last executing test programs: 20.435965381s ago: executing program 2 (id=237): open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x1, 0x19e, &(0x7f0000000440)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) 18.853782851s ago: executing program 2 (id=240): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r1 = syz_open_dev$dmmidi(&(0x7f00000002c0), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000080)={0x1, 0xfffffffd, 0x0, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0), 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PPPIOCSPASS(r2, 0x40087447, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0xf, 0x8, 0x0, 0x21b7559e}]}) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x24000840) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="9de6cf1d006947d9e7d46284fd2be59a7d9cea8083739a29a61ce0caf8307c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) preadv2(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1, 0x5, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000480), 0x0) 17.937529574s ago: executing program 4 (id=244): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006800fd"], 0x18}}, 0xc0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 15.928275585s ago: executing program 4 (id=248): r0 = syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000340)='./file2\x00', 0x80400b, &(0x7f0000000000)=ANY=[], 0x0, 0x24a, &(0x7f0000001e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008811) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0x9, 0x100a, 0x7, 0x8, 0x2, 0x3}}) shmctl$IPC_RMID(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"22df0d8c36f83edc2093eda6a04fc598", 0x0, 0x0, {0xffffffffffff57ce, 0x4023}, {0x7, 0x100}, 0x1007, [0x3, 0x3, 0xb44, 0xa10, 0x9, 0x5, 0x7fffffffffffffff, 0x73, 0xffff, 0x3, 0x9d33, 0x5, 0xf, 0xffffffffffffff78, 0x5, 0xc680]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000440)={[{@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@journal_async_commit}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}], [{@fsname={'fsname', 0x3d, 'min_batch_time'}}, {@subj_role={'subj_role', 0x3d, 'lazytime'}}, {@euid_lt={'euid<', 0xee01}}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c002038000480"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x82) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x6) ioctl$FITRIM(r7, 0xc0185879, 0x0) prlimit64(r1, 0xf, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x80010, 0xffffffffffffffff, 0x3000) read(r0, &(0x7f0000000e80)=""/4096, 0x1000) listxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0xc3) 14.847316783s ago: executing program 2 (id=249): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551f030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a", 0x1ff, r2) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) 14.821344833s ago: executing program 1 (id=250): open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x1, 0x19e, &(0x7f0000000440)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) 13.271010263s ago: executing program 4 (id=251): unshare(0x22020400) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x80000001, 0x162842) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 13.026089949s ago: executing program 2 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1c3443, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0x2, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x4, 0x2, 0xc, 0x100000000, 0xfffffffffffffffb, 0x5, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = eventfd(0x1000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r5, 0x5, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x4, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1002, 0xc, 0x3, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) 12.030346504s ago: executing program 4 (id=253): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x4441, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC], 0x0, 0x31d, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) r4 = socket(0x1, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) waitid(0x2, r2, 0x0, 0x8, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x22020600) 11.951825026s ago: executing program 0 (id=254): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x6, 0xe9, 0x8, 0x402, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r4, 0x8008640b, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200002, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11.535410237s ago: executing program 0 (id=255): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) r4 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 10.407786245s ago: executing program 0 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a3200000000050004000100000014000780050015000a0000000800114000000046050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x84000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=':', 0x1}], 0x1}, 0x40095) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x2) fcntl$dupfd(r1, 0x0, r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000006c0)=0x1, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000000c0)={0x33}, 0x8) 9.940138978s ago: executing program 1 (id=258): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006800fd"], 0x18}}, 0xc0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 9.251475885s ago: executing program 3 (id=259): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x7, 0x4) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x1400, 0x42474752, 0x0, @discrete={0x9, 0x100}}) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x802, 0x0) r5 = epoll_create1(0x80000) close(r4) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r6, 0x40044591, 0x0) inotify_init() epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x1c0002009}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000003c0)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'team_slave_0\x00'}}) 8.373805657s ago: executing program 0 (id=260): unshare(0x22020400) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x80000001, 0x162842) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 8.373275897s ago: executing program 4 (id=261): r0 = syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000340)='./file2\x00', 0x80400b, &(0x7f0000000000)=ANY=[], 0x0, 0x24a, &(0x7f0000001e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008811) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0x9, 0x100a, 0x7, 0x8, 0x2, 0x3}}) shmctl$IPC_RMID(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"22df0d8c36f83edc2093eda6a04fc598", 0x0, 0x0, {0xffffffffffff57ce, 0x4023}, {0x7, 0x100}, 0x1007, [0x3, 0x3, 0xb44, 0xa10, 0x9, 0x5, 0x7fffffffffffffff, 0x73, 0xffff, 0x3, 0x9d33, 0x5, 0xf, 0xffffffffffffff78, 0x5, 0xc680]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000440)={[{@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@journal_async_commit}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}], [{@fsname={'fsname', 0x3d, 'min_batch_time'}}, {@subj_role={'subj_role', 0x3d, 'lazytime'}}, {@euid_lt={'euid<', 0xee01}}]}, 0xfe, 0x553, &(0x7f0000000980)="$eJzs3U1vG0UfAPD/Ok7f0udpKlUVcECReqCo1GkSXorEoRwRVFSCe7GSbVTFqavYqZpQifZAL1xQhYQQlRAfgDvHii/Ap+iBShWqIjhwMVpnnbqNnbiJ27j495M2mdkdZ3Y8O+MZj50NYGhNZD8KEa9GxLdJxJG2Y8XID06sp1t7dGM225JoND77M4kk39dKn+S/x/LIKxHx29cRpwqb862trC6UK5V0KY9P1hevTtZWVk9fXizPp/PplemZmbPvzEy//967fSvrmxf+/uHTex+d/ebE2ve/PDh6J4lzcTg/1l6OXbjZHpmIifw5GY1zTyWc6kNmgyTZ6xNgR0bydj4aWR9wJEbyVg/8930VEQ1gSCXaPwyp1jigNbfv0zz4pfHww/UJ0ObyF9ffG4kDzbnRobXkiZlRNt8d70P+WR6//nH3TrZF/96HANjWzVsRcaZY3Nz/JXn/t3NnekjzdB76P3hx7mXjn7c6jX8KG+Of6DD+GevQdndi+/ZfeNCHbLrKxn8fdBz/bixajY/ksf81x3yjyaXLlTTr2/4fESdjdH8W32o95+za/Ua3Y+3jv2zL8m+NBfPzeFDc/+Rj5sr18m7K3O7hrYjXOo5/k436TzrUf/Z8XOgxj+Pp3de7Hdu+/M9X4+eINzrW/+MVrWTr9cnJ5vUw2boqNvvr9vHfu+W/1+XP6v/Q1uUfT9rXa2vPnsdPB/5Jux3b6fW/L/m8Gd6X77terteXpiL2JZ9s3j/9+LGteCt9Vv6TJ7bu/zpd/wcj4osey3/72O2uSQeh/ueeqf6fPXD/4y9/7JZ/b/X/djN0Mt/TS//X6wnu5rkDAAAAAACAQVOIiMORFEob4UKhVFr/fMexOFSoVGv1U5eqy1fmovld2fEYLbRWusfaPg8xlX8ethWffio+ExFHI+K7kYPNeGm2Wpnb68IDAAAAAAAAAAAAAAAAAADAgBjr9P3/1v9bH9njkwOeP7f8huG1bfvvx52egIHk9R+Gl/YPw0v7h+Gl/cPwKq7fzxgYQl7/YXhp/zC8tH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqwvnz2dbY+3RjdksPndtZXmheu30XFpbKC0uz5Zmq0tXS/PV6nwlLc1WF7f7e5Vq9erUdCxfn6yntfpkbWX14mJ1+Ur94uXF8nx6MR19IaUCAAAAAAAAAAAAAAAAAACAl0ttZXWhXKmkSwICOwoUB+M0BPoc2OueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+zcAAP//eIg3rQ==") write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c002038000480"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x82) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x6) prlimit64(r1, 0xf, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x80010, 0xffffffffffffffff, 0x3000) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000006c0)={0x0, @bt={0x72b, 0x1, 0x1, 0x2, 0x0, 0x4, 0xa949, 0x1, 0xf59, 0x2, 0xfffffffd, 0x1, 0x4, 0x100004, 0x6, 0x26, {0x2400000, 0x8}, 0x5, 0x7}}) read(r0, &(0x7f0000000e80)=""/4096, 0x1000) listxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0xc3) 8.354602528s ago: executing program 1 (id=262): syz_open_dev$hidraw(&(0x7f00000000c0), 0x785, 0x20000) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x6, 0x280000) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x4000031, 0x0}) splice(0xffffffffffffffff, &(0x7f0000000240)=0xfffffffffffffff7, r0, &(0x7f0000000400)=0x7, 0x9, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r2 = socket(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 6.562603574s ago: executing program 0 (id=263): unshare(0x22020400) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x80000001, 0x162842) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 5.793581653s ago: executing program 1 (id=264): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) r4 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnREilR1vfZ5G935r2Z92bWMzTBNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjfffnciefSg24FAHA/XRj76omT7v8A8Ei55P//AQAAAAAAAAAAAABgv0tRxOORYu7CWpqo3nc1znfqN26Oj4xuXW0wVTUPVOXLr8ZzJ0+d/uLzw2d6eb4z8yH1d9tn49WxS+eaL81en5ufWliYmmyOz3SuzE5O7XgL91p/s2PVAWhef+3G5NWrC82Tz566bfXNofcGHjsydHb46eNP9cqOj4yOjt0q0ugvX7vrhnRtN8LjYBRxPFI8872fpXZEFHHvx6Jxf8/9ZoNVJ45VnRgfGa06Mt1pzyyWKy/2DkQR0eyr1Oodo63PRdTq97UP22tFLJXNLxt8rOze2Fx7vn15eqp5sT2/2FnszM5cTN3Wlv1pRhFnUsRyRKwOfHBz9SiiFim+c3gtXY6IA73j8IVqYPD27Sj2sI87ULazWY9YLh6Cc7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlB+N0xLtbfI54ONWiiL8oz//ZtTRZXQ9615XzX2t+ZebqbF/Z3nXlI94fPnCleED3h8FNeX/s82tTI4poV1f8tXT3P+wAAAAAAAAAAAAAAAAAsNsGo4jPRIqX/+2PqnHFUY1LP3x2+PeGfql/zPgTd9hOWfbZiFgqdjYm92AeGHgxXUzpAY8lfpQ1oog/zuP/vvWgGwMAAAAAAAAAAAAAAAAAAPBIK+KnkeKFd46m5eifU7wzc615qX15ujsrbG/u396c6evr6+vN1M1WzomcSzmXc67kXO1mNe6/ql/k+jknci7lXM65knM1ZxzI9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWfsk7l7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Tooo4v1I8e1vrKVIEdGKmIhurgw86NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sby2oRkap/u46W305H62CZn4zWcJkvRutcznaVtda3HkD7uTf1VMRPIsVA462NE57Pf737buNjEG9+89a7z9a6eaC3cui9gceOHD47PPprT2z3Om3VgGPnOzM3bjbHR0ZHx/oW1/LeP9m3bCjvt9idrhMRC6+/8Vp7enpq/u5flB+BbVatr6//abmXe93FPnmRatv29JF8UZ7afdCMPexgbUeF67u604P746g+6CsT90N5/383Uvz2O//Ru+FX9//aRomNO3z84k9u3f9f2LyhHd7/a5vr5ft/eU/f6v7/eN+yF/JPI/VaRGPx+lz9SERj4fU3jneut69NXZuaOX3ixJeGh7906kT9YETjamd6qu/VvR8rAAAAAAAAAAAAAAAAgPsqFfHlSNH+yVpqRsTNarzW0Nnhp48/dSAOVOOtbhu3/erYpXPNl2avz81PLSxMTTbHZzpXZiendrq7RjXca3xkdE86c0eDe9z+wcZLs3Ovz3eu/cHilusPNc5dXlicb1/ZenUMRhHR6l9yrGrw+Mho1ejpTnumqnpxy8H0H109FfGfkeLK6Wb6XF6Wx/9vHuF/2/j/pc0b2qPx/5/oW1buM6UifhEpfusvn4jPVe08FB84Zrnc30aKY2eezOXiYFmu14bucwW6IwPLsv8bKf7x/SeX+sv2xkM+fqvsczs+sA+J8vwfjhTf//Pvxq/nZbc//2Hr839o84b26Px/qm/ZodueV3DPXSef/+OR4sXH34rfyMs+7PkfvWdvHM2FN57PsUfn/9N9y4byfn9zd7oOAAAAAAAAAADwUKunIv4uUvxotJaez8t28vd/k5s3tEd///Urfcsmd2e+oju+2NzvbY/dHUsAAAAAwINVT0X8NFJcW3xrYwz17eO/+8Z//s6t8Z8jadPa6vd8v1w9N2A3f//Xbyjvd+Leuw0AAAAAAAAAAAAAAAAAAAD7SkpFPJ/nU5+oxvNPbjuf+kqkePm/n8nl0pGyXG8e+KHqe+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX86r355rtzvDdqEVHNxT4fKUb/vle2Oxd7b27y7nzg3bnYy7KfiBT/9Q+3l+3NY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFntwVgAAAAAAAAAAAAAAAAAAAHjU1FMRfxYp/uf68sZY/jz/f73vbeXNb/bN97/JzWqe/6Fq/v/tXt/N/P/VcwWWttsrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8PKUo4o1IMXdhLa0MlO+7Guc7Mzdujo+Mbl1tMFU1D1Tly6/GcydPnf7i88Nnevnh9XfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14C9vXb9xVi45VB6B5/bUbk1evLjRPPnvqttU3h94beOzI0Nnhp48/1Ss7PjI6OtZXpla/qz1vKW2z/GAU8VeR4pnv/Sz9aCCiiA89Fjtyh8/OXhusOnGs6sT4yGjVkelOe2axXHmxdyCKiGZfpVbvGN2Hc3FPWhEDZfPLBh8ruzc2155vX56eal5szy92FjuzMxdTt7Vlf5pRxJkUsRwRqwMf3Fw9ingtUnzn8Fr654GIA73j8IULY189cXL7dhR72McdKNvZrEcsFw/BOdvHBqKIH0SKn799NP5lIKIW3a/4fMQrZf4w4s3onu9UfjBOR7y7xeeIh1Mtivi/8vyfXUtvD5TXg9515fzXml+ZuTrbV7Z3XdlX94cf/PtHrTG4G7vd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUjQ/eGFPcmbnWvNS+PN0d1tcb+9cbM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydg8AAAAAAAAAAAAAAAAAAPh4Kap/Unz7G2tpfaA7v/REdHPFfKAfe/8fAAD//xKm8uQ=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 5.749320014s ago: executing program 3 (id=265): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x6, 0xe9, 0x8, 0x402, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r4, 0x8008640b, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200002, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.981521309s