last executing test programs: 22.967862151s ago: executing program 0 (id=668): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) 20.404284437s ago: executing program 2 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x200010e, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) syz_usb_connect(0x0, 0xdd, 0x0, 0x0) futex(0x0, 0x80, 0x2, &(0x7f0000000380), 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 19.050067293s ago: executing program 2 (id=675): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7b, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d83", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 19.030609354s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r2, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002300), 0x0) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r8, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x80) 18.948272047s ago: executing program 0 (id=677): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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") r0 = fanotify_init(0x8, 0x1000) fanotify_mark(r0, 0x1, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 16.859269513s ago: executing program 0 (id=678): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendto$inet6(r5, &(0x7f0000000140)="8f69b66f", 0x37, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x220800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd4, r9, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000600)={0x0, 0x0, "bbdf379b90dcf9fe8f361fcf6f648033eca49c783c3a1c18e56c902da13c7d228763610f88d19446671aa8d17ad540a47bf9995515c2edc6091e4444f7b8a6d4bdf249cea800fd866c4856051ee2172c3a2a5722e47e3e38d8e502f240204df20da0e875f443c56c3505faf49dfc7b5f88bfa7ebc74aa38d38045f84e8e49eff6d2289f86ebc7d37763632a5de5cd6b000d1ce19b175e2b908c054931223db52c59f74187f052a44917d47d5c2c7daa250d7ef22bfbaf08f2ee761baaf18cbe6d85cd10b74ac62a448b36230158a523e45cc27f98160e5391d5766fc7e6035c66abcc02c9d280f92895970657db9e25262315eb941a184902c7537e4bfdaf557", "f5836abf83b96fe57a55d519851baa7b5a11c062e626a85a3b347b91f127902d0aeb2a9300b2d88d0973f7ed4f675284ecee1ca386b28dbd460184e9d0c6bc79f6eed9cfe70341c77402cd35022a3060748d53abce5fd6df43c5acd54a15d7405ee10cba62d4c842162848766635c14a1110ac32a78cb25b5ff2feda71097b5e5eee3b08aba9de3d94924295e92107eb4d64ddccf4c41c0cf33ee5e76856ddc548a8a2343753d86a518f17b259c3b3fd33d7d49d0aa4b6627625f34737c3b133073c6b818571ef6ba52ab0df615c1edcdca4f7b8e42f016257b9115776ab3e512e6b5e6832cf3c9a1364565d9f2bb2165cf130c9e308f47810275cab19c3b4787bdeb587de55529f743caed568dd913960486bbf3158de0fa5e7ddde3c8c5d1c387b3addaa76a58a2ce486904b37380dda8cdb8196481e55ee79ee68ac5902a0e8a46ebaa90195ecd145e8505a14f5367e527e23576b02762f2417f4f1e162cbf15187513b057fa64ea846e0c2eeb14f7c99fd25a0ce65f6e452a56bfdca96d1d3e3a5f39ac13484d53533a2556aa2d17321dc0212c9ed22354d391752db6ad5944d6263383d1b212ad556122293aeffaac6e6da0d1d56caaa71dd09bffaab28f1769c40d2109eaa0073a153d0f76a9dfa52dff9ba89d073538ac8af4c84e5164b99212e2f1a62a740b38fc25848795803a44d1870f223d0ac3740a9233ea0cb96621c755b6150c93bd801fefcf1b2d63835ce44b5c6b70d4f8c0795aec5af9cae0caa1008e4ba0f24303a1b2309b4579d996073fb01dca2088d1a4cfa08f764aa039c6d0aefb883d2a85b40cbddb8bbe28a29fee71f3979abac3a40c93f07eab9e81202dcc7517dcc053e9d109b5dbcddb1b36e78e35fbadaca393707521cbb3aa72cfdd7785b6e69db3ff4d24f4e83bfef872ca5287f7b86591f036811e498bf4df0c3065491622503823c42833bdf63e7f931c20e1c5fe7d7aba127f9d30de0b78148afd5606cf3f3e8433f8144bc399ea944cc856bfe9cfe4d135c4b55c98b365b8ba298c76506961fb1d15370337b296515f34b2756e6269bf819350dc200a5d8856b485c7560c4e9996cd73bd4a26bff261912c4c6ef2e2039c1ad25ba12a3b754b6a5315d38ff6b68f1cca18b41a6c58e40094611c83688b0c7625ae3c2fc019342389cf0065febb978ad1f5456dbcd8076fe68c9aa2e5475037f55339a9712075339bfadb55a81a31e5a79673225a8435abbd6f764a9e37a296db89637178f5ee41d6d8c9e605a856f3f60f6481628c245f5cd4ae75744ec4ed5f037282daa312e3b1550c16eaa79185e4762eb3e71482f09cbc1863cf7731da44e2d30ea38343641b46a072db76d8fd84950a6dddc211614cc44bf985ee50dd65217a0df91440501094034cfa1a27dff1dc8ea67396e548fbbfdb23fad728d3b290480de8c9d520f6d522c3c38bd8bc735b888e680e5a2c21307e73dcda99317002d4a3eacd236b8bcc4399181f0302c4b1f0cf29d71dd871984e700afb8edd6e3ed2462d5f4a9a2b087c558f8e0f941ba5d870f1472856508482746080ef81978b5b6725028e1c6c8a3a1ac2d5066b6568d6968dbc8cd0b460e3abcef2f68cdf62874dd36b02714cafb279fc40783dec5562f988a8b5fc1bf7619b8ad558d67a40bfae48332b2fe799ff343980fc90691d2c2522b915067b4c1fcfbaf73b91f48014bfe404e0f808697c6c4d9070e7b602bdee458b11895fb8f354065bfc0ac9484f8d2dbb39972833520ff8c31355c591106270c376c857d8f9a53d309b46197dd16db2b3fc2e6f1e000357beff5c91b8cec7a0f4fac6f6e5429d7de60b75fd4156f0a2e30bb032f06facf800d2ad8d43accf4837958a2b659c386a4de3c85f6d656677d400aa5ed1f1a07b2800c5d0a5e168978c840d1f996ae605011160703ba035f9580bae2db680c11e075e633ed1b21b6986a3aa58cb7d2c2e6effe8b70693120bc926eff687e0da525e1fc0a5837ce396c76ba6e269231b0508c69dec18752312bccc3fbb1c6d605722602acbbfae6c765fa311ac824ce48b89c8e1f3a2b69d4597fca0f156a1b7e9fcdcd32867b27f4419b09e578eb40aa3e0375c71198426d423cce86229aef8fc6d4fe20a3dc9a209520a966bc6a8d64ebda062593823eb1583a7282d53efe44cdeb68fcc4831b87235a488da7781cf8a8999444f64b7625ae459161d97582e1456d3800b07bf34b2b45448747ee9e58b48ee37df074195e38887a61e3ea28642922dd594ee03e8fd5d2cfc5a29f5ec87a40bc35628a3ca327cbd8ae2325d3e61edcd94bbf8ca084453842cee9c2a6daba748ce661385acd89cf22f76ac64954b2161b49ab7d5bcf929a1a87834f7fbd5e13b8dff77d9aa32e16196af6ebeb2a9049cd243c489766a4b132cc44d80ddf146a3f7b62716c37f046c0f9be6ad0fc991f52e5ada394459d278b111d4f260bae079ac45bfb595da469b0d4e1a08a05b1c2e13a1d4130ccf9a2fd8efc3b539ce5533ba22b9dc11e53471f2206b0ad2673b5e197f855d46a42a8a22743d23aadb7860bb1fe10815cd632dbce246d3cf6ffb714f56fd530cfd6c7db8df00fb6e8a0051acc85a84dcfffc5b7c7bd67ee2b8ae9ea3d8ef79b2696a50ef8f07d3efc6ede84753765bc6ace98b8c1a5a2d5dab8700ad7c24e054bf2d33a46034dfdb147d53cae612e96cfb4003b71d4e39126e7e54c60202d2cdd46e171d9502d4ded32ee9c112001e5d90f9c4007a69e57323d6a71c23e0e07136c6fe71201a44b3c3ba650d1de40a82ce75e930d3551e9ee54fa9e2d96842805a12aec4db0902cb7eb97aac34edec450d80b26f3902bf54cecab12f3fc2935c6d45ed7d6671250da911ba1a2c16f735c99bd9eaf54d340c5c2e700f79d126426188461e746d5f866c302d41bc3622a2eea0cb8b7915e51d97b85b9912c2504c3f8df1853ba64177bfa757f268db242730ca44dfd27df9e7cbc9f26bda91fc9e2efa82c74324bcbda06900f7ebfcda8f4600827e337efc20be8d6da49f953eddfc41725603ac29a7e734cb400223873b391833414bc862f421f7fd6ec29547ac214f9878260733c46b5ca623cd53a8b6565c14254c3799177101048ebf25f90bbacdf62e2a70567d172f99fd34d7ab12edf441d0b37d58a6a1815f20f5e7fc4ed64292d7dcfdb2ba462e1e0ff65f051b1d4c3225613f9e4decd07e15540a9ae56ebf292aa4310e8535fa48a097196cc63dcedc9cdc1523ce1235f3fddeb59d6170dcb89e28761b3542f026363680949546cd97d1f5116d1918515e781be57a7c755761ed607b86900e11549148d8683a92ca8b3f9f44469c93edbb09c68be7f3c1509334a397a7c83d0f841525a6a3e1c290fca3324e0713f90e82808d39338ea9d03306ab6729c7991f387d8597ab0c312a0e649ce76b99a36884124d55308497b6d102423726ecf48394c5b9477237988cbc145ea4f9fc7309f07f1337060210a73b933d20275005594867f51afc95f5364a107857cdf1f427dd0612252c6a401198a21583486d13f54c4533ef44e78ed9f9b026161021389af41012d91cd9792469c728460e717cd6a1902572583bdf32bfa39499a4226bed067c81878aa39d3c3ffca720d8e788873301e1d9385bd76a1d9bf337150074fce2ff9e7900fea7f59262eb07dcdbc2930d9356083a880d27c69ae01fc0456abf309453dc24c5708047e1b0c441efbe5df7e720cdb1a18f9b3b8871d7a403f6bd1efde65be9057a08bf610081d4734416403eb6afdc123f755bac1c9074b17fe4a85b4fe5e3da8a32bf4a0aee6f2b310b5aecfd718c614eec86b3804c2ef2b6e6ff6f67a5d591321b43ff390b629a6573f1dc7bedb64c12a3257f122940d5dd630dd7fd23e8f8e7679c5dbca20fa526cf67df39a95065828362e47a78777a6511541eda7b8b763717522fb769ea7b7deecec163bb9f63358d59b60eb15d8f72715560c61e8e12f9c550ea13eb06cb51f5ea4b443c9a6897df1ce37a0fc77a78e7a838e9de280eae7a31ea99a5f15b2e830ce94ea3842e3aea1af3928945c9bc40b861adf0ed993736526acbeea5064fb36fd7adc0a262845d1d2406d4926415a25bd6acbe3f328e4829540e9d0cf7041cf3458e8ae13fd301eab4827daaecc4a29e6c24212c51799152bc27933072d2d485e123b82086a515725e8e418af308fc051168d5655db1e2112a5b28046bf23b0c25160b97a8323ebe864d302f5ba8e8047f15bf7c601c45b9d0d63bf0e9f505e0937f98201a22e5dc2935183bb30daae1b5346a3df81c6385b52ba1557c0df9e70d664cb31402f32ba0d4a1565d757e6dd1f879bdb01a712086e6360162d8bad94a7bb2b4734943d5d931e1ed0ae32f0c0c6060a6da8a30812276c26ceb7fc52cdc183ec5a6e8a82a6800a9d729f612a31fb26b7d0d42a4b13339a0fab2906dd0ddd3f62cccdbf6d9e704701100e3462ff15f38643f9ec459c444dfbc1aeb58b43dafd50a16ac9bd42c9b139d81e3e71c91ce9f7999256564c5bc6f597d8fd245e4745ea92989302c42cbe7e89b320378d9cd487d9106fcf72322c0313950f0e325ef2a86f4e8ed7a9301ff3bfb290138f270ff1101b0f1afcf1811b36371e916bb2ef1c1abd577f1c6615afd70dead6130796372ba5cd23fd71794436cbe6897df26c0cb7cd4931715f14a940c52fd694eb34bedf53f56f264bc374bcbd1775ad9cfbec5c0533ff032b0270beed5d692d67e54ab9bead591827b419713ca5b0e35b5b0c6295ded24fb9afe3cd20cc3d3f75793b4fcce4ac7e1c1eb154518b4e416cb41deb29a9c6abfe497207d33e5de96fc620926922cd0fdd20b3b72f6dd81642df9910c0ebbb7c3c41c5a34f28391ae0bd7e3a880ee867dc29c6ecc14e0c06b3552bdb4834069075ef22915be3833e3e561f7e06fdbaaf83160fe284e91db26aa6fbb01fe14110df7b52446dbacc78fd41e6d153d024179201ef630181c56b78d623ef4139ba6223cb30e781600554aec4b534b4d38241969a1ddc045549e84e899ea27cfcf30be2892974c68b37a00b48c1e8d5ef5cd624df5a696476f127f5a5ae41033fddd3fa4db92e4a3d5f670894c2ee2160d10c67eb11100f4b66a026e9e7ece81c70ed6aaa6f4a4cebc0042afe3b8e28ce3a2409ce06a4acbf3d14a441ab7b7fff9ebac8328389ac37696ec8088f1e923bb2340f5f60a09381d304a49a0e5526a77f612efbf162ea202d9f1d4c4d42b4c9fde2e963107c9fa2f6fa9ecd18edc40bb46871799c654eeb80082c6b25ff0693483a2a859b4c9839f1617ea122ec3d739b2af685271e17e6e833a5f1eaf59c647e865ddb3d01faf9fda7754ee2509a1113eec9ccda0ea1724ae1556f6f"}) 16.785313987s ago: executing program 3 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) dup2(r0, r1) 14.805219008s ago: executing program 0 (id=681): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") listen(0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r1 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r5, &(0x7f0000000280)=[{&(0x7f0000002040)="18a4", 0x2}], 0x1) readv(r5, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r6 = eventfd2(0x0, 0x0) io_submit(r0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x3273}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 14.679739603s ago: executing program 2 (id=682): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) 14.679292803s ago: executing program 3 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000002, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/19, 0x13}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) io_setup(0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 13.159915996s ago: executing program 3 (id=686): pipe2$9p(&(0x7f0000000340), 0x1000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0xa}, @broadcast, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0xe}, {0x0, 0xf4e}, "48d66baaeae4a4e0"}}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000140)={0x1f, @none, 0x5}, 0xa) connect$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @none, 0x3}, 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x90) 12.543256122s ago: executing program 2 (id=688): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 12.450453766s ago: executing program 4 (id=689): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@remote, @in=@local, 0x1, 0xf14, 0x4e23, 0x5, 0xa, 0x0, 0xa0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xfffffffffffffffc, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffe}, {0xffffff7fffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd25, 0x3508, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 12.378536858s ago: executing program 2 (id=691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="020602000200"], 0x10}}, 0x0) 10.708275668s ago: executing program 4 (id=692): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000c00)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@utf8}, {@uni_xlateno}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbb2}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") 8.136450284s ago: executing program 4 (id=693): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = open(&(0x7f0000000040)='.