last executing test programs: 7.478154064s ago: executing program 4 (id=742): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 7.190068873s ago: executing program 4 (id=747): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f00005d0000/0x4000)=nil, 0x4000, 0x0, 0x0) 6.353842437s ago: executing program 4 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f00000007c0)="11f350f71fc646f9720ef5bbc410e3b8462091eaac2f7dd47b0942f75f92b1c49d4214116f71b018fd92977490b037c0e1deddee91c31b00d03774c9e8c166a8ac9c7e900ecf54c612cdb83105262a548c64895a05a76a2af5d42ae1fe52aa2595b8f8724d1893f50941d746e4d08c344327421b90e8f6c443602afd0c8a5cea409c44227a190c4ada663c8afc730c86f0a576220d9cddad0a278516dca93b53762e08bddc4c4e9b9904b375b9c7c520a3ce6a720b29281ed151fcfce63638789052680dfc1697c9073c26eab6d0dcf3a7168e02967d4fd1981ce7639b830e01f343f048f2385b466a52216ec1f24a4ed6e56a6d4aeda559c597c5961635d92592c469eba419bd274b523e5f01e7d5aff33172ca29b937f01d05d60f61440533dac50b3a8d28fee388f938a463c35322f92e519811e8fad5eb9ef51c21caf4edc03a00f5bc3fd9b75c6bc349c82981a7bb49c0f25881d126eeb51155536829bd63c65f9897949b9942c4ade20565678b19b90394faa2687487918cdce5bcaea564e63ae46abd4c54c1b862b4bc6185c11ba1df790e6a21f737ca5936ab92a9720a6869b346fe237e0297e6fb855ee94cfbf8c83e654d2fd8d1b28a498aa84f3d36771ec3e66fbc9944cadac89b11c16f069dfb50cf6df72819709b165994ba4b4dbb54f8e95c37b14fbb9b756ff88f9aad8b8f98cdabbeb2c9ea970edd981a138b670ec917696bb4323718f12ba99b22a420c4ac8061ecec41d758079b4a72c0d3b88e18a84c0755142d310b2f8f12fd1bab629f6328308093849500f08850b1d528010fd5f6bbfe6978689f0c29f714d467b9753070530dfc89b2dd872df1939a0c40e0b99f7b4334e370d565372170def5b10bc7156817a385bb0c75b72904cd2dca7205aabb65071f061c8c1c7d908342d4cca786be1c8c36814b76230a315e9a31ee49623134c4effc5f5cd5e635d694c26e5bb12918532c78e44e30837f04f46b1657f9423919a8f96e1a17dd92657992aeacdd34fff96fc7e752f8fb020c4bbf766adbb7d28e56fa978a651babf0c4dd6295c70941d9d4d2781faa4b05c8b6486be41c4757b67c5f50d6a3b8bee2f6da19f33f883d062f33fe2763212b750c2ec1c2172bf42868c10fd7783e19d662ba2596f81d9f71fb91cd8e3e9106410bf455d7bf6e9ad3b5f357f23ad727973f964cfc7a5080952f0f7ed4e64e89d83d535d8eee989e5f3ae8b4c55ddde4c40cd66999f08f99490af2d1196b6afb36e92f3e34c6f8f110db291ed0c8d922321fc5db5b0080a704fc3b27e7810a3eca8337900c813d1a884f7f4a74f8cbc67a1e8d8a701b8820e9d5454fc786934afc362c5a02f74b6cdd000f7e49b5bb9c38088866b8bf6dcacba585de2bc8bc41799f5dfd6cf831f6b85b248449d8ba17a3ecc4cde18cd3ef9de78ca52a33d7251359782361b9450cd9bfd058d708f747fe91f4aeb914f4180a41c5e9f925e0ef3501bac189afd9cc07e1f8cf10e9d328c9705dfd2fba404464c47f1ba392c38cd52b5aa481cdaa6d5b0d7100c51ed83f91d0a3c201957137856ac4d0ef0d4e638ea509adb6682f82b7ad203b286f08f2aa9dead3bf7bdad975b84284ff371db09d53257fb6a145a3c67b1522612c6985a69988936764478c76a6dc1aa7207aaf4b342e9bd217feea206c9c4750de95dea684f867015f8f3aa43a2c0777668b65d2bafe4629ec5fbc0359abaa87e8f67140ad41f46f6b0eeef1980d853673ba88ca027b8e11732574ead1c211fba9593f834e6b05832a15bd2c39a79aa7530919b2d4da0e3012c097de9947e97b1169aebad5c8d4d58ad2993952a31e885b87fc3c6aa74ba7fb4d0dc103b0df00d6b84668c8af679ebeafd23ccfc84bc80bebdf7489e7c7d9e78cce9b5e5c0980bf3db450b28def6b8b0f83412d8590ab1123a1f5da3c88de48ed28b3e4ba9a73a8cc315a69bffced3ea636b2ebac489e4a9b7dfed85facebea6f024137c71afd3d51f4135878bb77d340b79f5848a460f232ab909bee6052d5ff1a4269fecf557f4811efe1802b16229893192fea702e9e686e1cf9e1875699fdee758deff165554b4f72a9249837b985a8c7f62bc416f1e32d5a70ec76ba685c1fca1bb7de4d1096eca890ded78e911b297125f8a99305e824c3bbde7787c1459d0dac841b92721984373f5e4b29b832a96d23e90e700e5c66e4e62fcacb20f6af9949d1edd443f8c004c4d05f0b15c618b346e2dca8bd1732e5c5c51c60d0b4672e6053122382238ecb3857c854acd629b62704863d58e5500ec9d6efa8b197e84312855d98a2582133e988f59cd261f76a79ceb3c054970232152b48abc60bae17aabbbc31727365ee5cd58e662b2fd4c7c0526bacc1c9261f6dfcfa8922419cc410580ec23932c47c345df0f6c40d8484063aeedda4e3d7b6f88e369346a550413a6a13e03690120c06cda002307372a7b712ee298206e8a39729da397d5c4c24dd198cf180778ac6e30353db01f5d2c6a7355effc7bfe120d72cb1ee8d7b3b960e6d488828e48fa8bc23e0d616fbead83ab4fc821dd8ec3f368688378874360318ce70f6677f9c1326da9f36d90fe747a7ce07608eccc2c37f52e1d3318ab0e97658de8501fc9b8051cb4846758ee1a1d5fafb652d9bd563a64787db1444b5c2fd117f97a6079f26d69dab797b4ad03be6300eb8209f958bda352ff1e9e022fb1a59cf8a799a00cae27cc9075b98477de0f683c81d51e7eed524af75f2faca3323cad22bea751ad8ad5d678599a582c94aa1031fe6db279fb9bd3c39e3edc1693ea0ad96aad53d4075f57c743a7c573bed82095d7cb48fea6bb3b98b7233b4a96fd10f2b7b7719401b53a1ae7a34fca46d82797f232b0726b5435628db1b373cc4768bde47d9aec2a10242d38620946a817e9be7f09701888a43797ad4057077c72b1951cd6d4b9663cfbe41bc313c2d2edde562da94da0cff9d950893f9d902fe851c17f67a7453a156e172ee5bfbd6e120ebe46e25c0565fc9520a8b139c8e25f18d6e7fb1d315c2f1703f0ebdb1d8ac0c818df30cec8656a169cc702ae4190cd40452b0e0a3595c3a4045b8019369ddf6018ca1ab80c58ffedc9abcc2c7a7d1f21906ecab1d20459e785b4c1cb1f237aa072b103a84e4ae9c06191c82e8944fa739a678080e1127af590e9ada573a37f261022eac07536bbea14280e89402f6aab47bd0e1a2ecc0fa1ae4ba46fa75fcdb7ed0f5a197873d15ddc3ef16f90dfd7b44b3b1e8a83c83a5391b365f9f3e76b2542fc11e8fa751d7968979d662cfd5945fd27802a307562b46a9ed47ac288ab6559c57b611e3bf3e093b9e09551946bbce65d9655abd10537896fe66bf80385d85e4d7d89b4b7f53446eed2af109432aa814c8fdce7c7a3fa0680576ebd6432173ab466bf00a9c4a29f9b444c1caa71d03e80d90201360f6d842db58718be81335921e72a323ac3d0e72cf68eb09c2bc7c03893d2cd290d84452299d639ca2cc5746a1c10fc367cc798c9f01dfaf03b641ae32b0615b825a168163edbdcfc55e5f5a450d93e94657a043eebdd67193077cda9d2f76e9cf35c5fcdbc86574f87a73d1cdb7cf78106f700ddf84791d3fce066846107a44e5a59b776972e043ae009a2b8ed98761f9bfde1d09f7c9dede2449fe04ff5e049cce4cd006d1125051dff1dc8608ed0fbb0fb6b9dca1f01cf999e2d01370f72d3660ec84709aaec29bbf3af291e18b0f01677b53b236a283f7c33bccbd859b3d4ec227cb8f82957288df1299abc98658c0f3b9746d76eeb3025c724119920254da5a8ce62af071efa88c7fdd7ce79c20b0f5ff6b3cb45b7011042b2c0d93c545798db0fdcdcb3ecd29aea0ea284a948b9be3e2d066c52c898d2f3bd7f875d7d1b5d80c874a51da8bbb854435bb1f36b7fceb2687ab4707c9a4c9b0103ae966f023879c58458227b46895931e861ef406e7acd081bea26f376612805f7debd7151788cbbc299076b1c847fa17a3caf529e1ebbeb7f9520630ebe8a712339deaaf1053ce79f8603101d13f2778aa0b52cac33d11cdb99ad309fa065bc2bd29f4ae09d5f470ffd717ecf7786ad872aaf834431423dc9b69a8ab3ee073ecdb391d0fb53a82b2b3527418364bf3fdea4c2ded14e54ba0a1f2516a07e8b28a9b4fd1dc83079da7bb199e786a57f9caf82a75c192e3962aef800ab7aa76f15943d7a5ac73298cfdd1fb3593cd96e80204a9df4598befc9e27bfd582f7d2c369e7f7c60ecb3b4be746529c70ab01da8243e980731cded1c0cc0b1b81a9be6e52c6db3297add42e01df1dd2efddd95ccf82de0c132d32fa6bc1308ce970e4981d5cb2f085de2cfff91f223f1204be5922208cae3fe290146bbd083f7a680af52cc804257784f86d21a4b721cc8f4a42ed1fc7863106b196bd36ced2c5084e1ac4a721f52200883aec951e0fcc836dd729798da2041e79e3d3f479f557bbfee0b1e8ecefdddade8c8d4e7cad57acd80b02c5639a17cf93588ba97d31533d8049f7fc4951cabb61b55271b342a34af9c43992895e8dec39c07a49ac3698124c280c3bef57ac227f6807c59d43a677e569823acfe6a614ef7d3e34737f2c570962a588a0e62d07c08a8c20bd315d610a6b6e336e4f870285b0b85e34069fcc1e43f414453d5acea9c4fcb13efbc40d299cea3962fce28dad3f6ab63b8ee4f308056a62482386a0de30c737fffdb59811cec067f03d8b68c0fd65bf4babcc413f955197f85e6417ee185ebc9794fa00ac3fb04bffbc2262aa7f1968ac81c6953f5a7dd686b7aab9a309db3f5d823a5a9b6da0e39c28ddcfd009f88f055675df03cd541451a3ba8ce9360c636b2abd9eb616837bdd16d0c8989585df55ac983f53eb3f9fb012aa6a9d0d50ecdb7e029364f8f4034e141408cc2e6eed45bc3da9a5bb816287376862e0aac05160992e107c249ab733249ac0465c03716e498186ebd245bc58de9ce197a13090a88cb6784a064df2b58dfb1253602b7e72273946139407be054ad38e9f2c6cd2fdad70f6c6e83b1e8907d03e65d4b47cbbf6a63aff82dfc2df0f700c1aaa1166ebcf5c7adc0a0a13418dbc459d7c58860c81f5885b7bb6b72eff08c7b4a843b75cbc57ce1cc1d83a176c7b43e9aee56ad8193eb96eff068c7e966af790ac5f363b9b5e9ff20edd5be399e5ddb30fcb0ccb47f31ff2b9c952d3220609ceca281bce175a343826eee1c291854ba054f415a2e692c794e3df88a1559ac936b93a3d01213be382400b0626e2195b015b431fbea18651ad299f15f971149c42b9c38dfc1240ab80ce350f058b55e146b39f3947b8552cf12d0d87a610fe784dd3aa7f1ec5f55992ed98a85670ad2f39234baec2fcca36c1420396447f495cc8a5d2dfc11572320a4c27901d92370d4e1975180896bfbc1fd2232a75352950a66c9952bf616e8ba482bdafa885235f8958df85e6182665dc8292aafa6f957ccf2a9c15b86ae3fff3caae2407b5018d786c0778bdfb88751110d51d78713a2408e56024659c2667555939688860241737fa629ac41f8f67a55c70267f693ac30d7a46ca0981df04edb320ba905f8bc706348974c79b5999c98abde64027a87363ff108ba99de63f07442fde44c3b745484f22e6bec7b77b3dff1792bdd19bbc65dd9aa1a2f9fc22be4e0c3c3dd640e5a63b48c8e472f24478d5e287b2bf173f1852170b6404560b4374a9ea9e77d8970ed2b2002cb6044945d18d49ba00db4b3c8a0f272cc4902e2fb54652ab5887158b3792189cfebe17ed8cafaec885f517b70e6ad5b236a73ce0ba8a564f10f66faca9dd089b40e85a5ee93e168d4566bb01bae987129c90716c2a744838f582e8ddfba90f3cf1b0f794fb88b46fda43a0bae43f04252ef24f5d4c2f5f2548afa0f8bc611b1b0bd726ea351b1878f86d3ec148614e6a219a6b71b070b2b43bafd83f6501524cff093b80a46b4eb998273f6f4aece6301e69765ba1c4d552bc6a92224969e9a4e856543e0dd0ad75aebb48f1a8865e821d67a9891b5bfa2ba3ae4ecc30e966e99518efdb87a0e05e44e00fafcf5616e03ea62a6a66b7a518380ab8930c68b9f1f7cceaee22fc4b4038400f514910b3216799878a50d8b42bd45cdca680a9cec8b2163e58cecb3fc3bff5c9ce4ec48e2bddaa3fe6229cb53a1e673bcb5648b18e0763986aed4130664d8843435728fbcd909a7b47f69295863b74a0de4d68ab84dcd352b46fc0b8c781524a8dafda6a24af23bb44bc8ca546a6e892b92ffc489be4ea11218076a5944e99560c920f217d89977ca9a8e4c49d9c58f697a0cd4766908677ed045b6a2249b87e02dc7ab9bd30fefd052ec97303ba269fac77c3aae1b9937a8730bf3c478de17277826ecf85cb4fabae7776590e99c5f24353434b7e11840c06fa42da646666bbc912fbf3e7c99a06a3fc41303fe90be74439431eb239d870b4284df8cdc1ab6eb8a4971257d837d32f1d00400ff77d895e732fcf7bd8e3d786a1e29585c690c2b941224cc7c4d5d48c640b091503a49c041717a9011d212215c9aa4f75515d7f8ee261adb6e513a70d13d8dfa83fe49616f55754b2d2d9e04cd53f4d966187b12aed749470140b0207fac16b114e97dd811fc87769e3c71147f46a542a3cbe9fa12405af7f4220cbcbacd7c6b58abe45ffea9baa6265e4f565e7be720904575ab08028dfe4f702f2a1624c9360a431957aabebb7ab6d2893f88de3384e475be083eb7ce8d8d308f1c7b690e485f72dda2fd99e89db5df23ae1c990ee527bd7873aa4a2ad6c187cf6bd76adf616133ea521cb6548f2f1041aab0e4afbc967297b31301f743c1baf331179fd9fb43753ceb8228d3cfaad2d76e1ffcb76efca3f6f32e4d2b2ece2826df3e29c0e3833155df2a3a70be1e0b3b05b2d44694df513536b5b2ef7e7a7488b89cd6fc2877f0af08bf69c53a582cf02c90a5f1818e84e35df26a978bc4c59633025896a21f23e2e32d4bc3c47865263d1d339842b0718662c46aef3541323ad34e4a9a472917789f6ead593b7e2db8ab80ddc3e133dce019c27e6683bfde02becf87d45ad7ea435a7192cadbcb749b662621a1415b2eebf4555161066cf286c4f843329df36da140f803317cdc3e52a713e5b24331e4d3a6c3efb1b1372d99be2c58d2d8baa716f2708eb083ef28f6afa18e1cf3fce9241829b852379f1ee094974824eb6f006d5f2f4db002ed0963764d1b6442d95a9cb5126f113084a59dbed5759d90fb4bc82c2752f50c370ee896835bc00759fefdf70ee978fd47ce656ac9d5e845359dd578daf79e031bf17fcb4d6c53c8432eec2952308f32bdc56ff20ca4b6e109672aca90ff524519f24e00513ba0e31b2b4f86f542084011c5bdec8dcdc4f88cfa41d7d43efaf1075353876de331ff6cf11056c58978c78ca8ae89e91ed857df8d4e4f6f37c993a15dd2d012c4513a6352fce231bad9dc1c7b951b023ce2c63ac8f70de0ecc7ff32de07061bad85e669ed57b39142fb35aee8eb0d6490410aff1644c2508e95d81f7683f83a1379631e20422ef50e8cf0041e530cc47ac417371640ded6d533090a184e7972cadd09611d08ac16fddb4d436c15dedf4b63c3b5b6fd9a4efb0cc70fb843aa47e46ab54e73bf72765239b694066ac00152bd314b34510aad6368981d9979165f79827eb7cd40e88ac24b6fce1f32976b1757a73d701a6e4226002a0595237ffeb403a385005a4917cc1e206d40d18c2a122f342460fa79b17600264b4cdb70c0d452a459c230f79ac3bd7565901be05e5a0ba9f00c09cfc08ab3c0e48cd54f3fdaa056ecc2eb40ba06c38e594790e538b966605e56362a2df58f523142b8b24eaa8f9347b12bcb78d01219316db14550b5e4bf0dd28cc660fa8e796357947beb387184e7df200740b70245a6223553700e7e514d518ac3b1cfea48749f84793e75bc1f46230aa62037db9ffb90ed36bcb568d067026e00af586aa77b961339b4919ea5a8896dc179f0ac33f4997670032abd155c65663ff126d618ef9aa61c4e1e56ba2a7f5c7ab2ff9b07b6fe3e005e7464e18f251c70363ad5286921857fb2cf6a3101da352cdd636694cfa34408e58c450eef5d2c81ac0cd8552f55d754d7fa2979331257f9532a7357e4a0b7a546a92988322f3b1bff38c6d976e55b694cb2224ed8dc355bf04fcd7196447ed1e3e6cba9ce079d8c401c4bed80a747e220e99c818baddd3b6c26359117ef3f367013931c9d8999000a73c1297c94f52f3882a551b01e39424fd9b20b2201e17d9ab3904102362e9f4f0a4ab3a389024817c148e1a44a43bc7e9b9c06c419aa96b6113bf6d83d30fb82f8371e7e02a6f8d4429bc2bdcec5ff53aa8e098066a387c9f5ac8dbbed5bbe400fd8bbaa8881a0937c8ddb45ae846b3e8e26ea3732a76a9702259dd06b4e235ff608951ff567a0db3b7dd60e87c1236e018818948ef064cb16832fe80f647417da3a764d134d9bed503183729ecf92d3d5c36c5b9a15d8b7952b64bd841d055ccbc280e15dc7172ed927d1558307c5de3a9884e8a98cc670a4595fcee34a7771f079c316b9b46d85f79a50aa2850a5486e3cb92e52236204401db0e276278eb16c4c70edf35ff01ad2b7ecdede8123c3b7e936b988754389442c956db9ddf9dd03aa9687f74111583b1a7d13fd76d8a60288a3fb347e3b017e219737da6461b20deddd498ccbe93135a483a7f408a9cba501687c2f57f7bec90199a53a8526e9d223e16124d28ec03b7a846cebf49c6552558edddfdbf1bf01dddb2cc062362b28d6ab79bbbbd5d053116bb0db117e6b2b8604360d3c2456440be4e86c88707bd8b8f3bea7b8a4f659cc3ba945c0ee74c40e3f0fb39340b6aa659de8e8cec0c9b9fea2f6f1b663f71e5f45e409fedff4e7c3798f1f6e258b83caa70662034e00b35301b66e193f85dae55b39f40027eae88549666ac2a9f9cb0679add6b9fcb210b36c0f05b6fb6c2dc950d34a7f8ab924b43121a598a6a9346afa0c09ea705c9a91501c14e1c205ab82f5719305de499a8540eb06c9350823e4d884a179b6e4e1e0094b33269f149e0fad450515d097f79f05cc78b34c0cc442420d30f4031d8cde7dfd615e808a542ab1b7ee8cc5009bdd45e342926d32508c8cba8b8b3396b005f917d027e3c2f7e37225607ce0d1c72f9ab5144261e71c49f9a8f1c69466a24a0406ed060076f206b9a3be5bdc2af9e2495a523f72aa92d7782904f410fe5d8fb8b7916426cd4475ab4c7d440d4ef09425d59e6c4d662cac2fb1322d5ec5fd8ce37ef6c039510969c93ec795714f88dbe790a6c2e456190acd5aae7827f2155ed26cb3f6a00a2b5e89187d799dd2757d0ef624ee6e90879276d4e04fcc567bb5a58ef8bcb78fc115b08d13cfc8aaf52f79f998db62765f0b51e8cc1a87dec36d9bfaaf644f3c92748f00d556b215119b0e6b6ea52aef325ee2236c93c74ce4688cf92c78ce1ec4b111108e54c7caf6c3980672b4d7c4a6f9886b95d859d8bb32653d2463fa984ccd907a315421362f54013d861b2961e49f2b5c99d23eeebf946917810d73979b9fe1edb19b9249780ab6336ed4b4d9789bbbf428e545be4edb436e3cd0ffbe252734641d91697343dc6d98939323389b2f927bbeb37f26159c1de191744c9087986d0ac2a0988a5bf1b2e0ab1b267d5cfe4235b748014a087c8a9f495bc93e1254a4132b8cfcec00446e85f004bd4a6fc93761e73e4357c1287400bc88d57cefdd7670d3b044a419f544b4fd1e484b4a781c228051c07bfdf6d5e812d8614d5bba3555f8e3f560640cd3f6cd596e1a331c1265bad208d2d88daa14126a1158a883223c92f74cfc01259a2291d311f279bebd2b0b0eb1525c56efbcf844ca7357ac6b2b616421f45dfc2d6bf6696c1e7d254241e3f8491326289f4454152fc76191e420626a7a268db550e1dacd1a47e9ddad22e1b4b92f27e6082781ef5f18f42a439a70fde5e19b84ce86009a13404aa1e1cfff412819894ce44db087561b2c1d5502f89f853655b0513223f35b68da71315ed167073ac45008afe6bb8218841691f09193630b2c41d6dccecc065c159a7db9174c7b4a7bc90c0ffa26c201b01b05b4b5f48d43fbf70e127cf9fef2291f8ea8ae227632310d643b75267f51a513a6e3b801a15957e5878cbaf72e8a482914d3ce10e60acf366987fd6d538968cc249fef48a48e5fe783cef280fa98eb1f58128c6f4dc8b1a6a482df4952e3183a4bc0fac3a9a671c65078986acb297eb9852735e932e551f9f6ccd04595fe830c362798a61d6abe2493fdf98ef4522653c550b439b76e9f0abe8d5aa8dbdef8fafe3b87b97fbfe2cffc8aec59b406028c85e972cac6a123f0b1f2f9fb32500deb1c13241087476d8a8a7a58e9f94aba4769eee5278e34cabed7d24fa79af6f8cc6ef2fa63a07f458a836784ab850ab4300acad5d751b1e66fa003bdbe8a2b8359fe9b4a80bfcf26d9519f931d5f6d215286b468252aa2d009d89f86b99a768a861a415936acc223f3fe0f569ba3cc4ff7496e2bc94ba9c5d274d0d8743530defc4c4050bb0cf65f2dcc698caab7b352a02e1bde329075a6c3e83057c80dea7661902bc2c11367cdf65ba19117949d6b245cdc22cb4f979d47be635109a826e3a40f8e1b2b59a6f225e0b4163e5fd90aa571e0f9a178e5e85848b6680ad79cd558905847f125b884293d40507cab558db626093a390bcc06c27ce4dfa6cd1bb27da7f74d94bf249d416cb85c5619bf85502d001b6d33ad700cdeee8f78b16aec9e67dc596f4e1bfa2b90b29f59ff74d4a5ef50a7a382d8655db21556d3b4892507da8bb8cbc8ed36b4f5a0adc0fec4cd6519edec729a491c1b171226f9388b7a86657f53ed6b7063213c0c82e21274f7cbe4ebb8607161222c93e4cae8b427e2d1e7db019ed477ebacbf339ceed04adb4ca5639cdc0578bf5b2db6805eac77de5854e4005b768c6ca4e6653a46ca26f9f51a3e5e48f344652221d0c8006949b1121804ddc414977d24d4696a7f83f04ff887dd9ef13618dd6bbdee2169c7c8953f4561399e2fd8cd6c273b3762a3c2bc2d6b1cb785c9e75f38bc0c99a36fb39fc98710cce3df8d92574b155f9ad04bc547a4dde0808a111e940e3cfdf254accbbb77c5a628c7e1d2140ac87d83cad7bea1ef1c1600cddd16b8b8fb5b7b28e87fd2e1770a2753659851d89e6f0ae9c705bae14d567f6cecddf8a7ffabd0210cafe9883e0e63ca07c396856ffc1043e2c2e4654aa6d212362f3af37ba42dd91b3156bedf4f68efb6ebb59418804fe36867fd9ccdb25340bae79bb06cf2170a5394c9d7ffe45c9b2c4200fac0d3efbbddca650cbd193afe469645446d1ec4cd44bd14466374fb0b27385331786c7bdca930fa8043de196dea79f1f5bced9fb062fc9c48d888abe79546a9c54a88d92d1a68c35b1393da03d69cb59c7f03455d1a344c593dddcaed87ddbada5d243e40cad7ec95a9dc1c7b7cd540ca9c1f07b1b3ffd4c5c0093a278c470f48247b5dcb6f523dac616", 