ago: executing program 3 (id=266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close(0x3) socket$rxrpc(0x21, 0x2, 0x2) userfaultfd(0x1) epoll_create1(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r0], 0x30}, 0x4004000) 3.713179826s ago: executing program 1 (id=267): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr") bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") fsopen(0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x0, 0x9) openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@bsdgroups}, {@nomblk_io_submit}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") 3.456199282s ago: executing program 2 (id=268): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) r4 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnREilR1vfZ5G935r2Z92bWMzTBNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjfffnciefSg24FAHA/XRj76omT7v8A8Ei55P//AQAAAAAAAAAAAABgv0tRxOORYu7CWpqo3nc1znfqN26Oj4xuXW0wVTUPVOXLr8ZzJ0+d/uLzw2d6eb4z8yH1d9tn49WxS+eaL81en5ufWliYmmyOz3SuzE5O7XgL91p/s2PVAWhef+3G5NWrC82Tz566bfXNofcGHjsydHb46eNP9cqOj4yOjt0q0ugvX7vrhnRtN8LjYBRxPFI8872fpXZEFHHvx6Jxf8/9ZoNVJ45VnRgfGa06Mt1pzyyWKy/2DkQR0eyr1Oodo63PRdTq97UP22tFLJXNLxt8rOze2Fx7vn15eqp5sT2/2FnszM5cTN3Wlv1pRhFnUsRyRKwOfHBz9SiiFim+c3gtXY6IA73j8IVqYPD27Sj2sI87ULazWY9YLh6Cc7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlB+N0xLtbfI54ONWiiL8oz//ZtTRZXQ9615XzX2t+ZebqbF/Z3nXlI94fPnCleED3h8FNeX/s82tTI4poV1f8tXT3P+wAAAAAAAAAAAAAAAAAsNsGo4jPRIqX/+2PqnHFUY1LP3x2+PeGfql/zPgTd9hOWfbZiFgqdjYm92AeGHgxXUzpAY8lfpQ1oog/zuP/vvWgGwMAAAAAAAAAAAAAAAAAAPBIK+KnkeKFd46m5eifU7wzc615qX15ujsrbG/u396c6evr6+vN1M1WzomcSzmXc67kXO1mNe6/ql/k+jknci7lXM65knM1ZxzI9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWfsk7l7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Tooo4v1I8e1vrKVIEdGKmIhurgw86NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sby2oRkap/u46W305H62CZn4zWcJkvRutcznaVtda3HkD7uTf1VMRPIsVA462NE57Pf737buNjEG9+89a7z9a6eaC3cui9gceOHD47PPprT2z3Om3VgGPnOzM3bjbHR0ZHx/oW1/LeP9m3bCjvt9idrhMRC6+/8Vp7enpq/u5flB+BbVatr6//abmXe93FPnmRatv29JF8UZ7afdCMPexgbUeF67u604P746g+6CsT90N5/383Uvz2O//Ru+FX9//aRomNO3z84k9u3f9f2LyhHd7/a5vr5ft/eU/f6v7/eN+yF/JPI/VaRGPx+lz9SERj4fU3jneut69NXZuaOX3ixJeGh7906kT9YETjamd6qu/VvR8rAAAAAAAAAAAAAAAAgPsqFfHlSNH+yVpqRsTNarzW0Nnhp48/dSAOVOOtbhu3/erYpXPNl2avz81PLSxMTTbHZzpXZiendrq7RjXca3xkdE86c0eDe9z+wcZLs3Ovz3eu/cHilusPNc5dXlicb1/ZenUMRhHR6l9yrGrw+Mho1ejpTnumqnpxy8H0H109FfGfkeLK6Wb6XF6Wx/9vHuF/2/j/pc0b2qPx/5/oW1buM6UifhEpfusvn4jPVe08FB84Zrnc30aKY2eezOXiYFmu14bucwW6IwPLsv8bKf7x/SeX+sv2xkM+fqvsczs+sA+J8vwfjhTf//Pvxq/nZbc//2Hr839o84b26Px/qm/ZodueV3DPXSef/+OR4sXH34rfyMs+7PkfvWdvHM2FN57PsUfn/9N9y4byfn9zd7oOAAAAAAAAAADwUKunIv4uUvxotJaez8t28vd/k5s3tEd///Urfcsmd2e+oju+2NzvbY/dHUsAAAAAwINVT0X8NFJcW3xrYwz17eO/+8Z//s6t8Z8jadPa6vd8v1w9N2A3f//Xbyjvd+Leuw0AAAAAAAAAAAAAAAAAAAD7SkpFPJ/nU5+oxvNPbjuf+kqkePm/n8nl0pGyXG8e+KHqe+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX86r355rtzvDdqEVHNxT4fKUb/vle2Oxd7b27y7nzg3bnYy7KfiBT/9Q+3l+3NY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFntwVgAAAAAAAAAAAAAAAAAAAHjU1FMRfxYp/uf68sZY/jz/f73vbeXNb/bN97/JzWqe/6Fq/v/tXt/N/P/VcwWWttsrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8PKUo4o1IMXdhLa0MlO+7Guc7Mzdujo+Mbl1tMFU1D1Tly6/GcydPnf7i88Nnevnh9XfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14C9vXb9xVi45VB6B5/bUbk1evLjRPPnvqttU3h94beOzI0Nnhp48/1Ss7PjI6OtZXpla/qz1vKW2z/GAU8VeR4pnv/Sz9aCCiiA89Fjtyh8/OXhusOnGs6sT4yGjVkelOe2axXHmxdyCKiGZfpVbvGN2Hc3FPWhEDZfPLBh8ruzc2155vX56eal5szy92FjuzMxdTt7Vlf5pRxJkUsRwRqwMf3Fw9ingtUnzn8Fr654GIA73j8IULY189cXL7dhR72McdKNvZrEcsFw/BOdvHBqKIH0SKn799NP5lIKIW3a/4fMQrZf4w4s3onu9UfjBOR7y7xeeIh1Mtivi/8vyfXUtvD5TXg9515fzXml+ZuTrbV7Z3XdlX94cf/PtHrTG4G7vd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUjQ/eGFPcmbnWvNS+PN0d1tcb+9cbM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydg8AAAAAAAAAAAAAAAAAAPh4Kap/Unz7G2tpfaA7v/REdHPFfKAfe/8fAAD//xKm8uQ=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 3.431206993s ago: executing program 3 (id=269): open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x1, 0x19e, &(0x7f0000000440)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) 2.346167611s ago: executing program 2 (id=270): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/227, 0xe3) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c00010000"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x0) 957.376476ms ago: executing program 3 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a3200000000050004000100000014000780050015000a0000000800114000000046050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x84000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=':', 0x1}], 0x1}, 0x40095) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x2) fcntl$dupfd(r1, 0x0, r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000006c0)=0x1, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000000c0)={0x33}, 0x8) 726.042382ms ago: executing program 0 (id=272): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006800fd"], 0x18}}, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 257.528254ms ago: executing program 1 (id=273): unshare(0x22020400) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x80000001, 0x162842) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 121.425187ms ago: executing program 4 (id=274): syz_open_dev$audion(&(0x7f0000000040), 0x3d99018d, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 0s ago: executing program 3 (id=275): syz_open_dev$hidraw(&(0x7f00000000c0), 0x785, 0x20000) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x6, 0x280000) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x4000031, 0x0}) splice(0xffffffffffffffff, &(0x7f0000000240)=0xfffffffffffffff7, r0, &(0x7f0000000400)=0x7, 0x9, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r2 = socket(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 62.529655][ T4258] cgroup: Unknown subsys name 'net' [ 62.657082][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.954562][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.495217][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.502566][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.503419][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.510944][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.518183][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.526934][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.532308][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.542256][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.547403][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.561371][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.561458][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.569635][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.575951][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.583576][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.590476][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.598899][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.613091][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.613196][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.620827][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.628964][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.635295][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.642909][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.649489][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.695396][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.708064][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.723784][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.731562][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.748395][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.756252][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.763653][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.116214][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 66.152666][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 66.163362][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 66.204041][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 66.274892][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 66.388837][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.397151][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.405492][ T4272] device bridge_slave_0 entered promiscuous mode [ 66.414619][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.423000][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.430837][ T4275] device bridge_slave_0 entered promiscuous mode [ 66.445124][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.453261][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.461073][ T4274] device bridge_slave_0 entered promiscuous mode [ 66.469575][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.476834][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.484700][ T4274] device bridge_slave_1 entered promiscuous mode [ 66.496689][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.503960][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.512915][ T4272] device bridge_slave_1 entered promiscuous mode [ 66.520292][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.527755][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.535659][ T4275] device bridge_slave_1 entered promiscuous mode [ 66.543031][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.550140][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.558255][ T4271] device bridge_slave_0 entered promiscuous mode [ 66.591119][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.598491][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.606622][ T4271] device bridge_slave_1 entered promiscuous mode [ 66.649129][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.660416][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.670309][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.678209][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.686242][ T4273] device bridge_slave_0 entered promiscuous mode [ 66.696032][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.715627][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.727102][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.738051][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.747959][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.755962][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.764108][ T4273] device bridge_slave_1 entered promiscuous mode [ 66.772803][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.788853][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.846165][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.865550][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.877529][ T4275] team0: Port device team_slave_0 added [ 66.892810][ T4274] team0: Port device team_slave_0 added [ 66.901576][ T4272] team0: Port device team_slave_0 added [ 66.914350][ T4275] team0: Port device team_slave_1 added [ 66.930393][ T4271] team0: Port device team_slave_0 added [ 66.937630][ T4274] team0: Port device team_slave_1 added [ 66.944974][ T4272] team0: Port device team_slave_1 added [ 66.959265][ T4273] team0: Port device team_slave_0 added [ 66.968056][ T4273] team0: Port device team_slave_1 added [ 66.981392][ T4271] team0: Port device team_slave_1 added [ 67.007022][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.014199][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.040197][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.082620][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.089622][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.115808][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.134529][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.141812][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.168719][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.184443][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.191560][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.217821][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.240712][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.256715][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.286382][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.298045][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.307900][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.334609][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.360780][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.368122][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.394266][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.405811][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.413207][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.439455][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.451128][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.458094][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.485540][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.509716][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.518219][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.544270][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.573875][ T4275] device hsr_slave_0 entered promiscuous