last executing test programs: 8.464982476s ago: executing program 1 (id=189): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x2010805, &(0x7f0000000180)={[{@norecovery}, {@errors_continue}, {@discard}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@order_strict}, {}, {@nobarrier}]}, 0x3, 0xd97, &(0x7f0000000e80)="$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") (async) personality(0xeaffffffffffffff) personality(0x8000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000040)) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d0109005000118049003780d237a5562658dec4cf9e08a3b19be99e74ce70b4e220a9e627302801adb664d0a5f023189527c0db80dc95bf7fb4bfd92396de768f8b5d8e1c994b69895cdb44211156f2840000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) (async) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x401, 0x1}}, 0x50) (async, rerun: 32) fcntl$setpipe(r1, 0x407, 0x2000000) (rerun: 32) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8}, {@utf8}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@none}, {@subsystem='memory'}, {@subsystem='cpuset'}, {@clone_children}]}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000011000000630a1c000000000085000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151}, 0x94) (async) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f00000000c0)={0xfffff852, 0x4, 0x7fb}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000008}) (async) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 8.258959712s ago: executing program 1 (id=191): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @func_proto, @fwd={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x65}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800) r4 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000180)={0x0, r5, 0x0, 0x4, 0x3, 0x5, 0x8000}) 8.044114379s ago: executing program 1 (id=192): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup2\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, r3, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x4, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xbffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012e, 0x8004, 0x5, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x10000004, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x3, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0xc, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x4, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffff, 0xb1e, 0x5, 0x200, 0xffff3441, 0x40fff]}, 0x45c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r5 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.656934142s ago: executing program 1 (id=200): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x9, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4102, 0x1006}, 0xadd}], 0x1, 0x40002000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close(0x3) 6.578928045s ago: executing program 3 (id=201): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) unlink(&(0x7f00000000c0)='./bus\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents(r3, 0x0, 0x3b) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x8, 0x9, 0x0, 0x1, 0x0, 0x6, 0xe87a, 0x2, 0x3, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x1a4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x190, 0x1, [@m_nat={0x18c, 0xc, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x1, 0x5, 0x7a1}, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, 0xff, 0x4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x59, 0x7d, 0x8, 0x2, 0xffffffcd}, @multicast2, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xe, 0xffffffffffffffff, 0x7fffffff, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x9, 0x7, 0x1b, 0x4}, @loopback, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x3, 0x20000000, 0x0, 0x3}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x2, 0x5, 0x8001}, @loopback, @loopback, 0xff000000, 0x1}}]}, {0x74, 0x6, "5c90c411a636c4ce4ab65a1fc1288b5f1157c50a2cc1dd910864754d718c9da1c6ffac487ba63a2f849faa587e872d852e5a0599271015126eade4bd48510113fceae89f2574382c2db7c95ace2db4296b9ff3a61f1f13343bfd88368c6985b4cb762882e4c6b4b81dcc7d7a42a743e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x0) sendto$x25(r5, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.193616027s ago: executing program 0 (id=205): ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000000)=0x74d7) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) readahead(r0, 0x50, 0x80) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x1ff, 0x0, 0xa6, 0x7, 0x1ff, 0x9, 0x995, 0x6, 0x6, 0x0, 0x7, 0xa, 0x800, 0x2, 0x8]}) (async) write$rfkill(r0, &(0x7f0000000180)={0xac2a, 0x3, 0x0, 0x1, 0x1}, 0x8) (async) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f00000001c0)='status\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x4f, 0x8, 0x4, 0x5, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x3b, 0x0, &(0x7f00000002c0), 0x40f00, 0x10, '\x00', 0x0, 0x1a, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x3, 0x174602b3}, 0x10, 0xe4f9, r3, 0x1, &(0x7f0000000340)=[r1, r1], &(0x7f0000000380)=[{0x5, 0x2, 0x6}], 0x10, 0x8}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, r1, 0x3, 0x0, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r4, r5}, 0xc) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000540)={'veth1_to_hsr\x00', @broadcast}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000740)={0x2, 0x1, &(0x7f0000000580)=""/138, &(0x7f0000000640)=""/163, &(0x7f0000000700)=""/2, 0x818f001}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000800)={0x40, 0x80000, r6}) prctl$PR_SET_THP_DISABLE(0x29, 0x800) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d00)={{r5, &(0x7f0000000840)='veth1_to_hsr\x00', 0x402, &(0x7f0000000880)={@align, {0x446, 0x9, 0x4000000, 0x3}}, 0x5, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0xa7a}, 0x4, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000940)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000980)="2177f942b38ff06544924a0c9d6b5760a47ea8c6121761d56dbe4e7c633b", 0x1e, 0x8}, {0x3, 0x2, &(0x7f00000009c0)='&\x00', &(0x7f0000000a00)="6a28f67bbffb7ab9529373ee4e22a2e758daa599a1f27a88855a7e65f863ab30e85add9f22fb60c042ef3917cf65c64544b2be619ef00b9efaf65559d5541d888227860a1031d80df86622a6e23c13f9d5c360a211d47daac45240fec9292233874db0e24754d690e444a035b3f258e67f6546d90678f3dec153a2e2fd07a72eea6f14c0b92539f8e065fea7a80317659919ba47ecdcf9b708", 0x99, 0x40}, {0x3, 0x8001, &(0x7f0000000ac0)='-$\x00', &(0x7f0000000b00)="7110b3bd9b55cf6ec832a852a274000f1fadece511c880b83fa46e2f5466cdf3317f7c791317a45dfaaaeb2ff265aa5798777111877977c6787a444e9e7b3ab38bbc544eca63f9b9d1b8d634abeb28cc11de2522206c40d21098d0f22c900842", 0x60, 0x2}, {0x3, 0x4, &(0x7f0000000b80)='^,@\x00', &(0x7f0000000bc0)="7e70ed0b6934dc1f18b57947832915187b0593e27892b53a314bbac1a2e8b9190588e869cf75c71118abd4c25c76a43d665ed1d1ef784aa9bf34e14a075c7ba6f3876f99939193223f64521d6303d72f60193375f24ea0d1d693f9e6844be0c80276bf9741d5592930d0fc353387be4b4393469dbabf25c429cf016a86b9e1d3e3d263517b66854b28c9def0a625e1433e760dd2f34a44bfc3a8cc417ca55d1cb9e6bb4c", 0xa4, 0x3a}]}) ioctl$PPPIOCGIDLE64(r7, 0x8010743f, &(0x7f0000000d80)) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000000dc0), &(0x7f0000000e00)=0x8) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000e40)={{0x8}, 'port0\x00', 0x9a, 0x1840a, 0xfffffffa, 0x0, 0x10000, 0x8, 0x5, 0x0, 0x7, 0x3}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000010c0)={'ip_vti0\x00', &(0x7f0000001040)={'gretap0\x00', 0x0, 0x7800, 0x8, 0x1, 0xffff, {{0xc, 0x4, 0x3, 0x1d, 0x30, 0x65, 0x0, 0xf, 0x0, 0x0, @loopback, @empty, {[@lsrr={0x83, 0xf, 0xe1, [@empty, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x76, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff2}]}]}}}}}) (async) r10 = syz_open_dev$vcsu(&(0x7f0000001100), 0x5, 0x8e000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x4, &(0x7f0000000f00)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5394, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000f40)='syzkaller\x00', 0x100, 0x89, &(0x7f0000000f80)=""/137, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x3, 0x10, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001180)=[r1, r5, r0, r1, r3, r6, r1], &(0x7f00000011c0)=[{0x3, 0x1, 0xb, 0xb}, {0x5, 0x5, 0x4, 0x4}, {0x0, 0x1, 0x0, 0x4}], 0x10, 0x6}, 0x94) (async) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001380)={{r11, r12/1000+10000}, {r13, r14/1000+60000}}, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000013c0)='\x00', 0x0, r8) 6.127358409s ago: executing program 0 (id=206): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.013020673s ago: executing program 0 (id=207): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000180)='./file7\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x1105, &(0x7f00000040c0)="$eJzs2T9v00AcBuD37PBnwsjdLSQYGFBVFL5AB5CyssKCUCc6NROIgQ/Dx4FO7FV3GCqxG7mJm4CCkEKgy/NIyZ1f+Xe+G+8uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMJgkX0uyVyXtmFVJStJ1p7PzJN2Y3/1UVyl5fjSbPz2ZPpsnqS9fLy+SMlQNZWkf37/dTttpe6d9snf44PP87bs3r46Pj06Ww5R0ObvY/VLKcj4AAADAz/q/1lzz9wEAAIA/2dlBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCW+mb4/3DZb8ewSlKSrjudnSfpFumt9bob/3meAAAAwPZKqrxsNuWLY4CVR/nSlKt8aL+XoX+QjxvqAQAAgN/qx0v29fv1cnO1H3+YydW+fMjuZZL9/cXzssm3w6ROcvDL4GcX71+Pv9LX/3otAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCDHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAACwVwAAAP//jRjXMw==") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000100000000000000001000085000000000000000001"], 0x0, 0x42}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmmsg$sock(r2, &(0x7f0000002ec0)=[{{&(0x7f0000000280)=@nfc={0x27, r3, 0x0, 0x5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)}], 0x1, &(0x7f0000002440)=[@timestamping={{0x0, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x29, 0x1, 0x25, 0x6bb}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xa}}], 0xc0}}, {{&(0x7f0000002500)=@l2tp6={0xa, 0x0, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x1}, 0x80, &(0x7f0000002640), 0x0, &(0x7f0000002680)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x4a702618}}, @txtime={{0x18, 0x1, 0x3d, 0x2e026b86}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x78}}, {{&(0x7f0000002700)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002780)="a68adc8219bf910d494bb7c93ed91143426015ff3d4a7fdedfefa18cf5612c3beb77b505d2a893674609889bf880dd8a7ceca6d1aa643c7e9fcceb63db481d05e664ce6e7b117762eb322697db737a01daaf8e9b23e86f6c3b793cf0a8e86316edd30ede7731754177353f7c8134c550b106a7ab4f6d27d4c82c494d8d76691a49e770740eb96909d68a06ab635b14862c7155dec852d6133890bd", 0x9b}, {&(0x7f0000002840)="9603", 0x2}], 0x2}}, {{&(0x7f00000028c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)="8240d8e50e52be6dab404d701b7e27732648ee0ee2bb04f2397657784835f6a71574840535d77095e42a4e1c162c504a2647394d64f242b318653736f15ef924523a1e70816543416ef40b627cad5cea62ed6883049eb3072bed403d1825a78758c69ef0284a9a8ec3b27e314f9e676ea0c8eeb1bbce429a7f79b7f1874c6f9e5a8a193922784c36d2f822834f986174a9ca26c3547b724c8794cda2ac0dcce669f06102ad04427fc3194fb07527d626d9a4daf9155555da4009", 0xba}, {&(0x7f0000002a00)="eccd4abb14ef67edd211937f88a7e20d31b2b92deab418", 0x17}], 0x2, &(0x7f0000002a80)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xb}}], 0x60}}, {{&(0x7f0000002b00)=@phonet={0x23, 0x9, 0xc, 0xb}, 0x80, &(0x7f0000002b80), 0x0, &(0x7f0000002bc0)=[@mark={{0x14, 0x1, 0x24, 0xf285}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0xf6a7}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14}}], 0xf0}}, {{&(0x7f0000002cc0)=@x25, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d40)="9f55a73d4de0258ed8548b92a02a8a0b90b4bea2da13f9c45b4401286be7872ad413e830b6c7077778516bae1497e377e73e7bc2fbd9886930759543aafd22c3562d12", 0x43}], 0x1, &(0x7f0000002e00)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18}}, @timestamping={{0x0, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x90}}], 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032cbd700000000000000008000100140000377b63e8800000", @ANYRES32=r6, @ANYBLOB="0c009900ffffffff74000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x44) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x4f, &(0x7f0000003040)=ANY=[@ANYBLOB="120110013f840f405e040a047b670102030109023d0001e30830060904140504ffffff0709050800000206030907058f42a2666c09050703ff03800600090507100800a4080709050a022000000606f514cd3c603e330eeb829a21d5146e7c23940729ada865", @ANYRES16=r2, @ANYRESDEC=r0, @ANYBLOB="79f8d0815b0c300aeb59c69af156948e7ebbf93bdf1cc44c31bd76133ec09f21d48e67fd384033d89356bcf7c6329bd19d941be9f44cc66a6b013829794d57ba3c95eb2ed15e6b5bedfd51c833487448cc0785549476b79b94b365daa13ac6f72a6c3ee151e3d3c1e4a0c977b41a4057e0116d3e58280e4416ef58144f25c292d1fa4f08269b3ad2ec8456bd6a247f01fcb55f9e615f0f4cd0b8c2c1a8969e1a4ef788", @ANYRESOCT=r5], 0x0) openat(0xffffffffffffff9c, 0x0, 0x40102, 0x101) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x6d) r7 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004110, &(0x7f0000000000)={0x0, [0xfffffff8, 0x8, 0xb], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x2, 0xfffb}, {0x0, 0xfffffffd}, {0x4}, {}, {}, {0x9, 0x2}, {0x0, 0xffffffff}, {0x0, 0x4}, {0x8, 0xffffffff}, {0x80000000}], 0x10}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x2010, r1, 0x5) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) open(0x0, 0x0, 0x192) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x1, 0x176, &(0x7f0000000000)="$eJzskj9OAkEUxr9Zlj9aGEmsaCCRGCyUZVFjbLTE3gNIcEXiosKSKIRijTEUFsbSE3ANEy+ghfEA1BTE2oyZ2bfj4BWcX8G38837M++Fs6ATpAF8z4YNHECSwBLeGYMNIM8ib2pF+kT6Qco550LfKO6Q/DvSXIAM4Ptet7BXQFYY/cF5XRoAvqSnrGD/1sJUlvqcDRvi41hrwqmJHpMA0NFicjawIofgKsbGL+Ve+6oc9AcbrXa96TW9C9et7jhbjrPtlk9bvudEv0xrYclyoi2wDkDsa0G7TwK4p83NkwfTniZYBJiemwLwSHel1flsSx+dlOFF5aYB1fUIa2LRuA6Z5hZlFRtypBoYEnSoxCthqldGXmw2Lv2TERhYnDaGrWpUJkiqg6sfqrth/OwRaZG0RjomncTL+fOXSSKLEA90KoVACjf1Xq9bEUuKvpTnKs9dDvWFia7P1vxwrxYMBoPBYDAYDAaD4b/zEwAA//9yiHzx") write$cgroup_subtree(r1, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040814}, 0x80) 5.669293093s ago: executing program 3 (id=209): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 5.589207295s ago: executing program 3 (id=210): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup2\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, r3, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x4, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xbffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012e, 0x8004, 0x5, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x10000004, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x3, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0xc, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x4, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffff, 0xb1e, 0x5, 0x200, 0xffff3441, 0x40fff]}, 0x45c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r5 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.579671196s ago: executing program 2 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000840), 0x0}, 0x20) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x16a, &(0x7f00000006c0)="$eJzs27GKE0EYB/AvuZzmtLlaLBZsrA71CRQ5QVxQlBRaKZw2iQRMs9qYR/EFBUmVbkQ3JLpJIBHiht3fr8lH/jvwDWQyzMK8vf1xeDWefBi/mEW/04new8hi3onz6MZJlKYBADTJPKX4kVJK16dx9i1SSmuPfK2lMQDgYHbY/wGAhrH/A0D72P8BoH1evX7z7FGeX77Msn7E92kxKAblZ5k/eZpf3st+O1+NmhXF4GSZ3y/z7O/8NG4s8gcb82tx906Z/8oeP88r+c24Ovz0AQAAoBUusqWN5/uL5QPdSl5Wf7wfqJzfe3Gr99+mAQDsYfL5y/DdaPT+015FxL+MakRxGhFH0EZziu7il3gs/bSg6O+y8Gv+YwIObrXo6+4EAAAAAAAAAAAAAADYpnr752zx/b53huZp+3WimqcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa34GAAD//5ZbRrc=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) 5.234993087s ago: executing program 2 (id=212): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400010800"/16, @ANYRES32=0x0, @ANYBLOB="0b0000000000000054001a8018000a8014000700fe8000000000000000000000000000aa300002802c00018008000000000000000800000000000000080000000000000008000000000000000800000000000000080002800400"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x1, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3f7, 0x300, 0x70bd26, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 5.086050851s ago: executing program 3 (id=213): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000001061147c000000000004000000000004"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 4.936612376s ago: executing program 2 (id=214): io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000040)=0x5) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000040)=0x5) 4.80705933s ago: executing program 3 (id=215): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005920f010402038b1420100000001090238000100000000090400000371055900090582eb10f2ffff000200090502f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2af1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="3e00004e76de41f065747a3a12724c2f9949405946c69235ca4639026e120fea767e34d2cca008ce327424a52897795bb7e2808c47bff2"]) 