0x2000, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.061707808s ago: executing program 4 (id=762): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@resgid}]}, 0x1, 0x5a4, &(0x7f0000000940)="$eJzs3T1sG3UbAPDnznHTj7xv+kovEqAOFSAVqaqT9AMKU7siKlXqgMQCkeNGVZy4ih1ookike4XogAB1KRsMjCAGhoqFkZWFjxmpohFITQcwcnxO09QpToljiH8/6ZL//+7s5/n7/Jx9pzs5gL51uPEnjXgqIs4nEcPrlg1EtvBwc72V5cXiveXFYhL1+oVfkkgi4u7yYrG1fpL9PxARSxHxZER8nY84mq495Z5Wozq/MDVeLpdms/5IbfrySHV+4dil6fHJ0mRp5sSLL506ffLU2PGx9eneq6/v5bc21ms/XH/32rev3Lz+6WeHlorvjydxJoayZevHsZ2ar0k+zmyYf7IbwXooud+81cs82JpcVueNUnoihiOXVX079fU7h8EdSQ/oovpgRH3NuibQBxJFD32q9T2gcfzbmnby+8fts80DkEbcleXF4jvRij/QPDcRe1ePTfb/mjxwZNI43jy4k4myKy1djYjRgYGH3/9J9v57fKPbkSBddetsc0M9vP3Ttf1PtNn/DLXOnf5Nrf3fSrb/W+kwfmP/d77DGL+//tNHm8a/OhhPt42frMVP2sRPI+LNDuPfeO3L05stq38ccSTax29JHn1+eOTipXJptPm3bYyvjhx6efPxR+zfJH7znO3e1UTWj39PllPa4fi/+ObzZ5YeEf/5Zx+9/du9/vsi4r0O4//v7ievbrbs9tXkTuNbwFa3fxL5uNlh/BfOHP4+azprCAAAAAAAAAAA2yhdvZYtSQtr7TQtFJr38P4/9qflSrV29GJlbmaiec3bwcinrSuthpv9pNEfy67HbfWPb+ifyGUBc/tW+4VipTzR47EDAAAAAAAAAAAAAAAAAADAP8WBDff//5Zbvf9/489VA7vV5j/5Dex26h/614P1n/QsD2Dn+fyHvlVX/9C/1D/0L/UP/Uv9Q/9qW//7dj4PYOf5/If+pf4BAAAAAAAAAAAAAAAAAAAAAAAAAKArzp8715jq95YXi43+xMD83FTlrWMTpepUYXquWChWZi8XJiuVyXKpUKxM/9XzJZXK5dGYmbsyUitVayPV+YU3pitzM63fFC3luz4iAAAAAAAAAAAAAAAAAAAA+PcZWp2StBCRb/bTtFCI+E9EHEwiuXipXBqNiP9GxHe5/GCjP9brpAEAAAAAAAAAAAAAAAAAAGCXqc4vTI2Xy6XZ7jUGslCdPerHWlfzGdjKyhGxtL1pNJ5xy4/KZy9gdzdTnzRyHb4P+77Rw50SAAAAAAAAAAAAAAAAAAD0qfs3/Xb6iD+6mxAAAAAAAAAAAAAAAAAAAAD0pfTnJCIa05Hh54Y2Lt2TrORW/0fE2zcufHBlvFabHWvMv7M2v/ZhNv94L/IHOtWq0zQiGnUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3FedX5gaL5dLs4/ZGOxgnV6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBx/BkAAP//QkjPdw==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141104, 0x128) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 5.540303717s ago: executing program 4 (id=771): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x100, 0x41) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4000000000000ffe, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) 3.625979057s ago: executing program 4 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000080, 0x0, 0x7f}]}) 3.288778494s ago: executing program 32 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000080, 0x0, 0x7f}]}) 3.040052197s ago: executing program 1 (id=801): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48000) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) 2.90500974s ago: executing program 1 (id=803): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2e8a, &(0x7f0000000140)={0x0, 0x859, 0x20, 0x3, 0x10e, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) 2.664156982s ago: executing program 1 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 2.157949459s ago: executing program 2 (id=808): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x65, 0x2, "18047d80edc79ded5baf17b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e880626d219622937291bf1a88f2a7e933b9de68b10c358ceb836b1269874d68178d5ca2a64891b8ac2b18bec75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b511416252a03ab78abf8be2fc6313a03763da61a574a9bc59b728aa3c02eedb176afb984194f31696e2b3357c5757fbf99bae1c8dde4cfedc5714471bdd688ce6ac6e3d2a149abd76a0fe9a448d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef00"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x12, 0x4, 0x6}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}]}}]}, 0x154}}, 0x0) 2.156517929s ago: executing program 1 (id=809): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='dummy0\x00'}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1.909155422s ago: executing program 2 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000001000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.68983881s ago: executing program 1 (id=813): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x23, 0x6, &(0x7f0000000080)={0x16, "91240000dba61bf6010cd557c005671fe56af43014f1e11e266e7d73ec00"}}) 1.657380505s ago: executing program 2 (id=814): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.280050191s ago: executing program 0 (id=817): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) getcwd(&(0x7f0000001e00)=""/4096, 0x1000) 1.239195017s ago: executing program 3 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x100) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 1.157341651s ago: executing program 2 (id=819): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000101040000000000e1000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4068890) 1.118287628s ago: executing program 0 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="050024008c0000000a001800030303030303000008002600711600001c00700005000600"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x0) 964.640094ms ago: executing program 3 (id=821): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 742.037643ms ago: executing program 0 (id=822): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x1535, &(0x7f00000001c0)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/237, 0xed) 698.20803ms ago: executing program 3 (id=823): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r0, 0x541b, 0x0) 666.498756ms ago: executing program 0 (id=824): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000002c0)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@rodir}, {@uni_xlate}, {@uni_xlateno}, {@shortname_win95}, {@utf8}, {@uni_xlate}, {@fat=@uid}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@rodir}, {@utf8no}, {@utf8}]}, 0x2, 0x29a, &(0x7f0000000440)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x5) 666.344826ms ago: executing program 2 (id=825): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x1bc, &(0x7f0000000640)="$eJzsVb/uEkEQ/nZvueMsjLUxsYAoFMJxqLHTyvAA1kQCJxIP/3AkCqHAivew4UV8BwuNDRbGxAJrzZndnVsXY6L+uIT8kv2S4/tmZmdudsnNPs5eZAGAH/vVEPeg4OEi3jMGAeAq0777geYvvuYW2Z+F5ib53xB/IM4WyyeDNE1mUlRBwnjOImrAYZ2jKx4nGPvDVksTvqnc/+/08PeTKlmEeuM41cn/RfAjGxOltOGVuS+c4jD7OPlfaYnvuca/LP5l3n3N8VV9qO/2q6EUDwHIOtI30g+z13gA3lprLgv1MA+5WSOHnzSuA2jPp8/b2WJ5YzIdjJNx8jSOu7ejm1F0K24/mqRJpH+Z9QpO34/kJgA5U0MZD3W8AuAjDdgLOASzWqM4C63avjWcG7XDXM6EyS24SjGZS7OdyyN4gGsq9nLNwuJ6AOrUtdpSDwwehDI6wuoPyMFRVYHW8Fk62oBB3it5AERbCPAibYdKYchUYyTdO+ui7Q1xnbhHvCXeERd3VnEXCVXhE1mNNeDj1WA+n3WkSyvji40vvmTezOmt33x7c8CVAA4ODg4ODg4O5ww/AwAA///gbFXE") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x1) getdents64(r0, 0x0, 0x10) 444.074604ms ago: executing program 3 (id=826): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x141, 0x0, &(0x7f00000004c0)="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", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 428.457177ms ago: executing program 0 (id=827): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000c80)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 260.113236ms ago: executing program 2 (id=828): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 194.051467ms ago: executing program 0 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x6c, 0x9, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x6c, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x6c}}, 0x0) 193.864797ms ago: executing program 3 (id=830): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x100001, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 93.107755ms ago: executing program 3 (id=831): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 0s ago: executing program 1 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. syzkaller login: [ 77.614706][ T4259] cgroup: Unknown subsys name 'net' [ 77.729387][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.325171][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.935537][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.944292][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.952053][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.961221][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.968918][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.976399][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.978059][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.986092][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.991610][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.998829][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.007005][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.018450][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.020107][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.028171][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.039902][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.041788][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.047684][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.055627][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.068994][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.076216][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.109894][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.117241][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.143346][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.153722][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.161935][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.184217][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.195706][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.214206][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.221771][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.229358][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.486154][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 81.585167][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.592434][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.601746][ T4275] device bridge_slave_0 entered promiscuous mode [ 81.627196][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.634576][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.642384][ T4275] device bridge_slave_1 entered promiscuous mode [ 81.710904][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.742447][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.768608][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 81.804685][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 81.844888][ T4275] team0: Port device team_slave_0 added [ 81.891215][ T4275] team0: Port device team_slave_1 added [ 81.907180][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 81.948012][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.955100][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.981177][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.012430][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.020017][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.028223][ T4273] device bridge_slave_0 entered promiscuous mode [ 82.042911][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.050155][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.058314][ T4273] device bridge_slave_1 entered promiscuous mode [ 82.066134][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.073321][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.099544][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.140201][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 82.169212][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.184159][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.211131][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.218542][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.227261][ T4272] device bridge_slave_0 entered promiscuous mode [ 82.240879][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.248165][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.256605][ T4272] device bridge_slave_1 entered promiscuous mode [ 82.323672][ T4273] team0: Port device team_slave_0 added [ 82.338015][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.345378][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.353471][ T4274] device bridge_slave_0 entered promiscuous mode [ 82.366259][ T4275] device hsr_slave_0 entered promiscuous mode [ 82.372978][ T4275] device hsr_slave_1 entered promiscuous mode [ 82.385335][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.395904][ T4273] team0: Port device team_slave_1 added [ 82.402041][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.412369][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.420646][ T4274] device bridge_slave_1 entered promiscuous mode [ 