\x00', 0x100, 0x119) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x3f5d}) getdents(r3, 0x0, 0x0) 8.061369067s ago: executing program 2 (id=695): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572fdf2000000000000000000000000000000000000000000000000000004000000c84300000000000000000000000000000000ad00"/108], 0x78) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "e10418"}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x61, 0x30, 0x61]}}, &(0x7f0000000900)=""/179, 0x4d, 0xb3, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 7.768200439s ago: executing program 4 (id=696): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000152000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.410892447s ago: executing program 3 (id=698): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008", @ANYRES32=r7, @ANYBLOB="0600060000000000060004"], 0x50}, 0x4, 0x700000000000000}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x4, 0x4) timerfd_create(0x0, 0x0) r8 = eventfd2(0x4, 0x1) flock(r8, 0x5) 5.410578837s ago: executing program 4 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x89}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48841}, 0x8854) 4.624319509s ago: executing program 1 (id=700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="61c9", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)="a8bea6", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="9d", 0x1}], 0x1}}], 0x3, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 4.418596547s ago: executing program 0 (id=701): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x84835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@usrjquota}, {@nodelalloc}, {@bsdgroups}]}, 0x2, 0x456, &(0x7f0000000d00)="$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") openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r0}) capset(&(0x7f0000000100)={0x20071026}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x511001, 0x488) socket(0x2, 0x2, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r4, 0x0, 0x0, 0x9, 0x2080) r5 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='overlay\x00', &(0x7f0000000140)='overlay\x00', 0x0) 2.89928232s ago: executing program 0 (id=702): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x0, 0x1, 0xa3, 0x3, 0x2c, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000000)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r0, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 2.811917194s ago: executing program 1 (id=703): r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)}], 0x1}}], 0x2, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="b000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=']) 2.060606065s ago: executing program 1 (id=704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.989951328s ago: executing program 1 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r2, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002300), 0x0) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r8, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x80) 717.39841ms ago: executing program 3 (id=706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="020602000200"], 0x10}}, 0x0) 606.436545ms ago: executing program 1 (id=707): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000500)='./file2\x00', 0x80408a, &(0x7f0000000540)=ANY=[], 0x1, 0x6cb, &(0x7f00000007c0)="$eJzs3d2LXGcdB/DvmZ19mRQ32yZNoxS6NlDFYN6WVONNoohEKFIi6PViNs2SzTZutpL2wmxVELzywj+gvYg3eqWIIAiBeq13Ra8WrwpCb3qVFvHInDkzO7uZ2d00yc6Gfj7LmfN7znPmOb/zm/MyM7BMgM+si8fTvJtWLh5/5Va7vX5nbmn9ztz1TtxYSjKZpJE0O7MUy0nxXnIhnSmfby+shyuGbec3i+cuvf/R+gedVjMb47UfWsMTbO5mL9bqKbNJxur5Q9g03jbJbWdyIyx6lWkX7Fi3cDBq40nKTX58ZKNnkHKsrzH0fAeeHEXnvtmnc/7PJAeSTHVvaGudzsbeZ7ijXVyLftWL1h5vLgAAALAvHLx3O7mV6VHnAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+S+vf/i3pqdOPZFN3f/5/o+439iRGnO9z2mU11g7uNvUgGAAAAAAAAAB6vF+7ld5fKcrrbLos0fjBWNw5Xj0/ljdzMQlZyIrcyn9Wstu4faOLW/Orqyum82HnmJ2VZDnpmVnImycx9zzyzy4QHbBoAAAAAAAAAPsPO1/Of5WKmR5wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsUiRjnVk1He7GM2k0k0wlmWivt5b8oxs/ye6OOgEAAAB4VP7137IyoOvgvdzLrUx322VRfeY/Un3un8obWc5qFrOapSzkcvVdQOdTf2P9ztzS+p256+3p/nHfbW3Ef5zeMcNqxHS+exi85aPVGq1cyWK15ER+lNezlMtpVM9sO9rNZ3Beb3/YHvt8R1lmcje1u1zP23v+63q+P8xUFRnvVeRUO7eiU8ent6/ENz98qC2dTqP3zc/hB6j5+W23Uvyve4Qe6C5JnvruzjUff6CdeShbK3Gm7+g7srkST913VnzpT7//4dWl5WtXi7Xj++cwGuSFwYsn/71xDZmpz9hUXwYuZK6vEs9tf0zUlRhfvnb1ys19XomhmptajTzbiy/mO/l+jmc2r2Yli/lJ5rOahczm21U0Xx/P7ceZ7St1YVPr1Z1ymqhfl7EtOX3xYGe+XU4vVs+dzmK+l9dzOQt5ufo7k9P5Ws7mbM71vcLPbpP357o1GXDW/3l48se+XAftO8cv6/n+0K7r03117b/mzlR9/UsaKes7yzOP7NrY0/xCHbRfiZ/3nYOj16vEVHp3iW52h7oVGB9YiXery8rNpeVrK1fnb2wZt1gbvL2Xsnn398+FpH28PNO7Rmw+Otp9hwb2na76Dvf6Glv7ftvq9e10pk7U7+HuH+lM1ffcwL65qu9oX1/7/dZUkoV8UpZl5/1W16E9rioAu3bgKwcmWv9p/b31TusXrautV6a+Nfn1yecnMv638W80T4291Hi++EPeyU+z8yd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgRzfffOva/NLSwsqWoCzL20O6HkuQZrJpyV//0rdO9VtjSXY/YHvtC42kWtJMHTxYYrc/3e68/WmL8M/6NdmTgj+SYGro8bM1+Lgsy/2R826CsrbnW29k5PveDUZ6WQL2wMnV6zdO3nzzra8uXp9/beG1heVzZ8+eO3Xu7MtzJ68sLk2NOj3gMaru9dX7nFFnAgAAAAAAAAAAAOzW7v45p+gtaSZ54P/tAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgIF4+neTdFTp86cardXr8zt9SeuvHGmh8naSQpZpPiveRCOlNm+oYrhm1nLbn0/kfrH3RazXqq1m88/F6s1VNmk4zV8wGmBi0sbw8br6jGuTF8vF0qepVpF+xYt3Awav8PAAD//5nEGbY=") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000180)=0x7ff, 0x4) 132.189434ms ago: executing program 1 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 0s ago: executing program 4 (id=709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x80, 0x0, &(0x7f00000007c0)="feb50e01bd970e881d8a3fde1c56f1f5e54f258e8ae9621c3b9b30920093b6147f6c6965ea7a3c5ea2fa64da3bc1d6e00b72fe5d6d749d07a6617f18c4506257a3386220eb8d5b46078bed1b0a9504aeed10c87e0bda16a360278afdc908b179c7f72b6ef7dbaab5196b75c62d6c3caf30fa294598fce3c71d0f6554428b3a1d"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. syzkaller login: [ 56.909909][ T4171] cgroup: Unknown subsys name 'net' [ 57.056806][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.449093][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.928049][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 59.975330][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.985302][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.071637][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.083617][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.164243][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.171807][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.179705][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.188385][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.195697][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.203651][ T4194] device bridge_slave_0 entered promiscuous mode [ 60.228142][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.235400][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.243354][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.257684][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.264884][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.273273][ T4194] device bridge_slave_1 entered promiscuous mode [ 60.314261][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.321599][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.329380][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.346427][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.365374][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.373081][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.381459][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.398424][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.409161][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.433229][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.440338][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.448629][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.464907][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.489037][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.497041][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.505286][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.527004][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.534502][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.542530][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.551514][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.569807][ T4189] team0: Port device team_slave_0 added [ 60.584807][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.592203][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.599859][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.608026][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.626064][ T4189] team0: Port device team_slave_1 added [ 60.634071][ T4194] team0: Port device team_slave_0 added [ 60.655028][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.672830][ T4194] team0: Port device team_slave_1 added [ 60.694358][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.721026][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.740516][ T4193] team0: Port device team_slave_0 added [ 60.754674][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.761988][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.788237][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.802016][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.811741][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.818692][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.844981][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.857926][ T4193] team0: Port device team_slave_1 added [ 60.871681][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.878633][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.904881][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.928956][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.936026][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.962112][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.983243][ T4183] team0: Port device team_slave_0 added [ 61.009410][ T4183] team0: Port device team_slave_1 added [ 61.026648][ T4182] team0: Port device team_slave_0 added [ 61.033758][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.041251][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.067309][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.087459][ T4182] team0: Port device team_slave_1 added [ 61.111112][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.118182][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.144414][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.168612][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.175778][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.201782][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.233002][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.239999][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.247246][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.254455][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.280478][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.291964][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.298911][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.325103][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.339190][ T4194] device hsr_slave_0 entered promiscuous mode [ 61.346258][ T4194] device hsr_slave_1 entered promiscuous mode [ 61.353097][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.360953][ T4194] Cannot create hsr debugfs directory [ 61.386196][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.393294][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.419385][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.459973][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.467123][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.473950][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.483929][ T4193] Cannot create hsr debugfs directory [ 61.509013][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.516108][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.523205][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.531029][ T4183] Cannot create hsr debugfs directory [ 61.571703][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 61.571845][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 61.578385][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 61.590921][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 