mode [ 67.580828][ T4275] device hsr_slave_1 entered promiscuous mode [ 67.614305][ T4274] device hsr_slave_0 entered promiscuous mode [ 67.623077][ T4274] device hsr_slave_1 entered promiscuous mode [ 67.630482][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.639477][ T4274] Cannot create hsr debugfs directory [ 67.669028][ T4271] device hsr_slave_0 entered promiscuous mode [ 67.676136][ T4271] device hsr_slave_1 entered promiscuous mode [ 67.683311][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.690886][ T4271] Cannot create hsr debugfs directory [ 67.722240][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 67.722772][ T4272] device hsr_slave_0 entered promiscuous mode [ 67.734559][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 67.741734][ T4272] device hsr_slave_1 entered promiscuous mode [ 67.748898][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 67.755496][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.763231][ T4272] Cannot create hsr debugfs directory [ 67.784762][ T4273] device hsr_slave_0 entered promiscuous mode [ 67.792357][ T4273] device hsr_slave_1 entered promiscuous mode [ 67.798859][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.801555][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 67.812446][ T4273] Cannot create hsr debugfs directory [ 67.812684][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 68.139025][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.150507][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.173519][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.190277][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.234252][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.255839][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.265675][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.276111][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.366231][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.385581][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.396153][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.416759][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.445159][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.464108][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.474795][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.490640][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.533477][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.567938][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.603221][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.614316][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.623354][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.631759][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.653783][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.664956][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.685464][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.696120][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.717845][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.726478][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.738196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.747866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.757371][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.765203][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.774966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.793518][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.814061][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.825423][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.834979][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.842123][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.850441][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.860209][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.869645][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.876908][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.884925][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.893890][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.902852][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.928131][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.945500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.953986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.964408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.973505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.982771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.003648][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.018314][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.028212][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.036941][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.046332][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.055336][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.062478][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.070491][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.079826][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.088501][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.095628][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.104349][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.113361][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.121989][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.129084][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.137044][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.145980][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.167052][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.185477][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.203564][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.217554][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.227502][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.245680][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.260568][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.269970][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.307738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.330938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.342240][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.350850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.360693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.369416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.378784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.387553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.396334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.423952][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.430879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.440180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.479991][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.493947][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.514864][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.524287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.535653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.544888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.554745][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.564380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.575111][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.582415][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.590581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.599993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.609268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.617948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.626943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.635994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.645638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.654310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.663491][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.670557][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.678240][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.687217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.695836][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.725694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.738142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.747542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.763580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.778017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.801439][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 69.807589][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 69.814035][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 69.827316][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.851679][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.877023][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.888086][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 69.894285][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 69.900827][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.913656][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.928345][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.944264][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.955163][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.965789][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.974636][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.983587][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.006991][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.032153][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.067952][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.097165][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.122050][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.186842][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.205219][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.237536][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.244742][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.294960][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.306299][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.326777][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.337218][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.344490][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.358320][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.370076][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.384706][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.449641][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.458165][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.468124][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.478719][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.487540][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.496457][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.505781][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.513782][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.522119][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.529573][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.537294][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.544992][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.552597][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.569510][ T4275] device veth0_vlan entered promiscuous mode [ 70.594200][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.601853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.610225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.620797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.629509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.637979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.646957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.658539][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.685603][ T4275] device veth1_vlan entered promiscuous mode [ 70.699648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.707986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.716112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.725081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.735431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.745576][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.787538][ T4274] device veth0_vlan entered promiscuous mode [ 70.822465][ T4275] device veth0_macvtap entered promiscuous mode [ 70.837372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.847611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.857210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.867473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.876761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.892934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.907183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.916865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.925955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.934909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.955190][ T4274] device veth1_vlan entered promiscuous mode [ 70.966684][ T4275] device veth1_macvtap entered promiscuous mode [ 