "" [ 417.135728][T16881] tipc: Node number set to 7 [ 417.158170][T16883] loop0: detected capacity change from 0 to 128 [ 417.177559][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop8 [ 417.336659][T16888] device batadv0 entered promiscuous mode [ 417.361238][T16888] device macsec1 entered promiscuous mode [ 417.441991][T16888] device batadv0 left promiscuous mode [ 417.760982][ T4242] hub 3-1:0.0: activate --> -90 [ 417.773683][T16904] loop8: detected capacity change from 0 to 2048 [ 417.956244][T16904] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 418.025469][T16904] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 418.055884][ T4391] usb 3-1: USB disconnect, device number 25 [ 418.097667][T16910] loop0: detected capacity change from 0 to 32768 [ 418.133210][T16904] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 418.194083][T16924] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 418.216951][ T4177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4177) [ 418.222216][T16904] EXT4-fs (loop8): This should not happen!! Data will be lost [ 418.222216][T16904] [ 418.247558][T16924] EXT4-fs (loop8): This should not happen!! Data will be lost [ 418.247558][T16924] [ 418.258093][T16924] EXT4-fs (loop8): Total free blocks count 0 [ 418.272771][T16904] EXT4-fs (loop8): Total free blocks count 0 [ 418.278778][T16904] EXT4-fs (loop8): Free/Dirty block details [ 418.298764][T16924] EXT4-fs (loop8): Free/Dirty block details [ 418.308490][T16924] EXT4-fs (loop8): free_blocks=2415919104 [ 418.328508][T16904] EXT4-fs (loop8): free_blocks=2415919104 [ 418.869776][T16948] loop8: detected capacity change from 0 to 64 [ 418.906630][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 419.020252][T16952] attempt to access beyond end of device [ 419.020252][T16952] loop8: rw=0, want=268435470, limit=64 [ 419.049518][T16952] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 419.208093][T16937] loop2: detected capacity change from 0 to 40427 [ 419.378751][T16937] F2FS-fs (loop2): Found nat_bits in checkpoint [ 419.385061][T16957] loop0: detected capacity change from 0 to 32768 [ 419.421650][T16957] XFS: attr2 mount option is deprecated. [ 419.445364][T16966] overlayfs: failed to clone upperpath [ 419.461058][T16957] /dev/loop0: Can't open blockdev [ 419.505542][T16937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 420.475426][T17010] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 420.663729][T17025] loop2: detected capacity change from 0 to 512 [ 420.944083][T17025] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback. [ 421.046772][T17025] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.289710][T17041] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 421.297432][T17025] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 421.341015][T17041] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 421.359808][T17025] EXT4-fs (loop2): Remounting filesystem read-only [ 421.420059][T11289] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 421.465927][T11289] EXT4-fs (loop2): Remounting filesystem read-only [ 421.546708][T17018] loop0: detected capacity change from 0 to 32768 [ 421.602246][T13593] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 421.661437][T13593] EXT4-fs (loop2): Remounting filesystem read-only [ 421.668059][T13593] EXT4-fs error (device loop2): ext4_quota_off:6513: inode #3: comm syz.2.1865: mark_inode_dirty error [ 421.711243][T13593] EXT4-fs (loop2): Remounting filesystem read-only [ 421.721754][T13593] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 421.753594][ T4329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4329) [ 421.759732][T13593] EXT4-fs (loop2): Remounting filesystem read-only [ 421.782491][T13593] EXT4-fs error (device loop2): ext4_quota_off:6513: inode #4: comm syz.2.1865: mark_inode_dirty error [ 421.819491][T13593] EXT4-fs (loop2): Remounting filesystem read-only [ 421.940850][ T4290] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 422.079397][T17033] loop1: detected capacity change from 0 to 40427 [ 422.123376][T17033] F2FS-fs (loop1): build fault injection attr: rate: 694, type: 0x1ffff [ 422.171916][T17033] F2FS-fs (loop1): invalid crc value [ 422.220894][ T4290] usb 9-1: Using ep0 maxpacket: 8 [ 422.230601][T17033] F2FS-fs (loop1): Found nat_bits in checkpoint [ 422.352016][ T9269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.380326][ T4290] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 422.411087][ T4290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.411835][T17033] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 422.442795][ T4290] usb 9-1: config 0 descriptor?? [ 422.495404][ T9269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.644715][T17033] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8f0 [ 422.652011][ T9269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.685514][T16342] attempt to access beyond end of device [ 422.685514][T16342] loop1: rw=2049, want=45112, limit=40427 [ 422.708928][ T4290] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 422.763379][ T9269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.110099][T17087] lo speed is unknown, defaulting to 1000 [ 423.667103][T17087] chnl_net:caif_netlink_parms(): no params data found [ 423.730823][ T4412] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 423.795056][ T9269] bond1: (slave gretap1): Releasing active interface [ 