61.619238][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.625972][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.632894][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.640470][ T4182] Cannot create hsr debugfs directory [ 61.650859][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.903620][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.915577][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.924914][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.937477][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.966975][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.993837][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.003638][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.014671][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.106256][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.127230][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.147511][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.158164][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.191888][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.221778][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.240539][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.255866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.265096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.275221][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.283836][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.308433][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.318300][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.327522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.337224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.347077][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.354353][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.363560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.374371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.383168][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.390236][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.398224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.424601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.436404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.445422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.458587][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.474279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.494582][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.504510][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.513411][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.524924][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.533381][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.540421][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.548777][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.557859][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.566597][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.575162][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.583917][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.591017][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.606545][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.614628][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.627795][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.637883][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.663676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.673187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.682935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.697000][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.708897][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.722908][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.737627][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.748548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.757294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.770210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.788952][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.799963][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.822267][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.834064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.844458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.855177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.864252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.875608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.885036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.894324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.902796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.913920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.922000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.955037][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.973742][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.999614][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.042907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.053432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.069404][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.076840][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.116750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.125072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.134496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.143350][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.150407][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.158323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.168734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.184814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.193594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.202513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.225688][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.254493][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.263807][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.274987][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.283099][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.291219][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.298657][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.306265][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.314859][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.329897][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.339624][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.347909][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.357382][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.366213][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.383083][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.396584][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.407303][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.417766][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.427434][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.436061][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.443167][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.452728][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.462213][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.470858][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.477926][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.485839][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.523295][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.537050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.546812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.561646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.577435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.610092][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.625616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.634648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.643399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.651785][ T4184] Bluetooth: hci3: command 0x041b tx timeout [ 63.652531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.657957][ T4184] Bluetooth: hci0: command 0x041b tx timeout [ 63.672316][ T4184] Bluetooth: hci1: command 0x041b tx timeout [ 63.674832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.678389][ T4184] Bluetooth: hci2: command 0x041b tx timeout [ 63.694230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.705862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.714644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.723992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.731536][ T4184] Bluetooth: hci4: command 0x041b tx timeout [ 63.733397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.746432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.755168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.763248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.783208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.792288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.801047][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.808149][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.816552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.827106][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.857814][ T4194] device veth0_vlan entered promiscuous mode [ 63.867308][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.877007][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.889071][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.896193][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.905648][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.914851][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.924736][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.933915][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.942770][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.952176][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.960463][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.968750][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.982307][ T4183] device veth0_vlan entered promiscuous mode [ 63.988790][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.997545][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.005628][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.013636][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.022226][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.044238][ T4194] device veth1_vlan entered promiscuous mode [ 64.061165][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.072245][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.081399][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.089940][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.097920][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.121477][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.132798][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.148333][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.158726][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.169219][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.184481][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.201076][ T4183] device veth1_vlan entered promiscuous mode [ 64.218717][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.255116][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.263660][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.280957][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.288555][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.301306][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.335195][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.347547][ T4194] device veth0_macvtap entered promiscuous mode [ 64.370272][ T4194] device veth1_macvtap entered promiscuous mode [ 64.391628][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.406180][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.419428][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.435436][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.469063][ T4183] device veth0_macvtap entered promiscuous mode [ 64.502626][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.522248][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.535049][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.544512][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.559399][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.567252][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.580088][ T4183] device veth1_macvtap entered promiscuous mode [ 64.590176][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.605258][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.614211][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.623141][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.634316][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.664314][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.673040][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.683363][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.692418][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.704136][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.713126][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.722158][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.731129][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.757666][ T4193] device veth0_vlan entered promiscuous mode [ 64.771536][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.780370][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.792114][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.802492][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.814466][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.826002][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.838504][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.869437][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.878532][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.887352][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.896052][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.905242][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.914214][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.923494][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.933450][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.942661][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.950429][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.961513][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.969229][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.978274][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.988875][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.000425][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.008891][ T4189] device veth0_vlan entered promiscuous mode [ 65.018553][ T4182] device veth0_vlan entered promiscuous mode [ 65.027866][ T4193] device veth1_vlan entered promiscuous mode [ 65.036084][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.044638][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.053467][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.066081][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.077601][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.086647][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.098251][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.119341][ T4182] device veth1_vlan entered promiscuous mode [ 65.180359][ T4189] device veth1_vlan entered promiscuous mode [ 65.225018][ T4193] device veth0_macvtap entered promiscuous mode [ 65.243424][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.253245][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.289643][ T4182] device veth0_macvtap entered promiscuous mode [ 65.297389][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.306084][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.315074][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.324543][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.335178][ T4193] device veth1_macvtap entered promiscuous mode [ 65.354893][ T4182] device veth1_macvtap entered promiscuous mode [ 65.361747][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.379875][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.396281][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.398309][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.417742][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.427296][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.439987][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.450580][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.462268][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.471504][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.483101][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.494171][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.504811][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.514914][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.525601][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.537250][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.554818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.567748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.576325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.584695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.592798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.601796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.610410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.619345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.633375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.642402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.655476][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.666914][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.677053][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.687794][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.699267][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.709620][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.720402][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.730513][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.741724][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 65.747507][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.747839][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 65.758905][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.764034][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 65.777726][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.780791][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 65.792497][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.811949][ T4173] Bluetooth: hci4: command 0x040f tx timeout [ 65.812649][ T4189] device veth0_macvtap entered promiscuous mode [ 65.829865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.838369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.847190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.856415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.865792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.885072][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.894744][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.907297][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.916301][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.929824][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.938224][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.939934][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.955399][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965563][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.974574][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.995065][ T4189] device veth1_macvtap entered promiscuous mode [ 66.014167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.023484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.085782][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.097672][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.101728][ T376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.114641][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.135625][ T376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.150909][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.162936][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.173497][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.183667][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.194174][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.205540][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.215417][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.224884][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.234798][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.305763][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.341095][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.363058][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.374101][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.385359][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.395551][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.406358][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.417837][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.434531][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.448394][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.479295][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.529078][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.564174][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.585408][ T1493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.598900][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.623550][ T1493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.634682][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.643907][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.169295][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.177872][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.954378][ T4173] Bluetooth: hci3: command 0x0419 tx timeout [ 67.960716][ T4173] Bluetooth: hci0: command 0x0419 tx timeout [ 67.966764][ T4173] Bluetooth: hci1: command 0x0419 tx timeout [ 67.973968][ T4173] Bluetooth: hci2: command 0x0419 tx timeout [ 67.980087][ T4173] Bluetooth: hci4: command 0x0419 tx timeout [ 68.129364][ T4322] loop0: detected capacity change from 0 to 1024 [ 68.244968][ T4322] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 68.260409][ T4322] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.270326][ T4322] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.8: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.289620][ T4322] EXT4-fs (loop0): 1 orphan inode deleted [ 68.301521][ T4322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.494218][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.582164][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.878538][ T4298] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.903049][ T4298] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.037619][ T4298] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.087610][ T4298] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.193607][ T4298] syz.1.2 (4298) used greatest stack depth: 19400 bytes left [ 69.281377][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.429437][ T376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.701948][ T376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.872264][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.918091][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.047926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.133047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.185163][ T1493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.200287][ T1493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.211506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.326832][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.347577][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.443217][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.469675][ T1493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.490598][ T1493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.517767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.860882][ T4184] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.312322][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319652][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.890269][ T4376] loop1: detected