70.975285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.984644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.998481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.009103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.070151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.087430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.098344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.112730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.126612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.135771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.147197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.155489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.163823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.177556][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.186656][ T4271] device veth0_vlan entered promiscuous mode [ 71.202512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.214723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.225703][ T4272] device veth0_vlan entered promiscuous mode [ 71.240303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.248815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.260387][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.275931][ T4272] device veth1_vlan entered promiscuous mode [ 71.288441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.297293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.306505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.319415][ T4271] device veth1_vlan entered promiscuous mode [ 71.336821][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.372249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.380952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.392140][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.410615][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.419686][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.434102][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.450073][ T4274] device veth0_macvtap entered promiscuous mode [ 71.485179][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.491938][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.505487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.516109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.526923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.556672][ T4274] device veth1_macvtap entered promiscuous mode [ 71.568488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.582567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.592385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.618267][ T4271] device veth0_macvtap entered promiscuous mode [ 71.632625][ T4272] device veth0_macvtap entered promiscuous mode [ 71.673445][ T4271] device veth1_macvtap entered promiscuous mode [ 71.684004][ T4272] device veth1_macvtap entered promiscuous mode [ 71.704216][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.716241][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.729007][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.771617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.780839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.790044][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.799214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.809574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.824491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.840191][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.854596][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.866489][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.882022][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 71.888090][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 71.894637][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 71.902996][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.912481][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.930593][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.939782][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.949200][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.962132][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 71.962842][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 71.978371][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.992598][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.007107][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.020377][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.036530][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.047888][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.059260][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.069795][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.080527][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.092062][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.103154][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.115685][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.129865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.143399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.153187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.162210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.176497][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.185838][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194805][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.206882][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.220140][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.231781][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.242507][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.253364][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.265575][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.281501][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.293542][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.303805][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.315072][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.325097][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.335957][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.347376][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.362825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.377313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.386212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.398041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.408385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.417433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.436489][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.450796][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.463233][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474373][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.496739][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.511288][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.520333][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.530183][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.567302][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.588071][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.634761][ T4273] device veth0_vlan entered promiscuous mode [ 72.649420][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.664121][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.674256][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.684653][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.696302][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.752496][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.760545][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.795988][ T4273] device veth1_vlan entered promiscuous mode [ 72.824612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.836403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.848110][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.868294][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.879831][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.903644][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.948810][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.967180][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.983600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.002354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.028567][ T4273] device veth0_macvtap entered promiscuous mode [ 73.065084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.082784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.101169][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.109034][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.157988][ T4273] device veth1_macvtap entered promiscuous mode [ 73.165334][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.177893][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.183083][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.195888][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.205764][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.289427][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.300202][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.318781][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.328311][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.344858][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.357446][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.871034][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.788806][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 74.795470][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 74.802716][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 74.809381][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 74.809902][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 74.960645][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.977181][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.266794][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.333150][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.347640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.452015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.477370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.507374][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.536127][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.563735][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.596337][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.606558][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.623678][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.636836][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.652702][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.668849][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.684900][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.694821][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.718733][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.741491][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.750253][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781296][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.003122][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.018720][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.098067][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.175244][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.183817][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.200234][ T4384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.231274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.750481][ T4395] kvm: pic: non byte write [ 78.761058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.781033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.801054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.821054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.841061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.851048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.861036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.871039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.881035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.891041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 80.314901][ T4424] loop1: detected capacity change from 0 to 512 [ 80.336632][ T4424] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.726432][ T954] cfg80211: failed to load regulatory.db [ 81.915676][ T4424] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 81.965561][ T4424] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.16: bg 0: block 248: padding at end of block bitmap is not set [ 82.033927][ T4424] Quota error (device loop1): write_blk: dquota write failed [ 82.053509][ T4424] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 82.094459][ T4424] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.16: Failed to acquire dquot type 1 [ 82.175915][ T4424] EXT4-fs (loop1): 1 truncate cleaned up [ 82.236643][ T4424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.253489][ T26] audit: type=1326 audit(1787985170.714:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.0.22" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f920e79e159 code=0x0 [ 82.345806][ T4435] loop0: detected capacity change from 0 to 2048 [ 82.379620][ T4435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.515603][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 82.571525][ T4370] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 82.596748][ T4370] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 82.785688][ T26] audit: type=1326 audit(1787985171.244:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.1.25" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff88359e159 code=0x0 [ 83.100471][ T4443] loop1: detected capacity change from 0 to 2048 [ 83.230226][ T4443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.332586][ T4471] loop1: detected capacity change from 0 to 512 [ 85.595503][ T4471] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.128534][ T4479] Mass Storage Function, version: 2009/09/11 [ 86.136790][ T4479] LUN: removable file: (no medium) [ 86.156827][ T26] audit: type=1800 audit(1787985174.614:4): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.36" name="file" dev="configfs" ino=34981 res=0 errno=0 [ 86.232702][ T4471] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 86.504369][ T4471] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.35: bg 0: block 248: padding at end of block bitmap is not set [ 86.735881][ T4471] Quota error (device loop1): write_blk: dquota write failed [ 86.857474][ T4471] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 86.936030][ T4483] loop2: detected capacity change from 0 to 16 [ 87.388614][ T4471] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.35: Failed to acquire dquot type 1 [ 87.413261][ T4483] erofs: (device loop2): mounted with root inode @ nid 36. [ 87.469012][ T4471] EXT4-fs (loop1): 1 truncate cleaned up [ 87.673039][ T4471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.244783][ T26] audit: type=1326 audit(1787985176.704:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.3.