last executing test programs: 1m34.075422831s ago: executing program 3 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 1m33.010168477s ago: executing program 3 (id=141): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet(0x2, 0x2, 0x0) userfaultfd(0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m32.804580277s ago: executing program 3 (id=142): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000300)={0x20, 0x15, 0x65, "eb3b159b93f29066eb3db9ea1502496312045c9d08a6386e320ae7ea8e924db3bebc5dcc244ff275ff7b29f5617e7e114458bfcf117258b8844ebe7517dfaf9cf1df3f5082c956e21108862a6148702c5eb246fa93eb6c2d618b0832420b5d402680a3b179"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0xe4, {0xe2, "42c405d5413cc64a3e25d0862fc5a4fabf8ccc00de235b00dd01e8c0422afe9f8bb0d92b701adfb92c0d4ccb697ead8865002d1c1109ce8dea651d2d9f6452a814d07bcc690218ef1d4a47df74a363b77288f5e0675908f5783604a1a71dfc55710c1e7580c4b80330805438d30d9cd37185c58b3bef66f6ed2f5ee082cfb0438ad1be500f63028048ec89bdfeb42bcd7f2d747e706f9e0c24fc7aef1e72842ce00bed2aae75cba5a55c6d8dca9bf5f8401b5880c002a301b8b5b03515e73b0cbc2b66a687a52119836c48bc9ca16cab8b72bf905be524b3094b9958ab5e134992ee"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x2}}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) socket$packet(0x11, 0x2, 0x300) 1m29.532035089s ago: executing program 3 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x2) 1m29.379736647s ago: executing program 3 (id=172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1m28.879537563s ago: executing program 3 (id=176): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 1m28.775210739s ago: executing program 32 (id=176): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 1m2.598650967s ago: executing program 0 (id=339): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1m2.385498838s ago: executing program 0 (id=341): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000280)=ANY=[], 0x10}], 0x2}, 0x0) 1m2.195597567s ago: executing program 0 (id=342): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer={0x40106309}], 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x0, 0xd2, &(0x7f0000000880)=""/210}, {0xffff1000, 0x8, &(0x7f0000000980)=""/8}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 1m2.098123413s ago: executing program 0 (id=343): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$fuse(0x0, 0x0, 0x10104a8, 0x0, 0x81, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m1.599559409s ago: executing program 0 (id=348): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000019000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00007b6000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x0, 0x39d}) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 58.90936192s ago: executing program 0 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) 58.754188418s ago: executing program 33 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) 47.247944602s ago: executing program 1 (id=420): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x210000, &(0x7f00000007c0)={[{@nobarrier}, {@barrier}, {@commit={'commit', 0x3d, 0x5}}, {@journal_ioprio}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@inlinecrypt}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x1020000, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x29) 46.906800279s ago: executing program 1 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) 45.851211935s ago: executing program 1 (id=428): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x2008000, 0x2}, 0x4) write(r0, &(0x7f00000002c0)="240000f71a005f0214f9f407000904070000000000000000000000006300000000000000ba6504f4df0faacd19719176289332b36981117590c814fbdefaf65332442780120d1cd138500d6768fe124c817af026a6ffa89996086990082d86ea259ceb0000445a5271718a6ffea9fec249f0ef96e9678ea77cf035b5b474a72a95d0994cc7e22f9c1f9e6c1940f62f043a900707ddf37581be513e8c524f783c02ef8980b73f55c4390709b9d0a65d2ca6d51f6f8cc389e4d697d9512b420e", 0xbf) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 45.461063655s ago: executing program 1 (id=430): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) r2 = dup(r0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendfile(r5, r1, 0x0, 0x80000001) 44.954977822s ago: executing program 1 (id=435): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) pipe(0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x2}, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 43.028364273s ago: executing program 1 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) 42.842946823s ago: executing program 34 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) 13.287682393s ago: executing program 5 (id=626): r0 = io_uring_setup(0x7, 0x0) io_uring_enter(r0, 0x2219, 0x7725, 0x73, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 12.420053838s ago: executing program 5 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008040) unshare(0x62000000) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa5000/0x2000)=nil, 0x2000, 0x1, 0x82011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00') syz_clone3(&(0x7f0000000800)={0x200b80000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 12.070803436s ago: executing program 5 (id=641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x180862) io_setup(0x1, &(0x7f00000016c0)) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000080)=0x22040) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 11.875614587s ago: executing program 5 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x2) 11.801941731s ago: executing program 5 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) listen(r0, 0x200b) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 11.663765288s ago: executing program 5 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000140)={0x3f, 0x6, 0x0, {0x0, 0x1, 0x16, 0x0, 'trusted.overlay.upper\x00'}}, 0x3f) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11.501051887s ago: executing program 35 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000140)={0x3f, 0x6, 0x0, {0x0, 0x1, 0x16, 0x0, 'trusted.overlay.upper\x00'}}, 0x3f) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.85647232s ago: executing program 7 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f00000002c0)=ANY=[@ANYBLOB='showassoc,showassoc,nocompress,check=relaxed,overriderockperm,hide,session=0x0000000000000032,check=relaxed,unhide,check=strict,mode=0x000000000000000ocharset=default,sbsector=0x00000000000000da,\x00'/207], 0x4, 0xa1c, &(0x7f0000001080)="$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") 5.800668445s ago: executing program 7 (id=682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf00", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.577859927s ago: executing program 7 (id=683): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x20044041) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) connect$can_j1939(r0, 0x0, 0x0) 4.261465336s ago: executing program 7 (id=691): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xc00) mmap(&(0x7f0000a2e000/0x2000)=nil, 0x2000, 0x2000008, 0x4010, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0xff80, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 3.844139038s ago: executing program 6 (id=694): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001dc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040000) 3.788321861s ago: executing program 7 (id=695): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) 3.05321004s ago: executing program 2 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, 0x0}, 0x4) 3.04306609s ago: executing program 6 (id=705): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2.783937674s ago: executing program 2 (id=706): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) poll(0x0, 0x0, 0x9) 2.731526647s ago: executing program 6 (id=708): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2.619780902s ago: executing program 2 (id=709): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x2f000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendto$packet(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000280)={0x11, 0x88a8, r1, 0x1, 0x6, 0x6, @multicast}, 0x14) 2.425999272s ago: executing program 4 (id=710): socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x4000007}], 0x1, 0x40000002, 0x0) dup3(r1, r0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x1, r2, 0x6}) 2.180138036s ago: executing program 2 (id=711): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x1d, 0xc2}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1264b7358bf}, 0x8040) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000002c00128009000100626f6e64000000001c000280050001000600000008000a000000000008000b00", @ANYRES16=r3, @ANYBLOB="53d444c5"], 0x4c}}, 0x28000000) 2.036671113s ago: executing program 2 (id=712): syz_usb_connect$uac1(0x2, 0x91, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x1, 0x0, 0x5c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7bf9, 0x22}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x9, 0x5, 0x9, 0x4b}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x3, 0x1, 0x7, 0xff, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x1, 0x6, {0x7, 0x25, 0x1, 0x4, 0x2, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x6, 0x4, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 2.015665104s ago: executing program 8 (id=649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000034000000", 0xfe60) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xe}, 0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x0) 1.821081674s ago: executing program 8 (id=713): madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) r0 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x92, &(0x7f0000000580)=ANY=[], 0x4, 0x336, &(0x7f0000000700)="$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") socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000080}, 0x4008000) mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.494938211s ago: executing program 4 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f00000005c0)='./file1\x00', 0x20000, 0x718bb647156ec2f6) chdir(&(0x7f0000000000)='./bus\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x13a04a, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) 1.305311812s ago: executing program 4 (id=715): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x5efa99143d95bf58) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.166468649s ago: executing program 4 (id=716): syz_usb_connect$uac1(0x2, 0xdc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 991.621678ms ago: executing program 6 (id=717): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) open(0x0, 0x0, 0x112) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x40000000) 981.698888ms ago: executing program 8 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0xd94, 0x0) poll(&(0x7f0000000700)=[{0xffffffffffffffff, 0x4088}, {0xffffffffffffffff, 0xf942c09109ece48f}, {r2, 0x80}, {r2, 0x60c}, {r1, 0x400}, {0xffffffffffffffff, 0x582}, {0xffffffffffffffff, 0x80}], 0x7, 0x3) 898.534593ms ago: executing program 2 (id=719): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2208c04, &(0x7f0000005c80)=ANY=[@ANYBLOB="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"], 0x1, 0x5523, &(0x7f0000000740)="$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") 546.426871ms ago: executing program 6 (id=720): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x301, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8b, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 383.43036ms ago: executing program 4 (id=721): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0xc1}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x4, 0x4, 0x1}}], 0x30}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x3, 0x4002004c4, 0x0, 0x0, 0xa, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x9c], 0xeeee8000, 0x3003d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 94.693855ms ago: executing program 6 (id=722): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1, 0xe00069, 0x1, 0xfffa, 0x7, 0xfffffffc, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) getuid() r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 94.375335ms ago: executing program 4 (id=723): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b80)=ANY=[], 0x41, 0x5e97, &(0x7f0000005e00)="$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") creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) mknod(&(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d6d697865642c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235352c636865636b3d7374726963742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c004c21fbd23364597e61bd9e6c47bce24b3f93d831eaa8688deebdbf10d10f509bad0fabd2253225b10ce42f4dc8b613d3585bcb3b5892369a7a4e0325cb6510"], 0x65, 0x352, &(0x7f0000000180)="$eJzs3U9oHFUYAPBvO5vsJlCTg1D0tHoTpDQRD3oxoVQo5qCVxX8XF5r6J7sKWVyIh2xzUTwqXgQ9eetBjz2LBxFvHrxaQarixd4KLY7MzmR3k5m0VUzqn9/vUL5+7/v2vTcZspOQvLy8EhvnZ+LCtWtXo9msRX3l9Epcr8ViHIskchcDAPgvuZ6m8VuaGyWeuFX1B/Mxk0ezR7I6AOAwjN7/Xzk+STTu5moAgKNQ+vq/2tOV2TcPbVkAwCEqvf8/uGd437f56+OfCQAA/r2efeHFp1bXIs61Ws2I3ruD9qAdj0/GVy/Ea9GN9TgVC3EzIn9QyJ8Wsn+fPLt25lQr89NitLOOQTuiNxy08yeF1WTU34ilWIjFoj8d9ydZ/9KovxURF4ej+aNXG7RnYr6Y//v5WI/lWIh7S/0RZ9fOLLeKF2j3dvuHETvR3N1Etv6TsRDfHhv953xkvflrZZntpVbrdLq2p39wqTGqAwAAAAAAAAAAAAAAAAAAAACAw3ByLorTc1qL4/Nv0t5w8M65oqBVHh+d75MPF+cD7eTnA6WN3dN53kv2nw+093yeQbsex+7qzgEAAAAAAAAAAAAAAAAAAOCfo781G51ud32zv/X2xiSY7Q6nMm98/dmXc7G/5vVkkol6/nJ7aopcTHUlMW5Px+1psqemCJKIorgWnUuXxyuermmMd1Fqz4JGaahWj8WsodPtHn/gx4+run6fZJIYDzUrp6gV808N9e7JU1XruXVQ628t36bmSpqmB7Vvf1TuimZEvfSB+zuCr66+et8j/ROP9mv1jc4XxaEPDz288NyVDz/9ZaPTjeLSdLuzm/2b6V+eK5m6f2rFda5V3AnVwc4ks7PZ3+ok3/36/P3vf7OvOKm+f9LpzFsHz/X5/sxsHmTLvJOdzlTc/NXBSzfyjR9c0yzfkLvBiU9WOpe3f/h592LebtKpTxIO6gAAAAAAAAAAAAAAAAAAgCMx9bvif8JjzxzeigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6E3+/v9UsFPK3ElwYxjlocb6Zv/AyeeOdKsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/REAAP//CNdwPg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x21) syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8a408, 0x0, 0x0, 0x0, &(0x7f0000000140)) 0s ago: executing program 7 (id=724): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x8000, {"4e068be8035430cf8aa1159fe4d0f21c", "0c9f0104000000001400ffffff00", "7aef720000ffff00"}, 0x2e, 0x5}) kernel console output (not intermixed with test programs): r 2 using dummy_hcd [ 58.902112][ T4327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.919755][ T4173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 59.080603][ T4303] tipc: Started in network mode [ 59.086504][ T4173] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 59.106238][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.106921][ T4303] tipc: Node identity ac1414aa, cluster identity 4711 [ 59.114292][ T4173] usb 4-1: Product: syz [ 59.114320][ T4173] usb 4-1: Manufacturer: syz [ 59.114332][ T4173] usb 4-1: SerialNumber: syz [ 59.128248][ T4173] usb 4-1: config 0 descriptor?? [ 59.145434][ T4263] usb 1-1: Using ep0 maxpacket: 32 [ 59.166989][ T4303] tipc: Enabled bearer , priority 10 [ 59.201562][ T4173] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 59.203382][ T4337] loop1: detected capacity change