82.448847][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.512087][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.530059][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.537268][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.564316][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.583105][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.590339][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.622025][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.639151][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.648760][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.656937][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.665262][ T4282] device bridge_slave_0 entered promiscuous mode [ 82.674915][ T4272] team0: Port device team_slave_0 added [ 82.681002][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.688444][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.696807][ T4282] device bridge_slave_1 entered promiscuous mode [ 82.720501][ T4272] team0: Port device team_slave_1 added [ 82.771878][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.791836][ T4274] team0: Port device team_slave_0 added [ 82.812436][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.819486][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.845969][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.860729][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.874661][ T4273] device hsr_slave_0 entered promiscuous mode [ 82.881311][ T4273] device hsr_slave_1 entered promiscuous mode [ 82.889256][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.897390][ T4273] Cannot create hsr debugfs directory [ 82.904631][ T4274] team0: Port device team_slave_1 added [ 82.914847][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.921819][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.948223][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.009407][ T4282] team0: Port device team_slave_0 added [ 83.029958][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.037134][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.063373][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.079743][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.087036][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.113355][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.126633][ T4282] team0: Port device team_slave_1 added [ 83.168845][ T4272] device hsr_slave_0 entered promiscuous mode [ 83.178840][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 83.184413][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 83.185361][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 83.198302][ T4272] device hsr_slave_1 entered promiscuous mode [ 83.205661][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.213308][ T4272] Cannot create hsr debugfs directory [ 83.242195][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.250702][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.277047][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 83.277065][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 83.289878][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.305678][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.312654][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.338972][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.431917][ T4274] device hsr_slave_0 entered promiscuous mode [ 83.438785][ T4274] device hsr_slave_1 entered promiscuous mode [ 83.446205][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.454117][ T4274] Cannot create hsr debugfs directory [ 83.525854][ T4282] device hsr_slave_0 entered promiscuous mode [ 83.534788][ T4282] device hsr_slave_1 entered promiscuous mode [ 83.541742][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.549488][ T4282] Cannot create hsr debugfs directory [ 83.688791][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.720018][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.747544][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.772708][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.836780][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.847488][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.874843][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.885655][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.918663][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.942862][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.955834][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.982521][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.056131][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.073354][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.115038][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.124888][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.177019][ T4282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.195036][ T4282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.212856][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.233516][ T4282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.260788][ T4282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.279150][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.290209][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.319274][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.337307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.346953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.376166][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.387380][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.396405][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.407434][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.415756][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.423695][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.431851][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.442574][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.452114][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.459546][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.471414][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.490666][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.499946][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.508762][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.515928][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.557936][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.567316][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.576143][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.583287][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.595960][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.604823][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.613986][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.621088][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.628848][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.638442][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.647230][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.654381][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.662538][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.671410][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.680870][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.689401][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.711532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.720725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.729767][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.736923][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.775048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.784490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.798039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.807590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.816790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.825977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.834717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.843474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.852152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.879064][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.891756][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.901060][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.909755][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.920106][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.930148][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.941933][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.950780][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.958910][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.969092][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.009246][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.022537][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.036111][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.045212][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.053661][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.062286][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.070889][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.080208][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.088951][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.099234][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.108780][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.125854][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.136377][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.165545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.184878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.208775][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.221694][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.239993][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.253816][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 85.259888][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 85.268920][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.275146][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 85.282748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.304488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.324055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.333969][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 85.340169][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 85.347913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.366795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.376476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.454611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.469480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.495654][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.502801][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.516943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.527274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.540384][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.547748][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.562626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.572231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.587251][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.594458][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.611506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.620839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.635504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.647764][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.654936][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.669112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.708907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.725354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.743831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.763992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.799538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.818954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.859678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.885493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.918613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.967526][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.984483][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.012991][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.028676][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.038866][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.051177][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.060833][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.069795][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.078445][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.086416][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.136872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.154723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.174337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.193780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.204806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.212349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.227140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.235513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.242943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.254611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.267380][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.286099][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.298182][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.314257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.321775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.338856][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.410453][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.429096][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.471038][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.481606][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.503952][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.523872][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.536493][ T127] cfg80211: failed to load regulatory.db [ 86.643679][ T4273] device veth0_vlan entered promiscuous mode [ 