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6139f9e159 code=0x0 [ 88.485515][ T4495] loop3: detected capacity change from 0 to 2048 [ 88.513952][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 88.606515][ T4495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.646990][ T40] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 88.695966][ T40] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 90.463375][ T4507] loop2: detected capacity change from 0 to 512 [ 90.509479][ T4507] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.554797][ T26] audit: type=1326 audit(1787985179.014:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.44" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6139f9e159 code=0x0 [ 90.597389][ T4507] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 90.703765][ T4507] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.46: bg 0: block 248: padding at end of block bitmap is not set [ 90.878997][ T4507] Quota error (device loop2): write_blk: dquota write failed [ 90.921376][ T4507] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 90.965426][ T4512] loop3: detected capacity change from 0 to 2048 [ 90.972034][ T4507] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.46: Failed to acquire dquot type 1 [ 91.033159][ T4507] EXT4-fs (loop2): 1 truncate cleaned up [ 91.040850][ T4512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.055194][ T4507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.324702][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 91.362396][ T4406] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 91.399605][ T4406] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1 [ 92.490734][ T26] audit: type=1800 audit(1787985180.944:7): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="file" dev="configfs" ino=34264 res=0 errno=0 [ 92.651776][ T4279] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.770912][ T4538] loop0: detected capacity change from 0 to 8 [ 92.778478][ T4538] squashfs: Unknown parameter 'yzkaller' [ 93.520049][ T4279] usb 4-1: Using ep0 maxpacket: 32 [ 94.478536][ T4279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 94.523980][ T4279] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 94.541479][ T26] audit: type=1326 audit(1787985183.004:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4545 comm="syz.4.54" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc36d59e159 code=0x0 [ 94.541690][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 94.583324][ T4279] usb 4-1: Product: syz [ 94.710565][ T4548] loop4: detected capacity change from 0 to 2048 [ 94.735771][ T4548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.385973][ T4279] usb 4-1: Manufacturer: syz [ 95.390662][ T4279] usb 4-1: SerialNumber: syz [ 95.402342][ T4279] usb 4-1: config 0 descriptor?? [ 95.509655][ T4553] loop0: detected capacity change from 0 to 16 [ 95.516331][ T4279] usb 4-1: can't set config #0, error -71 [ 95.527248][ T4279] usb 4-1: USB disconnect, device number 2 [ 95.571967][ T4553] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.734895][ T4560] loop3: detected capacity change from 0 to 512 [ 96.825532][ T4560] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.953176][ T4560] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 96.968802][ T4560] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.60: bg 0: block 248: padding at end of block bitmap is not set [ 96.992172][ T4560] Quota error (device loop3): write_blk: dquota write failed [ 96.999675][ T4560] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 97.019472][ T4560] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.60: Failed to acquire dquot type 1 [ 97.160067][ T4560] EXT4-fs (loop3): 1 truncate cleaned up [ 97.277565][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.025848][ T26] audit: type=1800 audit(1787985186.484:9): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.63" name="file" dev="configfs" ino=34313 res=0 errno=0 [ 98.424796][ T4370] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 98.472971][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 98.507947][ T4370] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 99.481116][ C1] llc_process_tmr_ev: timer called on closed connection [ 100.879401][ T4590] loop3: detected capacity change from 0 to 8 [ 100.918508][ T4590] squashfs: Unknown parameter 'yzkaller' [ 101.024764][ T26] audit: type=1326 audit(1787985189.484:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.4.69" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc36d59e159 code=0x0 [ 101.208245][ T4597] loop4: detected capacity change from 0 to 2048 [ 101.231032][ T4597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.301085][ T4373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.771079][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 102.778090][ T4373] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 102.800579][ T4373] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.809947][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.831502][ T4373] usb 1-1: Product: syz [ 102.846902][ T4373] usb 1-1: Manufacturer: syz [ 102.867152][ T4373] usb 1-1: SerialNumber: syz [ 102.885138][ T4373] usb 1-1: config 0 descriptor?? [ 102.912452][ T4594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.946707][ T4373] hub 1-1:0.0: bad descriptor, ignoring hub [ 102.960018][ T4373] hub: probe of 1-1:0.0 failed with error -5 [ 103.724292][ T4594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.793047][ T4594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.012036][ T26] audit: type=1800 audit(1787985192.474:11): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.77" name="file" dev="configfs" ino=35128 res=0 errno=0 [ 104.731831][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.791988][ T4615] loop1: detected capacity change from 0 to 4096 [ 104.809490][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.943137][ T4615] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.054000][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.091812][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.152510][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 106.241305][ T954] usb 1-1: USB disconnect, device number 2 [ 106.252373][ T26] audit: type=1326 audit(1787985194.714:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.83" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f920e79e159 code=0x0 [ 106.285340][ T4639] loop4: detected capacity change from 0 to 16 [ 106.428959][ T4641] loop0: detected capacity change from 0 to 2048 [ 106.579487][ T4641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.222481][ T4639] ======================================================= [ 107.222481][ T4639] WARNING: The mand mount option has been deprecated and [ 107.222481][ T4639] and is ignored by this kernel. Remove the mand [ 107.222481][ T4639] option from the mount to silence this warning. [ 107.222481][ T4639] ======================================================= [ 107.341135][ T4639] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.464394][ T4647] tipc: Enabling of bearer rejected, failed to enable media [ 107.507436][ T4647] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 107.562067][ T4647] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 108.854403][ T4658] loop1: detected capacity change from 0 to 2048 [ 108.874529][ T4658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.267474][ T4666] kAFS: No cell specified [ 110.666646][ T26] audit: type=1800 audit(1787985199.124:13): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.89" name="file" dev="configfs" ino=35216 res=0 errno=0 [ 111.364795][ T4677] Bluetooth: MGMT ver 1.22 [ 113.075079][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.321285][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 113.401127][ T4284] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 113.407494][ T4288] Bluetooth: hci0: command 0x1407 tx timeout [ 113.990448][ T4702] loop1: detected capacity change from 0 to 8 [ 113.999080][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 114.015604][ T4702] squashfs: Unknown parameter 'yzkaller' [ 114.084326][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 114.194246][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 114.231767][ T14] usb 1-1: Product: syz [ 114.253796][ T14] usb 1-1: Manufacturer: syz [ 114.269925][ T14] usb 1-1: SerialNumber: syz [ 114.283271][ T14] usb 1-1: config 0 descriptor?? [ 114.290312][ T4685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.307769][ T14] hub 1-1:0.0: bad descriptor, ignoring hub [ 114.318436][ T14] hub: probe of 1-1:0.0 failed with error -5 [ 114.490119][ T4710] loop2: detected capacity change from 0 to 2048 [ 114.540743][ T4710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.248874][ T4712] loop3: detected capacity change from 0 to 4096 [ 115.277949][ T4712] ntfs3: loop3: ino=3, Correct links count -> 2. [ 115.512991][ T41] usb 1-1: USB disconnect, device number 3 [ 115.541043][ T26] audit: type=1800 audit(1787985203.824:14): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.104" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 117.181493][ T4727] netlink: 'syz.4.108': attribute type 27 has an invalid length. [ 117.981792][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 118.062830][ T4727] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 118.103701][ T26] audit: type=1800 audit(1787985206.564:15): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.106" name="file" dev="configfs" ino=35325 res=0 errno=0 [ 118.354634][ T4740] loop2: detected capacity change from 0 to 16 [ 118.365544][ T4740] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.081100][ T4260] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.322493][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 121.352049][ T4260] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.381905][ T4767] loop1: detected capacity change from 0 to 512 [ 121.472983][ T4260] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.540881][ T4762] loop3: detected capacity change from 0 to 4096 [ 121.571240][ T4762] ntfs3: loop3: ino=3, Correct links count -> 2. [ 121.671898][ T4767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.814253][ T4767] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.269719][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 122.278057][ T4260] usb 1-1: Product: syz [ 122.282780][ T4260] usb 1-1: Manufacturer: syz [ 122.287461][ T4260] usb 1-1: SerialNumber: syz [ 122.314654][ T4260] usb 1-1: config 0 descriptor?? [ 122.321230][ T4765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.376989][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 122.398844][ T4260] hub 1-1:0.0: bad descriptor, ignoring hub [ 122.922839][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.928004][ T4260] hub: probe of 1-1:0.0 failed with error -5 [ 122.931208][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.973089][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.991532][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.063973][ T26] audit: type=1800 audit(1787985211.524:16): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.118" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 123.266409][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.278637][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 