423.817385][T17087] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.825908][T17087] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.836316][T17087] device bridge_slave_0 entered promiscuous mode [ 423.846977][T17087] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.854456][T17087] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.863071][T17087] device bridge_slave_1 entered promiscuous mode [ 423.874545][T17109] loop0: detected capacity change from 0 to 256 [ 423.932947][T17087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.945025][T17087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.001238][T17087] team0: Port device team_slave_0 added [ 424.012823][ T4290] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 424.056733][ T4290] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 424.070260][T17087] team0: Port device team_slave_1 added [ 424.091501][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.117511][ T4290] asix: probe of 9-1:0.0 failed with error -71 [ 424.122865][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.150306][ T4412] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 424.154425][ T4290] usb 9-1: USB disconnect, device number 9 [ 424.190218][ T4412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.273584][ T4412] usb 2-1: config 0 descriptor?? [ 424.288917][T17087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.296745][T17113] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 424.311006][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.355071][T17087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.412137][T17087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.419103][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.448299][T17116] loop0: detected capacity change from 0 to 2048 [ 424.450271][T17087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.462952][T17117] 9pnet: Insufficient options for proto=fd [ 424.596347][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop0 [ 424.622472][T17125] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 424.665512][T17087] device hsr_slave_0 entered promiscuous mode [ 424.685757][T17087] device hsr_slave_1 entered promiscuous mode [ 424.713458][T17087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.740720][T17087] Cannot create hsr debugfs directory [ 424.794441][ T9269] device hsr_slave_0 left promiscuous mode [ 424.858948][ T9269] device hsr_slave_1 left promiscuous mode [ 424.889759][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.911697][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.949129][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.980932][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.991867][ T9269] device bridge_slave_1 left promiscuous mode [ 425.018795][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.036866][ T9269] device bridge_slave_0 left promiscuous mode [ 425.054969][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.085328][ T9269] rdma_rxe: ignoring netdev event = 10 for lo [ 425.094364][ T4242] Bluetooth: hci4: command 0x0409 tx timeout [ 425.116473][ T9269] device veth1_macvtap left promiscuous mode [ 425.124962][ T9269] device veth0_macvtap left promiscuous mode [ 425.137815][ T9269] device veth1_vlan left promiscuous mode [ 425.152321][ T9269] device veth0_vlan left promiscuous mode [ 425.222225][T17150] overlayfs: failed to clone upperpath [ 425.397893][ T9269] infiniband sz1: set down [ 425.408861][ T9269] bond1 (unregistering): Released all slaves [ 425.502914][ T9269] team0 (unregistering): Port device team_slave_1 removed [ 425.518443][ T9269] team0 (unregistering): Port device team_slave_0 removed [ 425.536384][ T9269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.550556][ T9269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.625184][ T9269] bond0 (unregistering): Released all slaves [ 425.696258][ T4441] smc: removing ib device sz1 [ 425.712814][ T4412] uclogic 0003:256C:006D.001C: v1 buttonpad probing failed: -71 [ 425.720524][ T4412] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 425.747016][ T4412] uclogic: probe of 0003:256C:006D.001C failed with error -71 [ 425.782223][ T4412] usb 2-1: USB disconnect, device number 14 [ 425.837421][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.850268][ T4242] lo speed is unknown, defaulting to 1000 [ 425.866380][T17157] device batadv_slave_0 entered promiscuous mode [ 425.875215][T17159] loop0: detected capacity change from 0 to 128 [ 426.481938][T17171] IPVS: Scheduler module ip_vs_sip not found [ 426.587707][T17178] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 426.605751][T17178] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2795'. [ 427.172027][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 427.252461][T17196] loop1: detected capacity change from 0 to 2048 [ 427.279414][T17087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.344298][T17087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.365176][T17087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.376683][T17196] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 427.400482][T17087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.448796][T17196] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.583241][T17196] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 427.597414][T17196] overlayfs: failed to verify upper root origin [ 427.666801][T17196] fs-verity (loop1, inode 16): Error -28 writing Merkle tree block 0 [ 427.681949][T17087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.703421][T17196] fs-verity (loop1, inode 16): Error -28 building Merkle tree [ 427.724682][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.741962][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.782322][T17087] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.845102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.866504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.925325][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.932471][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.999371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 428.008109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.051727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.099286][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.106430][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.309889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.370607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.407074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.439578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.457289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.480453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.517884][T17087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.542257][T17087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.565657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.586733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.615335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.634361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.644369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.653117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.662269][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2812'. [ 428.929453][T17277] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2815'. [ 429.124454][T17087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.181905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.189428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.250975][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 429.644027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 429.661644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.699834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.714176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.754288][T17087] device veth0_vlan entered promiscuous mode [ 429.769708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.795813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.834866][T17087] device veth1_vlan entered promiscuous mode [ 429.893179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.904824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.936328][T17087] device veth0_macvtap entered promiscuous mode [ 429.954474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.976234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.034157][T17087] device veth1_macvtap entered promiscuous mode [ 430.080888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.089385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.125022][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.149263][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.159430][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.201988][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.228390][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.248286][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.276552][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.318125][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.345033][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.369855][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.422622][T17087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.458236][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.472781][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.545608][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.579905][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.608335][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.630889][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.680713][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.715013][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.742401][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.799301][T17318] loop0: detected capacity change from 0 to 32768 [ 430.800931][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.838442][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.860069][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.875416][T17332] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 430.883381][T17087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.894423][T17332] overlayfs: failed to set xattr on upper [ 430.900232][T17332] overlayfs: ...falling back to index=off,metacopy=off. [ 430.907801][T17087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.928109][T17332] overlayfs: maximum fs stacking depth exceeded [ 430.928906][ T4329] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (4329) [ 430.942519][T17087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.997509][T17087] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.026450][T17087] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.043187][T17087] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.060812][T17087] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.314877][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.323662][ T6271] Bluetooth: hci4: command 0x0419 tx timeout [ 431.352172][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.413854][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.481387][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.525832][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.549675][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.597189][T17258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.612102][T17258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.769300][T17358] loop1: detected capacity change from 0 to 1024 [ 432.056657][T17258] hfsplus: b-tree write err: -5, ino 4 [ 432.244572][T17373] loop5: detected capacity change from 0 to 128 [ 432.403343][T17373] EXT4-fs (loop5): Ignoring removed orlov option [ 432.441034][ T4290] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 432.567573][T17373] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 432.631132][T17373] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.700793][ T4290] usb 2-1: Using ep0 maxpacket: 16 [ 432.781383][T17353] loop0: detected capacity change from 0 to 32768 [ 432.816811][T17353] XFS: noikeep mount option is deprecated. [ 432.842520][ T4290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 432.876780][T17353] /dev/loop0: Can't open blockdev [ 432.890798][ T4290] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 432.950704][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.011684][ T4290] usb 2-1: config 0 descriptor?? [ 433.066131][ T4290] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 433.318815][T17379] loop8: detected capacity change from 0 to 32768 [ 433.971165][T17383] loop0: detected capacity change from 0 to 24 [ 434.022703][T17379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2853 (17379) [ 434.248228][ T3546] bcm5974 2-1:0.0: could not read from device [ 434.291222][ T4290] bcm5974 2-1:0.0: could not read from device [ 434.351092][ T3546] bcm5974 2-1:0.0: could not read from device [ 434.366806][ T4290] input: failed to attach handler mousedev to device input29, error: -5 [ 434.391548][T17383] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 434.406319][T17379] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 434.447333][T17379] BTRFS info (device loop8): force clearing of disk cache [ 434.456064][ T3546] bcm5974 2-1:0.0: could not read from device [ 434.460836][T17383] /dev/loop0: Can't open blockdev [ 434.499159][ T4290] usb 2-1: USB disconnect, device number 15 [ 434.538778][T17379] BTRFS info (device loop8): metadata ratio 0 [ 434.574898][ T4175] bcm5974 2-1:0.0: could not read from device [ 434.586825][T17379] BTRFS info (device loop8): enabling ssd optimizations [ 434.597289][T17379] BTRFS info (device loop8): using spread ssd allocation scheme [ 434.635510][T17379] BTRFS info (device loop8): using free space tree [ 434.668821][T17379] BTRFS info (device loop8): has skinny extents [ 434.828284][T17397] loop5: detected capacity change from 0 to 8192 [ 434.870663][T17397] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 434.910953][T17397] REISERFS (device loop5): using ordered data mode [ 434.917567][T17397] reiserfs: using flush barriers [ 434.937305][T17416] loop0: detected capacity change from 0 to 1024 [ 434.967810][T17397] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 434.985409][T17397] REISERFS (device loop5): checking transaction log (loop5) [ 435.016487][T17397] REISERFS (device loop5): Using r5 hash to sort names [ 435.024659][T17397] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 435.059988][T17379] BTRFS info (device loop8): clearing free space tree [ 435.080909][T17379] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 435.100883][T17379] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 435.134179][T17379] BTRFS info (device loop8): creating free space tree [ 435.172074][T17379] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 435.198705][T17379] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 435.356632][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2863'. [ 435.546551][T17430] loop2: detected capacity change from 0 to 7 [ 435.591404][ T4177] Dev loop2: unable to read RDB block 7 [ 435.597008][ T4177] loop2: AHDI p1 p2 p3 [ 435.613370][ T4177] loop2: partition table partially beyond EOD, truncated [ 435.644371][ T4177] loop2: p1 start 1601398130 is beyond EOD, truncated [ 435.667842][ T4177] loop2: p2 start 1702059890 is beyond EOD, truncated [ 435.706946][T17430] Dev loop2: unable to read RDB block 7 [ 435.720094][T17430] loop2: AHDI p1 p2 p3 [ 435.728868][T17430] loop2: partition table partially beyond EOD, truncated [ 435.763916][T17430] loop2: p1 start 1601398130 is beyond EOD, truncated [ 435.791266][T17430] loop2: p2 start 1702059890 is beyond EOD, truncated [ 436.346292][ T4504] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 436.448025][T17466] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2879'. [ 436.458231][T17466] device gretap0 entered promiscuous mode [ 436.559741][T17466] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2879'. [ 436.579221][T17466] 0XD: renamed from gretap0 [ 436.593034][T17466] device 00XD left promiscuous mode [ 436.756130][T17462] loop5: detected capacity change from 0 to 32768 [ 436.756421][ T4504] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.811613][T17462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2877 (17462) [ 436.812231][ T4504] usb 9-1: config 0 has no interface number 0 [ 436.835684][ T4504] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 436.849307][ T4504] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 436.860486][ T4504] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 436.870048][ T4504] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.886373][ T4504] usb 9-1: config 0 descriptor?? [ 436.929905][T17462] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 436.941124][T17449] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 436.955685][T17462] BTRFS info (device loop5): setting nodatacow, compression disabled [ 436.967201][T17462] BTRFS info (device loop5): max_inline at 0 [ 436.981974][ T4504] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 436.997061][T17462] BTRFS info (device loop5): turning off barriers [ 437.019796][T17462] BTRFS info (device loop5): force zlib compression, level 3 [ 437.039120][T17462] BTRFS info (device loop5): doing ref verification [ 437.058479][T17462] BTRFS info (device loop5): force clearing of disk cache [ 437.073230][T17462] BTRFS info (device loop5): setting nodatasum [ 437.100306][T17462] BTRFS info (device loop5): enabling ssd optimizations [ 437.106899][T17486] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 437.121021][T17462] BTRFS info (device loop5): max_inline at 4096 [ 437.127291][T17462] BTRFS info (device loop5): using free space tree [ 437.145847][T17243] Bluetooth: hci5: Frame reassembly failed (-84) [ 437.164070][T17462] BTRFS info (device loop5): has skinny extents [ 437.262268][T17462] BTRFS info (device loop5): clearing free space tree [ 437.269968][T17462] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 437.281027][T17462] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 437.318515][T17462] BTRFS info (device loop5): creating free space tree [ 437.337132][T17462] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 437.347032][T17462] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 437.378606][ T4504] usb 9-1: USB disconnect, device number 10 [ 438.147819][T17526] loop0: detected capacity change from 0 to 1024 [ 438.155302][ T26] audit: type=1326 audit(1752766136.034:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.210180][ T26] audit: type=1326 audit(1752766136.034:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.233815][ T26] audit: type=1326 audit(1752766136.064:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.318298][ T26] audit: type=1326 audit(1752766136.064:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.467717][ T26] audit: type=1326 audit(1752766136.064:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.541723][ T26] audit: type=1326 audit(1752766136.064:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.615158][ T26] audit: type=1326 audit(1752766136.064:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.676776][ T26] audit: type=1326 audit(1752766136.064:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.764016][ T26] audit: type=1326 audit(1752766136.074:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 438.828633][ T26] audit: type=1326 audit(1752766136.074:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17529 comm="syz.8.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38dfa18929 code=0x7ffc0000 [ 439.075315][T17545] loop5: detected capacity change from 0 to 32768 [ 439.161443][ T4249] Bluetooth: hci5: command 0x1003 tx timeout [ 439.167926][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 439.199033][T17545] XFS (loop5): Mounting V5 Filesystem [ 439.382657][T17545] XFS (loop5): Ending clean mount [ 439.392897][T17545] XFS (loop5): Quotacheck needed: Please wait. [ 439.643675][T17545] XFS (loop5): Quotacheck: Done. [ 439.803752][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.810091][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.849803][T17087] XFS (loop5): Unmounting Filesystem [ 440.319237][T17591] loop5: detected capacity change from 0 to 512 [ 440.349575][T17591] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 440.369521][T17591] EXT4-fs (loop5): 1 truncate cleaned up [ 440.375777][T17591] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,nombcache,noload,,errors=continue. Quota mode: none. [ 440.430887][ T4297] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 440.671070][ T4297] usb 1-1: Using ep0 maxpacket: 8 [ 440.808077][ T4297] usb 1-1: config 0 has no interfaces? [ 440.818428][ T4297] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.838110][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.881962][ T4297] usb 1-1: config 0 descriptor?? [ 441.028381][T17617] loop8: detected capacity change from 0 to 512 [ 441.251149][ T4249] Bluetooth: hci5: command 0x1001 tx timeout [ 441.259288][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 441.395311][T17623] netlink: 'syz.8.2928': attribute type 39 has an invalid length. [ 441.398811][T17602] loop5: detected capacity change from 0 to 40427 [ 441.437856][T17602] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 441.478975][T17602] F2FS-fs (loop5): invalid crc value [ 441.501188][T17602] F2FS-fs (loop5): Found nat_bits in checkpoint [ 441.553298][T17602] F2FS-fs (loop5): recover fsync data on readonly fs [ 441.560331][T17602] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 441.569617][T17602] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 441.577492][T17602] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 441.652473][T17602] F2FS-fs (loop5): Unrecognized mount option "18446744073709551615@LqE: 艞t}0$" or missing value [ 