from 0 to 4096 [ 59.241400][ T4173] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 59.242550][ T4337] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 59.275605][ T4263] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.295795][ T4227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.306050][ T4263] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.322323][ T4263] usb 1-1: config 0 interface 0 has no altsetting 0 [ 59.331224][ T4263] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 59.342066][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.381082][ T4263] usb 1-1: config 0 descriptor?? [ 59.425340][ T4227] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 59.434929][ T4337] ntfs3: loop1: failed to convert "c46c" to iso8859-13 [ 59.436243][ T4227] usb 3-1: can't read configurations, error -71 [ 59.840347][ T4173] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 59.858103][ T4263] hid-generic 0003:0458:5014.0002: item fetching failed at offset 5/39 [ 59.876100][ T4263] hid-generic: probe of 0003:0458:5014.0002 failed with error -22 [ 60.142727][ T4310] udc-core: couldn't find an available UDC or it's busy [ 60.165353][ T4310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 60.187251][ T4263] tipc: Node number set to 2886997162 [ 60.196148][ T4263] usb 1-1: USB disconnect, device number 2 [ 60.355827][ T4173] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 60.364215][ T4173] em28xx 4-1:0.0: board has no eeprom [ 60.705263][ T4173] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 60.716397][ T4173] em28xx 4-1:0.0: dvb set to bulk mode. [ 60.734442][ T4173] usb 4-1: USB disconnect, device number 2 [ 60.766148][ T4173] em28xx 4-1:0.0: Disconnecting em28xx [ 60.773797][ T4230] em28xx 4-1:0.0: Binding DVB extension [ 60.854148][ T4372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 60.875378][ T4230] em28xx 4-1:0.0: Registering input extension [ 60.905819][ T4173] em28xx 4-1:0.0: Closing input extension [ 60.978763][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 60.995885][ T4173] em28xx 4-1:0.0: Freeing device [ 61.012019][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.067781][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.148011][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.163440][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.678222][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.686732][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.887789][ T4399] device bridge_slave_1 left promiscuous mode [ 61.915656][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.952026][ T4399] device bridge_slave_0 left promiscuous mode [ 61.970514][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.264029][ T4414] ======================================================= [ 62.264029][ T4414] WARNING: The mand mount option has been deprecated and [ 62.264029][ T4414] and is ignored by this kernel. Remove the mand [ 62.264029][ T4414] option from the mount to silence this warning. [ 62.264029][ T4414] ======================================================= [ 62.376497][ T4413] loop0: detected capacity change from 0 to 1024 [ 62.502231][ T4413] EXT4-fs (loop0): Ignoring removed bh option [ 62.543945][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 63.031722][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 63.200660][ T4438] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 63.457307][ T4173] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 63.748252][ T4442] loop4: detected capacity change from 0 to 32768 [ 63.772847][ T4442] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.62 (4442) [ 63.825786][ T4173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.865867][ T4173] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.910215][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.946569][ T4173] usb 3-1: config 0 descriptor?? [ 63.956383][ T4442] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 63.975570][ T4442] BTRFS info (device loop4): using free space tree [ 63.995446][ T4442] BTRFS info (device loop4): has skinny extents [ 64.244515][ T4478] loop0: detected capacity change from 0 to 512 [ 64.269424][ T4478] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.290731][ T4442] BTRFS info (device loop4): enabling ssd optimizations [ 64.295510][ T4478] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.364135][ T4452] loop1: detected capacity change from 0 to 32768 [ 64.388816][ T4478] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.70: corrupted in-inode xattr [ 64.404645][ T4478] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.70: couldn't read orphan inode 15 (err -117) [ 64.417906][ T4478] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.429303][ T4442] loop_set_status: loop4 () has still dirty pages (nrpages=1) [ 64.436719][ T4173] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 64.472421][ T4478] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 64.510019][ T4173] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input7 [ 64.537069][ T4452] XFS (loop1): Mounting V5 Filesystem [ 64.605931][ T4173] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 64.646576][ T4452] XFS (loop1): Ending clean mount [ 64.820757][ T4188] XFS (loop1): Unmounting Filesystem [ 65.207148][ T4506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.236552][ T4263] usb 3-1: USB disconnect, device number 5 [ 65.361373][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 65.370811][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 65.383729][ T4510] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.392999][ T4510] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.401840][ T4510] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.410686][ T4510] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.422656][ T4511] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.436607][ T4511] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.485685][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.546693][ T4513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 65.735293][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 65.855509][ T7] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 65.865277][ T7] usb 2-1: config 0 has no interface number 0 [ 65.872603][ T7] usb 2-1: config 0 interface 12 has no altsetting 0 [ 65.943156][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 65.962682][ T4528] kvm: pic: non byte read [ 65.979894][ T4528] kvm: pic: single mode not supported [ 66.095604][ T7] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 66.114920][ T4540] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 66.130725][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.146287][ T4540] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 66.161255][ T7] usb 2-1: Product: syz [ 66.171388][ T7] usb 2-1: Manufacturer: syz [ 66.191619][ T7] usb 2-1: SerialNumber: syz [ 66.229204][ T7] usb 2-1: config 0 descriptor?? [ 66.328363][ T4550] loop4: detected capacity change from 0 to 256 [ 66.429513][ T4550] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 66.760917][ T4559] loop4: detected capacity change from 0 to 8 [ 66.910176][ T4559] SQUASHFS error: xz decompression failed, data probably corrupt [ 66.943391][ T4559] SQUASHFS error: Failed to read block 0x60: -5 [ 66.980905][ T4559] SQUASHFS error: xz decompression failed, data probably corrupt [ 67.019914][ T4559] SQUASHFS error: Failed to read block 0x60: -5 [ 67.040856][ T26] audit: type=1800 audit(1777338954.690:2): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 67.084480][ T4559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.174542][ T4559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.221102][ T4559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.511802][ T4552] loop0: detected capacity change from 0 to 32768 [ 67.744216][ T4552] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.87 (4552) [ 68.219959][ T4582] orangefs_mount: mount request failed with -4 [ 68.438200][ T4552] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 68.553246][ T4552] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 68.618136][ T4552] BTRFS info (device loop0): use zstd compression, level 3 [ 68.684375][ T4552] BTRFS info (device loop0): using free space tree [ 68.749937][ T4552] BTRFS info (device loop0): has skinny extents [ 68.775644][ T4628] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.784452][ T4628] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.793291][ T4628] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.802259][ T4628] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.823856][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 68.840765][ T4628] Zero length message leads to an empty skb [ 68.985867][ T7] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 69.002110][ T7] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 69.009909][ T7] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 69.024642][ T7] f81534: probe of 2-1:0.12 failed with error -71 [ 69.034992][ T7] usb 2-1: USB disconnect, device number 2 [ 69.214486][ T4552] BTRFS info (device loop0): enabling ssd optimizations [ 69.470304][ T4625] loop3: detected capacity change from 0 to 40427 [ 69.487882][ T4663] binder: 4662:4663 ioctl c0306201 200000000080 returned -14 [ 69.522007][ T4663] binder: 4662:4663 ioctl c0306201 2000000003c0 returned -14 [ 69.523172][ T4625] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.590998][ T4625] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.625374][ T4601] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.642262][ T4625] F2FS-fs (loop3): invalid crc value [ 69.692359][ T4625] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.801806][ T4625] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.817529][ T4625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.007094][ T4601] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 70.040282][ T4601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.092243][ T4601] usb 2-1: config 0 descriptor?? [ 70.144549][ T144] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 70.179423][ T144] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 70.462252][ T4601] [drm] vendor descriptor length:c3 data:08 0d 02 28 b3 8e 99 64 00 00 00 [ 70.478191][ T4601] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 70.665464][ T4601] [drm:udl_init] *ERROR* Selecting channel failed [ 70.742677][ T4601] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 70.785541][ T4601] [drm] Initialized udl on minor 2 [ 70.815355][ T4601] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 70.850292][ T4601] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 70.895255][ T4601] usb 2-1: USB disconnect, device number 3 [ 70.918768][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 70.941267][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 70.962920][ T13] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 70.993707][ T4694] binder: BINDER_SET_CONTEXT_MGR already set [ 71.015439][ T4694] binder: 4693:4694 ioctl 4018620d 200000004a80 returned -16 [ 71.134351][ T4699] capability: warning: `syz.0.115' uses deprecated v2 capabilities in a way that may be insecure [ 71.290574][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 71.326958][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333707][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.419491][ T4709] fuse: Bad value for 'fd' [ 72.189451][ T4714] loop1: detected capacity change from 0 to 32768 [ 72.304714][ T4714] XFS (loop1): Mounting V5 Filesystem [ 72.454292][ T4714] XFS (loop1): Ending clean mount [ 72.469886][ T4714] XFS (loop1): Quotacheck needed: Please wait. [ 72.580721][ T4714] XFS (loop1): Quotacheck: Done. [ 72.730124][ T4736] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.881625][ T4737] loop2: detected capacity change from 0 to 4096 [ 73.017639][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 73.087868][ T4188] XFS (loop1): Unmounting Filesystem [ 73.094937][ T4739] device lo entered promiscuous mode [ 73.150826][ T4739] device tunl0 entered promiscuous mode [ 73.178994][ T4739] device gre0 entered promiscuous mode [ 73.186403][ T4739] device gretap0 entered promiscuous mode [ 73.193267][ T4739] device erspan0 entered promiscuous mode [ 73.201361][ T4739] device ip_vti0 entered promiscuous mode [ 73.208196][ T4739] device ip6_vti0 entered promiscuous mode [ 73.214560][ T4739] device sit0 entered promiscuous mode [ 73.220943][ T4739] device ip6tnl0 entered promiscuous mode [ 73.226891][ T4737] loop_set_status: loop2 () has still dirty pages (nrpages=5) [ 73.227770][ T4739] device ip6gre0 entered promiscuous mode [ 73.242367][ T4739] device syz_tun entered promiscuous mode [ 73.249236][ T4739] device ip6gretap0 entered promiscuous mode [ 73.258593][ T4739] device bridge0 entered promiscuous mode [ 73.270171][ T4739] device vcan0 entered promiscuous mode [ 73.276233][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.283650][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.293558][ T4739] device bond0 entered promiscuous mode [ 73.300362][ T4739] device bond_slave_0 entered promiscuous mode [ 73.307172][ T4739] device bond_slave_1 entered promiscuous mode [ 73.315920][ T4739] device team0 entered promiscuous mode [ 73.321658][ T4739] device team_slave_0 entered promiscuous mode [ 73.328808][ T4739] device team_slave_1 entered promiscuous mode [ 73.336870][ T4739] device dummy0 entered promiscuous mode [ 73.342944][ T4739] device nlmon0 entered promiscuous mode [ 73.350162][ T4739] device caif0 entered promiscuous mode [ 73.356728][ T4739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.403662][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 73.445264][ T4526] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.464952][ T4742] device team_slave_0 left promiscuous mode [ 73.512759][ T4742] team0 (unregistering): Port device team_slave_0 removed [ 73.520645][ T4742] device team_slave_1 left promiscuous mode [ 73.540269][ T4742] team0 (unregistering): Port device team_slave_1 removed [ 73.550791][ T4751] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000007 [ 73.710128][ T4755] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 73.718482][ T4526] usb 1-1: Using ep0 maxpacket: 16 [ 73.865426][ T4526] usb 1-1: config 0 has no interfaces? [ 73.898629][ T4760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 73.979380][ T4526] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 73.988695][ T4526] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 74.542345][ T4526] usb 1-1: Manufacturer: syz [ 74.585990][ T4526] usb 1-1: config 0 descriptor?? [ 74.799621][ T4760] loop3: detected capacity change from 0 to 32768 [ 74.918397][ T26] audit: type=1326 audit(1777338962.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.015502][ T26] audit: type=1326 audit(1777338962.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.078225][ T26] audit: type=1326 audit(1777338962.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.189790][ T26] audit: type=1326 audit(1777338962.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.253042][ T26] audit: type=1326 audit(1777338962.