4.559945188s ago: executing program 2 (id=216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') madvise(&(0x7f000076e000/0x2000)=nil, 0x2000, 0x19) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5fae, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4.414659752s ago: executing program 4 (id=217): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.408527184s ago: executing program 1 (id=218): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x1a77, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe0ffff00000000, &(0x7f0000000000)="e8"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x1000000}], 0x0, 0x0, 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r6}, 0x10) (async) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000001000"}, 0x10}}, 0x20000000) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') getdents64(r7, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYRES64=r7], 0x0) 3.385510295s ago: executing program 1 (id=219): rt_sigsuspend(&(0x7f0000000000), 0x8) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x559d, &(0x7f0000005680)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00000000c0)={0x2d, 0x8, 0x9}) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)) 2.943751048s ago: executing program 0 (id=220): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) unlink(&(0x7f00000000c0)='./bus\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents(r3, 0x0, 0x3b) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x8, 0x9, 0x0, 0x1, 0x0, 0x6, 0xe87a, 0x2, 0x3, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x1a4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x190, 0x1, [@m_nat={0x18c, 0xc, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x1, 0x5, 0x7a1}, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, 0xff, 0x4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x59, 0x7d, 0x8, 0x2, 0xffffffcd}, @multicast2, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xe, 0xffffffffffffffff, 0x7fffffff, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x9, 0x7, 0x1b, 0x4}, @loopback, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x3, 0x20000000, 0x0, 0x3}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x2, 0x5, 0x8001}, @loopback, @loopback, 0xff000000, 0x1}}]}, {0x74, 0x6, "5c90c411a636c4ce4ab65a1fc1288b5f1157c50a2cc1dd910864754d718c9da1c6ffac487ba63a2f849faa587e872d852e5a0599271015126eade4bd48510113fceae89f2574382c2db7c95ace2db4296b9ff3a61f1f13343bfd88368c6985b4cb762882e4c6b4b81dcc7d7a42a743e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x0) sendto$x25(r5, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.850990341s ago: executing program 4 (id=221): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 2.795287513s ago: executing program 4 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f", 0x14, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newlink={0x4c, 0x10, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x6897c, 0x13}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xe}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x24008014) 1.875148992s ago: executing program 4 (id=223): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006}, 0x94) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x901b01) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000006980)={&(0x7f0000000080)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c, &(0x7f0000005840)=[{0x0}, {&(0x7f00000014c0)="58be5f9bdc6e19fe68cad3274ee08d07dd9047", 0x13}, {&(0x7f0000001500)="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", 0x9a0}], 0x3, &(0x7f00000058c0)}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2000000f}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffe, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="dc01000016000100000000000000000000000000000000000000ffff7f000001ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e01010000000033000000fe80000000000000000000000000000e00000000000000000000000000000000000000000000000000ffffffffffffff03000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a00100e400060020010000000000000000000000000001000000000000000000000000000000014e2100084e200000020020800600"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d43c000000e0000002000000000000000000000000ff0100000000000002000000000000000600000000000000fcffffffffffffffff070000000000007f00000000000000000000000000000009000000000000000200000000000000100000000000000002000000000000007f0000000000000003000000ff070000040000002dbd7000073500000a0003b14200000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) 940.820431ms ago: executing program 2 (id=224): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup2\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, r3, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x4, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xbffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012e, 0x8004, 0x5, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x10000004, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x3, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0xc, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x4, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffff, 0xb1e, 0x5, 0x200, 0xffff3441, 0x40fff]}, 0x45c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r5 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 862.847504ms ago: executing program 3 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x2, &(0x7f0000000440)=@raw=[@generic={0xfb, 0xd, 0xa, 0x8, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x3e}], &(0x7f0000000480)='GPL\x00', 0x1, 0x8e, &(0x7f0000000540)=""/142, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x8, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c00)=[r0, r0], &(0x7f0000000c40)=[{0x2, 0x3, 0x4, 0x7}, {0x4, 0x4, 0x6, 0x9}, {0x3, 0x5, 0x10, 0x7}, {0x4, 0x5, 0x8, 0x4}], 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="e3def20ad9271c63636ed0cf37e7e7f4cd308a1f9f", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) fsopen(0x0, 0x0) syz_emit_ethernet(0x39, &(0x7f0000000e80)={@broadcast, @broadcast, @void, {@arp={0x806, @generic={0x300, 0x600, 0x6, 0x10, 0x8, @remote, "0230a753ce884c05ab1ccc84a9f6bc9d", @broadcast, "c291b9fd5f4281"}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f00000004c0)={0x8, 'bond_slave_0\x00', {'veth1_vlan\x00'}, 0x1}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r14 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r14, 0x40045109, 0xffffffffffffffff) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r15, 0xffffffff80000200, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d63703836362c636f6465706167653d6d6163726f6d616e69616e2c747970653d3ae6f80e0000"], 0x1, 0x2e5, &(0x7f0000000140)="$eJzs3U1PE0Ecx/HfbFsoD8EVMCZeNCiJXoioB+OlxvTq3ZNR25IQG4iAiXoRjUfjC/DuW/BFeNH4BvTkybucHDPTadnCdkvFshS/n4RmOzuz+5/OPsx/Y60A/LfuVL99uP7D/RmpoIKkW1IkqSwVJZ3R2fLTta3VrWajnrWhgm/h/oxaLc2+OrW1RlpT1863CGL3rqjpZBmGw1p7+3veQSB3/uxPEUnj4Tz068tHHNewbEvn847hqCUH2OxoR880k2M4AIBjINz/o3CbmPZFRlEkLYbb/om6/++cnK44N5r7imxmg8T938/urHHje8qv2s33fArn1kftLPEgwZT2vB9T68jqmmCaflmljyWaWFktaqn2SvVIr1UJEtXm/Wu9dei29Yl2ISU3zdB7ayXdnWz1xs8o92qHtLLabIy7hZT45wbb4+GZT+aLuW9ivVe9M/8rWuOGyY9UvGekopKL/2rvLU75Vq6WQtpfqVSiriqn/U7OhT0EfXpZTs9IkttsPyDY7kSQFaff96y6Hyu0erfcp9VcWqu4865Hq/muVoVwJCzV1puZj1KGo91F887cMwv6qY+qJub/kYtvUYkzM+v6aHzNcGTU1vXb2rH0mkVfM953ud09XS50IgjGB+4bpAGflr3VI93UzObzF48LzWZjwy08TFl4Mr1hQknpjZRaZ/gLBWXU0fZuiXVeWnvQLdtDBGb6fRpX+m/n18F36q4fnRJ3+qRVdmdZpyT6B5+8NTkM93FfqH5W1gE5OgvWSj1WDe06hWNk07QHPRRM5BwQjpqbd5lW/udn8mFW51Mk9xJnzNOzk0x1bXG5k8F1TwVn/evkQBncVO8MLrHHaz1yRp9zXbwsXUoUGmXuMQ5xnhCmqq96wPN/AAAAAAAAAAAAAAAAAACAURP+0X/7K5tD+aZBzl0EAAAAAAAAAAAAAAAAAAAAAGDk/dXv/6b9H/H+939jfv8XGCF/AgAA///7WndM") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES8=r3, @ANYRES16=r4, @ANYRES32=r13, @ANYRES8=r13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000180)=r16, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6900000000140601fe800000000000000000000000000037fe8000000000000000000000000000aa4e204e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5102000790780001bc6390284ad923fc959e4113cdd218128248b94c1384deb3d385f9bc7f63144923829ce80de9a2ba2d7a00c9c4d47ed9a1cf4f11df7b544afc8568c380f20907d6018c290fddefe4fd047bbd9918"], 0x0) 816.484615ms ago: executing program 0 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x88, 0x4) 815.532515ms ago: executing program 4 (id=227): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x9d, @in6={0xa, 0x4e23, 0x6, @loopback, 0x1a53}, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xfffffffffffffed4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4\x00', 0x82000, 0x104) mkdirat(r1, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4/file7/file6/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket(0x23, 0x4, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x10000001}) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x408e5}, 0x4000400) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r6, &(0x7f0000000240), 0x0}, 0x20) r8 = socket(0x22, 0x1, 0x43) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f00000000c0)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) 94.899207ms ago: executing program 4 (id=228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x5fd, 0x109000) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240)={0x5}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01ee17000000000000000c0ec847e600001e03000010100000000000000200000000002e00"], 0x0, 0x27, 0x0, 0x0, 0x100}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @code={0xa, 0x60, {"430f01c2670fc71de62a3b7db96a090000b89b000000ba000000000f300f79460e66430fee4d06360f3066baf80cb85863d68def66bafc0ced0fc7aa000000004e0fc79f988625be263e2e400f62ea"}}, @set_irq_handler={0xc8, 0x20, {0x5, 0x1}}, @code={0xa, 0x59, {"b9800000c00f3235010000000f300f797243460f320f282d0000000064660fc7b100800000b9800000c00f3235004000000f30673e460f01c5450f23c526420f01b8890000000f06"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x600a, 0x5, 0xfffffffffffffffb, 0x7}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6800, 0x7, 0x1ff, 0x9}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xe7e5, 0x2, 0x577}}, @code={0xa, 0x57, {"b9800000c00f3235010000000f304b0fc72967410f005372f30fbcfd66440f388183eb0000003ef2460f232ac4839949ea00c483b97cda57f2410f234066470f5e8100000000"}}, @wr_crn={0x67, 0x20, {0x4, 0x7}}, @rdmsr={0x66, 0x18, {0x8fa}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xce, 0x5, 0x5, 0x1}}], 0x2a8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000740)={r6, 0x0, 0x0, 0x1, 0x3, 0x800, 0xfffffffe, 0x5, 0x4, 0x401, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r7], &(0x7f0000000040)}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0x8, 0xc, 0x6, 0x3, 0x1, 0x3, 0x7, 0xc1, 0x0, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x80, 0x7, 0x0, 0x8, 0x4, 0x49, 0x6, 0x2, 0x1, 0x9, 0xf, 0x8000000000000000}, {0x80002, 0xc8b, 0x5, 0x4, 0x8, 0x6, 0x5, 0x10, 0x5, 0x3, 0x2, 0x24}], 0xf87}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x0, 0x400c0d4, &(0x7f0000000180)={0xa, 0x4e23, 0x8000, @empty, 0xffffffff}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') read$msr(r8, &(0x7f0000002180)=""/102386, 0x18ff2) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1a, 0x5, 0xe0) 17.34603ms ago: executing program 0 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0xbc, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x9}]}, @CTA_EXPECT_NAT={0x30, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfc2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) (async) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000100)=0xc3) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x2c020400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 0s ago: executing program 2 (id=230): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="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", 0x1ae}], 0x1}, 0x200008b1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) epoll_create1(0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x7) userfaultfd(0x80001) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x6d276b17) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000160a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a310000000008000740000000020c00054000000000000000040900020073797a32000000000900020073797a32000000002c0000000e0a010200000000000000000a0000000900010073797a310000000009"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@noinit_itable}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000200)={0x0, 0x7}) chdir(&(0x7f00000003c0)='./bus\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.22' (ED25519) to the list of known hosts. [ 47.123214][ T4175] cgroup: Unknown subsys name 'net' [ 47.227152][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.477554][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.780990][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 49.822551][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 49.856413][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.946411][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.953956][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.962468][ T4199] device bridge_slave_0 entered promiscuous mode [ 49.986558][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.993770][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.001677][ T4187] device bridge_slave_0 entered promiscuous mode [ 50.008958][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 50.018675][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.025932][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.033986][ T4199] device bridge_slave_1 entered promiscuous mode [ 50.044696][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.052001][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.059572][ T4187] device bridge_slave_1 entered promiscuous mode [ 50.074204][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.115274][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.133672][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.140889][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.148713][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.162246][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.172877][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.183442][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.195190][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.202324][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.210089][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.264942][ T4199] team0: Port device team_slave_0 added [ 50.274909][ T4187] team0: Port device team_slave_0 added [ 50.290192][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.300652][ T4199] team0: Port device team_slave_1 added [ 50.318422][ T4187] team0: Port device team_slave_1 added [ 50.325628][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.335025][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.342280][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.350463][ T4195] device bridge_slave_0 entered promiscuous mode [ 50.362533][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.369571][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.377432][ T4198] device bridge_slave_0 entered promiscuous mode [ 50.394810][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.402029][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.409592][ T4198] device bridge_slave_1 entered promiscuous mode [ 50.416513][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.423798][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.431620][ T4195] device bridge_slave_1 entered promiscuous mode [ 50.460978][ T4191] team0: Port device team_slave_0 added [ 50.475153][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.482115][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.507994][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.519739][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.526920][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.556116][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.569092][ T4191] team0: Port device team_slave_1 added [ 