86.679704][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.694776][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.712245][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.725971][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.746156][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.758506][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.770355][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.792138][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.800957][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.813979][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.822016][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.830896][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.841872][ T4272] device veth0_vlan entered promiscuous mode [ 86.861753][ T4272] device veth1_vlan entered promiscuous mode [ 86.869879][ T4275] device veth0_vlan entered promiscuous mode [ 86.880455][ T4273] device veth1_vlan entered promiscuous mode [ 86.899154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.915011][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.940146][ T4275] device veth1_vlan entered promiscuous mode [ 86.974259][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.037140][ T4273] device veth0_macvtap entered promiscuous mode [ 87.052006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.063099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.090075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.100295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.115660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.134484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.157477][ T4275] device veth0_macvtap entered promiscuous mode [ 87.165813][ T4272] device veth0_macvtap entered promiscuous mode [ 87.187391][ T4272] device veth1_macvtap entered promiscuous mode [ 87.229121][ T4273] device veth1_macvtap entered promiscuous mode [ 87.242203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.251624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.261147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.269813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.278763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.287620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.298256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.310774][ T4275] device veth1_macvtap entered promiscuous mode [ 87.333606][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 87.333622][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 87.339760][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 87.377251][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.394298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.412789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.420538][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 87.420549][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 87.440915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.452497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.466864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.488848][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.511140][ T4282] device veth0_vlan entered promiscuous mode [ 87.534392][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.552224][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.575854][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.592774][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.607268][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.618510][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.628466][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.639381][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.650846][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.658888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.674041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.684601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.700340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.709071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.718523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.727624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.737468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.750257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.760017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.777657][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.794336][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.810575][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.824607][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.834550][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.843554][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.852436][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.871571][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.882929][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.895421][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.906553][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.918371][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.926688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.937771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.946974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.956079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.967463][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.982282][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.991367][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.000523][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.029009][ T4282] device veth1_vlan entered promiscuous mode [ 88.040162][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.050186][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.061248][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.070245][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.249055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.260150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.308730][ T4282] device veth0_macvtap entered promiscuous mode [ 88.350725][ T4282] device veth1_macvtap entered promiscuous mode [ 88.398026][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.416722][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.443079][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.454780][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.466124][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.488357][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.493224][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.512666][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.523626][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.533227][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.537296][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.553018][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.566301][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.579302][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.601131][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.624518][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.637238][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.651044][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.668378][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.670979][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.690804][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.706007][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.716891][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.727016][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.737577][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.748780][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.761067][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.770955][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.780657][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.799891][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.819209][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.836789][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.848951][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.859250][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.868184][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.885165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.894631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.903794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.918135][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.928535][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.945913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.995155][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.013688][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.027503][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.042515][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.058067][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.089932][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.106318][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.115871][ T4274] device veth0_vlan entered promiscuous mode [ 89.139191][ T4274] device veth1_vlan entered promiscuous mode [ 89.259567][ T4274] device veth0_macvtap entered promiscuous mode [ 89.299840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.339550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.361866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.391488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.410582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.419243][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 89.425411][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 89.431442][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 89.486939][ T4274] device veth1_macvtap entered promiscuous mode [ 89.494028][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 89.500101][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 89.540832][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.582019][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.598907][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.609945][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.641454][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.657909][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.669483][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.690324][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.717551][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.743352][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.754748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.767778][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776581][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.798177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.818979][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.834454][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.850987][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.861390][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.877649][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.887691][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.899347][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.909954][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.920809][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.932358][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.944817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.958441][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.988595][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.002079][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.011284][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.023167][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.047994][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.058336][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.082885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.182395][ T4384] process 'syz.3.13' launched '/dev/fd/4' with NULL argv: empty string added [ 90.229249][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.250933][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.279326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.328876][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.349819][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.372325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.452304][ T4391] program syz.1.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.490107][ T4392] loop3: detected capacity change from 0 to 512 [ 90.562986][ T4392] EXT4-fs (loop3): 1 truncate cleaned up [ 90.606722][ T4398] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 90.626627][ T4392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.666406][ T4392] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.15: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 90.821721][ T4405] netlink: 'syz.2.20': attribute type 4 has an invalid length. [ 90.848740][ T4405] netlink: 17 bytes leftover after parsing attributes in process `syz.2.20'. [ 90.874894][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 91.228517][ T4421] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.358586][ T4423] loop2: detected capacity change from 0 to 4096 [ 91.484382][ T4431] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.852843][ T4411] loop4: detected capacity change from 0 to 32768 [ 92.501069][ T4455] loop3: detected capacity change from 0 to 1024 [ 92.549321][ T4455] EXT4-fs: Ignoring removed bh option [ 92.630343][ T4455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.836017][ T4466] loop1: detected capacity change from 0 to 512 [ 92.899387][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.914295][ T4466] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.967499][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 93.062031][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 93.086081][ T4445] loop2: detected capacity change from 0 to 32768 [ 93.212996][ T4472] netlink: 'syz.3.49': attribute type 5 has an invalid length. [ 93.240295][ T4445] JBD2: Ignoring recovery information on journal [ 93.277260][ T4477] loop1: detected capacity change from 0 to 16 [ 93.308362][ T4477] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 93.320915][ T4451] loop4: detected capacity change from 0 to 32768 [ 93.333968][ T4451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.41 (4451) [ 93.437411][ T4445] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 93.492538][ T4451] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.567629][ T4451] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 93.628594][ T4451] BTRFS info (device