capacity change from 0 to 1024 [ 71.911301][ T4184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.923123][ T4184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.933714][ T4184] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 71.943087][ T4184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.956739][ T4184] usb 1-1: config 0 descriptor?? [ 71.984555][ T4376] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.012249][ T4376] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.019253][ T4376] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.18: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.168149][ T4376] EXT4-fs (loop1): 1 orphan inode deleted [ 72.176673][ T4376] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.158951][ T4396] loop1: detected capacity change from 0 to 128 [ 73.180930][ T4184] usbhid 1-1:0.0: can't add hid device: -71 [ 73.188221][ T4184] usbhid: probe of 1-1:0.0 failed with error -71 [ 73.233329][ T4184] usb 1-1: USB disconnect, device number 2 [ 73.326898][ T4398] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 73.847363][ T4413] loop3: detected capacity change from 0 to 128 [ 74.794602][ T4413] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 74.831323][ T4413] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.948269][ T4423] loop4: detected capacity change from 0 to 1024 [ 75.104487][ T4423] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 75.122232][ T4423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.129007][ T4423] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.32: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.183569][ T4423] EXT4-fs (loop4): 1 orphan inode deleted [ 75.234754][ T4423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.008165][ T4484] loop3: detected capacity change from 0 to 1024 [ 79.567723][ T4484] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.627819][ T4489] loop1: detected capacity change from 0 to 1024 [ 79.723141][ T4484] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.771670][ T4489] ======================================================= [ 79.771670][ T4489] WARNING: The mand mount option has been deprecated and [ 79.771670][ T4489] and is ignored by this kernel. Remove the mand [ 79.771670][ T4489] option from the mount to silence this warning. [ 79.771670][ T4489] ======================================================= [ 79.822239][ T4484] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.53: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.868523][ T4484] EXT4-fs (loop3): 1 orphan inode deleted [ 79.880351][ T4496] loop2: detected capacity change from 0 to 2048 [ 79.933536][ T4484] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.955687][ T4489] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.54: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.021522][ T4496] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.048865][ T4501] loop4: detected capacity change from 0 to 128 [ 80.095486][ T4489] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 80.110877][ T4489] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.54: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.136590][ T4489] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 80.289569][ T4489] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.54: Failed to acquire dquot type 0 [ 80.353999][ T4501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.370888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.497630][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 80.599959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 80.609443][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 80.620661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 80.629738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 80.638628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.647594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.656501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.665472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.868431][ T4501] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.870916][ T4489] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 80.905518][ T4489] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.54: mark_inode_dirty error [ 80.930298][ T4489] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 80.941648][ T4489] EXT4-fs (loop1): 1 orphan inode deleted [ 80.952249][ T4489] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 80.965004][ T376] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.004693][ T4506] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 81.033811][ T376] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 81.179439][ T376] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 0 [ 81.993251][ T21] cfg80211: failed to load regulatory.db [ 82.075478][ T4509] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 83.815578][ T4183] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 83.883783][ T4183] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 83.953766][ T4183] EXT4-fs error (device loop1): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 83.977981][ T4518] loop4: detected capacity change from 0 to 128 [ 84.020317][ T4519] loop2: detected capacity change from 0 to 1024 [ 84.133066][ T4519] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.161301][ T4518] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.276960][ T4518] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.390865][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.630721][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 84.810835][ T21] usb 4-1: config index 0 descriptor too short (expected 292, got 36) [ 84.829843][ T21] usb 4-1: config 0 has an invalid interface number: 65 but max is -1 [ 84.902564][ T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 84.962617][ T21] usb 4-1: config 0 has no interface number 0 [ 85.023730][ T21] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 85.080278][ T21] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 85.152504][ T21] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.215419][ T21] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 85.296441][ T21] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 85.332199][ T21] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=7c.eb [ 85.350857][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.385300][ T21] usb 4-1: config 0 descriptor?? [ 85.418467][ T4520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.577186][ T21] hub 4-1:0.65: bad descriptor, ignoring hub [ 85.586520][ T21] hub: probe of 4-1:0.65 failed with error -5 [ 85.633648][ T4543] loop4: detected capacity change from 0 to 128 [ 85.678307][ T4543] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: none. [ 85.700803][ T4543] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.711142][ T4520] loop3: detected capacity change from 0 to 1024 [ 85.767638][ T4520] EXT4-fs (loop3): Ignoring removed nobh option [ 85.928316][ T4310] usb 4-1: USB disconnect, device number 2 [ 85.930713][ C1] xpad 4-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.942605][ C1] xpad 4-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.956495][ T4541] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.992796][ T4541] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.405848][ T4563] capability: warning: `syz.4.74' uses 32-bit capabilities (legacy support in use) [ 86.413419][ T4538] loop2: detected capacity change from 0 to 1024 [ 87.440826][ T4571] capability: warning: `syz.4.75' uses deprecated v2 capabilities in a way that may be insecure [ 88.707871][ T4578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.984271][ T4184] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.016603][ T4584] loop3: detected capacity change from 0 to 1024 [ 89.055519][ T4584] hfsplus: session requires an argument [ 89.097470][ T4584] hfsplus: unable to parse mount options [ 89.230845][ T4184] usb 3-1: Using ep0 maxpacket: 32 [ 89.361079][ T4184] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.388502][ T4190] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 89.394149][ T4184] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.407424][ T4184] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.417186][ T4184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.435188][ T4184] usb 3-1: config 0 descriptor?? [ 89.482851][ T4184] hub 3-1:0.0: USB hub found [ 89.512762][ T4591] loop3: detected capacity change from 0 to 1024 [ 89.599295][ T4591] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 89.620873][ T4591] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 89.631350][ T4591] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.84: Failed to acquire dquot type 0 [ 89.712156][ T4184] hub 3-1:0.0: 1 port detected [ 91.080792][ T4184] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 91.085375][ T4591] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 13: [ 91.087422][ T4184] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 91.104089][ T4591] block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 91.190778][ T4184] usbhid 3-1:0.0: can't add hid device: -71 [ 91.205916][ T4184] usbhid: probe of 3-1:0.0 failed with error -71 [ 91.213068][ T4591] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.84: corrupted inode contents [ 91.295512][ T4184] usb 3-1: USB disconnect, device number 2 [ 91.325419][ T4591] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #13: comm syz.3.84: mark_inode_dirty error [ 91.643397][ T4591] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.84: corrupted inode contents [ 91.889625][ T4591] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #13: comm syz.3.84: mark_inode_dirty error [ 91.942933][ T4591] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.84: corrupted inode contents [ 91.992292][ T4591] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 92.031293][ T4591] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.84: corrupted inode contents [ 92.058467][ T4607] loop4: detected capacity change from 0 to 8192 [ 92.074684][ T4591] EXT4-fs error (device loop3): ext4_truncate:4279: inode #13: comm syz.3.84: mark_inode_dirty error [ 92.123351][ T4607] FAT-fs (loop4): bogus logical sector size 516 [ 92.150086][ T4591] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 92.156086][ T4607] FAT-fs (loop4): Can't find a valid FAT filesystem [ 92.220981][ T4591] EXT4-fs (loop3): 1 truncate cleaned up [ 92.247174][ T4591] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.413244][ T4620] loop2: detected capacity change from 0 to 1024 [ 92.456457][ T4620] hfsplus: unable to parse mount options [ 93.770745][ T4313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.878608][ T4644] loop1: detected capacity change from 0 to 8 [ 93.917519][ T4644] squashfs image failed sanity check [ 95.335312][ T4650] loop2: detected capacity change from 0 to 512 [ 95.340771][ T4313] usb 4-1: Using ep0 maxpacket: 16 [ 95.415885][ T4650] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.435117][ T4650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.469828][ T4650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.500940][ T4313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.546719][ T4650] EXT4-fs (loop2): 1 truncate cleaned up [ 95.577240][ T4313] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 95.595167][ T4650] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,noquota,quota,,errors=continue. Quota mode: writeback. [ 95.619871][ T4313] usb 4-1: can't read configurations, error -71 [ 96.960367][ T9] wlan1: Trigger new scan to find an IBSS to join [ 97.054860][ T4658] EXT4-fs (loop2): shut down requested (2) [ 97.093592][ T4660] Zero length message leads to an empty skb [ 97.119967][ T4660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.141057][ T4660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.378858][ T4668] loop2: detected capacity change from 0 to 256 [ 97.432568][ T4668] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.455196][ T4668] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.918697][ T4682] loop4: detected capacity change from 0 to 1024 [ 98.995016][ T4682] EXT4-fs (loop4): Ignoring removed oldalloc option [ 99.079020][ T4682] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.226889][ T4690] loop3: detected capacity change from 0 to 256 [ 99.242521][ T4682] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,grpid,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: writeback. [ 99.400233][ T4697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.059028][ T4703] binder: 4702:4703 ioctl c0306201 200000000180 returned -14 [ 100.352941][ T4712] loop4: detected capacity change from 0 to 1024 [ 100.714135][ T4725] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 100.730686][ T4725] hfsplus: unable to find HFS+ superblock [ 101.126772][ T4712] EXT4-fs (loop4): Ignoring removed orlov option [ 101.243951][ T4731] loop1: detected capacity change from 0 to 16 [ 101.305978][ T4731] erofs: (device loop1): mounted with root inode @ nid 36. [ 101.331861][ T4712] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000000003,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,mb_optimize_scan=0x0000000000000001,orlov,user_xattr,nodioread_nolock,i_version,,errors=continue. Quota mode: none. [ 101.360757][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.511807][ T4731] Illegal XDP return value 4294967274, expect packet loss! [ 101.529265][ T4712] netlink: 'syz.4.122': attribute type 3 has an invalid length. [ 101.568755][ T4737] loop3: detected capacity change from 0 to 1024 [ 101.602513][ T4712] netlink: 'syz.4.122': attribute type 3 has an invalid length. [ 101.780767][ T4508] wlan1: Trigger new scan to find an IBSS to join [ 102.607840][ T4744] loop1: detected capacity change from 0 to 1024 [ 102.872185][ T26] audit: type=1800 audit(1765369763.783:2): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 102.901812][ T4744] hfsplus: unable to parse mount options [ 103.103147][ T4508] wlan1: Creating new IBSS network, BSSID 36:d7:e7:27:12:3e [ 103.620035][ T4759] IPv6: NLM_F_REPLACE set, but no existing node found! [ 104.902205][ T4766] device sit0 entered promiscuous mode [ 105.084923][ T4766] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 105.791073][ T4766] netlink: 9 bytes leftover after parsing attributes in process `syz.3.138'. [ 106.227619][ T4775] device pim6reg1 entered promiscuous mode [ 107.258052][ T4787] loop4: detected capacity change from 0 to 1024 [ 107.298227][ T4787] hfsplus: unable to parse mount options [ 108.016964][ T4797] input: syz0 as /devices/virtual/input/input5 [ 108.052715][ T4799] loop2: detected capacity change from 0 to 512 [ 108.163729][ T4799] EXT4-fs (loop2): Ignoring removed bh option [ 109.047867][ T4799] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 109.230322][ T4799] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.556646][ T4827] loop0: detected capacity change from 0 to 512 [ 110.683748][ T4827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.729259][ T4827] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 21: comm syz.0.158: bad entry in directory: inode out of bounds - offset=60, inode=15, rec_len=16, size=1024 fake=0 [ 110.842722][ T4408] udevd[4408]: incorrect ext4 checksum on /dev/loop0 [ 110.899044][ T4833] loop1: detected capacity change from 0 to 1024 [ 111.013862][ T26] audit: type=1800 audit(1765369771.923:3): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.159" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 111.250799][ T2284] Bluetooth: hci0: command 0x2016 tx timeout [ 112.474285][ T4859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'. [ 113.954541][ T4245] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.140421][ T4870] loop0: detected capacity change from 0 to 512 [ 114.220832][ T4245] usb 5-1: Using ep0 maxpacket: 16 [ 114.502235][ T4870] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,errors=remount-ro,init_itable,usrquota,nodiscard,. Quota mode: writeback. [ 114.540818][ T4870] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.557902][ T4245] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.580919][ T4245] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.618027][ T4245] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 114.638992][ T4878] loop2: detected capacity change from 0 to 1024 [ 114.764385][ T4245] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.801562][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.809686][ T4245] usb 5-1: SerialNumber: syz [ 114.816154][ T26] audit: type=1800 audit(1765369775.723:4): pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 114.941784][ T4245] hub 5-1:1.0: bad descriptor, ignoring hub [ 114.957965][ T4245] hub: probe of 5-1:1.0 failed with error -5 [ 114.979572][ T4245] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 115.214302][ T4886] netlink: 56 bytes leftover after parsing attributes in process `syz.4.157'. [ 115.297635][ T4886] netlink: 56 bytes leftover after parsing attributes in process `syz.4.157'. [ 117.543548][ T4313] usb 5-1: USB disconnect, device number 2 [ 118.197052][ T4902] loop4: detected capacity change from 0 to 2048 [ 118.247497][ T4408] loop4: p2 < > [ 118.342270][ T4902] loop4: p2 < > [ 118.440469][ T3560] loop4: p2 < > [ 120.713835][ T4942] loop1: detected capacity change from 0 to 128 [ 121.097773][ T9] attempt to access beyond end of device [ 121.097773][ T9] loop1: rw=1, want=178, limit=128 [ 121.184058][ T4950] loop2: detected capacity change from 0 to 4096 [ 121.229035][ T4950] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 123.125608][ T4974] loop0: detected capacity change from 0 to 4096 [ 123.248793][ T4985] loop3: detected capacity change from 0 to 2048 [ 123.395399][ T4985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.720968][ T4954] binder: 4952:4954 ioctl 0 200000000040 returned -22 [ 124.082499][ T4974] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.098783][ T4974] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 124.108278][ T4995] loop3: detected capacity change from 0 to 4096 [ 124.848863][ T4974] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 125.008148][ T4995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.216491][ T4974] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 125.967750][ T5004] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 126.292021][ T5030] loop2: detected capacity change from 0 to 16 [ 126.332966][ T5030] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.519549][ T5042] loop1: detected capacity change from 0 to 1024 [ 126.778291][ T5042] EXT4-fs (loop1): Ignoring removed bh option [ 127.284447][ T5042] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,errors=continue,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 127.484898][ T5062] loop0: detected capacity change from 0 to 512 [ 127.651254][ T5062] EXT4-fs (loop0): Ignoring removed nobh option [ 127.681110][ T5062] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.760184][ T5062] EXT4-fs error (device loop0): __ext4_iget:4908: inode #11: block 1: comm syz.0.231: invalid block [ 127.925147][ T5062] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.231: couldn't read orphan inode 11 (err -117) [ 127.973623][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 128.242574][ T5083] loop3: detected capacity change from 0 to 512 [ 128.249674][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 128.367359][ T5083] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.237: inode has both inline data and extents flags [ 128.380587][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.451643][ T5083] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.237: couldn't read orphan inode 15 (err -117) [ 128.496590][ T5083] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.630934][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 129.101198][ T21] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.608034][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.615450][ T21] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 129.625206][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.721254][ T21] usb 2-1: config 0 descriptor?? [ 129.743005][ T5110] loop0: detected capacity change from 0 to 512 [ 129.822243][ T5110] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.018417][ T5122] loop3: detected capacity change from 0 to 164 [ 130.601652][ T5125] mmap: syz.2.251 (5125) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 131.521327][ T21] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 131.585035][ T5122] rock: directory entry would overflow storage [ 131.591694][ T5122] rock: sig=0x4543, size=28, remaining=18 [ 131.643837][ T3560] udevd[3560]: worker [4174] terminated by signal 33 (Unknown signal 33) [ 131.661649][ T5128] loop0: detected capacity change from 0 to 128 [ 131.682019][ T3560] udevd[3560]: worker [4174] failed while handling '/devices/virtual/block/loop3' [ 131.839144][ T9] attempt to access beyond end of device [ 131.839144][ T9] loop0: rw=1, want=178, limit=128 [ 132.331260][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 132.696187][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702978][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132367][ T4316] usb 2-1: USB disconnect, device number 2 [ 133.138687][ T4903] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 133.758582][ T5157] process 'syz.2.253' launched './file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 133.868734][ T5160] trusted_key: encrypted_key: insufficient parameters specified [ 135.587172][ T5169] loop3: detected capacity change from 0 to 1024 [ 136.546144][ T5169] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.573534][ T5189] loop1: detected capacity change from 0 to 512 [ 136.753587][ T5169] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 136.847100][ T5189] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 136.899431][ T5189] EXT4-fs (loop1): invalid journal inode [ 136.931677][ T5189] EXT4-fs (loop1): can't get journal size [ 137.092399][ T5198] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 138.001763][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 138.162216][ T5189] EXT4-fs (loop1): 1 truncate cleaned up [ 138.167916][ T5189] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue. Quota mode: writeback. [ 138.474799][ T5210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.818551][ T5218] loop0: detected capacity change from 0 to 512 [ 138.914203][ T5218] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 139.168539][ T5230] loop3: detected capacity change from 0 to 512 [ 139.260991][ T5230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.337401][ T5230] EXT4-fs (loop3): 1 truncate cleaned up [ 139.350303][ T5230] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.396135][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.547827][ T5237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'. [ 140.130803][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 140.400977][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.456215][ T21] usb 3-1: config 0 has no interfaces? [ 140.631008][ T21] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 140.657928][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.705243][ T21] usb 3-1: Product: syz [ 140.725127][ T21] usb 3-1: Manufacturer: syz [ 140.767502][ T21] usb 3-1: SerialNumber: syz [ 140.859577][ T21] usb 3-1: config 0 descriptor?? [ 141.287937][ T21] usb 3-1: USB disconnect, device number 3 [ 141.599861][ T5279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 142.491684][ T5259] binder: 5251:5259 ioctl 0 200000000040 returned -22 [ 142.825710][ T5292] loop0: detected capacity change from 0 to 128 [ 142.926457][ T5292] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.133468][ T5292] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.082849][ T5299] xt_socket: unknown flags 0x4c [ 144.186892][ T5306] loop1: detected capacity change from 0 to 128 [ 144.299772][ T5292] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 63: comm syz.0.303: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 144.571440][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 145.270663][ T5292] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 146.626776][ T4245] Bluetooth: hci1: command 0x0406 tx timeout [ 146.715173][ T5321] loop2: detected capacity change from 0 to 512 [ 147.076647][ T5321] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 147.207755][ T5321] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.885731][ T5344] bridge0: port 3(gretap0) entered blocking state [ 148.005750][ T5340] loop1: detected capacity change from 0 to 512 [ 148.029448][ T5344] bridge0: port 3(gretap0) entered disabled state [ 148.078171][ T5340] EXT4-fs (loop1): Ignoring removed nobh option [ 148.093216][ T5344] device gretap0 entered promiscuous mode [ 148.129857][ T5344] bridge0: port 3(gretap0) entered blocking state [ 148.136770][ T5344] bridge0: port 3(gretap0) entered forwarding state [ 148.152251][ T5340] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #3: comm syz.1.318: corrupted inode contents [ 148.166379][ T5340] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #3: comm syz.1.318: mark_inode_dirty error [ 148.179778][ T5340] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #3: comm syz.1.318: corrupted inode contents [ 148.192141][ T5340] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.318: mark_inode_dirty error [ 148.206455][ T5340] Quota error (device loop1): write_blk: dquota write failed [ 148.214005][ T5340] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 148.223990][ T5340] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.318: Failed to acquire dquot type 0 [ 148.239756][ T5340] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.318: corrupted inode contents [ 148.252083][ T5340] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #16: comm syz.1.318: mark_inode_dirty error [ 148.263724][ T5340] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.318: corrupted inode contents [ 148.276139][ T5340] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.318: mark_inode_dirty error [ 148.287946][ T5340] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.318: corrupted inode contents [ 148.300380][ T5340] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 148.309974][ T5340] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.318: corrupted inode contents [ 148.327185][ T5340] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.318: mark_inode_dirty error [ 148.338515][ T5340] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 148.348801][ T5340] EXT4-fs (loop1): 1 truncate cleaned up [ 148.354507][ T5340] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 148.368295][ T5340] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.215014][ T4313] Bluetooth: hci4: command 0x0411 tx timeout [ 149.410401][ T5356] loop3: detected capacity change from 0 to 2048 [ 149.850332][ T5356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.121540][ T5379] loop3: detected capacity change from 0 to 1024 [ 151.817060][ T5379] hfsplus: session requires an argument [ 151.845558][ T5379] hfsplus: unable to parse mount options [ 152.384426][ T5399] loop3: detected capacity change from 0 to 512 [ 153.224839][ T5399] EXT4-fs (loop3): inline encryption not supported [ 153.279999][ T5399] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 153.293467][ T5399] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.335: invalid indirect mapped block 2683928664 (level 1) [ 153.309863][ T5399] EXT4-fs (loop3): 1 truncate cleaned up [ 153.316078][ T5399] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 153.675906][ T26] audit: type=1800 audit(1765369814.583:5): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.335" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 154.693365][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 155.506025][ T26] audit: type=1326 audit(1765369816.413:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 155.536869][ T5436] loop1: detected capacity change from 0 to 1024 [ 155.568999][ T26] audit: type=1326 audit(1765369816.453:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 155.705747][ T26] audit: type=1326 audit(1765369816.453:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 155.750251][ T26] audit: type=1326 audit(1765369816.453:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 155.874751][ T26] audit: type=1326 audit(1765369816.453:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 155.919248][ T26] audit: type=1326 audit(1765369816.453:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 157.865209][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 157.930945][ T26] audit: type=1326 audit(1765369816.453:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 158.014875][ T26] audit: type=1326 audit(1765369816.453:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 158.319678][ T26] audit: type=1326 audit(1765369816.453:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.347371][ T26] audit: type=1326 audit(1765369816.463:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.425798][ T26] audit: type=1326 audit(1765369816.463:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.480148][ T5471] loop2: detected capacity change from 0 to 128 [ 159.506444][ T26] audit: type=1326 audit(1765369816.463:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.591779][ T5471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 159.601770][ T26] audit: type=1326 audit(1765369816.463:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.654021][ T5471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.716376][ T26] audit: type=1326 audit(1765369816.463:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.842057][ T26] audit: type=1326 audit(1765369816.463:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.908070][ T26] audit: type=1326 audit(1765369816.463:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 159.966740][ T5479] loop0: detected capacity change from 0 to 256 [ 160.010172][ T26] audit: type=1326 audit(1765369816.463:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 160.575752][ T5479] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x9450a030, utbl_chksum : 0xe619d30d) [ 160.622195][ T26] audit: type=1326 audit(1765369816.463:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 160.782082][ T5479] attempt to access beyond end of device [ 160.782082][ T5479] loop0: rw=524288, want=408, limit=256 [ 160.810712][ T26] audit: type=1326 audit(1765369816.463:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 160.845208][ T5479] attempt to access beyond end of device [ 160.845208][ T5479] loop0: rw=524288, want=664, limit=256 [ 160.852628][ T5483] loop1: detected capacity change from 0 to 1024 [ 160.891235][ T5479] attempt to access beyond end of device [ 160.891235][ T5479] loop0: rw=0, want=288, limit=256 [ 160.935713][ T5485] attempt to access beyond end of device [ 160.935713][ T5485] loop0: rw=0, want=288, limit=256 [ 161.003100][ T5483] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 161.010560][ T5483] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.058137][ T5483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 161.058245][ T5483] System zones: 0-1, 3-36 [ 161.138123][ T5483] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 162.298487][ T5506] binder: 5495:5506 ioctl 0 200000000040 returned -22 [ 163.621058][ T5510] loop2: detected capacity change from 0 to 1024 [ 163.811295][ T5510] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 165.414459][ T376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 166.440699][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 166.459641][ T5538] device bridge_slave_1 left promiscuous mode [ 166.552470][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.930872][ T23] usb 1-1: device descriptor read/all, error -71 [ 167.190698][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.470835][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 168.310849][ T4316] usb 2-1: config 0 has an invalid interface number: 88 but max is 3 [ 168.399048][ T4316] usb 2-1: config 0 has an invalid interface number: 250 but max is 3 [ 168.410493][ T4316] usb 2-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 168.422688][ T4316] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 168.433024][ T4316] usb 2-1: config 0 has no interface number 0 [ 168.439189][ T4316] usb 2-1: config 0 has no interface number 1 [ 168.447940][ T4316] usb 2-1: config 0 interface 88 has no altsetting 0 [ 168.456163][ T4316] usb 2-1: config 0 interface 250 has no altsetting 0 [ 168.464788][ T4316] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 168.776008][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.819933][ T4316] usb 2-1: config 0 descriptor?? [ 169.291179][ T4316] usb 2-1: string descriptor 0 read error: -71 [ 169.525487][ T4316] usb 2-1: USB disconnect, device number 3 [ 169.679754][ T5573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.387'. [ 170.041739][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 170.041873][ T26] audit: type=1326 audit(1765369830.793:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.106582][ C1] Unknown status report in ack skb [ 170.186264][ T26] audit: type=1326 audit(1765369830.863:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.214346][ T26] audit: type=1326 audit(1765369830.863:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.223354][ T5591] loop1: detected capacity change from 0 to 128 [ 170.257251][ T26] audit: type=1326 audit(1765369830.863:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.309499][ T5591] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 170.460440][ T5591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.517870][ T26] audit: type=1326 audit(1765369830.863:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.540139][ T26] audit: type=1326 audit(1765369830.863:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.562405][ T26] audit: type=1326 audit(1765369830.863:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.592306][ T26] audit: type=1326 audit(1765369830.863:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.636607][ T26] audit: type=1326 audit(1765369830.863:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.661889][ T26] audit: type=1326 audit(1765369830.863:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5579 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30b876f749 code=0x7ffc0000 [ 170.764259][ T5577] binder: 5574:5577 ioctl 0 200000000040 returned -22 [ 175.454686][ T5640] loop2: detected capacity change from 0 to 4096 [ 175.608552][ T5640] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.616163][ T5668] loop2: detected capacity change from 0 to 1024 [ 177.776822][ T5668] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 177.809780][ T5668] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 178.035502][ T5665] loop1: detected capacity change from 0 to 1024 [ 179.204114][ T5694] netlink: 165 bytes leftover after parsing attributes in process `syz.2.423'. [ 179.681208][ T5696] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.962086][ T5703] loop2: detected capacity change from 0 to 4096 [ 180.992276][ T5703] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 180.992276][ T5703] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 180.992276][ T5703] [ 181.414669][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 182.040600][ C0] sched: RT throttling activated [ 182.645913][ T5703] EXT4-fs: error -4 creating inode table initialization thread [ 182.708640][ T5703] EXT4-fs (loop2): mount failed [ 182.981028][ T5744] loop2: detected capacity change from 0 to 2048 [ 183.182372][ T5744] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 183.222854][ T5744] EXT4-fs (loop2): shut down requested (2) [ 184.336525][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 185.247136][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.447'. [ 185.970814][ T4313] Bluetooth: hci0: command 0x0406 tx timeout [ 185.978322][ T4313] Bluetooth: hci2: command 0x0406 tx timeout [ 186.020727][ T4313] Bluetooth: hci3: command 0x0406 tx timeout [ 186.565188][ T5783] loop1: detected capacity change from 0 to 512 [ 186.656894][ T5783] EXT4-fs (loop1): Test dummy encryption mode enabled [ 186.681137][ T5783] EXT4-fs (loop1): Test dummy encryption mode enabled [ 186.912561][ T5783] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.451: inline data xattr refers to an external xattr inode [ 186.943222][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 186.943239][ T26] audit: type=1107 audit(1765369855.851:57): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 186.943239][ T26] 3Å%l[Fg9B' [ 186.973355][ T5783] EXT4-fs (loop1): Remounting filesystem