50.587151][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.600424][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.607362][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.633614][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.645062][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.654920][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.681075][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.697963][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.710296][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.720786][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.747672][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.754784][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.780795][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.816530][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.823528][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.849789][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.866838][ T4195] team0: Port device team_slave_0 added [ 50.874947][ T4198] team0: Port device team_slave_0 added [ 50.882665][ T4198] team0: Port device team_slave_1 added [ 50.906888][ T4195] team0: Port device team_slave_1 added [ 50.937135][ T4187] device hsr_slave_0 entered promiscuous mode [ 50.948221][ T4187] device hsr_slave_1 entered promiscuous mode [ 50.957238][ T4199] device hsr_slave_0 entered promiscuous mode [ 50.964451][ T4199] device hsr_slave_1 entered promiscuous mode [ 50.971249][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.978904][ T4199] Cannot create hsr debugfs directory [ 51.003259][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.010265][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.036234][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.055030][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.062066][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.088121][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.102723][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.110173][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.116611][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.124216][ T4191] Cannot create hsr debugfs directory [ 51.130823][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.137761][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.163700][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.178352][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.185662][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.211690][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.293433][ T4195] device hsr_slave_0 entered promiscuous mode [ 51.301028][ T4195] device hsr_slave_1 entered promiscuous mode [ 51.307395][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.315299][ T4195] Cannot create hsr debugfs directory [ 51.376835][ T4198] device hsr_slave_0 entered promiscuous mode [ 51.383654][ T4198] device hsr_slave_1 entered promiscuous mode [ 51.390448][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.397994][ T4198] Cannot create hsr debugfs directory [ 51.500866][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 51.507477][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 51.580237][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 51.580237][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 51.618537][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.637622][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.646832][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.656485][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.663929][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 51.706796][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.726648][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.735253][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.753206][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.778392][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.787795][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.815774][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.824300][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.876211][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.887319][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.895996][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.905899][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.934851][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.974407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.987766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.998691][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.020705][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.038843][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.049348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.059380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.069293][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.076525][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.085585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.106436][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.114770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.124483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.134571][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.141659][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.166923][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.176792][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.191005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.199613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.219216][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.232440][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.252198][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.265089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.274073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.284565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.293300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.303187][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.310287][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.318280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.327167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.335734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.344509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.353482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.362321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.371277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.379198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.397711][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.412583][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.426792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.434938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.442634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.452146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.460627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.469112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.478081][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.485240][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.493820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.501976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.525375][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.535277][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.556975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.566681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.611310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.621776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.630680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.639749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.650971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.660062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.668200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.676922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.685666][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.692747][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.701184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.709659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.718104][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.725366][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.733703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.742699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.751622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.760356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.768645][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.775712][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.783291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.792222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.800682][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.807722][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.815509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.825636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.833917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.842057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.856703][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.868336][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.904948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.918616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.929625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.938808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.947559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.956371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.964991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.998855][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.035546][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.049468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.060987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.068666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.079678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.088169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.096729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.106116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.114683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.123573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.132490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.142231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.150945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.159042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.167574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.176044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.184326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.192892][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.212937][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.241925][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.263252][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.289719][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.314573][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.324583][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.354165][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.364785][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.378917][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.389892][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.398359][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.405447][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.413997][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.422796][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.431718][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.438755][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.446528][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.455547][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.463595][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.471743][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.480031][ T4187] device veth0_vlan entered promiscuous mode [ 53.506422][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.521637][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.531372][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.549163][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.558662][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.566774][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.574491][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.582773][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 53.589698][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.590996][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 53.598333][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.612137][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.620826][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.628224][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.635980][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.648274][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.660810][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.668385][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 53.674653][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 53.694203][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.704516][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.713575][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.722315][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.737798][ T4187] device veth1_vlan entered promiscuous mode [ 53.752480][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.759779][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 53.779735][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.809747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.835885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.846636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.854966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.868804][ T4199] device veth0_vlan entered promiscuous mode [ 53.891513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.908179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.918300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.944395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.961469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.971315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.983809][ T4187] device veth0_macvtap entered promiscuous mode [ 53.996424][ T4199] device veth1_vlan entered promiscuous mode [ 54.004804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.014071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.023050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.032116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.053375][ T4187] device veth1_macvtap entered promiscuous mode [ 54.079395][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.093633][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.122991][ T4195] device veth0_vlan entered promiscuous mode [ 54.132548][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.150928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.159219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.168002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.176059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.194240][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.211253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.222778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.232292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.243981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.252658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.261747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.274356][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.286457][ T4199] device veth0_macvtap entered promiscuous mode [ 54.298548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.307637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.316493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.325187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.334154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.354099][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.365090][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.374158][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.384060][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.396512][ T4195] device veth1_vlan entered promiscuous mode [ 54.409160][ T4198] device veth0_vlan entered promiscuous mode [ 54.416745][ T4199] device veth1_macvtap entered promiscuous mode [ 54.455642][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.464844][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.474026][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.485147][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.493982][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.502823][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.511121][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.519278][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.527145][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.535439][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.543871][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.563847][ T4191] device veth0_vlan entered promiscuous mode [ 54.578879][ T4195] device veth0_macvtap entered promiscuous mode [ 54.586769][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.598046][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.610934][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.625840][ T4191] device veth1_vlan entered promiscuous mode [ 54.633008][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.641651][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.650317][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.658767][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.667851][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.677118][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.688594][ T4198] device veth1_vlan entered promiscuous mode [ 54.717587][ T4195] device veth1_macvtap entered promiscuous mode [ 54.727077][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.737762][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.749635][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.761674][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.769602][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.808698][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.821812][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.832995][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.843536][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.854887][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.864253][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.873538][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.881743][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.889645][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.898473][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.907472][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.916208][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.924259][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.932994][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.946120][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.958538][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.967381][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.976337][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.000302][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.014095][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.025318][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.035970][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.047156][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.060237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.068674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.078204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.087045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.097557][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.098199][ T4198] device veth0_macvtap entered promiscuous mode [ 55.117935][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.147690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.156472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.165320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.174893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.186141][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.194974][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.203991][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.212972][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.241795][ T4191] device veth0_macvtap entered promiscuous mode [ 55.251230][ T4198] device veth1_macvtap entered promiscuous mode [ 55.326413][ T4191] device veth1_macvtap entered promiscuous mode [ 55.348822][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.374217][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.394848][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.407065][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.421226][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.436637][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.448557][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.478091][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.487045][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.495561][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.505750][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.522316][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.534965][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.545270][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.558806][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.569272][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.582773][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.594497][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.603922][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.614823][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.624834][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.635389][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.645314][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.656063][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.666644][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.670790][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 55.677872][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.688584][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 55.694379][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.724297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.733656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.743759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.749146][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 55.754207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.759174][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 55.773614][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.785594][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.794434][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806137][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.820236][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 55.850412][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.861437][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.871459][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.882920][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.892827][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.903625][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.913691][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.926920][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.937778][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.952377][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.954641][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.962405][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.974556][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.978637][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.994964][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.010014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.018796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.027632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.068696][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.087888][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.088811][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.134684][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.162710][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.172385][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.174158][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.214378][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.252777][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.270372][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.302415][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.324241][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.342200][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.354004][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.366306][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.417122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.425895][ T4273] ======================================================= [ 56.425895][ T4273] WARNING: The mand mount option has been deprecated and [ 56.425895][ T4273] and is ignored by this kernel. Remove the mand [ 56.425895][ T4273] option from the mount to silence this warning. [ 56.425895][ T4273] ======================================================= [ 56.460759][ C1] vkms_vblank_simulate: vblank timer overrun [ 56.481392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.510167][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.523091][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.537662][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.564574][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.582501][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.597623][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.743090][ T4281] loop3: detected capacity change from 0 to 4096 [ 56.817306][ T4287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.827853][ T4281] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 56.833245][ T4281] Remounting filesystem read-only [ 56.849933][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.853947][ T4281] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 56.874634][ T4281] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 56.899376][ T4281] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 57.105617][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 57.111113][ T4292] loop1: detected capacity change from 0 to 256 [ 57.129070][ T4292] exfat: Deprecated parameter 'utf8' [ 57.135330][ T4292] exfat: Deprecated parameter 'utf8' [ 57.157620][ T4292] exfat: Deprecated parameter 'utf8' [ 57.195106][ T4292] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 57.230084][ T4230] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 57.248650][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.273884][ T4230] usb 1-1: config 1 has no interface number 0 [ 57.290779][ T4230] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.310981][ T4230] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.344351][ T4230] usb 1-1: config 1 interface 105 has no altsetting 0 [ 57.510251][ T4230] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 57.529571][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 57.559979][ T4230] usb 1-1: Product: syz [ 57.564182][ T4230] usb 1-1: Manufacturer: syz [ 57.583221][ T4230] usb 1-1: SerialNumber: syz [ 57.587697][ T4303] netlink: 'syz.4.12': attribute type 26 has an invalid length. [ 57.597685][ T4300] loop1: detected capacity change from 0 to 4096 [ 57.750692][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 57.763928][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 57.916746][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 57.984095][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 58.154703][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 58.401632][ T4230] aqc111: probe of 1-1:1.105 failed with error -22 [ 58.478268][ T4316] loop0: detected capacity change from 0 to 2048 [ 58.553960][ T4319] Zero length message leads to an empty skb [ 58.564672][ T4316] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 58.620886][ T4263] Bluetooth: hci5: command 0x1003 tx timeout [ 58.627571][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 58.743917][ T4230] usb 1-1: USB disconnect, device number 2 [ 59.071325][ T4325] loop3: detected capacity change from 0 to 4096 [ 59.128891][ T4329] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.147395][ T4325] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 59.201442][ T4325] Remounting filesystem read-only [ 59.210493][ T4332] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 59.225408][ T4325] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 59.237142][ T4325] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 60.019317][ T4344] futex_wake_op: syz.3.22 tries to shift op by 144; fix this program [ 60.344062][ T4348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 60.717704][ T1325] Bluetooth: hci5: command 0x1001 tx timeout [ 60.729920][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 60.821110][ T4354] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 60.862657][ T4356] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 61.895933][ T4342] loop0: detected capacity change from 0 to 40427 [ 61.918850][ T4367] loop4: detected capacity change from 0 to 256 [ 61.967616][ T4371] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 61.982332][ T4367] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿ' [ 62.007190][ T4342] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 62.033662][ T4342] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.039402][ T4342] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(768) [ 62.039428][ T4342] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 62.067675][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 62.067701][ T4373] device lo entered promiscuous mode [ 62.068964][ T4373] device tunl0 entered promiscuous mode [ 62.069452][ T4373] device gre0 entered promiscuous mode [ 62.080711][ T4373] device gretap0 entered promiscuous mode [ 62.081947][ T4373] device erspan0 entered promiscuous mode [ 62.082983][ T4373] device ip_vti0 entered promiscuous mode [ 62.083458][ T4373] device ip6_vti0 entered promiscuous mode [ 62.083926][ T4373] device sit0 entered promiscuous mode [ 62.084392][ T4373] device ip6tnl0 entered promiscuous mode [ 62.084851][ T4373] device ip6gre0 entered promiscuous mode [ 62.085317][ T4373] device syz_tun entered promiscuous mode [ 62.086171][ T4373] device ip6gretap0 entered promiscuous mode [ 62.135801][ T4373] device bridge0 entered promiscuous mode [ 62.136982][ T4373] device vcan0 entered promiscuous mode [ 62.137077][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.137150][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.137245][ T4373] device bond0 entered promiscuous mode [ 62.137256][ T4373] device bond_slave_0 entered promiscuous mode [ 62.137369][ T4373] device bond_slave_1 entered promiscuous mode [ 62.156644][ T4373] device team0 entered promiscuous mode [ 62.156660][ T4373] device team_slave_0 entered promiscuous mode [ 62.156808][ T4373] device team_slave_1 entered promiscuous mode [ 62.158342][ T4373] device dummy0 entered promiscuous mode [ 62.158798][ T4373] device nlmon0 entered promiscuous mode [ 62.216896][ T4379] loop8: detected capacity change from 0 to 8 [ 62.222859][ T4373] device caif0 entered promiscuous mode [ 62.223028][ T4373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.229689][ T4379] Dev loop8: unable to read RDB block 8 [ 62.229764][ T4379] loop8: unable to read partition table [ 62.239161][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 62.239679][ T4379] loop8: partition table beyond EOD, truncated [ 62.239718][ T4379] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 62.319419][ T4376] device team_slave_0 left promiscuous mode [ 62.389957][ T4376] team0 (unregistering): Port device team_slave_0 removed [ 62.390159][ T4376] device team_slave_1 left promiscuous mode [ 62.395107][ T4377] loop1: detected capacity change from 0 to 4096 [ 62.617736][ T4376] team0 (unregistering): Port device team_slave_1 removed [ 62.633930][ T4377] ntfs: (device loop1): parse_options(): Unrecognized mount option mft_Zone_multiplier. [ 62.672574][ T4377] ntfs: (device loop1): parse_options(): Unrecognized mount option disable_sparse}yes. [ 62.790541][ T1109] Bluetooth: hci5: command 0x1009 tx timeout [ 62.808062][ T4377] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 62.829018][ T4383] loop0: detected capacity change from 0 to 4096 [ 63.365790][ T4389] loop1: detected capacity change from 0 to 256 [ 63.524689][ T4389] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 63.690596][ T4389] FAT-fs (loop1): Filesystem has been set read-only [ 63.720308][ T4389] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 63.785926][ T4398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.35'. [ 63.801903][ T4398] binder: BINDER_SET_CONTEXT_MGR already set [ 63.808097][ T4398] binder: 4392:4398 ioctl 4018620d 200000004a80 returned -16 [ 63.917088][ T4389] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 