loop4): setting nodatasum [ 93.673185][ T4451] BTRFS info (device loop4): force zlib compression, level 3 [ 93.673661][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.54'. [ 93.710610][ T4451] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 93.752801][ T4451] BTRFS info (device loop4): use lzo compression, level 0 [ 93.815622][ T4451] BTRFS info (device loop4): turning on flush-on-commit [ 93.822662][ T4451] BTRFS info (device loop4): enabling auto defrag [ 93.863801][ T4451] BTRFS info (device loop4): max_inline at 4096 [ 93.870227][ T4451] BTRFS info (device loop4): using free space tree [ 93.980066][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 94.230851][ T4451] BTRFS info (device loop4): enabling ssd optimizations [ 94.479867][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 94.500355][ T4274] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.522936][ T4519] loop2: detected capacity change from 0 to 512 [ 94.656037][ T4519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.735698][ T4519] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.755195][ T4519] capability: warning: `syz.2.63' uses 32-bit capabilities (legacy support in use) [ 94.992578][ T4538] bonding: no command found in bonding_masters - use +ifname or -ifname [ 95.066131][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 95.198903][ T4547] loop1: detected capacity change from 0 to 1024 [ 95.695584][ T4560] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967272. macoff=96 [ 95.937088][ T27] audit: type=1400 audit(1790967105.524:2): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=4574 comm="syz.0.83" name="unknown" offset=16 [ 96.362761][ T4588] loop7: detected capacity change from 0 to 7 [ 96.426871][ T4264] Dev loop7: unable to read RDB block 7 [ 96.441646][ T4264] loop7: unable to read partition table [ 96.465290][ T11] loop: Write error at byte offset 2, length 3584. [ 96.484663][ T4264] loop7: partition table beyond EOD, truncated [ 96.511106][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 96.520800][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 96.622253][ T4588] Dev loop7: unable to read RDB block 7 [ 96.645001][ T4588] loop7: unable to read partition table [ 96.671571][ T4588] loop7: partition table beyond EOD, truncated [ 96.722991][ T4588] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CîjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5) [ 96.963135][ C1] sched: RT throttling activated [ 96.965091][ T3638] Dev loop7: unable to read RDB block 7 [ 96.981820][ T3638] loop7: unable to read partition table [ 97.004148][ T3638] loop7: partition table beyond EOD, truncated [ 97.025745][ T4580] loop4: detected capacity change from 0 to 131072 [ 97.051113][ T4580] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 97.059353][ T4580] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 97.070083][ T4580] F2FS-fs (loop4): Test dummy encryption mode enabled [ 97.084850][ T4580] F2FS-fs (loop4): invalid crc value [ 97.118877][ T4580] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.163226][ T4580] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 97.203194][ T4580] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 97.212233][ T4580] F2FS-fs (loop4): Start checkpoint disabled! [ 97.248437][ T4580] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 97.255771][ T4580] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 97.562286][ T4611] loop1: detected capacity change from 0 to 128 [ 97.645684][ T4611] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 98.340842][ T4638] kAFS: bad VL server IP address [ 98.558753][ T4643] netlink: 188 bytes leftover after parsing attributes in process `syz.4.110'. [ 98.922617][ T4657] loop2: detected capacity change from 0 to 256 [ 98.959780][ T4657] ======================================================= [ 98.959780][ T4657] WARNING: The mand mount option has been deprecated and [ 98.959780][ T4657] and is ignored by this kernel. Remove the mand [ 98.959780][ T4657] option from the mount to silence this warning. [ 98.959780][ T4657] ======================================================= [ 99.055977][ T4657] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 99.075326][ T4660] can0: slcan on ptm0. [ 99.209174][ T4663] can0 (unregistered): slcan off ptm0. [ 99.219750][ T4663] Falling back ldisc for ptm0. [ 99.237955][ T27] audit: type=1326 audit(1790967108.824:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26939e159 code=0x7fc00000 [ 99.748001][ T27] audit: type=1326 audit(1790967109.334:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe26933f4d9 code=0x7fc00000 [ 99.856150][ T27] audit: type=1326 audit(1790967109.334:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe26933f59d code=0x7fc00000 [ 99.927476][ T27] audit: type=1326 audit(1790967109.334:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.3.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe26939e159 code=0x7fc00000 [ 100.328479][ T4675] loop4: detected capacity change from 0 to 32768 [ 100.387155][ T4675] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 100.400300][ T4675] JBD2: Ignoring recovery information on journal [ 100.489952][ T4675] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 100.639786][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 101.538176][ T4743] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.701655][ T4751] netlink: 64 bytes leftover after parsing attributes in process `syz.3.147'. [ 102.026538][ T4355] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.082760][ T4764] rnbd_client L211: map_device: Parameters missing [ 102.167337][ T4737] loop4: detected capacity change from 0 to 32768 [ 102.230421][ T4737] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.142 (4737) [ 102.253967][ T4355] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.267849][ T4355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.280254][ T4355] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.312517][ T4737] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 102.330768][ T4737] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 102.331026][ T4355] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 102.349603][ T4737] BTRFS info (device loop4): using free space tree [ 102.361177][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.369694][ T4355] usb 3-1: Product: syz [ 102.384057][ T4355] usb 3-1: Manufacturer: syz [ 102.389573][ T4355] usb 3-1: SerialNumber: syz [ 102.625116][ T4737] BTRFS info (device loop4): enabling ssd optimizations [ 102.657733][ T4355] usb 3-1: selecting invalid altsetting 1 [ 102.670815][ T4355] usb 3-1: unit 3 not found! [ 102.676444][ T4355] usb 3-1: unit 6 not found! [ 102.933775][ T4355] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 103.065845][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.124070][ T4274] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 103.188697][ T7] usb 3-1: USB disconnect, device number 2 [ 103.607818][ T4825] IPVS: persistence engine module ip_vs_pe_À not found [ 103.903577][ T4843] loop4: detected capacity change from 0 to 512 [ 103.942748][ T4843] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.972803][ T4843] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 103.995607][ T4843] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.014624][ T4843] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 104.044642][ T4843] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.176: bad orphan inode 14 [ 104.079432][ T4843] ext4_test_bit(bit=13, block=18) = 1 [ 104.099440][ T4843] is_bad_inode(inode)=0 [ 104.103954][ T4843] NEXT_ORPHAN(inode)=0 [ 104.108085][ T4843] max_ino=32 [ 104.111799][ T4843] i_nlink=1 [ 104.120582][ T4843] EXT4-fs (loop4): 1 truncate cleaned up [ 104.145850][ T4843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.335447][ T4857] netlink: 'syz.1.183': attribute type 12 has an invalid length. [ 104.484573][ T1174] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.534022][ T4864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.185'. [ 104.558429][ T4864] netlink: 2 bytes leftover after parsing attributes in process `syz.0.185'. [ 104.653987][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.674299][ T1174] usb 5-1: not running at top speed; connect to a high speed hub [ 104.683447][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.704043][ T1174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.714267][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.717121][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.739649][ T4875] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 104.752735][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.762328][ T1174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.778939][ T1174] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 104.779201][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.790786][ T1174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.819541][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.839671][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.861358][ T1174] usb 5-1: Found UVC 1.00 device (046d:0825) [ 104.882768][ T1174] usb 5-1: Failed to create links for entity 1 [ 104.888983][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.907361][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.915851][ T1174] usb 5-1: Failed to register entities (-22). [ 104.933638][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.039300][ T4879] loop3: detected capacity change from 0 to 256 [ 105.074485][ T1174] usb 5-1: USB disconnect, device number 2 [ 105.203001][ T4883] loop1: detected capacity change from 0 to 2048 [ 105.259896][ T4883] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.536117][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 105.682240][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 105.695299][ T4899] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 105.701215][ T4899] syzkaller0: ignored: set checksum disabled [ 106.419754][ T4937] MTRR 1 not used [ 107.429648][ T4981] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.567308][ T4986] Zero length message leads to an empty skb [ 107.848114][ T4355] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.972699][ T5006] loop3: detected capacity change from 0 to 256 [ 108.035696][ T5006] FAT-fs (loop3): Directory bread(block 64) failed [ 108.042300][ T5006] FAT-fs (loop3): Directory bread(block 65) failed [ 108.051843][ T4355] usb 5-1: Using ep0 maxpacket: 8 [ 108.059285][ T4355] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.079783][ T4355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.101287][ T5006] FAT-fs (loop3): Directory bread(block 66) failed [ 108.110173][ T4355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.121616][ T5006] FAT-fs (loop3): Directory bread(block 67) failed [ 108.136822][ T5008] loop1: detected capacity change from 0 to 1024 [ 108.148900][ T4355] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.163374][ T5006] FAT-fs (loop3): Directory bread(block 68) failed [ 108.170004][ T5006] FAT-fs (loop3): Directory bread(block 69) failed [ 108.192857][ T4355] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.225172][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.236376][ T5006] FAT-fs (loop3): Directory bread(block 70) failed [ 108.265181][ T5006] FAT-fs (loop3): Directory bread(block 71) failed [ 108.271861][ T5006] FAT-fs (loop3): Directory bread(block 72) failed [ 108.323442][ T5006] FAT-fs (loop3): Directory bread(block 73) failed [ 108.509789][ T4355] usb 5-1: GET_CAPABILITIES returned 0 [ 108.520279][ T4355] usbtmc 5-1:16.0: can't read capabilities [ 108.752961][ T4322] usb 5-1: USB disconnect, device number 3 [ 108.853315][ T4355] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.046232][ T4355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.066883][ T4355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.087180][ T4355] usb 2-1: config 1 has no interface number 0 [ 109.114313][ T4355] usb 2-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 109.133492][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.141547][ T4355] usb 2-1: Product: syz [ 109.155233][ T4355] usb 2-1: Manufacturer: syz [ 109.159890][ T4355] usb 2-1: SerialNumber: syz [ 109.287353][ T27] audit: type=1400 audit(1790967118.874:7): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5034 comm="syz.0.266" name="unknown" offset=16 [ 109.403775][ T4355] usb 2-1: 1:0 : does not exist [ 109.408763][ T4355] usb 2-1: BAAD HEADSET c_chmask mismatch [ 109.477724][ T4355] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 109.505763][ T4355] usb 2-1: USB disconnect, device number 2 [ 109.521583][ T5041] loop4: detected capacity change from 0 to 1024 [ 109.581542][ T5041] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.594740][ T5041] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.625349][ T5041] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.269: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.729083][ T5041] EXT4-fs (loop4): 1 orphan inode deleted [ 109.740192][ T5041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.755303][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.832829][ T5041] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.269: path /31/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 109.852294][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.895773][ T5054] program syz.3.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.926255][ T5041] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.269: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.023364][ T5057] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.269: iget: bad i_size value: 1970324836974602 [ 110.049239][ T5041] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 18: comm syz.4.269: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.069398][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.105625][ T5041] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.269: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.165998][ T5066] loop1: detected capacity change from 0 to 256 [ 110.175264][ T5041] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 20: comm syz.4.269: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.209350][ T5066] exfat: Deprecated parameter 'utf8' [ 110.284259][ T5066] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 110.395145][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 110.552575][ T5076] loop1: detected capacity change from 0 to 164 [ 110.576087][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.643356][ T5076] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 110.720330][ T5076] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 110.761748][ T5076] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 110.836294][ T5084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.165634][ T5098] program syz.1.