441.801232][T17630] loop8: detected capacity change from 0 to 8192 [ 441.870378][T17630] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 441.914400][T17630] REISERFS (device loop8): using ordered data mode [ 441.936720][T17630] reiserfs: using flush barriers [ 441.956031][T17630] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 441.991201][T17630] REISERFS (device loop8): checking transaction log (loop8) [ 442.033657][T17630] REISERFS (device loop8): Using r5 hash to sort names [ 442.041199][T17630] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 442.084104][T17630] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 442.107496][T17630] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 442.119574][T17630] REISERFS (device loop8): Remounting filesystem read-only [ 442.130107][T17635] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2932'. [ 442.133965][T17630] REISERFS error (device loop8): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 442.181449][T17630] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 442.200264][T17630] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 442.436237][T17646] xt_bpf: check failed: parse error [ 442.786296][T17648] loop5: detected capacity change from 0 to 32768 [ 442.868095][T17648] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2937 (17648) [ 442.932142][T17648] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 442.944653][T17648] BTRFS info (device loop5): force clearing of disk cache [ 442.952434][T17648] BTRFS info (device loop5): using free space tree [ 442.959023][T17648] BTRFS info (device loop5): has skinny extents [ 443.022782][T17648] BTRFS info (device loop5): enabling ssd optimizations [ 443.031340][T17648] BTRFS info (device loop5): clearing free space tree [ 443.038234][T17648] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 443.048838][T17648] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 443.070050][T17648] BTRFS info (device loop5): creating free space tree [ 443.077959][T17648] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 443.088355][T17648] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 443.106589][T17690] loop8: detected capacity change from 0 to 512 [ 443.161384][T17690] EXT4-fs (loop8): Ignoring removed bh option [ 443.190660][T17690] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 443.192591][ T8188] usb 1-1: USB disconnect, device number 13 [ 443.288865][T17690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 443.303518][T17690] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2228: inode #15: comm syz.8.2943: corrupted in-inode xattr [ 443.322913][ T4397] Bluetooth: hci5: command 0x1009 tx timeout [ 443.334845][T17690] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2943: couldn't read orphan inode 15 (err -117) [ 443.347130][T17690] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,bh,noload,nombcache,noblock_validity,debug,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 443.738496][ T4329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop5 scanned by udevd (4329) [ 444.070993][ T6275] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 444.137696][T17709] loop8: detected capacity change from 0 to 8192 [ 444.163810][T17709] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 444.174745][T17709] REISERFS (device loop8): using ordered data mode [ 444.181725][T17709] reiserfs: using flush barriers [ 444.189963][T17709] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 444.207236][T17709] REISERFS (device loop8): checking transaction log (loop8) [ 444.292330][T17714] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 444.303555][T17709] REISERFS (device loop8): Using tea hash to sort names [ 444.327400][T17709] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 444.330891][ T6275] usb 1-1: Using ep0 maxpacket: 32 [ 444.471120][ T6275] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 444.479700][ T6275] usb 1-1: config 0 has no interface number 0 [ 444.507816][ T6275] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 444.560514][T17728] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004 [ 444.690962][ T6275] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 444.708965][ T6275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.718549][ T6275] usb 1-1: Product: syz [ 444.736301][ T6275] usb 1-1: Manufacturer: syz [ 444.741472][ T6275] usb 1-1: SerialNumber: syz [ 444.752048][ T6275] usb 1-1: config 0 descriptor?? [ 444.794453][ T6275] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 444.805114][ T6275] em28xx 1-1:0.132: Video interface 132 found: [ 444.833572][ T4297] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 445.100837][ T4297] usb 6-1: Using ep0 maxpacket: 16 [ 445.180930][ T8188] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 445.241049][ T6275] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 445.391155][ T4297] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 445.409862][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.418796][ T4297] usb 6-1: Product: syz [ 445.423278][ T4297] usb 6-1: Manufacturer: syz [ 445.427884][ T4297] usb 6-1: SerialNumber: syz [ 445.439753][ T4297] usb 6-1: config 0 descriptor?? [ 445.591144][ T8188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.602565][ T8188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.612515][ T8188] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.625537][ T8188] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.634665][ T8188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.648124][ T8188] usb 9-1: config 0 descriptor?? [ 445.731013][ T6275] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 445.744871][ T6275] em28xx 1-1:0.132: board has no eeprom [ 445.880912][ T6275] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 445.888766][ T6275] em28xx 1-1:0.132: analog set to bulk mode. [ 445.895335][ T4297] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 445.909923][ T4297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.926039][ T6275] em28xx 1-1:0.132: Registering V4L2 extension [ 445.941170][ T4297] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 445.949121][ T4297] usb 6-1: media controller created [ 445.979749][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.031089][ T4227] usb 1-1: USB disconnect, device number 14 [ 446.037482][ T4227] em28xx 1-1:0.132: Disconnecting em28xx [ 446.041442][ T6275] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 446.090101][ T6275] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 446.105092][ T6275] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 446.113644][ T4297] zl10353_read_register: readreg error (reg=127, ret==0) [ 446.121400][ T6275] em28xx 1-1:0.132: No AC97 audio processor [ 446.127514][ T4297] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 446.138136][ T8188] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 446.152399][ T4297] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 446.164253][ T6275] usb 1-1: Decoder not found [ 446.168869][ T6275] em28xx 1-1:0.132: failed to create media graph [ 446.185185][ T8188] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 446.206015][ T4297] usb 6-1: USB disconnect, device number 7 [ 446.213929][ T6275] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 446.253867][ T4297] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 446.254030][T17750] ================================================================== [ 446.263727][ T6275] em28xx 1-1:0.132: Remote control support is not available for this card. [ 446.271966][T17750] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 446.271991][T17750] Read of size 8 at addr ffff888063588900 by task v4l_id/17750 [ 446.272006][T17750] [ 446.272012][T17750] CPU: 1 PID: 17750 Comm: v4l_id Not tainted 5.15.188-syzkaller #0 [ 446.272030][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.272049][T17750] Call Trace: [ 446.318628][T17750] [ 446.321568][T17750] dump_stack_lvl+0x168/0x230 [ 446.326280][T17750] ? show_regs_print_info+0x20/0x20 [ 446.331464][T17750] ? _printk+0xcc/0x110 [ 446.335628][T17750] ? v4l2_fh_open+0xc6/0x430 [ 446.340229][T17750] ? load_image+0x3b0/0x3b0 [ 446.344744][T17750] print_address_description+0x60/0x2d0 [ 446.350299][T17750] ? v4l2_fh_open+0xc6/0x430 [ 446.354893][T17750] kasan_report+0xdf/0x130 [ 446.359314][T17750] ? v4l2_fh_open+0xc6/0x430 [ 446.363911][T17750] v4l2_fh_open+0xc6/0x430 [ 446.368338][T17750] em28xx_v4l2_open+0x152/0x990 [ 446.373196][T17750] ? __lock_acquire+0x7c60/0x7c60 [ 446.378263][T17750] v4l2_open+0x20b/0x360 [ 446.382516][T17750] chrdev_open+0x597/0x670 [ 446.386940][T17750] ? cd_forget+0x160/0x160 [ 446.391346][T17750] ? tomoyo_file_open+0xe9/0x170 [ 446.396267][T17750] ? fsnotify_perm+0x3a7/0x560 [ 446.401014][T17750] ? cd_forget+0x160/0x160 [ 446.405432][T17750] do_dentry_open+0x7ff/0xf80 [ 446.410095][T17750] path_openat+0x2682/0x2f30 [ 446.414672][T17750] ? __kasan_slab_alloc+0xb3/0xd0 [ 446.419674][T17750] ? __kasan_slab_alloc+0x9c/0xd0 [ 446.424675][T17750] ? slab_post_alloc_hook+0x4c/0x380 [ 446.429937][T17750] ? verify_lock_unused+0x140/0x140 [ 446.435113][T17750] ? __x64_sys_openat+0x135/0x160 [ 446.440119][T17750] ? do_filp_open+0x3e0/0x3e0 [ 446.444784][T17750] do_filp_open+0x1b3/0x3e0 [ 446.449268][T17750] ? vfs_tmpfile+0x300/0x300 [ 446.453841][T17750] ? _raw_spin_unlock+0x24/0x40 [ 446.458670][T17750] ? alloc_fd+0x598/0x630 [ 446.462981][T17750] do_sys_openat2+0x142/0x4a0 [ 446.467639][T17750] ? __lock_acquire+0x7c60/0x7c60 [ 446.472756][T17750] ? do_sys_open+0xe0/0xe0 [ 446.477162][T17750] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 446.483138][T17750] ? lock_chain_count+0x20/0x20 [ 446.487998][T17750] ? vtime_user_exit+0x2dc/0x400 [ 446.492913][T17750] __x64_sys_openat+0x135/0x160 [ 446.497849][T17750] do_syscall_64+0x4c/0xa0 [ 446.502249][T17750] ? clear_bhb_loop+0x30/0x80 [ 446.506916][T17750] ? clear_bhb_loop+0x30/0x80 [ 446.511578][T17750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 446.517477][T17750] RIP: 0033:0x7fd683e5f407 [ 446.521877][T17750] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 446.541482][T17750] RSP: 002b:00007ffe29618140 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 446.549896][T17750] RAX: ffffffffffffffda RBX: 00007fd683d71880 RCX: 00007fd683e5f407 [ 446.557850][T17750] RDX: 0000000000000000 RSI: 00007ffe29619f1b RDI: ffffffffffffff9c [ 446.565804][T17750] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 446.573753][T17750] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 446.581705][T17750] R13: 00007ffe29618390 R14: 00007fd6845ed000 R15: 000055d86aee54d8 [ 446.589677][T17750] [ 446.592675][T17750] [ 446.594970][T17750] The buggy address belongs to the page: [ 446.600573][T17750] page:ffffea00018d6200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63588 [ 446.610700][T17750] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 446.617809][T17750] raw: 00fff00000000000 ffffea0001a1ba08 