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.353259][ T26] audit: type=1326 audit(1777338962.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.432842][ T26] audit: type=1326 audit(1777338962.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.455517][ T4601] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.508938][ T26] audit: type=1326 audit(1777338962.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7ffc0000 [ 75.572797][ T4741] Set syz1 is full, maxelem 6117 reached [ 75.581500][ T26] audit: type=1326 audit(1777338962.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8371a6b code=0x7ffc0000 [ 75.632136][ T4782] loop2: detected capacity change from 0 to 4096 [ 75.695859][ T26] audit: type=1326 audit(1777338962.600:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4768 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38a8371a6b code=0x7ffc0000 [ 75.760567][ T4526] usb 1-1: USB disconnect, device number 3 [ 75.838659][ T4601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.877184][ T4601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.912458][ T4601] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.954554][ T4601] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.973917][ T4776] loop1: detected capacity change from 0 to 32768 [ 75.980673][ T4601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.998999][ T4601] usb 4-1: config 0 descriptor?? [ 76.376912][ T4800] loop0: detected capacity change from 0 to 128 [ 76.439291][ T1325] cfg80211: failed to load regulatory.db [ 76.539281][ T4800] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.559430][ T4601] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 76.587924][ T4800] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.654335][ T4601] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.716052][ T4804] mmap: syz.4.152 (4804) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 76.915635][ C0] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz-executor) [ 76.945130][ T4812] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.066640][ T4812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.368926][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 77.860944][ T4839] loop2: detected capacity change from 0 to 8 [ 78.632911][ T4519] usb 4-1: USB disconnect, device number 3 [ 78.780690][ T4861] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.173'. [ 78.869088][ T4848] loop0: detected capacity change from 0 to 32768 [ 78.881603][ T4848] XFS: attr2 mount option is deprecated. [ 78.927997][ T4848] XFS (loop0): Mounting V5 Filesystem [ 78.992580][ T4848] XFS (loop0): Ending clean mount [ 79.120630][ T4184] XFS (loop0): Unmounting Filesystem [ 79.371620][ T4881] 9pnet: p9_client_clunk (4881): Trying to clunk with invalid fid [ 79.384217][ T4881] CPU: 0 PID: 4881 Comm: syz.2.179 Not tainted syzkaller #0 [ 79.391565][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.401820][ T4881] Call Trace: [ 79.405108][ T4881] [ 79.408047][ T4881] dump_stack_lvl+0x188/0x250 [ 79.412746][ T4881] ? show_regs_print_info+0x20/0x20 [ 79.417963][ T4881] ? load_image+0x400/0x400 [ 79.422633][ T4881] ? v9fs_fid_find+0x2d1/0x320 [ 79.427518][ T4881] p9_client_clunk+0x2b3/0x380 [ 79.432464][ T4881] v9fs_statfs+0x1b7/0x380 [ 79.436931][ T4881] ? v9fs_drop_inode+0x130/0x130 [ 79.441897][ T4881] ? ovl_mount_dir+0x1f6/0x2b0 [ 79.446680][ T4881] ? kfree+0xef/0x2a0 [ 79.450681][ T4881] vfs_statfs+0x13d/0x2c0 [ 79.455039][ T4881] ovl_get_upper+0x1c0/0x600 [ 79.459658][ T4881] ? ovl_fill_super+0x2a30/0x2a30 [ 79.464727][ T4881] ovl_fill_super+0x160c/0x2a30 [ 79.469620][ T4881] ? ovl_mount+0x30/0x30 [ 79.473883][ T4881] ? sget+0x427/0x440 [ 79.477874][ T4881] ? free_anon_bdev+0x20/0x20 [ 79.482580][ T4881] ? ovl_mount+0x30/0x30 [ 79.486849][ T4881] mount_nodev+0x52/0xe0 [ 79.491107][ T4881] legacy_get_tree+0xe6/0x180 [ 79.495970][ T4881] ? virtio_fs_zero_page_range+0x120/0x120 [ 79.501792][ T4881] vfs_get_tree+0x88/0x270 [ 79.506220][ T4881] do_new_mount+0x24a/0xa40 [ 79.510982][ T4881] __se_sys_mount+0x2e3/0x3d0 [ 79.515677][ T4881] ? __x64_sys_mount+0xc0/0xc0 [ 79.520457][ T4881] ? lockdep_hardirqs_on+0x94/0x140 [ 79.525666][ T4881] ? __x64_sys_mount+0x1c/0xc0 [ 79.530460][ T4881] do_syscall_64+0x4c/0xa0 [ 79.534892][ T4881] ? clear_bhb_loop+0x30/0x80 [ 79.539666][ T4881] ? clear_bhb_loop+0x30/0x80 [ 79.544591][ T4881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.550513][ T4881] RIP: 0033:0x7f38a8371dd9 [ 79.554945][ T4881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.574647][ T4881] RSP: 002b:00007f38a65cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.583423][ T4881] RAX: ffffffffffffffda RBX: 00007f38a85eafa0 RCX: 00007f38a8371dd9 [ 79.591419][ T4881] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 79.599710][ T4881] RBP: 00007f38a8407d69 R08: 0000200000000000 R09: 0000000000000000 [ 79.607697][ T4881] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 79.615689][ T4881] R13: 00007f38a85eb038 R14: 00007f38a85eafa0 R15: 00007ffc9134ad88 [ 79.623689][ T4881] [ 79.631511][ T4881] overlayfs: statfs failed on './file0' [ 79.745763][ T4878] chnl_net:caif_netlink_parms(): no params data found [ 79.933515][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.975886][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.983973][ T4878] device bridge_slave_0 entered promiscuous mode [ 79.994143][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.001679][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.010329][ T4878] device bridge_slave_1 entered promiscuous mode [ 80.068482][ T4896] fuse: Bad value for 'fd' [ 80.082406][ T4897] loop0: detected capacity change from 0 to 256 [ 80.149843][ T4878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.173815][ T4878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.844712][ T4878] team0: Port device team_slave_0 added [ 80.914046][ T4878] team0: Port device team_slave_1 added [ 81.015453][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.035729][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.102197][ T4878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.124949][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.143339][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.196459][ T4878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.226105][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 81.320450][ T4601] Bluetooth: hci3: command 0x0409 tx timeout [ 81.385242][ T4878] device hsr_slave_0 entered promiscuous mode [ 81.461921][ T4878] device hsr_slave_1 entered promiscuous mode [ 81.477257][ T4878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.495409][ T4878] Cannot create hsr debugfs directory [ 81.512418][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.529556][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.551856][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.572509][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.674629][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.692671][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.704754][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.714909][ T4934] device bridge_slave_0 left promiscuous mode [ 81.738199][ T4934] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.753200][ T4934] device bridge_slave_1 left promiscuous mode [ 81.764087][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.788774][ T4934] bond0: (slave bond_slave_0): Releasing backup interface [ 81.813450][ T4934] device bond_slave_0 left promiscuous mode [ 81.834834][ T4934] bond0: (slave bond_slave_1): Releasing backup interface [ 81.844254][ T4934] device bond_slave_1 left promiscuous mode [ 82.091229][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 82.117395][ T4956] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.126507][ T4956] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.135282][ T4956] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.144008][ T4956] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.200043][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 82.333981][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 82.454831][ T4878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.466097][ T4878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.485078][ T4878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.548653][ T4598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.568832][ T4598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.600389][ T4878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.677855][ T4598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.690038][ T4598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.701140][ T13] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 82.742436][ T4878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.764571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.775093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.787549][ T4878] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.891271][ T4598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.902928][ T4598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.922708][ T4878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.065769][ T13] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 83.118051][ T4878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.137600][ T13] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 83.253350][ T13] usb 3-1: config 0 has no interface number 0 [ 83.354190][ T13] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 83.571001][ T13] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.587952][ T13] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 83.610697][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.633052][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 83.669394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.682595][ T13] usb 3-1: config 0 descriptor?? [ 83.689703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.715938][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.723102][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.754793][ T4992] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2622702393 (2622702393 ns) > initial count (1696441458 ns). Using initial count to start timer. [ 83.776834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.787941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.800104][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.807226][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.822171][ T4992] kvm: pic: non byte write [ 83.831774][ T4992] kvm: pic: level sensitive irq not supported [ 83.832007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.832809][ T4992] kvm: pic: level sensitive irq not supported [ 83.852444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.876583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.894118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.912150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.922391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.931280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.946226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.974532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.991595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.041725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.071134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.083166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.310184][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 84.407022][ T13] usb 3-1: USB disconnect, device number 6 [ 84.526948][ T4878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.561218][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.585583][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.799568][ T5032] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.715665][ T1325] Bluetooth: hci3: command 0x040f tx timeout [ 86.182257][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.245852][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.335331][ T5076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 86.418196][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.437682][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.454012][ T4878] device veth0_vlan entered promiscuous mode [ 86.486390][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.521163][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.833625][ T4878] device veth1_vlan entered promiscuous mode [ 86.924822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.937600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.976817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.994120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.016964][ T4878] device veth0_macvtap entered promiscuous mode [ 87.080402][ T4878] device veth1_macvtap entered promiscuous mode [ 87.168328][ T5096] tipc: Failed to remove unknown binding: 66,0,0/0:1938745501/1938745502 [ 87.192268][ T4598] device hsr_slave_0 left promiscuous mode [ 87.212739][ T4598] device hsr_slave_1 left promiscuous mode [ 87.214120][ T5096] tipc: Failed to remove unknown binding: 66,0,0/0:1938745501/1938745502 [ 87.254378][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.293251][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.312055][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.335871][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.357839][ T4598] device bridge_slave_1 left promiscuous mode [ 87.385920][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.448373][ T4598] device bridge_slave_0 left promiscuous mode [ 87.454632][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.576095][ T4598] device veth1_macvtap left promiscuous mode [ 87.614778][ T4598] device veth0_macvtap left promiscuous mode [ 87.625106][ T4598] device veth1_vlan left promiscuous mode [ 87.643784][ T4598] device veth0_vlan left promiscuous mode [ 87.795973][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 87.825716][ T4228] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.086612][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 88.191698][ T4598] team0 (unregistering): Port device team_slave_1 removed [ 88.207493][ T4228] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 88.223283][ T4228] usb 1-1: config 0 has no interface number 0 [ 88.241603][ T4228] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.253870][ T4228] usb 1-1: config 0 interface 89 has no altsetting 0 [ 88.267872][ T4598] team0 (unregistering): Port device team_slave_0 removed [ 88.288916][ T4598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.312214][ T4598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.424910][ T4598] bond0 (unregistering): Released all slaves [ 88.431353][ T4228] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 88.455580][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.463621][ T4228] usb 1-1: Product: syz [ 88.495598][ T4228] usb 1-1: Manufacturer: syz [ 88.500247][ T4228] usb 1-1: SerialNumber: syz [ 88.518283][ T4228] usb 1-1: config 0 descriptor?? [ 88.557673][ T4228] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 88.568113][ T4228] em28xx 1-1:0.89: Video interface 89 found: [ 