123.301621][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.783053][ T4795] netlink: 'syz.2.126': attribute type 24 has an invalid length. [ 123.791107][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 123.800072][ T4795] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 124.295926][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.476558][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.916307][ T4809] loop1: detected capacity change from 0 to 8 [ 124.925400][ T4809] squashfs: Unknown parameter 'yzkaller' [ 125.043763][ T4260] usb 1-1: USB disconnect, device number 4 [ 125.491143][ T4260] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 126.264478][ T4260] usb 1-1: device descriptor read/all, error -71 [ 126.446292][ T4825] loop3: detected capacity change from 0 to 512 [ 126.458866][ T4825] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.581583][ T4825] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 126.598805][ T4825] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.136: bg 0: block 248: padding at end of block bitmap is not set [ 126.621225][ T4825] Quota error (device loop3): write_blk: dquota write failed [ 126.628901][ T4825] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 126.639050][ T4825] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.136: Failed to acquire dquot type 1 [ 126.664107][ T4825] EXT4-fs (loop3): 1 truncate cleaned up [ 126.669882][ T4825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.783449][ T4824] loop2: detected capacity change from 0 to 16 [ 127.063407][ T4822] loop0: detected capacity change from 0 to 128 [ 127.140056][ T4824] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.261348][ T4822] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.121161][ T4288] Bluetooth: hci0: command 0x1407 tx timeout [ 128.127223][ T4284] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 128.182148][ T4831] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 128.190856][ T4822] hpfs: filesystem error: improperly stopped [ 128.197261][ T4822] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.205696][ T4822] hpfs: You really don't want any checks? You are crazy... [ 128.213244][ T4822] hpfs: Code page index out of array [ 128.218568][ T4822] hpfs: code page support is disabled [ 128.252057][ T4824] tipc: Enabling of bearer rejected, failed to enable media [ 128.263304][ T4824] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 128.302559][ T4838] loop1: detected capacity change from 0 to 16 [ 128.316371][ T4822] hpfs: hpfs_map_4sectors(): unaligned read [ 128.343877][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 128.352979][ T4374] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 128.371538][ T4374] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 1 [ 128.401731][ T4822] hpfs: hpfs_map_4sectors(): unaligned read [ 128.426132][ T4838] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.459180][ T4822] hpfs: filesystem error: unable to find root dir [ 128.537786][ T4842] hpfs: hpfs_map_4sectors(): unaligned read [ 128.614352][ T4840] loop2: detected capacity change from 0 to 2048 [ 128.682284][ T4822] hpfs: hpfs_map_4sectors(): unaligned read [ 128.867019][ T4840] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.148932][ T4840] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 129.335593][ T4850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 129.656130][ T4840] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 129.918582][ T4840] UDF-fs: Scanning with blocksize 512 failed [ 129.968557][ T4852] loop4: detected capacity change from 0 to 8 [ 130.002581][ T4852] squashfs: Unknown parameter 'yzkaller' [ 130.027689][ T4840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.166284][ T26] audit: type=1800 audit(1787985218.624:17): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="file1" dev="loop2" ino=838 res=0 errno=0 [ 131.317963][ T26] audit: type=1800 audit(1787985219.774:18): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.149" name="file" dev="configfs" ino=35861 res=0 errno=0 [ 131.531120][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.751404][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 132.445674][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 132.473655][ T4880] loop3: detected capacity change from 0 to 512 [ 132.516304][ T4880] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.541769][ T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.586619][ T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.630750][ T7] usb 5-1: Product: syz [ 132.645655][ T7] usb 5-1: Manufacturer: syz [ 132.653768][ T7] usb 5-1: SerialNumber: syz [ 132.695956][ T4880] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.712484][ T4880] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.153: bg 0: block 248: padding at end of block bitmap is not set [ 132.727837][ T4880] Quota error (device loop3): write_blk: dquota write failed [ 132.735350][ T4880] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 132.745419][ T4880] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.153: Failed to acquire dquot type 1 [ 132.759331][ T7] usb 5-1: config 0 descriptor?? [ 132.766134][ T4861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.801426][ T4880] EXT4-fs (loop3): 1 truncate cleaned up [ 132.807112][ T4880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.112963][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.119280][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.141039][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.147016][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 133.182158][ T4890] loop0: detected capacity change from 0 to 16 [ 133.215799][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 133.219012][ T4892] loop1: detected capacity change from 0 to 128 [ 133.233011][ T57] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 133.241437][ T4890] erofs: (device loop0): mounted with root inode @ nid 36. [ 133.245389][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 133.249489][ T4892] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.292929][ T4892] hpfs: filesystem error: improperly stopped [ 133.298981][ T4892] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 133.312004][ T4892] hpfs: You really don't want any checks? You are crazy... [ 133.319428][ T4892] hpfs: Code page index out of array [ 133.338846][ T4892] hpfs: code page support is disabled [ 133.345925][ T4892] hpfs: hpfs_map_4sectors(): unaligned read [ 133.378392][ T4892] hpfs: hpfs_map_4sectors(): unaligned read [ 133.396733][ T4892] hpfs: filesystem error: unable to find root dir [ 133.461794][ T4892] hpfs: hpfs_map_4sectors(): unaligned read [ 133.471581][ T4892] hpfs: hpfs_map_4sectors(): unaligned read [ 133.507101][ T4894] FAULT_INJECTION: forcing a failure. [ 133.507101][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.924188][ T4894] CPU: 1 PID: 4894 Comm: syz.2.157 Not tainted syzkaller #0 [ 133.931549][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.941637][ T4894] Call Trace: [ 133.944962][ T4894] [ 133.947904][ T4894] dump_stack_lvl+0x188/0x24e [ 133.952672][ T4894] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 133.958331][ T4894] ? show_regs_print_info+0x12/0x12 [ 133.963556][ T4894] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 133.969226][ T4894] should_fail_ex+0x390/0x4c0 [ 133.973937][ T4894] _copy_from_user+0x2c/0x170 [ 133.978734][ T4894] __se_sys_memfd_create+0x129/0x340 [ 133.984129][ T4894] do_syscall_64+0x4c/0xa0 [ 133.988570][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 133.993288][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 133.998039][ T4894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.003979][ T4894] RIP: 0033:0x7fb17319e159 [ 134.008416][ T4894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.028064][ T4894] RSP: 002b:00007fb174048e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 134.036510][ T4894] RAX: ffffffffffffffda RBX: 0000000000000768 RCX: 00007fb17319e159 [ 134.044511][ T4894] RDX: 00007fb174048ee0 RSI: 0000000000000000 RDI: 00007fb173235204 [ 134.052511][ T4894] RBP: 0000200000001040 R08: 00000000ffffffff R09: 0000000000000000 [ 134.060514][ T4894] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000200 [ 134.068518][ T4894] R13: 00007fb174048ee0 R14: 00007fb174048ea0 R15: 0000200000000000 [ 134.076537][ T4894] [ 134.115206][ T4900] loop3: detected capacity change from 0 to 8 [ 134.182002][ T4900] squashfs: Unknown parameter 'yzkaller' [ 134.211368][ T4426] usb 5-1: USB disconnect, device number 2 [ 134.404204][ T4902] loop1: detected capacity change from 0 to 2048 [ 134.507959][ T4902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.645850][ T4912] loop3: detected capacity change from 0 to 512 [ 134.657731][ T4912] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.714391][ T4912] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.731057][ T4912] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.163: bg 0: block 248: padding at end of block bitmap is not set [ 134.753700][ T4912] Quota error (device loop3): write_blk: dquota write failed [ 134.761519][ T4912] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 134.772388][ T4912] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.163: Failed to acquire dquot type 1 [ 134.789098][ T4912] EXT4-fs (loop3): 1 truncate cleaned up [ 134.794981][ T4912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.529686][ T26] audit: type=1800 audit(1787985223.984:19): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.165" name="file" dev="configfs" ino=35560 res=0 errno=0 [ 136.329042][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 136.344603][ T4421] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 136.413917][ T4421] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 1 [ 139.290699][ T4932] loop2: detected capacity change from 0 to 512 [ 139.361249][ T4932] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.423454][ T4932] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 139.438333][ T4932] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.169: bg 0: block 248: padding at end of block bitmap is not set [ 139.453283][ T4932] Quota error (device loop2): write_blk: dquota write failed [ 139.460817][ T4932] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 139.470798][ T4932] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.169: Failed to acquire dquot type 1 [ 139.484277][ T4932] EXT4-fs (loop2): 1 truncate cleaned up [ 139.489992][ T4932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.544527][ T4944] loop4: detected capacity change from 0 to 128 [ 139.667692][ T4945] loop1: detected capacity change from 0 to 2048 [ 139.864669][ T4945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.319219][ T4944] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.342093][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 140.348143][ T4421] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 140.388310][ T4947] loop0: detected capacity change from 0 to 4096 [ 140.400263][ T4944] hpfs: filesystem error: improperly stopped [ 140.406472][ T4944] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.414370][ T4944] hpfs: You really don't want any checks? You are crazy... [ 140.421610][ T4421] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 1 [ 140.434469][ T4944] hpfs: Code page index out of array [ 140.439791][ T4944] hpfs: code page support is disabled [ 140.447547][ T4944] hpfs: hpfs_map_4sectors(): unaligned read [ 140.453888][ T4944] hpfs: hpfs_map_4sectors(): unaligned read [ 140.459902][ T4944] hpfs: filesystem error: unable to find root dir [ 140.483521][ T4949] loop3: detected capacity change from 0 to 16 [ 140.487731][ T4947] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 140.520523][ T4944] hpfs: hpfs_map_4sectors(): unaligned read [ 140.552343][ T4949] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.603447][ T4944] hpfs: hpfs_map_4sectors(): unaligned read [ 140.663137][ T4953] loop2: detected capacity change from 0 to 8 [ 140.736427][ T4954] tipc: Enabling of bearer rejected, failed to enable media [ 140.763941][ T4954] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 140.810687][ T4953] squashfs: Unknown parameter 'yzkaller' [ 141.510416][ T4274] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 142.319013][ T4962] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 144.006031][ T4961] loop0: detected capacity change from 0 to 4096 [ 144.074724][ T4961] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 144.125916][ T4961] ntfs3: loop0: Failed to load $MFT. [ 144.153565][ T4973] loop2: detected capacity change from 0 to 128 [ 145.879312][ T4973] FAT-fs (loop2): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 146.136634][ T4904] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.648572][ T4987] loop3: detected capacity change from 0 to 128 [ 147.824200][ T4987] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 147.881122][ T4987] hpfs: filesystem error: improperly stopped [ 147.887190][ T4987] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.987951][ T4987] hpfs: You really don't want any checks? You are crazy... [ 148.040245][ T4987] hpfs: Code page index