64.070284][ T26] audit: type=1800 audit(1779745069.001:2): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.34" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 64.469872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 64.549872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 64.622227][ T4385] bridge0: port 3(syz_tun) entered blocking state [ 64.628956][ T4385] bridge0: port 3(syz_tun) entered disabled state [ 64.637787][ T4385] device syz_tun entered promiscuous mode [ 64.644349][ T4385] bridge0: port 3(syz_tun) entered blocking state [ 64.651023][ T4385] bridge0: port 3(syz_tun) entered forwarding state [ 64.708000][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 64.940034][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.952119][ T4389] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 64.964280][ T4406] fuse: blksize only supported for fuseblk [ 64.978906][ T4389] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.003099][ T4389] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.119958][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.160389][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 65.160508][ T4389] syz.1.34 (4389) used greatest stack depth: 21136 bytes left [ 65.231101][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 65.360144][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.388345][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.425206][ T4232] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 65.428932][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 65.454647][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.469840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.473911][ T4415] loop1: detected capacity change from 0 to 128 [ 65.489848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 65.499836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 65.509845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 65.513041][ T4232] usb 4-1: config 0 descriptor?? [ 65.610259][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.710214][ T4230] usb 1-1: config 13 has an invalid interface number: 50 but max is 3 [ 65.728332][ T4230] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 65.738726][ T4230] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 65.764195][ T4425] loop1: detected capacity change from 0 to 512 [ 65.779227][ T4230] usb 1-1: config 13 has no interface number 0 [ 65.796636][ T4230] usb 1-1: config 13 interface 50 altsetting 4 endpoint 0x3 has invalid maxpacket 28704, setting to 64 [ 65.815033][ T4425] EXT4-fs (loop1): Ignoring removed nobh option [ 65.840348][ T4425] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.858351][ T4230] usb 1-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.872317][ T4425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.890104][ T4230] usb 1-1: config 13 interface 50 has no altsetting 0 [ 65.978475][ T4425] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.002003][ T4425] EXT4-fs (loop1): 1 truncate cleaned up [ 66.007832][ T4425] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 66.067102][ T4230] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 66.077310][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.285007][ T4230] usb 1-1: Product: syz [ 67.397750][ T4230] usb 1-1: Manufacturer: syz [ 67.459357][ T4230] usb 1-1: SerialNumber: syz [ 67.468839][ T26] audit: type=1800 audit(1779745072.461:3): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 67.907621][ T4230] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 67.930081][ T4349] usb 1-1: Failed to submit usb control message: -71 [ 67.983147][ T4349] usb 1-1: unable to send the bmi data to the device: -71 [ 68.215238][ T4349] usb 1-1: unable to get target info from device [ 68.252427][ T4230] usb 1-1: USB disconnect, device number 3 [ 68.378674][ T4349] usb 1-1: could not get target info (-71) [ 68.508496][ T4349] usb 1-1: could not probe fw (-71) [ 69.632064][ T4452] loop2: detected capacity change from 0 to 1764 [ 69.671755][ T4451] ipt_rpfilter: unknown options [ 69.677880][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 69.700791][ T4232] usbhid 4-1:0.0: can't add hid device: -71 [ 69.706789][ T4232] usbhid: probe of 4-1:0.0 failed with error -71 [ 69.743445][ T4450] loop1: detected capacity change from 0 to 8192 [ 69.779135][ T4232] usb 4-1: USB disconnect, device number 2 [ 69.792514][ T4457] loop8: detected capacity change from 0 to 7 [ 69.841577][ T4450] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 69.880788][ T4450] REISERFS (device loop1): using ordered data mode [ 69.893293][ T4450] reiserfs: using flush barriers [ 69.911373][ T4457] Dev loop8: unable to read RDB block 7 [ 69.960974][ T4457] loop8: unable to read partition table [ 69.970108][ T4450] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.989464][ T4457] loop8: partition table beyond EOD, truncated [ 70.048947][ T4457] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.280037][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.316525][ T4450] REISERFS (device loop1): checking transaction log (loop1) [ 70.532519][ T4473] loop4: detected capacity change from 0 to 512 [ 70.696253][ T4450] REISERFS (device loop1): Using r5 hash to sort names [ 70.718221][ T4450] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 70.730084][ T4473] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.750084][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.781808][ T4473] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.840456][ T4231] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 70.917047][ T4473] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 70.950123][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.970218][ T4473] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 70.995909][ T4473] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 71.010019][ T4231] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 71.036464][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.064982][ T4231] usb 3-1: Product: syz [ 71.066255][ T4473] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.55: bg 0: block 64: padding at end of block bitmap is not set [ 71.095365][ T4231] usb 3-1: Manufacturer: syz [ 71.115591][ T4231] usb 3-1: SerialNumber: syz [ 71.135218][ T4473] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 71.170191][ T4452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.184836][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197955][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.206320][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 71.251820][ T4473] EXT4-fs (loop4): 1 truncate cleaned up [ 71.257499][ T4473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.333151][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.354886][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.393141][ T4232] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 71.411280][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.449037][ T4232] usb 1-1: config 0 descriptor?? [ 71.501717][ T4492] loop3: detected capacity change from 0 to 32768 [ 71.520141][ T4492] XFS: noikeep mount option is deprecated. [ 71.590284][ T4231] usb 3-1: MIDIStreaming interface descriptor not found [ 71.681071][ T4231] usb 3-1: USB disconnect, device number 2 [ 71.761148][ T4492] XFS (loop3): Mounting V5 Filesystem [ 71.887174][ T4492] XFS (loop3): Ending clean mount [ 71.959924][ T1325] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.062938][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.083412][ T4524] udc-core: couldn't find an available UDC or it's busy [ 72.090561][ T4524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.115359][ T4523] loop1: detected capacity change from 0 to 512 [ 72.147242][ T4492] XFS (loop3): Quotacheck needed: Please wait. [ 72.377117][ T4492] XFS (loop3): Quotacheck: Done. [ 73.484220][ T4523] EXT4-fs (loop1): 1 truncate cleaned up [ 73.490127][ T4523] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 73.535484][ T26] audit: type=1800 audit(1779745078.531:4): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.61" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 73.609817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.667600][ T4529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.61: bg 0: block 465: padding at end of block bitmap is not set [ 73.702581][ T4529] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 73.715239][ T4529] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.715239][ T4529] [ 73.980179][ T4232] usbhid 1-1:0.0: can't add hid device: -71 [ 73.987307][ T4232] usbhid: probe of 1-1:0.0 failed with error -71 [ 74.008247][ T4232] usb 1-1: USB disconnect, device number 4 [ 74.040049][ T1325] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 74.048198][ T1325] usb 5-1: config 0 has no interface number 1 [ 74.125934][ T4488] syz.3.59 (4488) used greatest stack depth: 20976 bytes left [ 74.142389][ T4234] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28 [ 74.166701][ T4234] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.166701][ T4234] [ 74.178072][ T4234] EXT4-fs (loop1): Total free blocks count 0 [ 74.227444][ T4198] XFS (loop3): Unmounting Filesystem [ 74.239997][ T1325] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 74.262237][ T4234] EXT4-fs (loop1): Free/Dirty block details [ 74.335232][ T4234] EXT4-fs (loop1): free_blocks=0 [ 74.401260][ T4234] EXT4-fs (loop1): dirty_blocks=6 [ 74.450149][ T4234] EXT4-fs (loop1): Block reservation details [ 74.502516][ T4234] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 74.830526][ T4537] loop0: detected capacity change from 0 to 4096 [ 74.926287][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.934682][ T1325] usb 5-1: Product: syz [ 74.938890][ T1325] usb 5-1: Manufacturer: syz [ 74.944976][ T1325] usb 5-1: SerialNumber: syz [ 74.952900][ T1325] usb 5-1: config 0 descriptor?? [ 74.970424][ T1325] usb 5-1: can't set config #0, error -71 [ 74.980014][ T1325] usb 5-1: USB disconnect, device number 2 [ 75.030478][ T4543] loop1: detected capacity change from 0 to 512 [ 75.043660][ T4544] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.086458][ T4543] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 75.157633][ T4543] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.165517][ T4543] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 75.182157][ T4543] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 75.217558][ T4543] EXT4-fs (loop1): 1 truncate cleaned up [ 75.225629][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,user_xattr,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,lazytime,,errors=continue. Quota mode: writeback. [ 75.410183][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.660076][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 75.780033][ T13] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 75.809883][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.847905][ T13] usb 3-1: config 0 has no interface number 0 [ 75.907218][ T4558] loop4: detected capacity change from 0 to 4096 [ 76.060183][ T13] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 76.098889][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.128194][ T13] usb 3-1: Product: syz [ 76.151861][ T13] usb 3-1: Manufacturer: syz [ 76.156507][ T13] usb 3-1: SerialNumber: syz [ 76.186960][ T13] usb 3-1: config 0 descriptor?? [ 76.251785][ T13] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 76.255509][ T4566] loop1: detected capacity change from 0 to 8192 [ 76.311930][ T1107] cfg80211: failed to load regulatory.db [ 76.363701][ T4566] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 76.389999][ T4566] REISERFS (device loop1): using ordered data mode [ 76.420015][ T4566] reiserfs: using flush barriers [ 76.449110][ T4566] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.464869][ T13] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 76.476500][ T13] quatech2: probe of 3-1:0.51 failed with error -8 [ 76.553184][ T4566] REISERFS (device loop1): checking transaction log (loop1) [ 76.747318][ T4549] loop2: detected capacity change from 0 to 4096 [ 76.780364][ T4566] REISERFS (device loop1): Using r5 hash to sort names [ 76.805690][ T4191] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 76.808338][ T4566] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 76.819860][ T4191] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 76.887537][ T4569] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.908933][ T4570] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 76.986560][ T24] usb 3-1: USB disconnect, device number 3 [ 77.163497][ T4572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 77.217830][ T4572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.360813][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.660157][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 77.729899][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.815723][ T4230] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 77.834927][ T4230] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 77.860883][ T4230] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.895204][ T4230] usb 5-1: config 1 has no interface number 1 [ 77.901620][ T4230] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 77.945138][ T4230] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 77.966700][ T4230] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 78.042636][ T4585] loop2: detected capacity change from 0 to 32768 [ 78.090262][ T4585] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.76 (4585) [ 78.103621][ T1109] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 78.122211][ T1109] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 78.154124][ T1109] usb 4-1: config 220 has no interface number 2 [ 78.166196][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060dc7c00: rx timeout, send abort [ 78.176266][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060dc7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.180120][ T4230] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.202592][ T1109] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 78.228055][ T1109] usb 4-1: config 220 interface 0 has no altsetting 0 [ 78.235097][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.235442][ T1109] usb 4-1: config 220 interface 76 has no altsetting 0 [ 78.255429][ T1109] usb 4-1: config 220 interface 1 has no altsetting 0 [ 78.260103][ T4230] usb 5-1: Product: syz [ 78.297063][ T4230] usb 5-1: Manufacturer: syz [ 78.301986][ T4230] usb 5-1: SerialNumber: syz [ 78.337658][ T4585] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 78.389937][ T4585] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.420391][ T1109] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 78.429456][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.442902][ T4585] BTRFS info (device loop2): force lzo compression, level 0 [ 78.452846][ T4585] BTRFS info (device loop2): max_inline at 4096 [ 78.459098][ T4585] BTRFS info (device loop2): allowing degraded mounts [ 78.472400][ T1109] usb 4-1: Product: syz [ 78.476583][ T1109] usb 4-1: Manufacturer: syz [ 78.483433][ T1109] usb 4-1: SerialNumber: syz [ 78.489154][ T4585] BTRFS info (device loop2): using free space tree [ 78.516265][ T4585] BTRFS info (device loop2): has skinny extents [ 78.700298][ T4230] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 78.715086][ T4585] BTRFS info (device loop2): enabling ssd optimizations [ 78.718939][ T4230] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 78.729925][ T4230] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 78.776085][ T4230] usb 5-1: USB disconnect, device number 3 [ 78.820130][ T4232] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 78.910662][ T1109] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 78.917059][ T1109] usb 4-1: No valid video chain found. [ 78.961048][ T1109] usb 4-1: selecting invalid altsetting 0 [ 79.052774][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.111281][ T1109] usb 4-1: selecting invalid altsetting 0 [ 79.117701][ T1109] usbtest: probe of 4-1:220.1 failed with error -22 [ 79.180872][ T4232] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 79.248513][ T4232] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 79.271522][ T1109] usb 4-1: USB disconnect, device number 3 [ 79.323861][ T4232] usb 2-1: config 8 has no interface number 0 [ 79.375967][ T4232] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 79.463642][ T4232] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 79.468896][ T4627] overlayfs: overlapping lowerdir path [ 79.502897][ T4232] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 79.595133][ T4232] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 79.617909][ T4232] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 79.628218][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.690765][ T4232] usb 2-1: NFC: intf ffff888079588000 id ffffffff8cb52f00 [ 79.760008][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 79.808481][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.844852][ T4637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.870811][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.888499][ T4637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.906601][ T4232] usb 2-1: USB disconnect, device number 2 [ 80.020042][ T1109] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.139520][ T4666] capability: warning: `syz.0.90' uses 32-bit capabilities (legacy support in use) [ 80.224881][ T4659] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.288452][ T4669] loop0: detected capacity change from 0 to 16 [ 80.364367][ T4669] erofs: Unknown parameter 'noa ' [ 80.380115][ T1109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.413262][ T1109] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice= 0.51 [ 80.428530][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.487174][ T1109] usb 4-1: config 0 descriptor?? [ 80.599549][ T1109] usb 4-1: bad CDC descriptors [ 80.674463][ T1109] usb 4-1: bad CDC descriptors [ 80.710224][ T4230] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.958630][ T4682] loop4: detected capacity change from 0 to 512 [ 80.968009][ T4680] loop1: detected capacity change from 0 to 8192 [ 80.977880][ T1109] usb 4-1: USB disconnect, device number 4 [ 80.999162][ T4686] device vlan0 entered promiscuous mode [ 81.008657][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 81.013820][ T4682] EXT4-fs (loop4): Ignoring removed bh option [ 81.047913][ T4680] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 81.057994][ T4682] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 81.076600][ T4680] REISERFS (device loop1): using ordered data mode [ 81.085967][ T4680] reiserfs: using flush barriers [ 81.104117][ T4680] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.104461][ T4682] EXT4-fs (loop4): 1 truncate cleaned up [ 81.150401][ T4680] REISERFS (device loop1): checking transaction log (loop1) [ 81.168041][ T4682] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 81.240090][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.340461][ T4230] usb 3-1: config 9 has an invalid interface number: 40 but max is 0 [ 81.349428][ T4230] usb 3-1: config 9 has no interface number 0 [ 81.366970][ T4230] usb 3-1: config 9 interface 40 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 81.380313][ T4680] REISERFS (device loop1): Using r5 hash to sort names [ 81.387357][ T4680] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 81.396957][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 81.403245][ T4230] usb 3-1: config 9 interface 40 has no altsetting 0 [ 81.466089][ T4697] Illegal XDP return value 480381639, expect packet loss! [ 81.566293][ T4702] loop3: detected capacity change from 0 to 64 [ 81.630127][ T4230] usb 3-1: New USB device found, idVendor=05da, idProduct=00a0, bcdDevice=f1.38 [ 81.645247][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.653520][ T4230] usb 3-1: Product: syz [ 81.657801][ T4230] usb 3-1: Manufacturer: syz [ 81.681303][ T4230] usb 3-1: SerialNumber: syz [ 81.841230][ T4625] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 81.864501][ T4707] loop1: detected capacity change from 0 to 8 [ 81.939232][ T4707] squashfs image failed sanity check [ 81.974464][ T4672] loop2: detected capacity change from 0 to 8 [ 82.002059][ T4710] 9pnet: Insufficient options for proto=fd [ 82.040660][ T4625] usb 5-1: device descriptor read/64, error -71 [ 82.084630][ T4672] SQUASHFS error: zlib decompression failed, data probably corrupt [ 82.144108][ T4672] SQUASHFS error: Failed to read block 0x9b: -5 [ 82.168475][ T4672] SQUASHFS error: Unable to read metadata cache entry [99] [ 82.195903][ T4672] SQUASHFS error: Unable to read inode 0x127 [ 82.329994][ T4625] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 82.337498][ T4628] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.421864][ T4230] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 9 is not bulk. [ 82.437137][ T4230] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk. [ 82.447940][ T4230] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 10 is not bulk. [ 82.464611][ T4230] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 82.507904][ T4230] usb 3-1: USB disconnect, device number 4 [ 82.570063][ T4625] usb 5-1: device descriptor read/64, error -71 [ 82.620117][ T4628] usb 4-1: Using ep0 maxpacket: 32 [ 82.705667][ T4625] usb usb5-port1: attempt power cycle [ 82.740077][ T4628] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.920370][ T4628] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 82.945328][ T4628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.959438][ T4628] usb 4-1: Product: syz [ 82.967257][ T4628] usb 4-1: Manufacturer: syz [ 82.973583][ T4628] usb 4-1: SerialNumber: syz [ 82.981586][ T4716] loop2: detected capacity change from 0 to 256 [ 82.988303][ T4628] usb 4-1: config 0 descriptor?? [ 83.000042][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.032192][ T4628] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 83.035513][ T4716] FAT-fs (loop2): Directory bread(block 1285) failed [ 83.056840][ T4716] FAT-fs (loop2): Directory bread(block 1286) failed [ 83.064145][ T4716] FAT-fs (loop2): Directory bread(block 1287) failed [ 83.071891][ T4716] FAT-fs (loop2): Directory bread(block 1288) failed [ 83.093629][ T4720] loop1: detected capacity change from 0 to 256 [ 83.120001][ T4625] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 83.169686][ T4720] exFAT-fs (loop1): failed to load upcase table [ 83.184626][ T4720] exFAT-fs (loop1): failed to recognize exfat type [ 83.239993][ T4625] usb 5-1: device descriptor read/8, error -71 [ 83.250140][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 83.400594][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 83.444285][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 83.490799][ T4725] loop1: detected capacity change from 0 to 512 [ 83.535665][ T4725] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.565126][ T4725] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 83.581262][ T4628] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 83.588296][ T4628] gspca_pac7302: probe of 4-1:0.0 failed with error -110 [ 83.588815][ T4725] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 83.607864][ T4725] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.109: Failed to acquire dquot type 0 [ 83.627719][ T4725] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 83.680095][ T13] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 83.684639][ T4725] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 83.720074][ T4625] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 83.739163][ T4725] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.109: Failed to acquire dquot type 0 [ 83.784083][ T4725] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.109: bg 0: block 64: padding at end of block bitmap is not set [ 83.860462][ T4625] usb 5-1: device descriptor read/8, error -71 [ 83.965381][ T4725] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 83.994461][ T4625] usb usb5-port1: unable to enumerate USB device [ 84.114409][ T4725] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 84.205249][ T4725] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 84.320700][ T4725] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.109: Failed to acquire dquot type 0 [ 84.508648][ T4729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.110'. [ 84.603149][ T4725] EXT4-fs (loop1): 1 orphan inode deleted [ 84.696767][ T4725] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 84.809960][ T4625] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.021143][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.029187][ T13] usb 1-1: Product: syz [ 85.033442][ T13] usb 1-1: Manufacturer: syz [ 85.038298][ T13] usb 1-1: SerialNumber: syz [ 85.060017][ T13] usb 1-1: can't set config #1, error -71 [ 85.071740][ T13] usb 1-1: USB disconnect, device number 5 [ 85.110388][ T4625] usb 3-1: Using ep0 maxpacket: 16 [ 85.123463][ T4629] usb 4-1: USB disconnect, device number 5 [ 85.240294][ T4625] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 85.254904][ T4625] usb 3-1: config 0 has no interface number 0 [ 85.308876][ T4625] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 85.358127][ T4625] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 85.377883][ T4742] loop1: detected capacity change from 0 to 8192 [ 85.394888][ T26] audit: type=1107 audit(1779745090.391:5): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 85.418576][ T4742] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 85.439953][ T4742] REISERFS (device loop1): using ordered data mode [ 85.448822][ T4742] reiserfs: using flush barriers [ 85.490768][ T4742] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.560482][ T4742] REISERFS (device loop1): checking transaction log (loop1) [ 85.650176][ T4625] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 85.687882][ T4625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.710860][ T4625] usb 3-1: Product: syz [ 85.729912][ T4625] usb 3-1: Manufacturer: syz [ 85.734542][ T4625] usb 3-1: SerialNumber: syz [ 85.780306][ T4625] usb 3-1: config 0 descriptor?? [ 85.821274][ T4625] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 85.833573][ T4742] REISERFS (device loop1): Using r5 hash to sort names [ 85.850696][ T4742] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 86.015185][ T4735] loop0: detected capacity change from 0 to 512 [ 86.054073][ T4625] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 86.085659][ T4625] usb 3-1: USB disconnect, device number 5 [ 86.101642][ T4749] loop4: detected capacity change from 0 to 32768 [ 86.144051][ T4625] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 86.185252][ T4625] cypress_m8 3-1:0.35: device disconnected [ 86.214302][ T4749] [ 86.214302][ T4749] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.214302][ T4749] [ 86.326756][ T4749] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 86.428355][ T4735] EXT4-fs (loop0): Test dummy encryption mode enabled [ 86.448620][ T4735] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 86.488082][ T4735] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 86.488187][ T4735] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 86.556710][ T4760] ERROR: (device loop4): diWrite: ixpxd invalid [ 86.556710][ T4760] [ 86.559547][ T4760] ERROR: (device loop4): txCommit: [ 86.559547][ T4760] [ 87.714301][ T4767] loop2: detected capacity change from 0 to 128 [ 88.018943][ T4767] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 88.078856][ T4735] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 89.192901][ T4767] loop2: detected capacity change from 0 to 512 [ 89.654382][ T4767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 89.747202][ T4767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.784998][ T4767] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 89.810188][ T4767] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 89.822854][ T4767] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.119: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 89.958528][ T4767] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.119: couldn't read orphan inode 13 (err -117) [ 89.993519][ T4767] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 90.124588][ T4767] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.119: deleted inode referenced: 12 [ 90.148908][ T4767] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.119: deleted inode referenced: 12 [ 90.189951][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.204351][ T4789] loop3: detected capacity change from 0 to 8 [ 90.362793][ T4789] loop3: detected capacity change from 0 to 1024 [ 90.375939][ T4191] [ 90.375939][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.375939][ T4191] [ 90.394096][ T4191] [ 90.394096][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.394096][ T4191] [ 90.411890][ T4789] hfsplus: unable to parse mount options [ 90.445679][ T4789] udc-core: couldn't find an available UDC or it's busy [ 90.452820][ T4789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.660127][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.676262][ T4794] loop4: detected capacity change from 0 to 8 [ 90.739905][ T4628] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.760179][ T4230] usb 2-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 90.937644][ T4796] netlink: 'syz.4.125': attribute type 17 has an invalid length. [ 90.950591][ T4796] netlink: 148 bytes leftover after parsing attributes in process `syz.4.125'. [ 90.980183][ T4230] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 90.989254][ T4230] usb 2-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 91.024470][ T4803] loop0: detected capacity change from 0 to 256 [ 91.031424][ T4628] usb 4-1: Using ep0 maxpacket: 16 [ 91.040501][ T4230] usb 2-1: Product: syz [ 91.050026][ T4230] usb 2-1: Manufacturer: syz [ 91.054643][ T4230] usb 2-1: SerialNumber: syz [ 91.126789][ T4801] loop2: detected capacity change from 0 to 4096 [ 91.128122][ T4803] netlink: 'syz.0.128': attribute type 20 has an invalid length. [ 91.164157][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 91.193474][ T4803] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.202658][ T4803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.211413][ T4803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.220159][ T4803] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.230346][ T4628] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.254198][ T4803] netlink: 'syz.0.128': attribute type 20 has an invalid length. [ 91.262214][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 91.430413][ T4628] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.394445][ T4230] usb 2-1: unit 4 not found! [ 92.448459][ T4811] loop1: detected capacity change from 0 to 128 [ 92.503501][ T4230] usb 2-1: USB disconnect, device number 3 [ 92.530871][ T4628] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 92.577947][ T4628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.670293][ T4811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.684782][ T4628] usb 4-1: Product: syz [ 92.689057][ T4628] usb 4-1: Manufacturer: syz [ 92.697381][ T4628] usb 4-1: SerialNumber: syz [ 92.741337][ T4811] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.971200][ T4811] device vlan2 entered promiscuous mode [ 92.974032][ T4813] loop4: detected capacity change from 0 to 4096 [ 92.976998][ T4811] device bridge0 entered promiscuous mode [ 92.986285][ T4494] udevd[4494]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.107938][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 93.515525][ T4820] loop2: detected capacity change from 0 to 512 [ 93.530008][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 93.572235][ T4625] usb 4-1: USB disconnect, device number 6 [ 93.640105][ T4820] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.647212][ T4820] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.664043][ T4824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.668069][ T4813] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 93.721557][ T4820] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.133: bad orphan inode 131083 [ 93.818948][ T4831] netlink: 92 bytes leftover after parsing attributes in process `syz.0.135'. [ 93.924980][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 93.946960][ T4831] loop0: detected capacity change from 0 to 4096 [ 94.106231][ T4831] EXT4-fs (loop0): Test dummy encryption mode enabled [ 94.113638][ T4831] EXT4-fs (loop0): Ignoring removed orlov option [ 94.517773][ T4832] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 95.938621][ T4820] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 96.270448][ T4832] Remounting filesystem read-only [ 96.270546][ T4813] Remounting filesystem read-only [ 96.277174][ T4831] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,noinit_itable,orlov,,errors=continue. Quota mode: writeback. [ 96.281467][ T4813] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 96.304298][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.343036][ T4836] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 96.372503][ T4855] loop1: detected capacity change from 0 to 256 [ 96.476729][ T4857] x_tables: duplicate underflow at hook 3 [ 96.493685][ T4855] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.515306][ T4855] FAT-fs (loop1): Filesystem has been set read-only [ 96.570220][ T4855] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.677525][ T4861] netlink: 92 bytes leftover after parsing attributes in process `syz.4.142'. [ 96.679940][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.811586][ T4861] loop4: detected capacity change from 0 to 4096 [ 96.858610][ T4861] EXT4-fs (loop4): Test dummy encryption mode enabled [ 96.865846][ T4861] EXT4-fs (loop4): Ignoring removed orlov option [ 96.962860][ T4855] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.976872][ T4861] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,noinit_itable,orlov,,errors=continue. Quota mode: writeback. [ 97.301831][ T26] audit: type=1800 audit(1779745102.271:6): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.137" name="file1" dev="loop1" ino=1048599 res=0 errno=0 [ 97.321649][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.669904][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 97.790015][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.835936][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.933516][ T4855] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.949410][ T4855] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.961215][ T4855] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.980510][ T24] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 97.989958][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.999639][ T24] usb 4-1: config 0 descriptor?? [ 98.207073][ T4872] overlayfs: conflicting lowerdir path [ 98.724757][ T1325] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.948670][ T4878] IPv6: addrconf: prefix option has invalid lifetime [ 98.969979][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 98.983506][ T4878] ieee802154 phy0 wpan0: encryption failed: -90 [ 99.120124][ T1325] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 99.128487][ T1325] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 99.145834][ T1325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 99.155153][ T1325] usb 1-1: config 1 has no interface number 0 [ 99.161544][ T1325] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.172959][ T1325] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 99.186226][ T1325] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 99.195626][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.210807][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 99.217780][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.234589][ T24] usb 4-1: USB disconnect, device number 7 [ 99.253646][ T1325] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 99.369871][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.619971][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 99.764393][ T13] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 99.779190][ T4894] loop3: detected capacity change from 0 to 4096 [ 99.791102][ T13] usb 3-1: config 0 has no interface number 0 [ 99.797436][ T13] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 99.820839][ T1325] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 99.821846][ T4892] loop4: detected capacity change from 0 to 8192 [ 99.864471][ T13] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 99.885098][ T4892] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 99.893425][ T4894] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 99.910344][ T4892] REISERFS (device loop4): using ordered data mode [ 99.921233][ T4897] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.921363][ T4892] reiserfs: using flush barriers [ 99.949904][ T4894] Remounting filesystem read-only [ 99.954965][ T4894] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 99.978047][ T4892] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.987285][ T4898] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 99.995660][ T4892] REISERFS (device loop4): checking transaction log (loop4) [ 100.022335][ T4894] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 100.077106][ T4625] usb 1-1: USB disconnect, device number 6 [ 100.090330][ T13] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 100.091489][ T4625] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 100.099634][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.099657][ T13] usb 3-1: Product: syz [ 100.099672][ T13] usb 3-1: Manufacturer: syz [ 100.099686][ T13] usb 3-1: SerialNumber: syz [ 100.116286][ T13] usb 3-1: config 0 descriptor?? [ 100.185810][ T4892] REISERFS (device loop4): Using r5 hash to sort names [ 100.221356][ T4892] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 100.268146][ T4900] loop1: detected capacity change from 0 to 4096 [ 100.293927][ T4900] ntfs3: Unknown parameter 'D' [ 100.343599][ T26] audit: type=1804 audit(1779745105.341:7): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.151" name="/newroot/33/file7/file0" dev="loop4" ino=2 res=1 errno=0 [ 100.405245][ T4880] loop2: detected capacity change from 0 to 128 [ 100.484708][ T4880] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 100.575134][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop2 [ 100.709804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 100.729801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.809828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 100.962442][ T13] radio-si470x 3-1:0.35: this is not a si470x device. [ 101.029949][ T13] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 101.063634][ T4914] loop0: detected capacity change from 0 to 256 [ 101.129620][ T4914] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.183403][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 101.204108][ T4914] FAT-fs (loop0): Filesystem has been set read-only [ 101.219522][ T4914] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.307896][ T4914] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.320000][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 101.328508][ T26] audit: type=1800 audit(1779745106.321:8): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.158" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 101.346344][ T13] usb 3-1: USB disconnect, device number 6 [ 101.564833][ T4914] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.575462][ T4914] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.587514][ T4914] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.710491][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 101.747928][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 101.760171][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 101.769455][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.877481][ T4929] loop0: detected capacity change from 0 to 4096 [ 101.931340][ T4929] ntfs: (device loop0): parse_options(): Unrecognized mount option mft_Zone_multiplier. [ 101.964270][ T4929] ntfs: (device loop0): parse_options(): Unrecognized mount option disable_sparse}yes. [ 102.066875][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.179892][ T4629] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 102.259931][ T13] usb 5-1: device descriptor read/64, error -71 [ 102.366034][ T4939] loop0: detected capacity change from 0 to 32768 [ 102.380049][ T4629] usb 4-1: device descriptor read/64, error -71 [ 102.439703][ T4939] XFS (loop0): Mounting V5 Filesystem [ 102.498067][ T4939] XFS (loop0): Ending clean mount [ 102.543465][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.612934][ T4945] loop2: detected capacity change from 0 to 32768 [ 102.628793][ T4195] XFS (loop0): Unmounting Filesystem [ 102.634315][ T4945] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.168 (4945) [ 102.649905][ T4629] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 102.714947][ T4945] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 102.724288][ T4945] BTRFS info (device loop2): setting nodatasum [ 102.730862][ T4945] BTRFS info (device loop2): force zlib compression, level 3 [ 102.738463][ T4945] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 102.748166][ T4945] BTRFS info (device loop2): use lzo compression, level 0 [ 102.757694][ T4945] BTRFS info (device loop2): turning on flush-on-commit [ 102.765084][ T4945] BTRFS info (device loop2): enabling auto defrag [ 102.781933][ T4945] BTRFS info (device loop2): max_inline at 4096 [ 102.788229][ T4945] BTRFS info (device loop2): using free space tree [ 102.791125][ T13] usb 5-1: device descriptor read/64, error -71 [ 102.805336][ T4945] BTRFS info (device loop2): has skinny extents [ 102.860017][ T4629] usb 4-1: device descriptor read/64, error -71 [ 102.930232][ T13] usb usb5-port1: attempt power cycle [ 102.968129][ T4945] BTRFS info (device loop2): enabling ssd optimizations [ 102.980358][ T4629] usb usb4-port1: attempt power cycle [ 103.335727][ T4983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 103.379909][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 103.390310][ T4629] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 103.461665][ T4983] loop2: detected capacity change from 0 to 4096 [ 103.478637][ T4983] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.486000][ T4983] EXT4-fs (loop2): Ignoring removed orlov option [ 103.500518][ T4629] usb 4-1: device descriptor read/8, error -71 [ 103.547653][ T4983] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,noinit_itable,orlov,,errors=continue. Quota mode: writeback. [ 103.781245][ T4629] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 103.890405][ T4629] usb 4-1: device descriptor read/8, error -71 [ 104.011140][ T4629] usb usb4-port1: unable to enumerate USB device [ 104.232908][ T24] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 104.246697][ T24] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 104.280002][ T13] usb 5-1: device descriptor read/8, error -71 [ 104.309440][ T24] input: failed to attach handler kbd to device input6, error: -5 [ 104.336215][ T24] usb 2-1: USB disconnect, device number 4 [ 104.449423][ T4990] loop1: detected capacity change from 0 to 256 [ 104.492961][ T4990] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.514004][ T4990] FAT-fs (loop1): Filesystem has been set read-only [ 104.522272][ T4990] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.552750][ T4990] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.563063][ T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.589955][ T26] audit: type=1800 audit(1779745109.581:9): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 104.645941][ T4990] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.656278][ T4990] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.668042][ T4990] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.679937][ T13] usb 5-1: device descriptor read/8, error -71 [ 104.814825][ T13] usb usb5-port1: unable to enumerate USB device [ 104.826223][ T5005] loop4: detected capacity change from 0 to 4096 [ 104.841282][ T4990] syz.1.173 (4990) used greatest stack depth: 20336 bytes left [ 104.868890][ T5006] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.892006][ T5005] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 104.913653][ T5005] Remounting filesystem read-only [ 104.918807][ T5005] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 104.931374][ T5005] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 104.963691][ T5005] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 105.204971][ T5021] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.548431][ T5024] loop1: detected capacity change from 0 to 512 [ 105.578112][ T5014] loop3: detected capacity change from 0 to 32768 [ 105.635492][ T5024] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.715882][ T5018] loop4: detected capacity change from 0 to 32768 [ 105.765253][ T5014] JBD2: Ignoring recovery information on journal [ 105.803749][ T5014] JBD2: corrupted journal superblock [ 105.813447][ T5014] JBD2: error -117 scanning journal [ 105.832155][ T5014] (syz.3.179,5014,1):ocfs2_journal_wipe:1154 ERROR: status = -117 [ 105.846267][ T5014] (syz.3.179,5014,1):ocfs2_check_volume:2424 ERROR: status = -117 [ 105.860175][ T5018] XFS (loop4): Mounting V5 Filesystem [ 105.878654][ T5014] (syz.3.179,5014,1):ocfs2_check_volume:2493 ERROR: status = -117 [ 105.887302][ T5014] (syz.3.179,5014,1):ocfs2_mount_volume:1824 ERROR: status = -117 [ 105.911459][ T5014] (syz.3.179,5014,1):ocfs2_fill_super:1177 ERROR: status = -117 [ 106.041750][ T5040] loop0: detected capacity change from 0 to 512 [ 106.159590][ T5018] XFS (loop4): Ending clean mount [ 106.206700][ T5040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817e02c, mo2=0002] [ 106.214864][ T5040] System zones: 1-12 [ 106.220448][ T5040] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.185: invalid indirect mapped block 8 (level 2) [ 106.415955][ T5040] EXT4-fs (loop0): Remounting filesystem read-only [ 106.457852][ T5018] XFS (loop4): Quotacheck needed: Please wait. [ 106.659702][ T5040] EXT4-fs (loop0): 1 truncate cleaned up [ 106.769963][ T5040] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,grpquota,usrjquota=,max_dir_size_kb=0x0000000000000009,errors=remount-ro,init_itable,noauto_da_alloc,. Quota mode: writeback. [ 106.849905][ T5018] XFS (loop4): Quotacheck: Done. [ 106.983706][ T5056] sp0: Synchronizing with TNC [ 107.010255][ T4191] XFS (loop4): Unmounting Filesystem [ 107.097178][ T5040] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 107.264551][ T5050] loop3: detected capacity change from 0 to 4096 [ 107.546957][ T5066] loop1: detected capacity change from 0 to 4096 [ 107.573493][ T5068] loop0: detected capacity change from 0 to 512 [ 107.790273][ T5068] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #17: comm syz.0.193: corrupted in-inode xattr [ 107.809176][ T5078] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.024906][ T5066] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 108.071258][ T5068] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.193: couldn't read orphan inode 17 (err -117) [ 108.393411][ T5068] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.404487][ T5066] Remounting filesystem read-only [ 108.409537][ T5066] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 108.490724][ T5086] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 108.581722][ T5066] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 109.099886][ T4978] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 109.183290][ T5110] loop2: detected capacity change from 0 to 256 [ 109.213303][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.244462][ T5110] FAT-fs (loop2): Filesystem has been set read-only [ 109.255401][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.278626][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.303321][ T5096] loop4: detected capacity change from 0 to 32768 [ 109.314712][ T5096] XFS: ikeep mount option is deprecated. [ 109.322027][ T5096] XFS: attr2 mount option is deprecated. [ 109.328793][ T5096] XFS: ikeep mount option is deprecated. [ 109.335359][ T5096] XFS: noattr2 mount option is deprecated. [ 109.340207][ T26] audit: type=1800 audit(1779745114.341:10): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 109.342882][ T5096] XFS (loop4): attr2 and noattr2 cannot both be specified. [ 109.361198][ T4978] usb 2-1: Invalid ep0 maxpacket: 64 [ 109.529919][ T4978] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 109.548921][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.585747][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.589755][ T5120] loop0: detected capacity change from 0 to 8192 [ 109.612392][ T5110] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.626199][ T5120] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 109.641358][ T5120] REISERFS (device loop0): using ordered data mode [ 109.649128][ T5120] reiserfs: using flush barriers [ 109.675499][ T5120] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.770315][ T5120] REISERFS (device loop0): checking transaction log (loop0) [ 109.780205][ T4978] usb 2-1: Invalid ep0 maxpacket: 64 [ 109.786669][ T4978] usb usb2-port1: attempt power cycle [ 109.896801][ T5122] loop4: detected capacity change from 0 to 32768 [ 109.907053][ T5127] loop3: detected capacity change from 0 to 4096 [ 109.917222][ T5129] loop2: detected capacity change from 0 to 128 [ 109.970052][ T5122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.208 (5122) [ 110.006706][ T5127] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 110.023919][ T5130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.067343][ T5122] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 110.082504][ T5120] REISERFS (device loop0): Using r5 hash to sort names [ 110.105785][ T5131] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 110.127402][ T5120] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 110.129369][ T5122] BTRFS info (device