88.572198][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.601416][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.629807][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.659381][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.671198][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.683310][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.696326][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.714885][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.724517][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.766331][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.835202][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.845134][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.875757][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.895608][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.911898][ T4878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.959723][ T4878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.968799][ T4878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.992128][ T4878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.010926][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.027961][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.114428][ T5140] tipc: Started in network mode [ 89.119868][ T5140] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.127767][ T5140] tipc: Enabled bearer , priority 10 [ 89.200768][ T5142] autofs4:pid:5142:autofs_fill_super: called with bogus options [ 89.346148][ T4228] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 89.858067][ T818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.906076][ T818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.923618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.976383][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.013107][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.055646][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.247340][ T4601] tipc: Node number set to 2886997162 [ 90.405823][ T4228] em28xx 1-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 90.409295][ T5163] loop1: detected capacity change from 0 to 2048 [ 90.436083][ T4228] em28xx 1-1:0.89: failed to read eeprom (err=-5) [ 90.443737][ T5168] loop5: detected capacity change from 0 to 256 [ 90.456290][ T4228] em28xx 1-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 90.596001][ T5163] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.616117][ T4228] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 90.668279][ T4228] em28xx 1-1:0.89: analog set to bulk mode. [ 90.689608][ T5163] netlink: 182 bytes leftover after parsing attributes in process `syz.1.253'. [ 90.739081][ T1325] em28xx 1-1:0.89: Registering V4L2 extension [ 90.804141][ T4228] usb 1-1: USB disconnect, device number 4 [ 90.841270][ T4228] em28xx 1-1:0.89: Disconnecting em28xx [ 90.914698][ T1325] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 90.925855][ T1325] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 90.933000][ T1325] em28xx 1-1:0.89: No AC97 audio processor [ 90.964533][ T4518] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 90.984656][ T1325] usb 1-1: Decoder not found [ 91.013890][ T1325] em28xx 1-1:0.89: failed to create media graph [ 91.021940][ T4518] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.044202][ T1325] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 91.079606][ T1325] em28xx 1-1:0.89: Registering snapshot button... [ 91.164372][ T1325] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input9 [ 91.247275][ T1325] em28xx 1-1:0.89: Remote control support is not available for this card. [ 91.278944][ T4228] em28xx 1-1:0.89: Closing input extension [ 91.287530][ T4228] em28xx 1-1:0.89: Deregistering snapshot button [ 91.488100][ T4228] em28xx 1-1:0.89: Freeing device [ 91.547277][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 91.547290][ T26] audit: type=1326 audit(1777338979.200:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5194 comm="syz.0.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43aa9ebdd9 code=0x0 [ 93.345172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 93.375169][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 94.345167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.405172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.415053][ T4226] Bluetooth: hci0: command 0x0c20 tx timeout [ 94.475170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 94.935170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.135170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.155169][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.755194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 96.294330][ T26] audit: type=1804 audit(1777338983.950:63): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.280" name="bus" dev="ramfs" ino=36620 res=1 errno=0 [ 96.341832][ T5280] fuse: Bad value for 'fd' [ 96.347924][ T26] audit: type=1804 audit(1777338983.970:64): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.280" name="bus" dev="ramfs" ino=36620 res=1 errno=0 [ 96.413883][ T5280] process 'syz.4.281' launched './file0/file2' with NULL argv: empty string added [ 96.637860][ T5290] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 96.712497][ T5290] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 96.757586][ T5290] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 96.818893][ T5290] pit: kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 96.892172][ T5290] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 96.949468][ T5290] pit: kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 96.975252][ T5307] device syzkaller0 entered promiscuous mode [ 97.000038][ T5290] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 97.193432][ T5281] loop2: detected capacity change from 0 to 32768 [ 97.545308][ T4526] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 97.687841][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 98.025565][ T4526] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.085544][ T4526] usb 1-1: not running at top speed; connect to a high speed hub [ 98.185611][ T4526] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 98.217732][ T4526] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.258858][ T4526] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 98.369659][ T5354] loop5: detected capacity change from 0 to 256 [ 98.733977][ T26] audit: type=1800 audit(1777338986.170:65): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.296" name="file1" dev="loop5" ino=1048612 res=0 errno=0 [ 99.165632][ T4526] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 99.192843][ T4526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.208731][ T4526] usb 1-1: Product: syz [ 99.213332][ T4526] usb 1-1: Manufacturer: syz [ 99.230709][ T4526] usb 1-1: SerialNumber: syz [ 99.545268][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.585040][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 99.828928][ T4526] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 99.914281][ T4526] usb 1-1: USB disconnect, device number 5 [ 99.935502][ T4231] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 100.143866][ T5399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.150937][ T4231] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 100.160708][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.172871][ T4231] usb 6-1: Product: syz [ 100.179768][ T26] audit: type=1326 audit(1777338987.830:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x7fc00000 [ 100.202069][ T4231] usb 6-1: Manufacturer: syz [ 100.209341][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.225268][ T4231] usb 6-1: SerialNumber: syz [ 100.237821][ T4231] usb 6-1: config 0 descriptor?? [ 100.287854][ T4231] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 100.305233][ T4231] gm12u320: probe of 6-1:0.0 failed with error -5 [ 100.334653][ T4231] usb-storage 6-1:0.0: USB Mass Storage device detected [ 100.350781][ T5407] loop1: detected capacity change from 0 to 128 [ 100.379824][ T4231] usb-storage 6-1:0.0: device ignored [ 100.387477][ T5403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.305'. [ 100.449857][ T5407] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.498353][ T5407] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.571432][ T5407] syz.1.307 (pid 5407) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 100.616413][ T26] audit: type=1326 audit(1777338988.270:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.2.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38a8371dd9 code=0x0 [ 100.618931][ T5361] udc-core: couldn't find an available UDC or it's busy [ 100.671090][ T5361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.728651][ T5361] misc userio: The device must be registered before sending interrupts [ 100.752149][ T4226] usb 6-1: USB disconnect, device number 2 [ 100.798168][ T5430] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 100.827898][ T26] audit: type=1800 audit(1777338988.480:68): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name="file1" dev="loop1" ino=14 res=0 errno=0 [ 101.225726][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.905635][ T5458] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 101.913808][ T5458] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 102.677164][ T5467] netlink: 20 bytes leftover after parsing attributes in process `syz.5.318'. [ 102.709504][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 102.724046][ T5467] netlink: 'syz.5.318': attribute type 6 has an invalid length. [ 102.742784][ T5467] netlink: 72 bytes leftover after parsing attributes in process `syz.5.318'. [ 102.835793][ T4228] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 102.853965][ T4228] usb 2-1: config 0 has no interface number 0 [ 102.877909][ T4228] usb 2-1: config 0 interface 184 has no altsetting 0 [ 103.055865][ T4228] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.074152][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.103276][ T4228] usb 2-1: Product: syz [ 103.113423][ T4228] usb 2-1: Manufacturer: syz [ 103.133571][ T4228] usb 2-1: SerialNumber: syz [ 103.145124][ T4228] usb 2-1: config 0 descriptor?? [ 103.197343][ T4228] smsc75xx v1.0.0 [ 103.388223][ T5497] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 103.432500][ T5497] loop0: detected capacity change from 0 to 8 [ 103.511466][ T5497] SQUASHFS error: zlib decompression failed, data probably corrupt [ 103.541714][ T5497] SQUASHFS error: Failed to read block 0x9b: -5 [ 103.562738][ T5497] SQUASHFS error: Unable to read metadata cache entry [99] [ 103.592226][ T5497] SQUASHFS error: Unable to read inode 0x127 [ 103.834277][ T5506] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.842611][ T4228] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 103.857792][ T4228] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.905874][ T4228] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 103.924319][ T4228] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 103.940395][ T4228] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 103.952423][ T4228] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 103.969021][ T4228] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 104.185210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 104.931147][ T4231] usb 2-1: USB disconnect, device number 4 [ 105.028782][ T5525] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.061877][ T5525] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 105.424294][ T26] audit: type=1326 audit(1777338993.070:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb817b07dd9 code=0x0 [ 105.446167][ T4526] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.479006][ T26] audit: type=1326 audit(1777338993.130:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.513137][ T26] audit: type=1326 audit(1777338993.150:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.555531][ T26] audit: type=1326 audit(1777338993.150:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.581656][ T26] audit: type=1326 audit(1777338993.150:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.612162][ T26] audit: type=1326 audit(1777338993.150:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.636899][ T26] audit: type=1326 audit(1777338993.150:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.661983][ T26] audit: type=1326 audit(1777338993.150:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.706588][ T26] audit: type=1326 audit(1777338993.150:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.734290][ T26] audit: type=1326 audit(1777338993.150:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817b07dd9 code=0x7ffc0000 [ 105.758085][ T4526] usb 3-1: Using ep0 maxpacket: 8 [ 105.831244][ T5551] loop0: detected capacity change from 0 to 512 [ 105.895679][ T5551] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.906516][ T4526] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 105.919081][ T4526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.931699][ T4526] usb 3-1: config 0 has no interface number 0 [ 105.958835][ T5551] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.074617][ T5551] EXT4-fs (loop0): 1 truncate cleaned up [ 106.099681][ T5551] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 106.126278][ T4526] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 106.136031][ T4526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.144350][ T4526] usb 3-1: Product: syz [ 106.161598][ T4526] usb 3-1: Manufacturer: syz [ 106.167075][ T4526] usb 3-1: SerialNumber: syz [ 106.182297][ T4526] usb 3-1: config 0 descriptor?? [ 106.247406][ T5567] netlink: 'syz.4.346': attribute type 4 has an invalid length. [ 106.270760][ T4184] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.334515][ T4184] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.371154][ T4184] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.446144][ T4526] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 106.452766][ T4526] usb 3-1: No valid video chain found. [ 106.490540][ T4184] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.531371][ T4184] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.562387][ T4184] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.594718][ T4184] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.632350][ T4184] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.797058][ T4526] usb 3-1: USB disconnect, device number 7 [ 106.806632][ T4184] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.831200][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 106.876208][ T4184] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 107.434111][ T5593] loop1: detected capacity change from 0 to 8192 [ 107.483892][ T5595] ipt_CLUSTERIP: Please specify destination IP [ 107.548587][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.556113][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.035129][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.083942][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.501745][ T5589] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.511526][ T5589] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.521177][ T5589] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.530639][ T5589] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.942486][ T4606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.043469][ T4606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.154361][ T4606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.256350][ T5618] fuse: Bad value for 'fd' [ 109.280128][ T4606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.590668][ T5609] loop1: detected capacity change from 0 to 32768 [ 109.769278][ T5609] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.358 (5609) [ 109.845004][ T5609] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.880578][ T5609] BTRFS info (device loop1): metadata ratio 2 [ 109.958052][ T5609] BTRFS info (device loop1): force zlib compression, level 3 [ 109.995461][ T5609] BTRFS info (device loop1): enabling auto defrag [ 110.008283][ T5609] BTRFS info (device loop1): max_inline at 0 [ 110.014461][ T5609] BTRFS info (device loop1): using free space tree [ 110.021378][ T5609] BTRFS info (device loop1): has skinny extents [ 110.081462][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 110.099539][ T5656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.152219][ T5656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.193980][ T5626] chnl_net:caif_netlink_parms(): no params data found [ 110.481537][ T5679] BTRFS error (device loop1): target device is invalid! [ 110.549438][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.574876][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.611382][ T5626] device bridge_slave_0 entered promiscuous mode [ 110.651595][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.689407][ T5701] overlayfs: failed to clone upperpath [ 110.695199][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.703400][ T5626] device bridge_slave_1 entered promiscuous mode [ 111.067239][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.124419][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.224043][ T5626] team0: Port device team_slave_0 added [ 111.291750][ T5626] team0: Port device team_slave_1 added [ 111.361082][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.377338][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.437910][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.510873][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.521520][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.565793][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.606483][ T4606] device hsr_slave_0 left promiscuous mode [ 111.626231][ T4606] device hsr_slave_1 left promiscuous mode [ 111.633365][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.636627][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 111.657678][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.667441][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.687601][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.711828][ T4606] device bridge_slave_1 left promiscuous mode [ 111.718606][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.777467][ T4606] device bridge_slave_0 left promiscuous mode [ 111.784145][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.016624][ T4606] device veth1_macvtap left promiscuous mode [ 112.031048][ T4606] device veth0_macvtap left promiscuous mode [ 112.045652][ T4606] device veth1_vlan left promiscuous mode [ 112.199966][ T4606] device veth0_vlan left promiscuous mode [ 113.768280][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 114.163423][ T4606] team0 (unregistering): Port device team_slave_1 removed [ 114.199062][ T4606] team0 (unregistering): Port device team_slave_0 removed [ 114.249629][ T4606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.303917][ T4606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.607532][ T4606] bond0 (unregistering): Released all slaves [ 114.808888][ T5626] device hsr_slave_0 entered promiscuous mode [ 114.859627][ T5626] device hsr_slave_1 entered promiscuous mode [ 114.879809][ T5626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.898217][ T5626] Cannot create hsr debugfs directory [ 115.442146][ T5626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 115.555829][ T5626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 115.588552][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.398'. [ 115.659948][ T5626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 115.680848][ T5626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 115.796237][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 115.976706][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.022534][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.041315][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.079118][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.113134][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.142964][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.159442][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.166615][ T4609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.213225][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.247442][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.267793][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.282494][ T5831] loop5: detected capacity change from 0 to 512 [ 116.288077][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.296043][ T4609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.350030][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.379913][ T5831] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 116.394280][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.399312][ T5831] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.418875][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.428834][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.440202][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.460537][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.499480][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.596169][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.615965][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.652754][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.703077][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.728073][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.876225][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 117.902228][ T5801] ODEBUG: Out of memory. ODEBUG disabled [ 117.903554][ T5859] overlayfs: failed to clone upperpath [ 117.961468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.998701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.050280][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.986875][ T5850] loop1: detected capacity change from 0 to 32768 [ 119.998662][ T5850] xfs: Unknown parameter 'fscontext' [ 120.017765][ T5850] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.518592][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.550473][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.627313][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.659069][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.688483][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.697952][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.722817][ T5626] device veth0_vlan entered promiscuous mode [ 120.758194][ T5921] loop1: detected capacity change from 0 to 1024 [ 120.764866][ T5626] device veth1_vlan entered promiscuous mode [ 120.792896][ T5921] EXT4-fs (loop1): Ignoring removed oldalloc option [ 120.822758][ T5921] EXT4-fs (loop1): inline encryption not supported [ 120.839570][ T5921] EXT4-fs (loop1): Ignoring removed bh option [ 120.846345][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.861576][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.888494][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,barrier,commit=0x0000000000000005,journal_ioprio=0x0000000000000000,data_err=ignore,init_itable,oldalloc,inlinecrypt,bh,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: none. [ 120.889470][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.957937][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.969083][ T5626] device veth0_macvtap entered promiscuous mode [ 121.034840][ T5626] device veth1_macvtap entered promiscuous mode [ 121.307405][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.454033][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.528090][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.615942][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.703223][ T5626] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.778319][ T5626] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.846221][ T5626] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.889187][ T5626] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.904134][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.919582][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.967913][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.994945][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.032331][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.051551][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.210051][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.234776][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.281485][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.354712][ T818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.380318][ T818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.409475][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.525043][ T5972] loop1: detected capacity change from 0 to 1024 [ 122.560548][ T5972] EXT4-fs (loop1): Ignoring removed bh option [ 122.646653][ T5972] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 122.977288][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /88/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 123.049180][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.072361][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /88/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 123.138949][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.177244][ T4188] EXT4-fs error (device loop1): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 123.257369][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.264111][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.278981][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /88/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 123.321192][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.335495][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /88/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 123.361037][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.368613][ T4188] EXT4-fs error (device loop1): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 123.393913][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.406599][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.424342][ T6022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.432391][ T6022] IPv6: NLM_F_CREATE should be set when creating new route [ 123.436458][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /88/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 123.452990][ T6022] device lo left promiscuous mode [ 123.468643][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.479026][ T6022] device tunl0 left promiscuous mode [ 123.493101][ T6022] device gre0 left promiscuous mode [ 123.505652][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /88/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 123.538005][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.557982][ T4188] EXT4-fs error (device loop1): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 123.591501][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.606010][ T6022] device gretap0 left promiscuous mode [ 123.615466][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.642615][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /88/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 123.671924][ T6022] device erspan0 left promiscuous mode [ 123.689021][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 123.696373][ T6022] device ip_vti0 left promiscuous mode [ 123.696925][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.718776][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.719482][ T6022] device ip6_vti0 left promiscuous mode [ 123.736256][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.760132][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.775269][ T6022] device sit0 left promiscuous mode [ 123.800704][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.823005][ T6022] device ip6tnl0 left promiscuous mode [ 123.823463][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.846676][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 123.861119][ T6022] device ip6gre0 left promiscuous mode [ 123.888379][ T6022] device syz_tun left promiscuous mode [ 123.913159][ T6022] device ip6gretap0 left promiscuous mode [ 123.934433][ T6022] device bridge0 left promiscuous mode [ 123.949204][ T6022] device vcan0 left promiscuous mode [ 123.969680][ T6022] device bond0 left promiscuous mode [ 124.019230][ T6022] device dummy0 left promiscuous mode [ 124.071950][ T6022] device nlmon0 left promiscuous mode [ 124.091014][ T6022] device caif0 left promiscuous mode [ 124.662955][ T6022] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.671932][ T6022] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.681141][ T6022] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.690040][ T6022] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.752060][ T6022] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.761123][ T6022] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.770127][ T6022] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.779144][ T6022] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.410194][ T6073] chnl_net:caif_netlink_parms(): no params data found [ 126.490167][ T6104] loop5: detected capacity change from 0 to 16 [ 126.522737][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.530489][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.539301][ T6073] device bridge_slave_0 entered promiscuous mode [ 126.564273][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.622254][ T6104] erofs: (device loop5): mounted with root inode @ nid 36. [ 126.666234][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.703687][ T6073] device bridge_slave_1 entered promiscuous mode [ 126.722985][ T6104] netlink: 3 bytes leftover after parsing attributes in process `syz.5.461'. [ 126.766166][ T6104] 0ªX¹¦À: renamed from caif0 [ 126.781825][ T6104] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 126.877233][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.901661][ T6118] overlayfs: failed to clone upperpath [ 126.941490][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.030071][ T6073] team0: Port device team_slave_0 added [ 127.067372][ T6073] team0: Port device team_slave_1 added [ 