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.310313][ T5102] __nla_validate_parse: 144 callbacks suppressed [ 111.310331][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 111.615408][ T5109] loop1: detected capacity change from 0 to 128 [ 111.681228][ T5109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.694502][ T5109] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.751112][ T5109] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.300: No space for directory leaf checksum. Please run e2fsck -D. [ 111.815681][ T5109] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.300: checksumming directory block 0 [ 111.948772][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 112.242572][ T5125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.306'. [ 112.269209][ T5125] bond0: option miimon: invalid value (18446744073709551615) [ 112.279053][ T5125] bond0: option miimon: allowed values 0 - 2147483647 [ 112.302516][ T5129] loop4: detected capacity change from 0 to 512 [ 112.393526][ T5131] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 112.560748][ T5135] __sock_release: fasync list not empty! [ 112.794025][ T5149] loop4: detected capacity change from 0 to 1024 [ 112.807922][ T5149] EXT4-fs: Ignoring removed orlov option [ 112.860998][ T5149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.929947][ T5149] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 113.023268][ T4355] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.076371][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 113.117153][ T5157] i2c i2c-0: new_device: Can't parse I2C address [ 113.223222][ T4355] usb 2-1: Using ep0 maxpacket: 8 [ 113.230452][ T4355] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 113.255091][ T4355] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.274992][ T4355] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 113.288658][ T4355] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.299784][ T4355] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 113.318226][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.345065][ T4355] usb 2-1: config 0 descriptor?? [ 113.394788][ T5166] loop4: detected capacity change from 0 to 256 [ 113.443554][ T5166] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 113.681613][ T5172] loop4: detected capacity change from 0 to 64 [ 113.770618][ T4355] hid-alps 0003:044E:120C.0001: unknown main item tag 0x0 [ 113.789785][ T4355] hid-alps 0003:044E:120C.0001: unknown main item tag 0xe [ 113.798502][ T4355] hid-alps 0003:044E:120C.0001: unknown main item tag 0x0 [ 113.805908][ T4355] hid-alps 0003:044E:120C.0001: unknown main item tag 0x0 [ 113.813674][ T4355] hid-alps 0003:044E:120C.0001: unexpected long global item [ 113.837386][ T4355] hid-alps 0003:044E:120C.0001: parse failed [ 113.852868][ T4355] hid-alps: probe of 0003:044E:120C.0001 failed with error -22 [ 113.866295][ T27] audit: type=1800 audit(1790967123.454:8): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.327" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 113.972874][ T1174] usb 2-1: USB disconnect, device number 3 [ 114.518030][ T5194] loop4: detected capacity change from 0 to 256 [ 114.552187][ T5194] exfat: Deprecated parameter 'namecase' [ 114.584495][ T5194] exfat: Deprecated parameter 'namecase' [ 114.625587][ T5194] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 114.681364][ T5196] loop3: detected capacity change from 0 to 256 [ 114.812709][ T5196] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 114.947868][ T5203] vivid-000: disconnect [ 114.969133][ T5201] vivid-000: reconnect [ 115.562512][ T5232] loop2: detected capacity change from 0 to 8 [ 115.952695][ T5249] vivid-000: disconnect [ 115.969411][ T5245] vivid-000: reconnect [ 116.288738][ T5265] loop1: detected capacity change from 0 to 164 [ 116.654422][ T5282] loop4: detected capacity change from 0 to 2048 [ 116.723732][ T5282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.831847][ T5288] program syz.0.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.339283][ T5277] loop1: detected capacity change from 0 to 32768 [ 117.366377][ T5284] loop2: detected capacity change from 0 to 32768 [ 117.384444][ T5277] XFS (loop1): Mounting V5 Filesystem [ 117.391875][ T5284] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.377 (5284) [ 117.435790][ T5284] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.449272][ T5312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 117.460192][ T5284] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 117.479279][ T5284] BTRFS info (device loop2): disabling tree log [ 117.489354][ T5284] BTRFS info (device loop2): using free space tree [ 117.523469][ T4355] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 117.523503][ T5277] XFS (loop1): Ending clean mount [ 117.716570][ T4355] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 117.730219][ T4355] usb 1-1: config 127 has no interface number 0 [ 117.764595][ T5284] BTRFS info (device loop2): enabling ssd optimizations [ 117.787692][ T4355] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 117.815619][ T4282] XFS (loop1): Unmounting Filesystem [ 117.832533][ T7] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0002/input/input6 [ 117.849939][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.873184][ T4355] usb 1-1: Product: syz [ 117.877414][ T4355] usb 1-1: Manufacturer: syz [ 117.889246][ T7] hid-generic 0005:0576:0306.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 117.903707][ T4355] usb 1-1: SerialNumber: syz [ 118.129891][ T4355] asix: probe of 1-1:127.57 failed with error -22 [ 118.188385][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.310528][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.324977][ T11] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 118.341364][ T4355] usb 1-1: USB disconnect, device number 2 [ 118.413289][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 118.421931][ T7] usb 4-1: config 0 has no interfaces? [ 118.460865][ T7] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 118.502356][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.531565][ T7] usb 4-1: Product: syz [ 118.557802][ T7] usb 4-1: Manufacturer: syz [ 118.562555][ T7] usb 4-1: SerialNumber: syz [ 118.592804][ T7] usb 4-1: config 0 descriptor?? [ 118.727296][ T5347] MTRR 1 not used [ 118.833480][ T5350] usb 4-1: USB disconnect, device number 2 [ 119.222947][ T5366] loop1: detected capacity change from 0 to 512 [ 119.291473][ T5366] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.341216][ T5366] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.399: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 119.413700][ T5355] loop4: detected capacity change from 0 to 32768 [ 119.433311][ T5366] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.399: ea_inode dec ref err=-117 [ 119.469484][ T5355] JBD2: Ignoring recovery information on journal [ 119.483514][ T5366] EXT4-fs (loop1): 1 orphan inode deleted [ 119.493713][ T5366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.580835][ T5355] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.604933][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 119.648889][ T5375] loop3: detected capacity change from 0 to 512 [ 119.732030][ T5375] EXT4-fs (loop3): 1 truncate cleaned up [ 119.770490][ T5375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.829818][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 119.928688][ T27] audit: type=1800 audit(1790967129.514:9): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.403" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 119.952232][ T5375] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.403: bg 0: block 465: padding at end of block bitmap is not set [ 120.015279][ T5375] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 120.059777][ T5375] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.059777][ T5375] [ 120.091649][ T5375] EXT4-fs (loop3): Total free blocks count 0 [ 120.110419][ T5375] EXT4-fs (loop3): Free/Dirty block details [ 120.128666][ T5375] EXT4-fs (loop3): free_blocks=0 [ 120.138630][ T5390] loop4: detected capacity change from 0 to 2048 [ 120.163330][ T5375] EXT4-fs (loop3): dirty_blocks=9 [ 120.168523][ T5375] EXT4-fs (loop3): Block reservation details [ 120.206821][ T5375] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 120.216151][ T5390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.226714][ T5390] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.245755][ T5392] loop2: detected capacity change from 0 to 512 [ 120.297033][ T5396] input: syz1 as /devices/virtual/input/input7 [ 120.345590][ T5392] EXT4-fs (loop2): invalid journal inode [ 120.351349][ T5392] EXT4-fs (loop2): can't get journal size [ 120.370028][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 120.418068][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 120.441682][ T5392] EXT4-fs (loop2): 1 truncate cleaned up [ 120.533198][ T5392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.835419][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 121.074156][ T5416] loop3: detected capacity change from 0 to 256 [ 121.141837][ T5416] exfat: Deprecated parameter 'utf8' [ 121.218370][ T5422] loop1: detected capacity change from 0 to 512 [ 121.249617][ T5416] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 121.266470][ T5422] EXT4-fs: Ignoring removed oldalloc option [ 121.298623][ T27] audit: type=1800 audit(1790967130.884:10): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.417" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 121.319686][ T4355] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.357875][ T5422] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 121.421113][ T5422] EXT4-fs (loop1): 1 truncate cleaned up [ 121.442039][ T5422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.513309][ T4355] usb 1-1: Using ep0 maxpacket: 16 [ 121.521709][ T4355] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.574372][ T4355] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.635723][ T4355] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 121.680519][ T4355] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.700777][ T4355] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 121.741330][ T4355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.758042][ T4355] usb 1-1: config 0 descriptor?? [ 121.795536][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 121.943544][ T5435] netlink: 64 bytes leftover after parsing attributes in process `syz.1.425'. [ 122.188418][ T4355] hid (null): report_id 0 is invalid [ 122.205831][ T4355] hid (null): report_id 0 is invalid [ 122.341029][ T5444] zero sized request [ 122.406157][ T5350] usb 1-1: USB disconnect, device number 3 [ 122.599351][ T5456] loop1: detected capacity change from 0 to 256 [ 122.692120][ T5458] ip_tables: iptables: counters copy to user failed while replacing table [ 123.475932][ T5487] pi3usb30532 0-0005: Error reading config register -5 [ 123.518972][ T5487] pi3usb30532: probe of 0-0005 failed with error -5 [ 123.557077][ T5487] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 123.747207][ T5499] loop3: detected capacity change from 0 to 512 [ 123.810688][ T5499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.837285][ T5499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.906950][ T5499] EXT4-fs (loop3): 1 truncate cleaned up [ 123.912778][ T5499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.980770][ T5499] EXT4-fs error (device loop3): ext4_empty_dir:3179: inode #2: block 13: comm syz.3.454: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 124.071045][ T5511] loop4: detected capacity change from 0 to 2048 [ 124.092078][ T5499] EXT4-fs (loop3): Remounting filesystem read-only [ 124.141253][ T5511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.252873][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 124.574516][ T5528] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 124.672199][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 124.952417][ T5546] loop3: detected capacity change from 0 to 512 [ 124.979834][ T5546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.030263][ T5546] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.470: bad orphan inode 131083 [ 125.100216][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.277717][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 126.664275][ T5624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 126.983370][ T5352] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 127.185230][ T5352] usb 2-1: not running at top speed; connect to a high speed hub [ 127.204089][ T5352] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 127.224424][ T5352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.232652][ T5352] usb 2-1: Product: syz [ 127.243641][ T5352] usb 2-1: Manufacturer: syz [ 127.248455][ T5352] usb 2-1: SerialNumber: syz [ 127.270607][ T5352] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 127.290818][ T5352] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 127.312909][ T5352] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 127.346977][ T5352] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 127.387300][ T5352] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 127.479899][ C0] usb 2-1: malformed indat packet [ 127.485704][ C0] usb 2-1: malformed indat packet [ 127.491510][ C0] usb 2-1: malformed indat packet [ 127.511760][ C0] usb 2-1: malformed indat packet [ 127.523417][ C0] usb 2-1: malformed indat packet [ 127.580502][ C0] usb 2-1: malformed indat packet [ 127.587218][ C0] usb 2-1: malformed indat packet [ 127.811887][ T5350] usb 2-1: USB disconnect, device number 4 [ 127.835734][ T5350] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 127.877761][ T5350] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 127.925870][ T5350] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 127.956117][ T5350] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 127.978932][ T5350] keyspan 2-1:1.0: device disconnected [ 127.987222][ T5658] loop3: detected capacity change from 0 to 4096 [ 128.022181][ T5658] ntfs3: Unknown parameter 'windows_names' [ 128.314064][ T5672] loop2: detected capacity change from 0 to 512 [ 129.023209][ T5701] No such timeout policy "syz1" [ 129.143396][ T5351] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.158462][ T5684] loop2: detected capacity change from 0 to 32768 [ 129.190313][ T5684] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.525 (5684) [ 129.256691][ T5684] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 129.292776][ T5684] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 129.314702][ T5684] BTRFS info (device loop2): use zlib compression, level 3 [ 129.322734][ T5684] BTRFS info (device loop2): using free space tree [ 129.345406][ T5351] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.373425][ T5351] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.395498][ T5351] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 129.405071][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.413780][ T5351] usb 4-1: Product: syz [ 129.418139][ T5351] usb 4-1: Manufacturer: syz [ 129.424763][ T5351] usb 4-1: SerialNumber: syz [ 129.468552][ T5351] symbolserial 4-1:1.0: symbol converter detected [ 129.505770][ T5351] usb 4-1: symbol converter now attached to ttyUSB0 [ 129.643222][ T5684] BTRFS info (device loop2): enabling ssd optimizations [ 129.676476][ T5698] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 129.688111][ T5351] usb 4-1: USB disconnect, device number 3 [ 129.722390][ T5351] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 129.748873][ T5351] symbolserial 4-1:1.0: device disconnected [ 129.875177][ T5743] netlink: 72 bytes leftover after parsing attributes in process `syz.4.543'. [ 129.902996][ T5350] hid-generic 0005:046D:C082.