out of array [ 148.058722][ T4987] hpfs: code page support is disabled [ 148.077004][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 148.151326][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 148.167915][ T4987] hpfs: filesystem error: unable to find root dir [ 148.236982][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 148.249545][ T4987] hpfs: hpfs_map_4sectors(): unaligned read [ 148.358290][ T4991] loop1: detected capacity change from 0 to 512 [ 148.370076][ T4991] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.511928][ T4991] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 148.530245][ T4991] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.187: bg 0: block 248: padding at end of block bitmap is not set [ 148.548701][ T4991] Quota error (device loop1): write_blk: dquota write failed [ 148.556341][ T4991] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 148.566439][ T4991] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.187: Failed to acquire dquot type 1 [ 148.581828][ T4991] EXT4-fs (loop1): 1 truncate cleaned up [ 148.587604][ T4991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.282992][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 149.292035][ T4334] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 149.311142][ T4334] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 149.398524][ T4995] loop3: detected capacity change from 0 to 8 [ 149.467403][ T4995] squashfs: Unknown parameter 'yzkaller' [ 150.543405][ T5005] loop1: detected capacity change from 0 to 16 [ 150.661839][ T5005] erofs: (device loop1): mounted with root inode @ nid 36. [ 151.792058][ T5009] tipc: Enabling of bearer rejected, failed to enable media [ 151.813564][ T5009] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 152.060295][ T5012] loop2: detected capacity change from 0 to 512 [ 152.075296][ T5012] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.596757][ T26] audit: type=1326 audit(1787985242.054:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.0.191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f920e79e159 code=0x0 [ 153.598934][ T5012] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 153.773472][ T5019] loop0: detected capacity change from 0 to 2048 [ 153.792216][ T5019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.392322][ T5012] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.185: bg 0: block 248: padding at end of block bitmap is not set [ 154.424124][ T5012] Quota error (device loop2): write_blk: dquota write failed [ 154.498985][ T5012] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 154.556989][ T26] audit: type=1326 audit(1787985243.014:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5025 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff88359e159 code=0x0 [ 154.612804][ T5012] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.185: Failed to acquire dquot type 1 [ 154.759763][ T5030] loop1: detected capacity change from 0 to 2048 [ 154.874091][ T5030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.436074][ T5012] EXT4-fs (loop2): 1 truncate cleaned up [ 155.475304][ T5012] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.033797][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 156.799836][ T5049] loop2: detected capacity change from 0 to 128 [ 156.814496][ T5049] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 156.829074][ T5049] hpfs: filesystem error: improperly stopped [ 156.835354][ T5049] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 156.843833][ T5049] hpfs: You really don't want any checks? You are crazy... [ 156.851289][ T5049] hpfs: Code page index out of array [ 156.856762][ T5049] hpfs: code page support is disabled [ 156.908723][ T5051] loop0: detected capacity change from 0 to 512 [ 158.322329][ T5049] hpfs: hpfs_map_4sectors(): unaligned read [ 158.335053][ T5051] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.482574][ T5049] hpfs: hpfs_map_4sectors(): unaligned read [ 158.488585][ T5049] hpfs: filesystem error: unable to find root dir [ 158.586579][ T5049] hpfs: hpfs_map_4sectors(): unaligned read [ 158.745950][ T5049] hpfs: hpfs_map_4sectors(): unaligned read [ 158.872863][ T26] audit: type=1800 audit(1787985247.334:22): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.200" name="file" dev="configfs" ino=36166 res=0 errno=0 [ 158.897517][ T5051] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.956921][ T5061] loop3: detected capacity change from 0 to 128 [ 158.969364][ T5061] FAT-fs (loop3): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 158.992064][ T5051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.199: bg 0: block 248: padding at end of block bitmap is not set [ 159.056944][ T5051] Quota error (device loop0): write_blk: dquota write failed [ 159.132383][ T5051] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 160.275347][ T5051] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.199: Failed to acquire dquot type 1 [ 161.176244][ T5051] EXT4-fs (loop0): 1 truncate cleaned up [ 161.254738][ T5074] loop1: detected capacity change from 0 to 8 [ 161.293815][ T5074] squashfs: Unknown parameter 'yzkaller' [ 161.300770][ T5051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 161.394982][ T5076] loop2: detected capacity change from 0 to 1024 [ 161.425954][ T4905] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.866425][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 162.178501][ T5082] loop0: detected capacity change from 0 to 512 [ 162.204304][ T5082] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.266706][ T5082] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 162.283105][ T5082] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.208: bg 0: block 248: padding at end of block bitmap is not set [ 162.300487][ T5082] Quota error (device loop0): write_blk: dquota write failed [ 162.308230][ T5082] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 162.318370][ T5082] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.208: Failed to acquire dquot type 1 [ 162.336057][ T5082] EXT4-fs (loop0): 1 truncate cleaned up [ 162.341912][ T5082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.107666][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 163.141141][ T4329] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 163.161523][ T4329] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 163.987472][ T26] audit: type=1326 audit(1787985252.444:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.2.213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb17319e159 code=0x0 [ 164.172184][ T5099] loop2: detected capacity change from 0 to 2048 [ 164.491288][ T5099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.094438][ T26] audit: type=1326 audit(1787985253.554:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6139f9e159 code=0x0 [ 165.188777][ T5107] kAFS: No cell specified [ 166.061625][ T5109] loop3: detected capacity change from 0 to 2048 [ 167.024986][ T5109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.501965][ T5124] loop0: detected capacity change from 0 to 16 [ 168.528560][ T5125] loop4: detected capacity change from 0 to 512 [ 169.705590][ T5125] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.788746][ T5125] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 169.807570][ T5125] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.218: bg 0: block 248: padding at end of block bitmap is not set [ 169.829210][ T5125] Quota error (device loop4): write_blk: dquota write failed [ 169.836991][ T5125] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 169.847114][ T5125] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.218: Failed to acquire dquot type 1 [ 169.864195][ T5125] EXT4-fs (loop4): 1 truncate cleaned up [ 169.870010][ T5125] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.983180][ T5124] erofs: (device loop0): mounted with root inode @ nid 36. [ 172.529091][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 172.592700][ T5149] loop0: detected capacity change from 0 to 16 [ 172.661539][ T5149] erofs: (device loop0): mounted with root inode @ nid 36. [ 172.691450][ T4549] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 172.701144][ T4549] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 1 [ 173.558152][ T5149] tipc: Enabling of bearer rejected, failed to enable media [ 173.578246][ T5149] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 174.224639][ T5160] loop1: detected capacity change from 0 to 4096 [ 174.623358][ T5160] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 174.650909][ T5160] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 175.293753][ T26] audit: type=1326 audit(1787985263.744:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.0.228" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f920e79e159 code=0x0 [ 175.548574][ T5168] loop0: detected capacity change from 0 to 2048 [ 175.563308][ T5168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.805611][ T5173] loop1: detected capacity change from 0 to 2048 [ 176.137709][ T5173] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.261070][ T26] audit: type=1326 audit(1787985264.084:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5166 comm="syz.1.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff88359e159 code=0x0 [ 178.403288][ T5190] loop0: detected capacity change from 0 to 16 [ 178.413934][ T5190] erofs: (device loop0): mounted with root inode @ nid 36. [ 178.425381][ T5188] loop2: detected capacity change from 0 to 16 [ 178.482609][ T5188] erofs: (device loop2): mounted with root inode @ nid 36. [ 181.333237][ T26] audit: type=1326 audit(1787985269.794:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 181.454676][ T5214] loop1: detected capacity change from 0 to 2048 [ 181.470669][ T5214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.480039][ T26] audit: type=1326 audit(1787985269.834:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 181.603792][ T26] audit: type=1326 audit(1787985269.834:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 181.633592][ T26] audit: type=1326 audit(1787985269.844:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 181.674660][ T26] audit: type=1326 audit(1787985269.844:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 181.774828][ T26] audit: type=1326 audit(1787985269.844:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 181.804427][ T5220] loop3: detected capacity change from 0 to 128 [ 181.832485][ T5220] FAT-fs (loop3): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 181.845579][ T4319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 181.868792][ T26] audit: type=1326 audit(1787985269.844:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 183.654209][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 183.662976][ T4319] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 183.672169][ T4319] usb 3-1: config 0 has no interface number 0 [ 183.678307][ T4319] usb 3-1: config 0 interface 184 has no altsetting 0 [ 183.683036][ T26] audit: type=1326 audit(1787985269.844:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 183.703953][ T4319] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 183.781087][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.789197][ T4319] usb 3-1: Product: syz [ 183.798178][ T26] audit: type=1326 audit(1787985269.874:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 183.841106][ T4319] usb 3-1: Manufacturer: syz [ 183.845949][ T4319] usb 3-1: SerialNumber: syz [ 184.535862][ T4319] usb 3-1: config 0 descriptor?? [ 184.665249][ T5236] loop4: detected capacity change from 0 to 16 [ 184.890438][ T5236] erofs: (device loop4): mounted with root inode @ nid 36. [ 184.898311][ T4319] usb 3-1: can't set config #0, error -71 [ 184.907798][ T4319] usb 3-1: USB disconnect, device number 2 [ 184.971222][ T26] audit: type=1326 audit(1787985269.874:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 186.623166][ T5232] loop0: detected capacity change from 0 to 2048 [ 186.651164][ T26] audit: type=1326 audit(1787985269.874:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 186.730350][ T5232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.692890][ T26] audit: type=1326 audit(1787985269.874:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 187.816602][ T26] audit: type=1326 audit(1787985269.874:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 187.895122][ T26] audit: type=1326 audit(1787985269.874:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 187.981231][ T26] audit: type=1326 audit(1787985269.874:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 188.217784][ T26] audit: type=1326 audit(1787985269.874:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 188.269176][ T26] audit: type=1326 audit(1787985269.874:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 188.352529][ T26] audit: type=1326 audit(1787985269.874:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 189.122463][ T26] audit: type=1326 audit(1787985269.994:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 189.146772][ T26] audit: type=1326 audit(1787985269.994:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.2.240" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17319e159 