127.135271][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.142385][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.186449][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.217035][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.224017][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.254557][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.310593][ T6073] device hsr_slave_0 entered promiscuous mode [ 127.329015][ T6073] device hsr_slave_1 entered promiscuous mode [ 127.349224][ T6073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.375695][ T6073] Cannot create hsr debugfs directory [ 128.126093][ T4519] Bluetooth: hci1: command 0x0409 tx timeout [ 128.286054][ T6150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.293329][ T6150] IPv6: NLM_F_CREATE should be set when creating new route [ 129.677786][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.045808][ T6156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.054970][ T6156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.064634][ T6156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.074580][ T6156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.249449][ T4519] Bluetooth: hci1: command 0x041b tx timeout [ 130.288200][ T6166] device syzkaller0 entered promiscuous mode [ 130.459849][ T6073] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 130.761872][ T6073] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 131.202676][ T6073] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 131.225961][ T6073] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 131.297456][ T6189] netlink: 3 bytes leftover after parsing attributes in process `syz.4.480'. [ 131.335698][ T6189] 0ªX¹¦À: renamed from caif0 [ 131.358590][ T6189] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 131.460050][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.490743][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.546822][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.632597][ T6208] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.720521][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.756998][ T6218] loop6: detected capacity change from 0 to 256 [ 131.775060][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.785037][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.798656][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.805808][ T4609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.482115][ T4525] Bluetooth: hci1: command 0x040f tx timeout [ 132.508051][ T6073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.518673][ T6073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.572312][ T4606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.686284][ T4606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.732377][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.757993][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764336][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.789989][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.890525][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.904444][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.911596][ T4609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.131396][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.240911][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.335283][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.474353][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.514833][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.524167][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.533229][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.542349][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.551536][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.560448][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.589502][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.608567][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.654098][ T4606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.676728][ T4606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.780741][ T6239] device syzkaller0 entered promiscuous mode [ 133.896767][ T4606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.908669][ T4606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.419630][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.604993][ T4525] Bluetooth: hci1: command 0x0419 tx timeout [ 134.611322][ T6249] netlink: 3 bytes leftover after parsing attributes in process `syz.2.495'. [ 134.625805][ T6249] 0ªX¹¦À: renamed from caif0 [ 134.777282][ T6249] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 134.859494][ T4606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.070363][ T4606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.312125][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.349011][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.428242][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.499'. [ 135.541051][ T6264] device team1 entered promiscuous mode [ 135.554430][ T6264] 8021q: adding VLAN 0 to HW filter on device team1 [ 135.653601][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.499'. [ 135.665799][ T6266] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 135.701871][ T6266] device team2 entered promiscuous mode [ 135.709232][ T6266] 8021q: adding VLAN 0 to HW filter on device team2 [ 135.934188][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.944345][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.964870][ T6073] device veth0_vlan entered promiscuous mode [ 135.971933][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.982482][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.998151][ T6073] device veth1_vlan entered promiscuous mode [ 136.007100][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.014875][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.023343][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.056210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.064842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.074217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.087022][ T6073] device veth0_macvtap entered promiscuous mode [ 136.098395][ T6073] device veth1_macvtap entered promiscuous mode [ 136.123459][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.135091][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.148171][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.158970][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.169922][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.180946][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.188689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.196955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.204859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.213989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.222920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.231717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.253379][ T6073] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.262619][ T6073] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.272216][ T6073] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.281287][ T6073] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.382792][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.396602][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.410746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.440159][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.449546][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.460537][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.566266][ T6300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.573721][ T6300] IPv6: NLM_F_CREATE should be set when creating new route [ 136.591308][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.5.511'. [ 136.592847][ T6305] loop7: detected capacity change from 0 to 512 [ 136.602191][ T6298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.733919][ T6305] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 136.772756][ T6305] EXT4-fs (loop7): orphan cleanup on readonly fs [ 136.785358][ T6305] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.454: Invalid inode bitmap blk 4 in block_group 0 [ 136.827036][ T6305] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 137.042449][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.050431][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.195489][ T13] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 137.329999][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.362597][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.436917][ T13] usb 8-1: Using ep0 maxpacket: 8 [ 137.555618][ T13] usb 8-1: unable to get BOS descriptor or descriptor too short [ 137.615307][ T13] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 137.623104][ T13] usb 8-1: can't read configurations, error -71 [ 137.663130][ T6300] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.672462][ T6300] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.682332][ T6300] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.691569][ T6300] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.756898][ T6300] device team1 left promiscuous mode [ 137.766523][ T6300] device team2 left promiscuous mode [ 138.111135][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'. [ 138.676119][ T4606] device hsr_slave_0 left promiscuous mode [ 138.765955][ T4606] device hsr_slave_1 left promiscuous mode [ 138.998481][ T4606] device bridge_slave_1 left promiscuous mode [ 139.134279][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.273892][ T4606] device bridge_slave_0 left promiscuous mode [ 139.288714][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.326679][ T6365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.371550][ T4606] device veth1_macvtap left promiscuous mode [ 139.388118][ T4606] device veth0_macvtap left promiscuous mode [ 139.450457][ T4606] device veth1_vlan left promiscuous mode [ 139.481433][ T4606] device veth0_vlan left promiscuous mode [ 139.586401][ T6371] loop7: detected capacity change from 0 to 4096 [ 139.660042][ T6371] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 139.732543][ T4606] bond1 (unregistering): Released all slaves [ 139.745093][ T6371] ntfs3: loop7: failed to convert "c46c" to iso8859-13 [ 139.755645][ T4228] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.917549][ T4606] team0 (unregistering): Port device team_slave_1 removed [ 139.933185][ T4606] team0 (unregistering): Port device team_slave_0 removed [ 139.946257][ T4606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.960142][ T4606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.995571][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 140.013948][ T4606] bond0 (unregistering): Released all slaves [ 140.082446][ T6375] netlink: 40 bytes leftover after parsing attributes in process `syz.6.517'. [ 140.100492][ T6375] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.122335][ T4228] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 140.133114][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.227739][ T4228] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 140.417954][ T6395] loop7: detected capacity change from 0 to 256 [ 140.645998][ T4228] gspca_nw80x: reg_r err -71 [ 140.651144][ T4228] nw80x: probe of 6-1:3.0 failed with error -71 [ 140.689963][ T4228] usb 6-1: USB disconnect, device number 3 [ 141.263876][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.271263][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.366339][ T6446] device bridge_slave_1 left promiscuous mode [ 141.372588][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.420836][ T6446] device bridge_slave_0 left promiscuous mode [ 141.447426][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.621656][ T1325] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 141.880037][ T1325] usb 6-1: Using ep0 maxpacket: 32 [ 142.005953][ T1325] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.048383][ T1325] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.092600][ T1325] usb 6-1: config 0 interface 0 has no altsetting 0 [ 142.121574][ T1325] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 142.149182][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.186173][ T1325] usb 6-1: config 0 descriptor?? [ 142.302492][ T6484] overlayfs: failed to clone upperpath [ 142.670712][ T6498] loop6: detected capacity change from 0 to 1024 [ 142.688937][ T1325] hid-generic 0003:0458:5014.0006: item fetching failed at offset 5/39 [ 142.702195][ T1325] hid-generic: probe of 0003:0458:5014.0006 failed with error -22 [ 142.738350][ T6498] EXT4-fs (loop6): Ignoring removed bh option [ 142.819533][ T6498] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 142.968750][ T6447] udc-core: couldn't find an available UDC or it's busy [ 143.007957][ T6447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.067936][ T1325] usb 6-1: USB disconnect, device number 4 [ 143.143168][ T6510] netlink: 'syz.2.551': attribute type 4 has an invalid length. [ 143.196395][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.7.550'. [ 143.513967][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.7.557'. [ 143.548305][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.557'. [ 143.573925][ T6532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.625755][ T4228] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 143.726408][ T6532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.928110][ T6520] tipc: Started in network mode [ 143.938984][ T6520] tipc: Node identity ac1414aa, cluster identity 4711 [ 143.961571][ T6520] tipc: Enabled bearer , priority 10 [ 144.045668][ T4228] usb 7-1: unable to get BOS descriptor or descriptor too short [ 144.158687][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.560'. [ 144.172269][ T4228] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 144.204210][ T4228] usb 7-1: can't read configurations, error -71 [ 144.219134][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.7.560'. [ 144.249192][ T6549] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.258122][ T6549] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.267400][ T6549] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.276374][ T6549] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.316844][ T6551] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.336542][ T6551] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.895358][ T4228] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 144.915262][ T4519] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 145.075831][ T4601] tipc: Node number set to 2886997162 [ 145.265933][ T4228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.291217][ T4228] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.313621][ T4519] usb 8-1: Using ep0 maxpacket: 32 [ 145.347641][ T4228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.377341][ T4228] usb 7-1: config 0 descriptor?? [ 145.455533][ T4519] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 145.485045][ T4519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.547218][ T4519] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 145.886859][ T4228] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 145.918559][ T4228] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0007/input/input10 [ 145.979336][ T4519] gspca_nw80x: reg_r err -71 [ 145.984135][ T4519] nw80x: probe of 8-1:3.0 failed with error -71 [ 146.012842][ T4519] usb 8-1: USB disconnect, device number 4 [ 146.047455][ T4228] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 146.187535][ T6634] loop5: detected capacity change from 0 to 256 [ 146.270977][ T6634] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 146.663117][ T4228] usb 7-1: USB disconnect, device number 3 [ 146.778495][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 146.822134][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 146.855035][ T6667] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.864071][ T6667] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.872907][ T6667] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.881662][ T6667] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.986857][ T6670] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.163921][ T6680] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.444641][ T6684] kvm: pic: non byte read [ 147.492841][ T6684] kvm: pic: single mode not supported [ 147.604276][ T6696] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.620337][ T6696] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.629093][ T6696] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.637836][ T6696] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.114964][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 148.957438][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 148.976010][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 149.070289][ T6732] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.196851][ T4228] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 149.364192][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 149.447870][ T4228] usb 7-1: Using ep0 maxpacket: 32 [ 149.567815][ T4228] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 149.579750][ T4228] usb 7-1: config 0 has no interface number 0 [ 149.598169][ T4228] usb 7-1: config 0 interface 12 has no altsetting 0 [ 149.692450][ T6727] loop7: detected capacity change from 0 to 32768 [ 149.726907][ T6727] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.598 (6727) [ 149.763867][ T6727] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 149.775774][ T4228] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 149.785091][ T6727] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 149.805707][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.814111][ T6727] BTRFS info (device loop7): use zstd compression, level 3 [ 149.822134][ T4228] usb 7-1: Product: syz [ 149.835610][ T4228] usb 7-1: Manufacturer: syz [ 149.840399][ T6727] BTRFS info (device loop7): using free space tree [ 149.850491][ T4228] usb 7-1: SerialNumber: syz [ 149.865766][ T6727] BTRFS info (device loop7): has skinny extents [ 149.886868][ T4228] usb 7-1: config 0 descriptor?? [ 150.108641][ T6727] BTRFS info (device loop7): enabling ssd optimizations [ 150.120482][ T6741] loop5: detected capacity change from 0 to 40427 [ 150.262067][ T6741] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 150.289616][ T6741] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 150.305995][ T6741] F2FS-fs (loop5): invalid crc value [ 150.343959][ T6741] F2FS-fs (loop5): Found nat_bits in checkpoint [ 150.459407][ T6741] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 150.484850][ T6741] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 150.763185][ T1280] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 150.781829][ T1280] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 151.323121][ T6808] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.332561][ T6792] loop7: detected capacity change from 0 to 40427 [ 151.351417][ T6792] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 151.360642][ T6792] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 151.371876][ T6792] F2FS-fs (loop7): invalid crc value [ 151.394268][ T6792] F2FS-fs (loop7): Found nat_bits in checkpoint [ 151.488318][ T6792] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 151.499781][ T6792] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 151.599292][ T6792] attempt to access beyond end of device [ 151.599292][ T6792] loop7: rw=2049, want=53264, limit=40427 [ 151.663018][ T151] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 151.675357][ T151] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 152.205476][ T6821] loop7: detected capacity change from 0 to 32768 [ 152.249406][ T6821] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.615 (6821) [ 152.281222][ T6821] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 152.305823][ T4228] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 152.307810][ T6821] BTRFS info (device loop7): using free space tree [ 152.317915][ T4228] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 152.330784][ T4228] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 152.330853][ T6821] BTRFS info (device loop7): has skinny extents [ 152.341799][ T4228] f81534: probe of 7-1:0.12 failed with error -71 [ 152.380002][ T4228] usb 7-1: USB disconnect, device number 4 [ 152.475650][ T6821] BTRFS info (device loop7): enabling ssd optimizations [ 152.518032][ T6823] loop5: detected capacity change from 0 to 32768 [ 152.597754][ T6821] loop7: detected capacity change from 32768 to 64 [ 152.647924][ T6821] attempt to access beyond end of device [ 152.647924][ T6821] loop7: rw=6145, want=10264, limit=64 [ 152.700150][ T6821] BTRFS error (device loop7): bdev /dev/loop7 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 152.713674][ T6821] attempt to access beyond end of device [ 152.713674][ T6821] loop7: rw=6145, want=10280, limit=64 [ 152.724708][ T6823] XFS (loop5): Mounting V5 Filesystem [ 152.757472][ T6821] BTRFS error (device loop7): bdev /dev/loop7 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 152.809325][ T6821] attempt to access beyond end of device [ 152.809325][ T6821] loop7: rw=6145, want=13448, limit=64 [ 152.818376][ T6823] XFS (loop5): Ending clean mount [ 152.820912][ T6821] BTRFS error (device loop7): bdev /dev/loop7 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 152.834436][ T6823] XFS (loop5): Quotacheck needed: Please wait. [ 152.835730][ T6821] BTRFS: error (device loop7) in btrfs_commit_transaction:2449: errno=-5 IO failure (Error while writing out transaction) [ 152.835794][ T6821] BTRFS info (device loop7): forced readonly [ 152.836142][ T6821] BTRFS warning (device loop7): Skipping commit of aborted transaction. [ 152.873326][ T6821] BTRFS: error (device loop7) in cleanup_transaction:2021: errno=-5 IO failure [ 152.917683][ T6823] XFS (loop5): Quotacheck: Done. [ 152.980367][ T4878] XFS (loop5): Unmounting Filesystem [ 153.055868][ T6862] loop6: detected capacity change from 0 to 2048 [ 153.132340][ T6862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.346542][ T6866] team0: Port device team_slave_0 removed [ 153.689504][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'. [ 153.742096][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 153.810141][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 153.823705][ T6879] device lo entered promiscuous mode [ 153.931152][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.224691][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.499522][ T6879] device tunl0 entered promiscuous mode [ 154.576935][ T6879] device gre0 entered promiscuous mode [ 154.584129][ T6879] device gretap0 entered promiscuous mode [ 154.607985][ T6879] device erspan0 entered promiscuous mode [ 154.674336][ T6879] device ip_vti0 entered promiscuous mode [ 154.690379][ T6879] device ip6_vti0 entered promiscuous mode [ 154.720934][ T6879] device sit0 entered promiscuous mode [ 154.754171][ T6879] device ip6tnl0 entered promiscuous mode [ 154.802088][ T6879] device ip6gre0 entered promiscuous mode [ 154.812671][ T6879] device syz_tun entered promiscuous mode [ 154.834949][ T6879] device ip6gretap0 entered promiscuous mode [ 154.851267][ T6879] device vcan0 entered promiscuous mode [ 154.861163][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.870070][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.878273][ T6879] device bond0 entered promiscuous mode [ 154.883836][ T6879] device bond_slave_0 entered promiscuous mode [ 154.890948][ T6879] device bond_slave_1 entered promiscuous mode [ 154.898835][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.906999][ T6879] device team0 entered promiscuous mode [ 154.912574][ T6879] device team_slave_1 entered promiscuous mode [ 154.921618][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.929463][ T6879] device dummy0 entered promiscuous mode [ 154.937127][ T6879] device nlmon0 entered promiscuous mode [ 154.943417][ T6879] device 60ªX¹¦À entered promiscuous mode [ 154.949975][ T6879] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 154.966587][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 154.987309][ T6881] device team_slave_1 left promiscuous mode [ 155.006304][ T6881] team0 (unregistering): Port device team_slave_1 removed [ 155.613629][ T6879] syz.2.625 (6879) used greatest stack depth: 19312 bytes left [ 155.784835][ T6942] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.894800][ T6947] netlink: 104 bytes leftover after parsing attributes in process `syz.7.640'. [ 156.285630][ T4601] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 156.649810][ T4601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.681791][ T4601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.729319][ T4601] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.785539][ T4601] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.804963][ T4601] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.833090][ T4601] usb 8-1: config 0 descriptor?? [ 157.061525][ T6990] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.654'. [ 157.099457][ T6979] chnl_net:caif_netlink_parms(): no params data found [ 157.319231][ T4601] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 157.360016][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.372600][ T4601] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 157.413886][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.422688][ T6979] device bridge_slave_0 entered promiscuous mode [ 157.436979][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.467853][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.835190][ T6979] device bridge_slave_1 entered promiscuous mode [ 158.273978][ T6979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.352525][ T6979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.485073][ T6979] team0: Port device team_slave_0 added [ 158.521489][ T6979] team0: Port device team_slave_1 added [ 158.621296][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.650812][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.675175][ C0] sched: RT throttling activated [ 158.732746][ T6979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.241377][ T4226] Bluetooth: hci3: command 0x0409 tx timeout [ 159.260516][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.292740][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.464073][ T6979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.598926][ T6979] device hsr_slave_0 entered promiscuous mode [ 159.616512][ T6979] device hsr_slave_1 entered promiscuous mode [ 159.658669][ T6979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.024028][ T6979] Cannot create hsr debugfs directory [ 160.501634][ T7060] blktrace: Concurrent blktraces are not allowed on nullb0 [ 160.750393][ T4224] usb 8-1: USB disconnect, device number 5 [ 160.799037][ T6979] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 160.846077][ T6979] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 160.880922][ T6979] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 160.910422][ T6979] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 161.089885][ T6979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.126216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.161612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.184183][ T6979] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.215083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.244958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.284960][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.292273][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.315756][ T1325] Bluetooth: hci3: command 0x041b tx timeout [ 161.335913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.385342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.398691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.443331][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.450642][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.534534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.558682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.586270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.594656][ T7070] netlink: 276 bytes leftover after parsing attributes in process `syz.2.674'. [ 161.618240][ T7077] loop7: detected capacity change from 0 to 1764 [ 161.638765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.648316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.670879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.690051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.718852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.751166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.790533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.820596][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.941032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.514702][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.529499][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.549220][ T6979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.567282][ T7136] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 162.692021][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062b64000: rx timeout, send abort [ 163.192993][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880620cc800: rx timeout, send abort [ 163.395838][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 163.519601][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062b64000: abort rx timeout. Force session deactivation [ 163.686102][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.695045][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.701258][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880620cc800: abort rx timeout. Force session deactivation [ 163.706522][ T7164] loop7: detected capacity change from 0 to 2048 [ 163.771235][ T6979] device veth0_vlan entered promiscuous mode [ 163.787078][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.796976][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.817029][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.873832][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.903381][ T7164] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.970161][ T4606] device hsr_slave_0 left promiscuous mode [ 163.995620][ T7164] netlink: 