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 130.157593][ T5745] fido_id[5745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.256677][ T5752] loop1: detected capacity change from 0 to 2048 [ 130.319272][ T5752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.398185][ T4275] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 130.723464][ T5350] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 130.905030][ T5350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.933738][ T5350] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.962014][ T5350] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.002807][ T5350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.029779][ T5350] usb 5-1: config 0 descriptor?? [ 131.079399][ T5350] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.099385][ T5350] dvb-usb: bulk message failed: -22 (3/0) [ 131.138495][ T5350] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.156158][ T5350] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.171766][ T5350] usb 5-1: media controller created [ 131.182287][ T5350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.209533][ T5350] dvb-usb: bulk message failed: -22 (6/0) [ 131.220918][ T5350] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.239298][ T5350] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 131.256294][ T5758] dvb-usb: bulk message failed: -22 (4/0) [ 131.300356][ T5350] dvb-usb: schedule remote query interval to 150 msecs. [ 131.303529][ T5777] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.308035][ T5350] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.327099][ T5350] usb 5-1: USB disconnect, device number 4 [ 131.400477][ T5350] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 131.553234][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 131.560454][ T5777] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 131.602659][ T5777] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.623934][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.632208][ T5777] usb 4-1: Product: syz [ 131.672084][ T5777] usb 4-1: Manufacturer: syz [ 131.703224][ T5777] usb 4-1: SerialNumber: syz [ 131.725906][ T5777] usb 4-1: config 0 descriptor?? [ 131.731594][ T5783] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.770076][ T5777] hub 4-1:0.0: bad descriptor, ignoring hub [ 131.791833][ T5777] hub: probe of 4-1:0.0 failed with error -5 [ 131.949358][ T5808] program syz.1.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.617381][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.624293][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.819267][ T5847] loop2: detected capacity change from 0 to 512 [ 132.908627][ T5847] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.576: missing EA_INODE flag [ 132.930691][ T5847] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.576: error while reading EA inode 2 err=-117 [ 132.953487][ T5847] EXT4-fs (loop2): 1 orphan inode deleted [ 132.959414][ T5847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.983436][ T5853] loop1: detected capacity change from 0 to 128 [ 133.030435][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 133.056534][ T5853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.101151][ T5853] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.149883][ T5856] loop4: detected capacity change from 0 to 1024 [ 133.341033][ T5863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.580'. [ 133.354753][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 133.497954][ T5867] netem: incorrect gi model size [ 133.513416][ T5867] netem: change failed [ 133.546479][ T27] audit: type=1326 audit(1790967143.134:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5869 comm="syz.0.584" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faad0b9e159 code=0x0 [ 135.937048][ T5948] loop4: detected capacity change from 0 to 1024 [ 136.228818][ T5772] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.242059][ T5350] usb 4-1: USB disconnect, device number 4 [ 136.417028][ T5966] tmpfs: Too few inodes for current use [ 136.438825][ T5967] bonding: unable to delete non-existent bo [ 136.450021][ T5772] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.470849][ T5772] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.493258][ T5772] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.527186][ T5772] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 136.543236][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.585342][ T5950] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.024524][ T4287] Bluetooth: hci5: Reading Intel version command failed (-71) [ 137.026212][ T5772] usb 3-1: USB disconnect, device number 3 [ 137.054648][ T5993] loop1: detected capacity change from 0 to 2048 [ 137.136711][ T5993] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.146205][ T5993] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.266076][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 137.835827][ T27] audit: type=1326 audit(1790967147.424:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 137.894711][ T27] audit: type=1326 audit(1790967147.424:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 138.018246][ T27] audit: type=1326 audit(1790967147.464:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 138.101155][ T27] audit: type=1326 audit(1790967147.464:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 138.129646][ T27] audit: type=1326 audit(1790967147.464:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 138.155793][ T27] audit: type=1326 audit(1790967147.514:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 138.184390][ T27] audit: type=1326 audit(1790967147.514:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f708b59dec2 code=0x7ffc0000 [ 138.293233][ T27] audit: type=1326 audit(1790967147.514:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f708b59df57 code=0x7ffc0000 [ 138.363232][ T27] audit: type=1326 audit(1790967147.514:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6017 comm="syz.4.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f708b55ae51 code=0x7ffc0000 [ 139.080653][ T6029] loop4: detected capacity change from 0 to 40427 [ 139.097625][ T6029] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 139.108880][ T6029] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.126428][ T6029] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 139.167252][ T6029] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 139.176257][ T6059] loop3: detected capacity change from 0 to 4096 [ 139.202076][ T6029] F2FS-fs (loop4): invalid crc value [ 139.229691][ T6029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.273805][ T6037] loop2: detected capacity change from 0 to 32768 [ 139.331533][ T6064] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.370126][ T6037] JBD2: Ignoring recovery information on journal [ 139.395475][ T6029] F2FS-fs (loop4): Start checkpoint disabled! [ 139.481864][ T6029] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.493674][ T6029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 139.535629][ T6037] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.745729][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 139.976204][ T57] kworker/u4:4: attempt to access beyond end of device [ 139.976204][ T57] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 140.695428][ T6102] loop1: detected capacity change from 0 to 256 [ 141.046691][ T6112] loop1: detected capacity change from 0 to 1024 [ 141.116225][ T6114] loop2: detected capacity change from 0 to 128 [ 141.165688][ T6114] EXT4-fs (loop2): Test dummy encryption mode enabled [ 141.261074][ T6114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.299747][ T6124] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 141.299747][ T6124] The task syz.0.694 (6124) triggered the difference, watch for misbehavior. [ 141.327746][ T6114] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.515773][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 142.054146][ T6155] netlink: 52 bytes leftover after parsing attributes in process `syz.4.708'. [ 142.084425][ T6155] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.867207][ C0] hrtimer: interrupt took 1742630666 ns [ 144.322204][ T6183] loop3: detected capacity change from 0 to 256 [ 144.830136][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 144.830175][ T27] audit: type=1326 audit(1790967410.415:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 144.861264][ T27] audit: type=1326 audit(1790967410.415:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 144.952927][ T27] audit: type=1326 audit(1790967410.495:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 144.976852][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.025411][ T6217] program syz.4.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.071664][ T27] audit: type=1326 audit(1790967410.505:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 145.096787][ T27] audit: type=1326 audit(1790967410.505:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 145.114539][ T6219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 145.121841][ T27] audit: type=1326 audit(1790967410.505:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 145.154345][ T27] audit: type=1326 audit(1790967410.505:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 145.178716][ T27] audit: type=1326 audit(1790967410.505:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 145.203646][ T27] audit: type=1326 audit(1790967410.505:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 145.228663][ T27] audit: type=1326 audit(1790967410.505:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6212 comm="syz.4.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b59e159 code=0x7ffc0000 [ 145.433267][ T6229] loop2: detected capacity change from 0 to 512 [ 145.517297][ T6229] EXT4-fs (loop2): 1 truncate cleaned up [ 145.540512][ T6229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.615916][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 145.629638][ T6239] device erspan0 entered promiscuous mode [ 145.770171][ T6245] netlink: 72 bytes leftover after parsing attributes in process `syz.2.746'. [ 145.783240][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 145.812801][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 145.829914][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 145.844009][ T5777] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.035853][ T5777] usb 1-1: Using ep0 maxpacket: 16 [ 146.048301][ T5777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.087416][ T5777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.116756][ T5777] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.128395][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.151453][ T5777] usb 1-1: Product: syz [ 146.159283][ T5777] usb 1-1: Manufacturer: syz [ 146.172728][ T5777] usb 1-1: SerialNumber: syz [ 146.242993][ T6258] ip_tables: iptables: counters copy to user failed while replacing table [ 146.321116][ T6260] loop9: detected capacity change from 0 to 7 [ 146.335478][ T4264] Dev loop9: unable to read RDB block 7 [ 146.341191][ T4264] loop9: unable to read partition table [ 146.353213][ T4264] loop9: partition table beyond EOD, truncated [ 146.371134][ T6260] Dev loop9: unable to read RDB block 7 [ 146.393735][ T6260] loop9: unable to read partition table [ 146.399678][ T6260] loop9: partition table beyond EOD, truncated [ 146.410735][ T5777] usb 1-1: unknown interface protocol 0xf4, assuming v1 [ 146.434145][ T6260] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.442169][ T5777] usb 1-1: 0:2 : does not exist [ 146.454019][ T5777] usb 1-1: unit 1 not found! [ 146.478200][ T6262] loop2: detected capacity change from 0 to 256 [ 146.501632][ T5777] usb 1-1: USB disconnect, device number 4 [ 146.663809][ T6266] ip_tables: iptables: counters copy to user failed while replacing table [ 146.805120][ T5337] udevd[5337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.917012][ T6275] loop4: detected capacity change from 0 to 1024 [ 147.008955][ T6275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.034604][ T6275] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.085339][ T6275] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.120644][ T6275] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz.4.762: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 147.204303][ T6275] overlayfs: failed to look up (136) for ino (-117) [ 147.244454][ T6289] bond0: no command found in slaves file - use +ifname or -ifname [ 147.274104][ T6291] loop3: detected capacity change from 0 to 8 [ 147.325904][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /136/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 147.379058][ T6291] SQUASHFS error: Failed to read block 0x636: -5 [ 147.408531][ T6291] SQUASHFS error: Unable to read metadata