ffffea00017e7608 0000000000000000 [ 446.626375][T17750] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 446.634945][T17750] page dumped because: kasan: bad access detected [ 446.641348][T17750] page_owner tracks the page as freed [ 446.646702][T17750] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 6275, ts 445934522747, free_ts 446250475559 [ 446.662398][T17750] get_page_from_freelist+0x1b77/0x1c60 [ 446.667941][T17750] __alloc_pages+0x1e1/0x470 [ 446.672507][T17750] kmalloc_order+0x40/0x150 [ 446.676988][T17750] kmalloc_order_trace+0x14/0xf0 [ 446.681917][T17750] em28xx_v4l2_init+0xe2/0x2e50 [ 446.686756][T17750] em28xx_init_extension+0x118/0x1b0 [ 446.692018][T17750] process_one_work+0x863/0x1000 [ 446.696929][T17750] worker_thread+0xaa8/0x12a0 [ 446.701581][T17750] kthread+0x436/0x520 [ 446.705641][T17750] ret_from_fork+0x1f/0x30 [ 446.710032][T17750] page last free stack trace: [ 446.714675][T17750] free_unref_page_prepare+0x637/0x6c0 [ 446.720114][T17750] free_unref_page+0x94/0x280 [ 446.724762][T17750] free_nonslab_page+0xe2/0x150 [ 446.729588][T17750] em28xx_v4l2_init+0x1649/0x2e50 [ 446.734596][T17750] em28xx_init_extension+0x118/0x1b0 [ 446.739857][T17750] process_one_work+0x863/0x1000 [ 446.744768][T17750] worker_thread+0xaa8/0x12a0 [ 446.749434][T17750] kthread+0x436/0x520 [ 446.753477][T17750] ret_from_fork+0x1f/0x30 [ 446.757872][T17750] [ 446.760172][T17750] Memory state around the buggy address: [ 446.765780][T17750] ffff888063588800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 446.773812][T17750] ffff888063588880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 446.781852][T17750] >ffff888063588900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 446.789897][T17750] ^ [ 446.793939][T17750] ffff888063588980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 446.801981][T17750] ffff888063588a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 446.810028][T17750] ================================================================== [ 446.818060][T17750] Disabling lock debugging due to kernel taint [ 446.825505][ T4227] em28xx 1-1:0.132: Closing input extension [ 446.861391][T17750] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 446.868611][T17750] CPU: 1 PID: 17750 Comm: v4l_id Tainted: G B 5.15.188-syzkaller #0 [ 446.877877][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.887917][T17750] Call Trace: [ 446.891185][T17750] [ 446.894111][T17750] dump_stack_lvl+0x168/0x230 [ 446.898781][T17750] ? show_regs_print_info+0x20/0x20 [ 446.903969][T17750] ? load_image+0x3b0/0x3b0 [ 446.908488][T17750] panic+0x2c9/0x7f0 [ 446.912399][T17750] ? bpf_jit_dump+0xd0/0xd0 [ 446.916917][T17750] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 446.922831][T17750] ? _raw_spin_unlock+0x40/0x40 [ 446.927667][T17750] ? print_memory_metadata+0x314/0x400 [ 446.933108][T17750] ? v4l2_fh_open+0xc6/0x430 [ 446.937685][T17750] check_panic_on_warn+0x80/0xa0 [ 446.942603][T17750] ? v4l2_fh_open+0xc6/0x430 [ 446.947173][T17750] end_report+0x6d/0xf0 [ 446.951304][T17750] kasan_report+0x102/0x130 [ 446.955785][T17750] ? v4l2_fh_open+0xc6/0x430 [ 446.960362][T17750] v4l2_fh_open+0xc6/0x430 [ 446.964761][T17750] em28xx_v4l2_open+0x152/0x990 [ 446.969590][T17750] ? __lock_acquire+0x7c60/0x7c60 [ 446.974601][T17750] v4l2_open+0x20b/0x360 [ 446.978832][T17750] chrdev_open+0x597/0x670 [ 446.983231][T17750] ? cd_forget+0x160/0x160 [ 446.987631][T17750] ? tomoyo_file_open+0xe9/0x170 [ 446.992548][T17750] ? fsnotify_perm+0x3a7/0x560 [ 446.997294][T17750] ? cd_forget+0x160/0x160 [ 447.001692][T17750] do_dentry_open+0x7ff/0xf80 [ 447.006377][T17750] path_openat+0x2682/0x2f30 [ 447.010972][T17750] ? __kasan_slab_alloc+0xb3/0xd0 [ 447.015992][T17750] ? __kasan_slab_alloc+0x9c/0xd0 [ 447.021008][T17750] ? slab_post_alloc_hook+0x4c/0x380 [ 447.026397][T17750] ? verify_lock_unused+0x140/0x140 [ 447.031582][T17750] ? __x64_sys_openat+0x135/0x160 [ 447.036595][T17750] ? do_filp_open+0x3e0/0x3e0 [ 447.041273][T17750] do_filp_open+0x1b3/0x3e0 [ 447.046219][T17750] ? vfs_tmpfile+0x300/0x300 [ 447.050802][T17750] ? _raw_spin_unlock+0x24/0x40 [ 447.055654][T17750] ? alloc_fd+0x598/0x630 [ 447.059972][T17750] do_sys_openat2+0x142/0x4a0 [ 447.064630][T17750] ? __lock_acquire+0x7c60/0x7c60 [ 447.069641][T17750] ? do_sys_open+0xe0/0xe0 [ 447.074041][T17750] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 447.080005][T17750] ? lock_chain_count+0x20/0x20 [ 447.084835][T17750] ? vtime_user_exit+0x2dc/0x400 [ 447.089754][T17750] __x64_sys_openat+0x135/0x160 [ 447.094584][T17750] do_syscall_64+0x4c/0xa0 [ 447.098984][T17750] ? clear_bhb_loop+0x30/0x80 [ 447.103641][T17750] ? clear_bhb_loop+0x30/0x80 [ 447.108297][T17750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.114173][T17750] RIP: 0033:0x7fd683e5f407 [ 447.118575][T17750] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 447.138167][T17750] RSP: 002b:00007ffe29618140 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 447.146582][T17750] RAX: ffffffffffffffda RBX: 00007fd683d71880 RCX: 00007fd683e5f407 [ 447.154540][T17750] RDX: 0000000000000000 RSI: 00007ffe29619f1b RDI: ffffffffffffff9c [ 447.162498][T17750] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 447.170465][T17750] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 447.178422][T17750] R13: 00007ffe29618390 R14: 00007fd6845ed000 R15: 000055d86aee54d8 [ 447.186392][T17750] [ 447.189592][T17750] Kernel Offset: disabled [ 447.193904][T17750] Rebooting in 86400 seconds..