182 bytes leftover after parsing attributes in process `syz.7.691'. [ 164.004965][ T4606] device hsr_slave_1 left promiscuous mode [ 164.025047][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.042237][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.076136][ T4606] device bridge_slave_1 left promiscuous mode [ 164.082640][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.092807][ T4606] device bridge_slave_0 left promiscuous mode [ 164.103907][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.434113][ T4606] team0 (unregistering): Port device team_slave_1 removed [ 164.452702][ T4606] team0 (unregistering): Port device team_slave_0 removed [ 164.473895][ T4606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.502356][ T4606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.525600][ T1325] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 164.621711][ T4606] bond0 (unregistering): Released all slaves [ 164.683760][ T6979] device veth1_vlan entered promiscuous mode [ 164.761332][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.772425][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.797305][ T1325] usb 8-1: Using ep0 maxpacket: 32 [ 164.810777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.829308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.859722][ T6979] device veth0_macvtap entered promiscuous mode [ 164.886006][ T6979] device veth1_macvtap entered promiscuous mode [ 164.903760][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.6.705'. [ 164.931701][ T1325] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 164.945782][ T1325] usb 8-1: config 0 has no interface number 0 [ 164.962146][ T1325] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.991287][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.008798][ T1325] usb 8-1: config 0 interface 89 has no altsetting 0 [ 165.025535][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.046871][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.060100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.099248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.131331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.164125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.200230][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.201307][ T26] kauditd_printk_skb: 315 callbacks suppressed [ 165.201320][ T26] audit: type=1804 audit(1777339052.850:394): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.708" name="bus" dev="ramfs" ino=45053 res=1 errno=0 [ 165.208152][ T1325] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 165.244012][ T26] audit: type=1804 audit(1777339052.890:395): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.708" name="bus" dev="ramfs" ino=45053 res=1 errno=0 [ 165.249185][ T1325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.269607][ T6979] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.283681][ T1325] usb 8-1: Product: syz [ 165.298554][ T1325] usb 8-1: Manufacturer: syz [ 165.307726][ T1325] usb 8-1: SerialNumber: syz [ 165.311100][ T6979] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.333863][ T1325] usb 8-1: config 0 descriptor?? [ 165.343356][ T6979] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.373908][ T6979] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.380346][ T1325] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 165.405082][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 165.420729][ T1325] em28xx 8-1:0.89: Video interface 89 found: [ 165.429183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.456337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.478877][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 165.626530][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.634386][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.678577][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.706761][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.731764][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.761966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.831213][ T7266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.015769][ T1325] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 166.118137][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 166.145007][ T7282] loop8: detected capacity change from 0 to 64 [ 166.295049][ T7282] hfs: request for non-existent node 83886080 in B*Tree [ 166.324581][ T7282] hfs: request for non-existent node 83886080 in B*Tree [ 166.352783][ T7282] hfs: get root inode failed [ 166.363608][ T26] audit: type=1326 audit(1777339054.010:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c104eadd9 code=0x7fc00000 [ 166.471253][ T7294] overlayfs: failed to clone upperpath [ 166.766154][ T7282] netlink: 132 bytes leftover after parsing attributes in process `syz.8.713'. [ 166.973517][ T7308] loop6: detected capacity change from 0 to 128 [ 167.120860][ T7308] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.125722][ T1325] em28xx 8-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 167.151639][ T1325] em28xx 8-1:0.89: failed to read eeprom (err=-5) [ 167.165592][ T1325] em28xx 8-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 167.190517][ T7308] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.269630][ T26] audit: type=1800 audit(1777339054.920:397): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.717" name="file1" dev="loop6" ino=14 res=0 errno=0 [ 167.285681][ T1325] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 167.317999][ T1325] em28xx 8-1:0.89: analog set to bulk mode. [ 167.358129][ T7] em28xx 8-1:0.89: Registering V4L2 extension [ 167.390067][ T1325] usb 8-1: USB disconnect, device number 6 [ 167.407844][ T1325] em28xx 8-1:0.89: Disconnecting em28xx [ 167.490165][ T7] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 167.527330][ T7] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 167.558757][ T7] em28xx 8-1:0.89: No AC97 audio processor [ 167.661660][ T7] usb 8-1: Decoder not found [ 167.735559][ T7] em28xx 8-1:0.89: failed to create media graph [ 167.741862][ T7] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 167.928805][ T7333] ================================================================== [ 167.937322][ T7333] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 167.944316][ T7333] Read of size 8 at addr ffff888046e6c900 by task v4l_id/7333 [ 167.951788][ T7333] [ 167.954117][ T7333] CPU: 0 PID: 7333 Comm: v4l_id Not tainted syzkaller #0 [ 167.961149][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.971211][ T7333] Call Trace: [ 167.974497][ T7333] [ 167.977442][ T7333] dump_stack_lvl+0x188/0x250 [ 167.982142][ T7333] ? show_regs_print_info+0x20/0x20 [ 167.987350][ T7333] ? _printk+0xda/0x130 [ 167.991514][ T7333] ? v4l2_fh_open+0xc6/0x430 [ 167.996120][ T7333] ? load_image+0x400/0x400 [ 168.000643][ T7333] print_address_description+0x60/0x2d0 [ 168.006199][ T7333] ? v4l2_fh_open+0xc6/0x430 [ 168.010792][ T7333] kasan_report+0xdf/0x130 [ 168.015223][ T7333] ? v4l2_fh_open+0xc6/0x430 [ 168.019827][ T7333] v4l2_fh_open+0xc6/0x430 [ 168.024262][ T7333] em28xx_v4l2_open+0x152/0x990 [ 168.029120][ T7333] ? __lock_acquire+0x7d10/0x7d10 [ 168.034164][ T7333] v4l2_open+0x20b/0x360 [ 168.038425][ T7333] chrdev_open+0x5c5/0x6a0 [ 168.042864][ T7333] ? cd_forget+0x160/0x160 [ 168.047292][ T7333] ? fsnotify_perm+0x3a7/0x560 [ 168.052071][ T7333] ? cd_forget+0x160/0x160 [ 168.056497][ T7333] do_dentry_open+0x7ff/0xf80 [ 168.061202][ T7333] path_openat+0x26f5/0x2fa0 [ 168.065827][ T7333] ? verify_lock_unused+0x140/0x140 [ 168.071061][ T7333] ? slab_post_alloc_hook+0x4c/0x380 [ 168.076364][ T7333] ? do_filp_open+0x410/0x410 [ 168.081074][ T7333] do_filp_open+0x1e2/0x410 [ 168.085681][ T7333] ? vfs_tmpfile+0x300/0x300 [ 168.090317][ T7333] ? _raw_spin_unlock+0x24/0x40 [ 168.095174][ T7333] ? alloc_fd+0x598/0x630 [ 168.099514][ T7333] do_sys_openat2+0x150/0x4b0 [ 168.104213][ T7333] ? __lock_acquire+0x7d10/0x7d10 [ 168.109247][ T7333] ? do_sys_open+0xe0/0xe0 [ 168.113671][ T7333] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 168.119752][ T7333] ? lock_chain_count+0x20/0x20 [ 168.124616][ T7333] ? vtime_user_exit+0x2c8/0x3e0 [ 168.129580][ T7333] __x64_sys_openat+0x135/0x160 [ 168.134467][ T7333] do_syscall_64+0x4c/0xa0 [ 168.138894][ T7333] ? clear_bhb_loop+0x30/0x80 [ 168.143671][ T7333] ? clear_bhb_loop+0x30/0x80 [ 168.148356][ T7333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.154268][ T7333] RIP: 0033:0x7f695aa2c407 [ 168.158691][ T7333] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.178306][ T7333] RSP: 002b:00007ffc231f4320 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 168.186825][ T7333] RAX: ffffffffffffffda RBX: 00007f695a93e880 RCX: 00007f695aa2c407 [ 168.194812][ T7333] RDX: 0000000000000000 RSI: 00007ffc231f4f1c RDI: ffffffffffffff9c [ 168.202974][ T7333] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 168.210953][ T7333] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 168.218931][ T7333] R13: 00007ffc231f4570 R14: 00007f695b1ba000 R15: 00005559709044d8 [ 168.226930][ T7333] [ 168.229953][ T7333] [ 168.232272][ T7333] The buggy address belongs to the page: [ 168.237910][ T7333] page:ffffea00011b9b00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46e6c [ 168.248242][ T7333] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 168.255482][ T7333] raw: 00fff00000000000 ffff8880b90409f0 ffff8880b90409f0 0000000000000000 [ 168.264154][ T7333] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 168.272753][ T7333] page dumped because: kasan: bad access detected [ 168.279166][ T7333] page_owner tracks the page as freed [ 168.284531][ T7333] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 7, ts 167364323217, free_ts 167925669956 [ 168.300304][ T7333] get_page_from_freelist+0x1bbd/0x1ca0 [ 168.305871][ T7333] __alloc_pages+0x1ee/0x480 [ 168.310470][ T7333] kmalloc_order+0x40/0x150 [ 168.314977][ T7333] kmalloc_order_trace+0x14/0xf0 [ 168.319918][ T7333] em28xx_v4l2_init+0xe2/0x2e50 [ 168.324773][ T7333] em28xx_init_extension+0x118/0x1b0 [ 168.330062][ T7333] process_one_work+0x85f/0x1010 [ 168.335006][ T7333] worker_thread+0xaa6/0x1290 [ 168.339685][ T7333] kthread+0x436/0x520 [ 168.343761][ T7333] ret_from_fork+0x1f/0x30 [ 168.348192][ T7333] page last free stack trace: [ 168.352859][ T7333] free_unref_page_prepare+0x637/0x6c0 [ 168.358323][ T7333] free_unref_page+0x8f/0x2a0 [ 168.363009][ T7333] free_nonslab_page+0xe2/0x150 [ 168.367868][ T7333] em28xx_v4l2_init+0x1649/0x2e50 [ 168.372899][ T7333] em28xx_init_extension+0x118/0x1b0 [ 168.378184][ T7333] process_one_work+0x85f/0x1010 [ 168.383126][ T7333] worker_thread+0xaa6/0x1290 [ 168.387815][ T7333] kthread+0x436/0x520 [ 168.392163][ T7333] ret_from_fork+0x1f/0x30 [ 168.396583][ T7333] [ 168.398914][ T7333] Memory state around the buggy address: [ 168.404550][ T7333] ffff888046e6c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.412698][ T7333] ffff888046e6c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.420912][ T7333] >ffff888046e6c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.428973][ T7333] ^ [ 168.433039][ T7333] ffff888046e6c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.441105][ T7333] ffff888046e6ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.449323][ T7333] ================================================================== [ 168.457388][ T7333] Disabling lock debugging due to kernel taint [ 168.463716][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.570604][ T7] em28xx 8-1:0.89: Registering snapshot button... [ 168.586077][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input11 [ 168.607302][ T7] em28xx 8-1:0.89: Remote control support is not available for this card. [ 168.721381][ T7346] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 168.729240][ T7346] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 168.755947][ T1325] em28xx 8-1:0.89: Closing input extension [ 168.761977][ T1325] em28xx 8-1:0.89: Deregistering snapshot button [ 169.085648][ T4230] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 169.269930][ T7333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.277172][ T7333] CPU: 0 PID: 7333 Comm: v4l_id Tainted: G B syzkaller #0 [ 169.285682][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.295745][ T7333] Call Trace: [ 169.299026][ T7333] [ 169.301956][ T7333] dump_stack_lvl+0x188/0x250 [ 169.306635][ T7333] ? show_regs_print_info+0x20/0x20 [ 169.311830][ T7333] ? load_image+0x400/0x400 [ 169.316340][ T7333] panic+0x2e5/0x810 [ 169.320242][ T7333] ? bpf_jit_dump+0xd0/0xd0 [ 169.324757][ T7333] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 169.330840][ T7333] ? _raw_spin_unlock+0x40/0x40 [ 169.335695][ T7333] ? print_memory_metadata+0x314/0x400 [ 169.341157][ T7333] ? v4l2_fh_open+0xc6/0x430 [ 169.345755][ T7333] check_panic_on_warn+0x80/0xa0 [ 169.350697][ T7333] ? v4l2_fh_open+0xc6/0x430 [ 169.355287][ T7333] end_report+0x6d/0xf0 [ 169.359446][ T7333] kasan_report+0x102/0x130 [ 169.363997][ T7333] ? v4l2_fh_open+0xc6/0x430 [ 169.368590][ T7333] v4l2_fh_open+0xc6/0x430 [ 169.373010][ T7333] em28xx_v4l2_open+0x152/0x990 [ 169.378074][ T7333] ? __lock_acquire+0x7d10/0x7d10 [ 169.383199][ T7333] v4l2_open+0x20b/0x360 [ 169.387451][ T7333] chrdev_open+0x5c5/0x6a0 [ 169.391899][ T7333] ? cd_forget+0x160/0x160 [ 169.396346][ T7333] ? fsnotify_perm+0x3a7/0x560 [ 169.401122][ T7333] ? cd_forget+0x160/0x160 [ 169.405555][ T7333] do_dentry_open+0x7ff/0xf80 [ 169.410250][ T7333] path_openat+0x26f5/0x2fa0 [ 169.414862][ T7333] ? verify_lock_unused+0x140/0x140 [ 169.420071][ T7333] ? slab_post_alloc_hook+0x4c/0x380 [ 169.425367][ T7333] ? do_filp_open+0x410/0x410 [ 169.430056][ T7333] do_filp_open+0x1e2/0x410 [ 169.434571][ T7333] ? vfs_tmpfile+0x300/0x300 [ 169.439172][ T7333] ? _raw_spin_unlock+0x24/0x40 [ 169.444018][ T7333] ? alloc_fd+0x598/0x630 [ 169.448332][ T7333] do_sys_openat2+0x150/0x4b0 [ 169.452997][ T7333] ? __lock_acquire+0x7d10/0x7d10 [ 169.458032][ T7333] ? do_sys_open+0xe0/0xe0 [ 169.462454][ T7333] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 169.468446][ T7333] ? lock_chain_count+0x20/0x20 [ 169.473320][ T7333] ? vtime_user_exit+0x2c8/0x3e0 [ 169.478270][ T7333] __x64_sys_openat+0x135/0x160 [ 169.483137][ T7333] do_syscall_64+0x4c/0xa0 [ 169.487569][ T7333] ? clear_bhb_loop+0x30/0x80 [ 169.492252][ T7333] ? clear_bhb_loop+0x30/0x80 [ 169.496930][ T7333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.502831][ T7333] RIP: 0033:0x7f695aa2c407 [ 169.507246][ T7333] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 169.526858][ T7333] RSP: 002b:00007ffc231f4320 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 169.535281][ T7333] RAX: ffffffffffffffda RBX: 00007f695a93e880 RCX: 00007f695aa2c407 [ 169.543274][ T7333] RDX: 0000000000000000 RSI: 00007ffc231f4f1c RDI: ffffffffffffff9c [ 169.551262][ T7333] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 169.559278][ T7333] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 169.567259][ T7333] R13: 00007ffc231f4570 R14: 00007f695b1ba000 R15: 00005559709044d8 [ 169.575244][ T7333] [ 169.578690][ T7333] Kernel Offset: disabled [ 169.583044][ T7333] Rebooting in 86400 seconds..