code=0x7ffc0000 [ 189.251155][ T5262] loop1: detected capacity change from 0 to 8 [ 189.267509][ T5257] loop0: detected capacity change from 0 to 2048 [ 189.295371][ T5257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.322053][ T5262] squashfs: Unknown parameter 'yzkaller' [ 189.750262][ T5269] loop4: detected capacity change from 0 to 128 [ 189.768076][ T5269] FAT-fs (loop4): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 191.327119][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 191.335407][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 191.341511][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 191.347520][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 191.353980][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 193.880889][ T5288] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 194.146288][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 194.146302][ T26] audit: type=1326 audit(1787985282.604:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.264" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff88359e159 code=0x0 [ 194.324845][ T5299] loop1: detected capacity change from 0 to 2048 [ 194.373627][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380440][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.632498][ T5299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.313540][ T5303] loop1: detected capacity change from 0 to 512 [ 196.371106][ T5303] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 196.430357][ T5303] EXT4-fs (loop1): invalid journal inode [ 196.443088][ T5307] loop3: detected capacity change from 0 to 8 [ 196.457145][ T5303] EXT4-fs (loop1): can't get journal size [ 196.470829][ T5307] squashfs: Unknown parameter 'yzkaller' [ 196.571900][ T5303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 196.619065][ T5309] loop2: detected capacity change from 0 to 2048 [ 196.666729][ T5309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.843168][ T5303] System zones: 1-12, 13-13 [ 197.838618][ T5303] EXT4-fs (loop1): 1 truncate cleaned up [ 197.860631][ T5303] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.513066][ T5319] loop4: detected capacity change from 0 to 16 [ 198.654646][ T5319] erofs: (device loop4): mounted with root inode @ nid 36. [ 198.804507][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 199.471154][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 199.478702][ T4319] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 199.533903][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 199.542414][ T4319] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 199.593339][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 199.654025][ T4319] usb 3-1: Product: syz [ 199.676293][ T4319] usb 3-1: Manufacturer: syz [ 199.693362][ T4319] usb 3-1: SerialNumber: syz [ 199.706223][ T4319] usb 3-1: config 0 descriptor?? [ 199.729500][ T5322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.803977][ T4319] hub 3-1:0.0: bad descriptor, ignoring hub [ 199.809966][ T4319] hub: probe of 3-1:0.0 failed with error -5 [ 199.870321][ T5334] ================================================================== [ 199.878439][ T5334] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 199.885695][ T5334] Read of size 8 at addr ffff888029e68618 by task syz.3.275/5334 [ 199.893519][ T5334] [ 199.895851][ T5334] CPU: 1 PID: 5334 Comm: syz.3.275 Not tainted syzkaller #0 [ 199.903159][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.913249][ T5334] Call Trace: [ 199.916534][ T5334] [ 199.919482][ T5334] dump_stack_lvl+0x188/0x24e [ 199.924164][ T5334] ? read_lock_is_recursive+0x10/0x10 [ 199.929557][ T5334] ? show_regs_print_info+0x12/0x12 [ 199.934766][ T5334] ? load_image+0x410/0x410 [ 199.939268][ T5334] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 199.944725][ T5334] ? __virt_addr_valid+0x188/0x540 [ 199.949840][ T5334] ? __virt_addr_valid+0x467/0x540 [ 199.954952][ T5334] ? dvb_device_open+0xc5/0x360 [ 199.959802][ T5334] print_report+0xa8/0x210 [ 199.964218][ T5334] kasan_report+0x10b/0x140 [ 199.968726][ T5334] ? dvb_device_open+0xc5/0x360 [ 199.973585][ T5334] dvb_device_open+0xc5/0x360 [ 199.978267][ T5334] chrdev_open+0x585/0x5f0 [ 199.982688][ T5334] ? cd_forget+0x160/0x160 [ 199.987103][ T5334] ? fsnotify_perm+0x39b/0x550 [ 199.991866][ T5334] ? cd_forget+0x160/0x160 [ 199.996282][ T5334] do_dentry_open+0x7dd/0x10b0 [ 200.001075][ T5334] path_openat+0x2674/0x2f10 [ 200.005666][ T5334] ? verify_lock_unused+0x140/0x140 [ 200.010865][ T5334] ? do_sys_openat2+0xdd/0x4f0 [ 200.015632][ T5334] ? do_filp_open+0x420/0x420 [ 200.020315][ T5334] do_filp_open+0x1ee/0x420 [ 200.024822][ T5334] ? vfs_tmpfile+0x470/0x470 [ 200.029424][ T5334] ? _raw_spin_unlock+0x24/0x40 [ 200.034274][ T5334] ? alloc_fd+0x590/0x640 [ 200.038602][ T5334] do_sys_openat2+0x14b/0x4f0 [ 200.043280][ T5334] ? do_sys_open+0xe0/0xe0 [ 200.047699][ T5334] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 200.053687][ T5334] ? lock_chain_count+0x20/0x20 [ 200.058578][ T5334] __x64_sys_openat+0x135/0x160 [ 200.063455][ T5334] do_syscall_64+0x4c/0xa0 [ 200.067881][ T5334] ? clear_bhb_loop+0x60/0xb0 [ 200.072564][ T5334] ? clear_bhb_loop+0x60/0xb0 [ 200.077242][ T5334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.083141][ T5334] RIP: 0033:0x7f6139f5e98e [ 200.087642][ T5334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.107296][ T5334] RSP: 002b:00007f61381f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.115720][ T5334] RAX: ffffffffffffffda RBX: 00007f61381f66c0 RCX: 00007f6139f5e98e [ 200.123733][ T5334] RDX: 0000000000000002 RSI: 00007f61381f5c00 RDI: ffffffffffffff9c [ 200.131706][ T5334] RBP: 00007f61381f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 200.139679][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 200.147654][ T5334] R13: 00007f613a226038 R14: 00007f613a225fa0 R15: 00007ffd79604b98 [ 200.155633][ T5334] [ 200.158645][ T5334] [ 200.160969][ T5334] Allocated by task 1: [ 200.165036][ T5334] kasan_set_track+0x4b/0x70 [ 200.169629][ T5334] __kasan_kmalloc+0x8e/0xa0 [ 200.174220][ T5334] dvb_register_device+0x305/0x1dc0 [ 200.179418][ T5334] dvb_register_frontend+0x629/0x900 [ 200.184697][ T5334] vidtv_bridge_probe+0x9cf/0xf50 [ 200.189714][ T5334] platform_probe+0x137/0x1c0 [ 200.194393][ T5334] really_probe+0x24a/0xb40 [ 200.198892][ T5334] __driver_probe_device+0x1f5/0x390 [ 200.204176][ T5334] driver_probe_device+0x4f/0x420 [ 200.209194][ T5334] __driver_attach+0x43d/0x6c0 [ 200.213952][ T5334] bus_for_each_dev+0x182/0x1f0 [ 200.218881][ T5334] bus_add_driver+0x324/0x5d0 [ 200.223556][ T5334] driver_register+0x32d/0x430 [ 200.228314][ T5334] vidtv_bridge_init+0x45/0x73 [ 200.233076][ T5334] do_one_initcall+0x257/0x800 [ 200.237841][ T5334] do_initcall_level+0x13d/0x1ed [ 200.242787][ T5334] do_initcalls+0x4b/0x8a [ 200.247227][ T5334] kernel_init_freeable+0x401/0x5ab [ 200.252425][ T5334] kernel_init+0x19/0x1b0 [ 200.256755][ T5334] ret_from_fork+0x1f/0x30 [ 200.261171][ T5334] [ 200.263485][ T5334] Freed by task 5288: [ 200.267451][ T5334] kasan_set_track+0x4b/0x70 [ 200.272048][ T5334] kasan_save_free_info+0x27/0x40 [ 200.277090][ T5334] ____kasan_slab_free+0x126/0x1f0 [ 200.282200][ T5334] slab_free_freelist_hook+0x133/0x1b0 [ 200.287657][ T5334] __kmem_cache_free+0xb6/0x200 [ 200.292503][ T5334] dvb_device_open+0x2d2/0x360 [ 200.297310][ T5334] chrdev_open+0x585/0x5f0 [ 200.301730][ T5334] do_dentry_open+0x7dd/0x10b0 [ 200.306489][ T5334] path_openat+0x2674/0x2f10 [ 200.311070][ T5334] do_filp_open+0x1ee/0x420 [ 200.315566][ T5334] do_sys_openat2+0x14b/0x4f0 [ 200.320272][ T5334] __x64_sys_openat+0x135/0x160 [ 200.325123][ T5334] do_syscall_64+0x4c/0xa0 [ 200.329552][ T5334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.335532][ T5334] [ 200.337869][ T5334] The buggy address belongs to the object at ffff888029e68600 [ 200.337869][ T5334] which belongs to the cache kmalloc-256 of size 256 [ 200.351917][ T5334] The buggy address is located 24 bytes inside of [ 200.351917][ T5334] 256-byte region [ffff888029e68600, ffff888029e68700) [ 200.365383][ T5334] [ 200.367701][ T5334] The buggy address belongs to the physical page: [ 200.374206][ T5334] page:ffffea0000a79a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e68 [ 200.384351][ T5334] head:ffffea0000a79a00 order:1 compound_mapcount:0 compound_pincount:0 [ 200.392671][ T5334] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 200.400651][ T5334] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 200.409256][ T5334] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 200.417826][ T5334] page dumped because: kasan: bad access detected [ 200.424237][ T5334] page_owner tracks the page as allocated [ 200.429957][ T5334] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13966526177, free_ts 0 [ 200.449704][ T5334] post_alloc_hook+0x173/0x1a0 [ 200.454500][ T5334] get_page_from_freelist+0x206b/0x2180 [ 200.460316][ T5334] __alloc_pages+0x1ec/0x4f0 [ 200.465008][ T5334] alloc_page_interleave+0x24/0x1e0 [ 200.470207][ T5334] alloc_slab_page+0x5d/0x180 [ 200.474892][ T5334] new_slab+0x87/0x2d0 [ 200.478961][ T5334] ___slab_alloc+0xbc5/0x1240 [ 200.483638][ T5334] __kmem_cache_alloc_node+0x126/0x270 [ 200.489097][ T5334] kmalloc_trace+0x26/0xe0 [ 200.493519][ T5334] bus_add_driver+0xdc/0x5d0 [ 200.498103][ T5334] driver_register+0x32d/0x430 [ 200.502865][ T5334] usb_register_driver+0x201/0x3c0 [ 200.507980][ T5334] au0828_init+0x135/0x162 [ 200.512415][ T5334] do_one_initcall+0x257/0x800 [ 200.517176][ T5334] do_initcall_level+0x13d/0x1ed [ 200.522114][ T5334] do_initcalls+0x4b/0x8a [ 200.526445][ T5334] page_owner free stack trace missing [ 200.531805][ T5334] [ 200.534120][ T5334] Memory state around the buggy address: [ 200.539760][ T5334] ffff888029e68500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.547813][ T5334] ffff888029e68580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.555894][ T5334] >ffff888029e68600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.563945][ T5334] ^ [ 200.568780][ T5334] ffff888029e68680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.576834][ T5334] ffff888029e68700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.584889][ T5334] ================================================================== [ 201.514390][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.552902][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.968486][ T5334] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 201.975739][ T5334] CPU: 0 PID: 5334 Comm: syz.3.275 Not tainted syzkaller #0 [ 201.983047][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.993119][ T5334] Call Trace: [ 201.996420][ T5334] [ 201.999368][ T5334] dump_stack_lvl+0x188/0x24e [ 202.004074][ T5334] ? memcpy+0x3c/0x60 [ 202.008084][ T5334] ? show_regs_print_info+0x12/0x12 [ 202.013394][ T5334] ? load_image+0x410/0x410 [ 202.017905][ T5334] panic+0x2d3/0x710 [ 202.021803][ T5334] ? bpf_jit_dump+0xd0/0xd0 [ 202.026308][ T5334] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 202.032306][ T5334] ? _raw_spin_unlock+0x40/0x40 [ 202.037195][ T5334] check_panic_on_warn+0x80/0xa0 [ 202.042232][ T5334] ? dvb_device_open+0xc5/0x360 [ 202.047092][ T5334] end_report+0x66/0x110 [ 202.051347][ T5334] kasan_report+0x118/0x140 [ 202.055856][ T5334] ? dvb_device_open+0xc5/0x360 [ 202.060713][ T5334] dvb_device_open+0xc5/0x360 [ 202.065395][ T5334] chrdev_open+0x585/0x5f0 [ 202.069813][ T5334] ? cd_forget+0x160/0x160 [ 202.074233][ T5334] ? fsnotify_perm+0x39b/0x550 [ 202.078999][ T5334] ? cd_forget+0x160/0x160 [ 202.083419][ T5334] do_dentry_open+0x7dd/0x10b0 [ 202.088188][ T5334] path_openat+0x2674/0x2f10 [ 202.092800][ T5334] ? verify_lock_unused+0x140/0x140 [ 202.098054][ T5334] ? do_sys_openat2+0xdd/0x4f0 [ 202.102843][ T5334] ? do_filp_open+0x420/0x420 [ 202.107539][ T5334] do_filp_open+0x1ee/0x420 [ 202.112069][ T5334] ? vfs_tmpfile+0x470/0x470 [ 202.116666][ T5334] ? _raw_spin_unlock+0x24/0x40 [ 202.121518][ T5334] ? alloc_fd+0x590/0x640 [ 202.125850][ T5334] do_sys_openat2+0x14b/0x4f0 [ 202.130560][ T5334] ? do_sys_open+0xe0/0xe0 [ 202.134982][ T5334] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 202.140968][ T5334] ? lock_chain_count+0x20/0x20 [ 202.145836][ T5334] __x64_sys_openat+0x135/0x160 [ 202.150748][ T5334] do_syscall_64+0x4c/0xa0 [ 202.155184][ T5334] ? clear_bhb_loop+0x60/0xb0 [ 202.159875][ T5334] ? clear_bhb_loop+0x60/0xb0 [ 202.164568][ T5334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.170471][ T5334] RIP: 0033:0x7f6139f5e98e [ 202.174910][ T5334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.194525][ T5334] RSP: 002b:00007f61381f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 202.202942][ T5334] RAX: ffffffffffffffda RBX: 00007f61381f66c0 RCX: 00007f6139f5e98e [ 202.210909][ T5334] RDX: 0000000000000002 RSI: 00007f61381f5c00 RDI: ffffffffffffff9c [ 202.218969][ T5334] RBP: 00007f61381f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 202.226943][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 202.234949][ T5334] R13: 00007f613a226038 R14: 00007f613a225fa0 R15: 00007ffd79604b98 [ 202.242920][ T5334] [ 202.246290][ T5334] Kernel Offset: disabled [ 202.250629][ T5334] Rebooting in 86400 seconds..