loop4): using free space tree [ 110.149460][ T5127] Remounting filesystem read-only [ 110.181562][ T5127] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 110.206665][ T5122] BTRFS info (device loop4): has skinny extents [ 110.226626][ T4978] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 110.228098][ T5133] loop2: detected capacity change from 0 to 1024 [ 110.330063][ T4978] usb 2-1: Invalid ep0 maxpacket: 64 [ 110.406640][ T5133] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 110.478270][ T5122] BTRFS info (device loop4): enabling ssd optimizations [ 110.485500][ T4978] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 110.530090][ T4263] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.580360][ T4978] usb 2-1: Invalid ep0 maxpacket: 64 [ 110.587002][ T4978] usb usb2-port1: unable to enumerate USB device [ 110.920550][ T4263] usb 1-1: config 227 has an invalid interface number: 20 but max is 0 [ 110.928904][ T4263] usb 1-1: config 227 has no interface number 0 [ 111.009962][ T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 111.912122][ T4263] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 111.923490][ T4263] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024 [ 111.935520][ T4263] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024 [ 111.946020][ T4263] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 11 [ 111.959518][ T4263] usb 1-1: config 227 interface 20 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 111.975527][ T4263] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0xA has invalid maxpacket 32 [ 111.995170][ T4263] usb 1-1: config 227 interface 20 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 112.009049][ T4263] usb 1-1: config 227 interface 20 has no altsetting 0 [ 112.157996][ T5167] ODEBUG: Out of memory. ODEBUG disabled [ 112.160155][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 112.230034][ T4263] usb 1-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b [ 112.254733][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.283328][ T4263] usb 1-1: Product: syz [ 112.287650][ T4263] usb 1-1: Manufacturer: syz [ 112.295593][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.311432][ T4263] usb 1-1: SerialNumber: syz [ 112.316162][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 112.348695][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 112.361161][ T5120] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.368341][ T5120] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.377870][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 112.413285][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.430895][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.444308][ T4263] usb 1-1: can't set config #227, error -71 [ 112.461516][ T4263] usb 1-1: USB disconnect, device number 7 [ 112.467501][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.494735][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.513451][ T13] usb 4-1: config 0 descriptor?? [ 112.826135][ T13] rc_core: IR keymap rc-hauppauge not found [ 112.865992][ T13] Registered IR keymap rc-empty [ 112.878780][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.916427][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.961920][ T13] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 112.986527][ T13] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 113.408609][ T5185] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 113.521131][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.569920][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.609905][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.650537][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.940147][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.478186][ T5176] loop1: detected capacity change from 0 to 32768 [ 114.506705][ T5197] loop2: detected capacity change from 0 to 4096 [ 114.515232][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.535342][ T5176] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.219 (5176) [ 114.584953][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.602766][ T5200] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.625007][ T5197] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 114.632733][ T5199] loop3: detected capacity change from 0 to 512 [ 114.679917][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.684330][ T5176] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 114.698972][ T5176] BTRFS info (device loop1): using free space tree [ 114.720448][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.727862][ T5176] BTRFS info (device loop1): has skinny extents [ 114.766035][ T13] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.800408][ T5197] Remounting filesystem read-only [ 114.806368][ T5197] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 114.862168][ T13] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 114.867385][ T5209] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 114.870649][ T13] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 114.895753][ T13] usb 4-1: USB disconnect, device number 12 [ 114.954555][ T5211] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 115.039052][ T5199] EXT4-fs (loop3): 1 orphan inode deleted [ 115.209988][ T5199] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 115.225856][ T5199] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.325668][ T5234] loop4: detected capacity change from 0 to 256 [ 115.427960][ T5199] [ 115.430326][ T5199] ====================================================== [ 115.437341][ T5199] WARNING: possible circular locking dependency detected [ 115.444370][ T5199] syzkaller #0 Not tainted [ 115.448783][ T5199] ------------------------------------------------------ [ 115.455792][ T5199] syz.3.225/5199 is trying to acquire lock: [ 115.461676][ T5199] ffff888074bac840 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x33c/0x1b30 [ 115.471187][ T5199] [ 115.471187][ T5199] but task is already holding lock: [ 115.478554][ T5199] ffff888052e54208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 115.488151][ T5199] [ 115.488151][ T5199] which lock already depends on the new lock. [ 115.488151][ T5199] [ 115.498554][ T5199] [ 115.498554][ T5199] the existing dependency chain (in reverse order) is: [ 115.506481][ T5176] BTRFS error (device loop1): open_ctree failed: -12 [ 115.507562][ T5199] [ 115.507562][ T5199] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 115.522298][ T5199] down_read+0x44/0x2e0 [ 115.526981][ T5199] v2_read_dquot+0x4a/0x110 [ 115.531991][ T5199] dquot_acquire+0x152/0x520 [ 115.537092][ T5199] ext4_acquire_dquot+0x2d9/0x4a0 [ 115.542635][ T5199] dqget+0x778/0xeb0 [ 115.547037][ T5199] __dquot_initialize+0x3c3/0xcd0 [ 115.552567][ T5199] ext4_process_orphan+0x54/0x300 [ 115.558102][ T5199] ext4_orphan_cleanup+0xad2/0x1320 [ 115.563809][ T5199] ext4_fill_super+0x8d6e/0x94f0 [ 115.569257][ T5199] mount_bdev+0x287/0x3c0 [ 115.574093][ T5199] legacy_get_tree+0xe6/0x180 [ 115.579274][ T5199] vfs_get_tree+0x88/0x270 [ 115.584192][ T5199] do_new_mount+0x24a/0xa40 [ 115.589196][ T5199] __se_sys_mount+0x2e3/0x3d0 [ 115.594373][ T5199] do_syscall_64+0x4c/0xa0 [ 115.599291][ T5199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.605687][ T5199] [ 115.605687][ T5199] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 115.613311][ T5199] __mutex_lock_common+0x1e3/0x2400 [ 115.619019][ T5199] mutex_lock_nested+0x17/0x20 [ 115.624285][ T5199] dquot_commit+0x5a/0x410 [ 115.629209][ T5199] ext4_write_dquot+0x1f0/0x360 [ 115.634564][ T5199] mark_all_dquot_dirty+0xf9/0x400 [ 115.640177][ T5199] __dquot_alloc_space+0x5d0/0xe20 [ 115.645787][ T5199] ext4_mb_new_blocks+0xfb1/0x4820 [ 115.651401][ T5199] ext4_ext_map_blocks+0x18ab/0x65e0 [ 115.657188][ T5199] ext4_map_blocks+0x98e/0x1b30 [ 115.662542][ T5199] ext4_getblk+0x176/0x670 [ 115.667460][ T5199] ext4_bread+0x26/0x180 [ 115.672203][ T5199] ext4_append+0x2be/0x560 [ 115.677120][ T5199] ext4_init_new_dir+0x2a2/0x940 [ 115.682559][ T5199] ext4_mkdir+0x4fb/0xce0 [ 115.687388][ T5199] vfs_mkdir+0x387/0x570 [ 115.692134][ T5199] do_mkdirat+0x1df/0x5b0 [ 115.696968][ T5199] __x64_sys_mkdirat+0x85/0x90 [ 115.702235][ T5199] do_syscall_64+0x4c/0xa0 [ 115.707152][ T5199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.713547][ T5199] [ 115.713547][ T5199] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 115.721349][ T5199] __lock_acquire+0x2c42/0x7d10 [ 115.726704][ T5199] lock_acquire+0x19e/0x400 [ 115.731708][ T5199] down_read+0x44/0x2e0 [ 115.736367][ T5199] ext4_map_blocks+0x33c/0x1b30 [ 115.741716][ T5199] ext4_getblk+0x176/0x670 [ 115.746631][ T5199] ext4_bread+0x26/0x180 [ 115.751375][ T5199] ext4_quota_write+0x236/0x580 [ 115.756728][ T5199] get_free_dqblk+0x387/0x7d0 [ 115.761905][ T5199] do_insert_tree+0xc9a/0x1970 [ 115.767170][ T5199] do_insert_tree+0x5b1/0x1970 [ 115.772434][ T5199] do_insert_tree+0x5b1/0x1970 [ 115.777703][ T5199] do_insert_tree+0x5b1/0x1970 [ 115.782968][ T5199] qtree_write_dquot+0x361/0x4b0 [ 115.788406][ T5199] v2_write_dquot+0x108/0x190 [ 115.793584][ T5199] dquot_acquire+0x2d5/0x520 [ 115.798676][ T5199] ext4_acquire_dquot+0x2d9/0x4a0 [ 115.804204][ T5199] dqget+0x778/0xeb0 [ 115.808600][ T5199] __dquot_initialize+0x333/0xcd0 [ 115.814127][ T5199] ext4_create+0x92/0x470 [ 115.818957][ T5199] path_openat+0x11db/0x2fa0 [ 115.824049][ T5199] do_filp_open+0x1e2/0x410 [ 115.829053][ T5199] do_sys_openat2+0x150/0x4b0 [ 115.834230][ T5199] __x64_sys_openat+0x135/0x160 [ 115.839578][ T5199] do_syscall_64+0x4c/0xa0 [ 115.844494][ T5199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.850888][ T5199] [ 115.850888][ T5199] other info that might help us debug this: [ 115.850888][ T5199] [ 115.861093][ T5199] Chain exists of: [ 115.861093][ T5199] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 115.861093][ T5199] [ 115.874718][ T5199] Possible unsafe locking scenario: [ 115.874718][ T5199] [ 115.882143][ T5199] CPU0 CPU1 [ 115.887483][ T5199] ---- ---- [ 115.892824][ T5199] lock(&s->s_dquot.dqio_sem); [ 115.897655][ T5199] lock(&dquot->dq_lock); [ 115.904568][ T5199] lock(&s->s_dquot.dqio_sem); [ 115.911933][ T5199] lock(&ei->i_data_sem/2); [ 115.916507][ T5199] [ 115.916507][ T5199] *** DEADLOCK *** [ 115.916507][ T5199] [ 115.924624][ T5199] 4 locks held by syz.3.225/5199: [ 115.929626][ T5199] #0: ffff888052e54460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 115.938745][ T5199] #1: ffff888074b0c9b8 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: path_openat+0x803/0x2fa0 [ 115.948907][ T5199] #2: ffff88806026a7a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 115.958280][ T5199] #3: ffff888052e54208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 115.968271][ T5199] [ 115.968271][ T5199] stack backtrace: [ 115.974150][ T5199] CPU: 0 PID: 5199 Comm: syz.3.225 Not tainted syzkaller #0 [ 115.981415][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.991586][ T5199] Call Trace: [ 115.994867][ T5199] [ 115.997791][ T5199] dump_stack_lvl+0x188/0x250 [ 116.002461][ T5199] ? load_image+0x400/0x400 [ 116.006955][ T5199] ? show_regs_print_info+0x20/0x20 [ 116.012161][ T5199] ? print_circular_bug+0x12b/0x1a0 [ 116.017361][ T5199] check_noncircular+0x296/0x330 [ 116.022295][ T5199] ? add_chain_block+0x940/0x940 [ 116.027230][ T5199] ? lockdep_lock+0xf1/0x1f0 [ 116.031813][ T5199] ? mark_lock+0x94/0x320 [ 116.036136][ T5199] ? mark_lock+0x94/0x320 [ 116.040459][ T5199] __lock_acquire+0x2c42/0x7d10 [ 116.045314][ T5199] ? __lock_acquire+0x13bc/0x7d10 [ 116.050325][ T5199] ? verify_lock_unused+0x140/0x140 [ 116.055513][ T5199] ? verify_lock_unused+0x140/0x140 [ 116.060710][ T5199] lock_acquire+0x19e/0x400 [ 116.065201][ T5199] ? ext4_map_blocks+0x33c/0x1b30 [ 116.070214][ T5199] ? __might_sleep+0xf0/0xf0 [ 116.074896][ T5199] ? read_lock_is_recursive+0x10/0x10 [ 116.080271][ T5199] ? rcu_is_watching+0x11/0xa0 [ 116.085029][ T5199] down_read+0x44/0x2e0 [ 116.089183][ T5199] ? ext4_map_blocks+0x33c/0x1b30 [ 116.094199][ T5199] ext4_map_blocks+0x33c/0x1b30 [ 116.099041][ T5199] ? _raw_spin_unlock+0x40/0x40 [ 116.103873][ T5199] ? ext4_issue_zeroout+0x250/0x250 [ 116.109053][ T5199] ? stack_trace_save+0xa6/0xf0 [ 116.113887][ T5199] ? stack_depot_save+0x404/0x440 [ 116.118903][ T5199] ext4_getblk+0x176/0x670 [ 116.123316][ T5199] ? do_insert_tree+0xc9a/0x1970 [ 116.128261][ T5199] ? do_insert_tree+0x5b1/0x1970 [ 116.133214][ T5199] ? ext4_get_block_unwritten+0x30/0x30 [ 116.138766][ T5199] ? path_openat+0x11db/0x2fa0 [ 116.143537][ T5199] ? do_syscall_64+0x4c/0xa0 [ 116.148119][ T5199] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.154185][ T5199] ext4_bread+0x26/0x180 [ 116.158420][ T5199] ext4_quota_write+0x236/0x580 [ 116.163260][ T5199] ? ext4_quota_read+0x3a0/0x3a0 [ 116.168191][ T5199] get_free_dqblk+0x387/0x7d0 [ 116.172852][ T5199] ? ext4_quota_read+0x3a0/0x3a0 [ 116.177776][ T5199] do_insert_tree+0xc9a/0x1970 [ 116.182533][ T5199] do_insert_tree+0x5b1/0x1970 [ 116.187292][ T5199] do_insert_tree+0x5b1/0x1970 [ 116.192052][ T5199] do_insert_tree+0x5b1/0x1970 [ 116.196811][ T5199] qtree_write_dquot+0x361/0x4b0 [ 116.201740][ T5199] v2_write_dquot+0x108/0x190 [ 116.206406][ T5199] dquot_acquire+0x2d5/0x520 [ 116.210990][ T5199] ext4_acquire_dquot+0x2d9/0x4a0 [ 116.216010][ T5199] dqget+0x778/0xeb0 [ 116.219899][ T5199] __dquot_initialize+0x333/0xcd0 [ 116.224913][ T5199] ? dquot_initialize+0x20/0x20 [ 116.229750][ T5199] ? end_current_label_crit_section+0x14b/0x170 [ 116.235983][ T5199] ? common_perm+0x15d/0x1b0 [ 116.240570][ T5199] ext4_create+0x92/0x470 [ 116.244899][ T5199] ? ext4_lookup+0x960/0x960 [ 116.249477][ T5199] ? inode_permission+0xef/0x480 [ 116.254397][ T5199] ? bpf_lsm_inode_create+0x5/0x10 [ 116.259492][ T5199] ? security_inode_create+0xb3/0x100 [ 116.264850][ T5199] ? ext4_lookup+0x960/0x960 [ 116.269425][ T5199] path_openat+0x11db/0x2fa0 [ 116.274018][ T5199] ? do_filp_open+0x410/0x410 [ 116.278686][ T5199] do_filp_open+0x1e2/0x410 [ 116.283176][ T5199] ? vfs_tmpfile+0x300/0x300 [ 116.287761][ T5199] ? _raw_spin_unlock+0x24/0x40 [ 116.292596][ T5199] ? alloc_fd+0x598/0x630 [ 116.296912][ T5199] do_sys_openat2+0x150/0x4b0 [ 116.301579][ T5199] ? __lock_acquire+0x7d10/0x7d10 [ 116.306595][ T5199] ? do_sys_open+0xe0/0xe0 [ 116.310995][ T5199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 116.316969][ T5199] ? lock_chain_count+0x20/0x20 [ 116.321812][ T5199] ? vtime_user_exit+0x2c8/0x3e0 [ 116.326736][ T5199] __x64_sys_openat+0x135/0x160 [ 116.331572][ T5199] do_syscall_64+0x4c/0xa0 [ 116.335980][ T5199] ? clear_bhb_loop+0x30/0x80 [ 116.340646][ T5199] ? clear_bhb_loop+0x30/0x80 [ 116.345310][ T5199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.351200][ T5199] RIP: 0033:0x7fb7a646ae59 [ 116.355603][ T5199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.375196][ T5199] RSP: 002b:00007fb7a46c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.383595][ T5199] RAX: ffffffffffffffda RBX: 00007fb7a66e3fa0 RCX: 00007fb7a646ae59 [ 116.391550][ T5199] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 116.399506][ T5199] RBP: 00007fb7a6500d6f R08: 0000000000000000 R09: 0000000000000000 [ 116.407461][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.415417][ T5199] R13: 00007fb7a66e4038 R14: 00007fb7a66e3fa0 R15: 00007ffda61fd7d8 [ 116.423380][ T5199] [ 116.426477][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.450954][ T5234] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.481063][ T5234] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 116.502743][ T5234] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 116.504013][ T4494] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4494) [ 116.746034][ T5247] loop2: detected capacity change from 0 to 4096 [ 116.862993][ T5247] EXT4-fs (loop2): Test dummy encryption mode enabled [ 116.870523][ T5247] EXT4-fs (loop2): Ignoring removed orlov option [ 116.950414][ T5247] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,noinit_itable,orlov,,errors=continue. Quota mode: writeback. [ 117.514545][ T5241] loop0: detected capacity change from 0 to 8192 [ 117.556655][ T5241] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 117.569970][ T5241] REISERFS (device loop0): using ordered data mode [ 117.577334][ T5241] reiserfs: using flush barriers [ 117.606218][ T5241] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.632687][ T5241] REISERFS (device loop0): checking transaction log (loop0) [ 117.711863][ T5241] REISERFS (device loop0): Using r5 hash to sort names [ 117.718894][ T5241] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 117.793406][ T26] audit: type=1804 audit(1779745122.791:11): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.231" name="/newroot/43/file7/file0" dev="loop0" ino=2 res=1 errno=0