cache entry [634] [ 147.431191][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /136/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 147.519943][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 147.570194][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /136/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 147.630203][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 147.684661][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /136/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 147.762771][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 147.825844][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /136/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 147.847822][ T6303] loop3: detected capacity change from 0 to 4096 [ 147.897137][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 147.963654][ T6303] ntfs: volume version 3.1. [ 149.142070][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 149.297679][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.792'. [ 149.314506][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.527229][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.604076][ T5350] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.671446][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.803879][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.814509][ T5350] usb 4-1: Using ep0 maxpacket: 16 [ 149.822638][ T5350] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.848367][ T5350] usb 4-1: config 0 has no interface number 0 [ 149.865125][ T5350] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 149.886544][ T5350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.931446][ T5350] usb 4-1: config 0 descriptor?? [ 150.220334][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'. [ 150.267806][ T6360] device veth1_to_team entered promiscuous mode [ 150.288070][ T6360] device veth1_to_team left promiscuous mode [ 150.385183][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.410474][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.425613][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.434643][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.445182][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.453035][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.547707][ T5350] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 150.556867][ T5350] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 150.565836][ T5350] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 150.572952][ T5350] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 150.580638][ T5350] uclogic: probe of 0003:28BD:0071.0005 failed with error -71 [ 150.614579][ T5350] usb 4-1: USB disconnect, device number 5 [ 150.903357][ T6380] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.505885][ T5777] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.519504][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 151.519518][ T27] audit: type=1400 audit(1790967417.106:46): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6399 comm="syz.3.815" name="unknown" offset=28 [ 151.552524][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 151.692167][ T5777] usb 2-1: Using ep0 maxpacket: 32 [ 151.700437][ T5777] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 151.752716][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.799128][ T5777] usb 2-1: config 0 descriptor?? [ 151.848795][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 151.920396][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'. [ 152.017882][ T5777] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 152.044604][ T5777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.091397][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.120360][ T5777] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 152.127758][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.143693][ T5777] usb 2-1: media controller created [ 152.150445][ T6364] device bridge_slave_0 entered promiscuous mode [ 152.247733][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.263825][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.271013][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.303310][ T6364] device bridge_slave_1 entered promiscuous mode [ 152.314878][ T5777] az6027: usb out operation failed. (-71) [ 152.338415][ T5777] az6027: usb out operation failed. (-71) [ 152.359291][ T5777] stb0899_attach: Driver disabled by Kconfig [ 152.369054][ T5777] az6027: no front-end attached [ 152.369054][ T5777] [ 152.374521][ T6424] loop2: detected capacity change from 0 to 8 [ 152.416210][ T5777] az6027: usb out operation failed. (-71) [ 152.461018][ T5777] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.491496][ T5777] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 152.517310][ T6426] program syz.3.826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.536168][ T5777] dvb-usb: schedule remote query interval to 400 msecs. [ 152.546891][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 152.553108][ T5777] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 152.646118][ T5777] usb 2-1: USB disconnect, device number 5 [ 152.773260][ T5777] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 152.842157][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.844935][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.948549][ T6436] ================================================================== [ 152.948562][ T6436] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 152.948608][ T6436] Write of size 4 at addr ffffc90004759000 by task syz.2.828/6436 [ 152.948627][ T6436] [ 152.948640][ T6436] CPU: 0 PID: 6436 Comm: syz.2.828 Not tainted syzkaller #0 [ 152.948660][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.948680][ T6436] Call Trace: [ 152.948688][ T6436] [ 152.948696][ T6436] dump_stack_lvl+0x188/0x24e [ 152.948720][ T6436] ? sys_imageblit+0x1ba8/0x25d0 [ 152.948744][ T6436] ? show_regs_print_info+0x12/0x12 [ 152.948766][ T6436] ? load_image+0x410/0x410 [ 152.948794][ T6436] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 152.948827][ T6436] ? __virt_addr_valid+0xbf/0x540 [ 152.948856][ T6436] ? sys_imageblit+0x1ba8/0x25d0 [ 152.948877][ T6436] print_report+0xa8/0x210 [ 152.948907][ T6436] kasan_report+0x10b/0x140 [ 152.948938][ T6436] ? sys_imageblit+0x1ba8/0x25d0 [ 152.948964][ T6436] sys_imageblit+0x1ba8/0x25d0 [ 152.948994][ T6436] ? sys_copyarea+0x2530/0x2530 [ 152.949029][ T6436] ? verify_lock_unused+0x140/0x140 [ 152.949062][ T6436] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 152.949093][ T6436] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 152.949116][ T6436] soft_cursor+0x9fd/0xc30 [ 152.949141][ T6436] bit_cursor+0x16b5/0x1f40 [ 152.949172][ T6436] ? bit_clear_margins+0x550/0x550 [ 152.949216][ T6436] ? get_color+0x2d8/0x440 [ 152.949246][ T6436] ? bit_clear_margins+0x550/0x550 [ 152.949268][ T6436] ? fbcon_cursor+0x42c/0x640 [ 152.949301][ T6436] hide_cursor+0x7f/0x320 [ 152.949324][ T6436] do_con_write+0x1dd/0x6c40 [ 152.949357][ T6436] ? mark_lock+0x94/0x320 [ 152.949405][ T6436] ? vt_resize+0xc0/0xc0 [ 152.949430][ T6436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 152.949461][ T6436] ? _raw_spin_unlock+0x40/0x40 [ 152.949491][ T6436] ? __wake_up_common+0x5b/0x4d0 [ 152.949545][ T6436] ? __mutex_trylock_common+0x15c/0x260 [ 152.949572][ T6436] con_put_char+0x7f/0xc0 [ 152.949596][ T6436] ? con_write+0x40/0x40 [ 152.949619][ T6436] ? rcu_is_watching+0x11/0xa0 [ 152.949649][ T6436] ? trace_contention_end+0x5f/0x170 [ 152.949675][ T6436] ? con_write+0x40/0x40 [ 152.949698][ T6436] tty_put_char+0xc5/0x150 [ 152.949722][ T6436] ? do_SAK_work+0x20/0x20 [ 152.949751][ T6436] __process_echoes+0x1b1/0x8f0 [ 152.949784][ T6436] n_tty_receive_buf_common+0xda0/0x1470 [ 152.949826][ T6436] ? paste_selection+0x1c7/0x4c0 [ 152.949857][ T6436] paste_selection+0x321/0x4c0 [ 152.949886][ T6436] ? __might_fault+0xa6/0x120 [ 152.949910][ T6436] ? set_selection_kernel+0x17a0/0x17a0 [ 152.949941][ T6436] ? do_task_dead+0xd0/0xd0 [ 152.949967][ T6436] ? __might_fault+0xa6/0x120 [ 152.949987][ T6436] ? __might_fault+0xc2/0x120 [ 152.950014][ T6436] ? __might_fault+0xa6/0x120 [ 152.950036][ T6436] ? tioclinux+0x222/0x3e0 [ 152.950060][ T6436] vt_ioctl+0x441/0x1ca0 [ 152.950090][ T6436] ? __vt_event_wait+0x260/0x260 [ 152.950123][ T6436] ? __fget_files+0x28/0x460 [ 152.950154][ T6436] ? tty_jobctrl_ioctl+0x164/0xb00 [ 152.950179][ T6436] tty_ioctl+0x7e6/0xba0 [ 152.950202][ T6436] ? security_file_ioctl+0x7c/0xa0 [ 152.950226][ T6436] ? tty_get_icount+0xa0/0xa0 [ 152.950250][ T6436] __se_sys_ioctl+0xfa/0x170 [ 152.950280][ T6436] do_syscall_64+0x4c/0xa0 [ 152.950300][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 152.950338][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 152.950360][ T6436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.950401][ T6436] RIP: 0033:0x7f7ab419e159 [ 152.950425][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.950448][ T6436] RSP: 002b:00007f7ab5069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.950472][ T6436] RAX: ffffffffffffffda RBX: 00007f7ab4426090 RCX: 00007f7ab419e159 [ 152.950489][ T6436] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 152.950503][ T6436] RBP: 00007f7ab423506b R08: 0000000000000000 R09: 0000000000000000 [ 152.950516][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.950529][ T6436] R13: 00007f7ab4426128 R14: 00007f7ab4426090 R15: 00007ffd9efc2018 [ 152.950552][ T6436] [ 152.950559][ T6436] [ 152.950563][ T6436] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004459000 allocated at drm_gem_shmem_vmap+0x347/0x4d0 [ 152.950612][ T6436] Memory state around the buggy address: [ 152.950623][ T6436] ffffc90004758f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 152.950636][ T6436] ffffc90004758f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 152.950649][ T6436] >ffffc90004759000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.950659][ T6436] ^ [ 152.950669][ T6436] ffffc90004759080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.950683][ T6436] ffffc90004759100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.950693][ T6436] ================================================================== [ 152.950739][ T6436] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.950748][ T6436] CPU: 0 PID: 6436 Comm: syz.2.828 Not tainted syzkaller #0 [ 152.950768][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.950779][ T6436] Call Trace: [ 152.950785][ T6436] [ 152.950793][ T6436] dump_stack_lvl+0x188/0x24e [ 152.950815][ T6436] ? memcpy+0x3c/0x60 [ 152.950835][ T6436] ? show_regs_print_info+0x12/0x12 [ 152.950857][ T6436] ? load_image+0x410/0x410 [ 152.950891][ T6436] panic+0x2d3/0x710 [ 152.950916][ T6436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.950939][ T6436] ? bpf_jit_dump+0xd0/0xd0 [ 152.950966][ T6436] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 152.950996][ T6436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 152.951033][ T6436] ? _raw_spin_unlock+0x40/0x40 [ 152.951064][ T6436] check_panic_on_warn+0x80/0xa0 [ 152.951089][ T6436] ? sys_imageblit+0x1ba8/0x25d0 [ 152.951111][ T6436] end_report+0x66/0x110 [ 152.951139][ T6436] kasan_report+0x118/0x140 [ 152.951169][ T6436] ? sys_imageblit+0x1ba8/0x25d0 [ 152.951195][ T6436] sys_imageblit+0x1ba8/0x25d0 [ 152.951226][ T6436] ? sys_copyarea+0x2530/0x2530 [ 152.951252][ T6436] ? verify_lock_unused+0x140/0x140 [ 152.951284][ T6436] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 152.951315][ T6436] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 152.951336][ T6436] soft_cursor+0x9fd/0xc30 [ 152.951361][ T6436] bit_cursor+0x16b5/0x1f40 [ 152.951391][ T6436] ? bit_clear_margins+0x550/0x550 [ 152.951416][ T6436] ? get_color+0x2d8/0x440 [ 152.951445][ T6436] ? bit_clear_margins+0x550/0x550 [ 152.951467][ T6436] ? fbcon_cursor+0x42c/0x640 [ 152.951498][ T6436] hide_cursor+0x7f/0x320 [ 152.951527][ T6436] do_con_write+0x1dd/0x6c40 [ 152.951559][ T6436] ? mark_lock+0x94/0x320 [ 152.951606][ T6436] ? vt_resize+0xc0/0xc0 [ 152.951632][ T6436] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 152.951662][ T6436] ? _raw_spin_unlock+0x40/0x40 [ 152.951691][ T6436] ? __wake_up_common+0x5b/0x4d0 [ 152.951731][ T6436] ? __mutex_trylock_common+0x15c/0x260 [ 152.951758][ T6436] con_put_char+0x7f/0xc0 [ 152.951783][ T6436] ? con_write+0x40/0x40 [ 152.951806][ T6436] ? rcu_is_watching+0x11/0xa0 [ 152.951836][ T6436] ? trace_contention_end+0x5f/0x170 [ 152.951861][ T6436] ? con_write+0x40/0x40 [ 152.951885][ T6436] tty_put_char+0xc5/0x150 [ 152.951909][ T6436] ? do_SAK_work+0x20/0x20 [ 152.951938][ T6436] __process_echoes+0x1b1/0x8f0 [ 152.951972][ T6436] n_tty_receive_buf_common+0xda0/0x1470 [ 152.952023][ T6436] ? paste_selection+0x1c7/0x4c0 [ 152.952053][ T6436] paste_selection+0x321/0x4c0 [ 152.952082][ T6436] ? __might_fault+0xa6/0x120 [ 152.952106][ T6436] ? set_selection_kernel+0x17a0/0x17a0 [ 152.952136][ T6436] ? do_task_dead+0xd0/0xd0 [ 152.952164][ T6436] ? __might_fault+0xa6/0x120 [ 152.952184][ T6436] ? __might_fault+0xc2/0x120 [ 152.952203][ T6436] ? __might_fault+0xa6/0x120 [ 152.952225][ T6436] ? tioclinux+0x222/0x3e0 [ 152.952247][ T6436] vt_ioctl+0x441/0x1ca0 [ 152.952277][ T6436] ? __vt_event_wait+0x260/0x260 [ 152.952311][ T6436] ? __fget_files+0x28/0x460 [ 152.952342][ T6436] ? tty_jobctrl_ioctl+0x164/0xb00 [ 152.952366][ T6436] tty_ioctl+0x7e6/0xba0 [ 152.952389][ T6436] ? security_file_ioctl+0x7c/0xa0 [ 152.952412][ T6436] ? tty_get_icount+0xa0/0xa0 [ 152.952436][ T6436] __se_sys_ioctl+0xfa/0x170 [ 152.952466][ T6436] do_syscall_64+0x4c/0xa0 [ 152.952485][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 152.952505][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 152.952527][ T6436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.952559][ T6436] RIP: 0033:0x7f7ab419e159 [ 152.952576][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.952593][ T6436] RSP: 002b:00007f7ab5069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.952615][ T6436] RAX: ffffffffffffffda RBX: 00007f7ab4426090 RCX: 00007f7ab419e159 [ 152.952630][ T6436] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 152.952644][ T6436] RBP: 00007f7ab423506b R08: 0000000000000000 R09: 0000000000000000 [ 152.952657][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.952669][ T6436] R13: 00007f7ab4426128 R14: 00007f7ab4426090 R15: 00007ffd9efc2018 [ 152.952691][ T6436] [ 152.953268][ T6436] Kernel Offset: disabled [ 153.853954][ T6436] Rebooting in 86400 seconds..