read-only [ 186.980079][ T5783] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.451: couldn't read orphan inode 12 (err -117) [ 187.002947][ T5783] EXT4-fs (loop1): Remounting filesystem read-only [ 187.026610][ T5783] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,sysvgroups,prjquota,stripe=0x00000000000093a4,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 187.053030][ T4188] Bluetooth: Wrong link type (-57) [ 187.122277][ T5794] loop2: detected capacity change from 0 to 512 [ 187.150813][ T5783] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.451: Directory hole found for htree leaf block 0 [ 187.264033][ T5783] EXT4-fs (loop1): Remounting filesystem read-only [ 188.163284][ T5802] loop3: detected capacity change from 0 to 512 [ 188.190114][ T5803] loop0: detected capacity change from 0 to 256 [ 188.241346][ T5803] exfat: Bad value for 'uid' [ 188.255463][ T5802] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.444498][ T5802] EXT4-fs (loop3): 1 truncate cleaned up [ 188.450174][ T5802] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 188.541345][ T5812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.459'. [ 189.316043][ T5819] loop1: detected capacity change from 0 to 1024 [ 190.826249][ T5829] loop3: detected capacity change from 0 to 256 [ 191.069960][ T5829] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 191.082620][ T26] audit: type=1107 audit(1765369859.991:58): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 191.082620][ T26] 3Å%l[Fg9B' [ 191.106540][ T4245] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 191.124938][ T4245] Bluetooth: hci2: Injecting HCI hardware error event [ 191.176734][ T4188] Bluetooth: hci2: hardware error 0x00 [ 191.239001][ T26] audit: type=1800 audit(1765369860.141:59): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.467" name="file1" dev="loop3" ino=1048623 res=0 errno=0 [ 193.237524][ T5858] netlink: 165 bytes leftover after parsing attributes in process `syz.3.472'. [ 195.096848][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.103339][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.545438][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 197.081476][ T26] audit: type=1107 audit(1765369865.991:60): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 197.081476][ T26] 3Å%l[Fg9B' [ 197.107833][ T5879] loop1: detected capacity change from 0 to 256 [ 197.386562][ T5879] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 198.740875][ T5889] loop0: detected capacity change from 0 to 1024 [ 198.748194][ T26] audit: type=1800 audit(1765369867.641:61): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.483" name="file1" dev="loop1" ino=1048624 res=0 errno=0 [ 198.991713][ T5889] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 199.110800][ T5889] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.488180][ T5889] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 200.689203][ T5913] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 201.202958][ T5928] overlayfs: failed to resolve './file0': -2 [ 203.686433][ T5945] loop2: detected capacity change from 0 to 128 [ 203.764101][ T5948] netlink: 165 bytes leftover after parsing attributes in process `syz.0.498'. [ 203.966733][ T5945] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.004634][ T5950] loop3: detected capacity change from 0 to 1024 [ 204.032424][ T5945] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.119518][ T5950] EXT4-fs (loop3): Ignoring removed orlov option [ 204.207964][ T5950] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,errors=continue,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 207.569209][ T26] audit: type=1107 audit(1765369876.471:62): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 207.569209][ T26] 3Å%l[Fg9B' [ 211.042477][ T26] audit: type=1107 audit(1765369879.951:63): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 211.042477][ T26] 3Å%l[Fg9B' [ 212.679876][ T6032] loop2: detected capacity change from 0 to 512 [ 212.730094][ T6034] loop3: detected capacity change from 0 to 1024 [ 212.857589][ T6032] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.895420][ T6039] loop0: detected capacity change from 0 to 256 [ 213.048025][ T6045] loop1: detected capacity change from 0 to 512 [ 213.092018][ T6047] loop3: detected capacity change from 0 to 256 [ 213.115252][ T6045] FAT-fs (loop1): Directory bread(block 199916) failed [ 213.131828][ T6045] FAT-fs (loop1): Directory bread(block 199917) failed [ 213.150728][ T6045] FAT-fs (loop1): Directory bread(block 199918) failed [ 213.178585][ T6045] FAT-fs (loop1): Directory bread(block 199919) failed [ 213.186146][ T6045] FAT-fs (loop1): Directory bread(block 199920) failed [ 213.191436][ T6047] exfat: Deprecated parameter 'namecase' [ 213.281560][ T6047] exfat: Deprecated parameter 'utf8' [ 213.285792][ T6045] FAT-fs (loop1): Directory bread(block 199921) failed [ 213.290036][ T6047] exfat: Unknown parameter 'icharset' [ 213.351683][ T6045] FAT-fs (loop1): Directory bread(block 199922) failed [ 214.265665][ T6045] FAT-fs (loop1): Directory bread(block 199923) failed [ 215.227148][ T6065] netlink: 'syz.4.541': attribute type 4 has an invalid length. [ 217.661196][ T26] audit: type=1326 audit(1765369886.571:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e75fda749 code=0x7ffc0000 [ 217.722359][ T6094] loop0: detected capacity change from 0 to 2048 [ 217.728856][ T26] audit: type=1326 audit(1765369886.591:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e75fda749 code=0x7ffc0000 [ 217.796119][ T26] audit: type=1326 audit(1765369886.591:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e75fda783 code=0x7ffc0000 [ 217.880659][ T26] audit: type=1326 audit(1765369886.611:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e75fd91ff code=0x7ffc0000 [ 217.920655][ T2284] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.164598][ T26] audit: type=1326 audit(1765369886.631:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2e75fda7d7 code=0x7ffc0000 [ 218.240718][ T2284] usb 4-1: Using ep0 maxpacket: 16 [ 218.382060][ T26] audit: type=1326 audit(1765369886.631:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e75fd8f90 code=0x7ffc0000 [ 218.404446][ T26] audit: type=1326 audit(1765369886.631:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e75fda34b code=0x7ffc0000 [ 218.440878][ T26] audit: type=1326 audit(1765369886.671:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e75fd93aa code=0x7ffc0000 [ 218.464600][ T2284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.512518][ T2284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.554131][ T2284] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.593890][ T26] audit: type=1326 audit(1765369886.671:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e75fd93aa code=0x7ffc0000 [ 218.646506][ T2284] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.700122][ T2284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.742355][ T26] audit: type=1326 audit(1765369886.671:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2e75fd8e97 code=0x7ffc0000 [ 218.776392][ T2284] usb 4-1: config 0 descriptor?? [ 219.928961][ T2284] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 219.938503][ T2284] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 219.950320][ T2284] microsoft 0003:045E:07DA.0002: no inputs found [ 219.957120][ T2284] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 219.969970][ T2284] usb 4-1: USB disconnect, device number 5 [ 222.243165][ T6114] fido_id[6114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 223.182811][ T6140] binder: 6133:6140 ioctl 0 200000000040 returned -22 [ 224.189744][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 224.189761][ T26] audit: type=1107 audit(1765369893.071:86): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 224.189761][ T26] 3Å%l[Fg9B' [ 224.338003][ T6150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.567'. [ 227.569450][ T6156] loop1: detected capacity change from 0 to 1024 [ 227.626074][ T26] audit: type=1326 audit(1765369896.531:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 227.731506][ T26] audit: type=1326 audit(1765369896.601:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 227.817211][ T6166] loop3: detected capacity change from 0 to 2048 [ 227.840630][ T26] audit: type=1326 audit(1765369896.601:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 227.863825][ T1493] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 227.900335][ T26] audit: type=1326 audit(1765369896.601:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 228.051005][ T26] audit: type=1326 audit(1765369896.601:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 228.178209][ T26] audit: type=1326 audit(1765369896.601:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 228.254095][ T6184] loop0: detected capacity change from 0 to 1024 [ 228.276489][ T26] audit: type=1326 audit(1765369896.611:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 228.361276][ T26] audit: type=1326 audit(1765369896.611:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 228.484914][ T26] audit: type=1326 audit(1765369896.611:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc9fc550749 code=0x7ffc0000 [ 228.620422][ T6189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.579'. [ 229.525042][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 229.525057][ T26] audit: type=1107 audit(1765369898.431:155): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 229.525057][ T26] 3Å%l[Fg9B' [ 229.580809][ T6050] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 229.990830][ T6050] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 230.018420][ T6050] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.040731][ T6050] usb 1-1: config 0 has no interface number 0 [ 230.046994][ T6050] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 230.058361][ T6050] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.071492][ T6050] usb 1-1: config 0 interface 52 has no altsetting 0 [ 230.160798][ T6050] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 230.230620][ T6050] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 230.238751][ T6050] usb 1-1: Manufacturer: syz [ 230.254593][ T6050] usb 1-1: config 0 descriptor?? [ 230.267779][ T6194] binder: 6193:6194 ioctl 0 200000000040 returned -22 [ 230.291494][ T6050] hub 1-1:0.52: bad descriptor, ignoring hub [ 230.305383][ T6050] hub: probe of 1-1:0.52 failed with error -5 [ 230.633108][ T6050] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input8 [ 230.715828][ T6209] overlayfs: failed to resolve './file1': -2 [ 231.201422][ T6050] usb 1-1: USB disconnect, device number 5 [ 232.600940][ T6234] netlink: 'syz.1.588': attribute type 3 has an invalid length. [ 233.593831][ T6240] loop0: detected capacity change from 0 to 256 [ 233.672352][ T26] audit: type=1107 audit(1765369902.581:156): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 233.672352][ T26] 3Å%l[Fg9B' [ 233.749715][ T6240] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 233.910325][ T6250] overlayfs: failed to resolve './file1': -2 [ 234.673129][ T6253] loop1: detected capacity change from 0 to 512 [ 234.800075][ T6253] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 234.853641][ T6253] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.470958][ T6254] binder: 6252:6254 ioctl 0 200000000040 returned -22 [ 236.550132][ T6279] binfmt_misc: register: failed to install interpreter file ./file2 [ 236.582576][ T6282] loop2: detected capacity change from 0 to 128 [ 236.629189][ T6282] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 237.603066][ T6282] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.844607][ T6292] loop3: detected capacity change from 0 to 16 [ 237.872307][ T26] audit: type=1107 audit(1765369906.781:157): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 237.872307][ T26] 3Å%l[Fg9B' [ 237.904710][ T6292] erofs: (device loop3): mounted with root inode @ nid 36. [ 237.949139][ T6292] erofs: (device loop3): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 238.656487][ T6300] overlayfs: failed to resolve './file1': -2 [ 239.298546][ T6307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'. [ 241.053472][ T6328] loop0: detected capacity change from 0 to 8 [ 241.502299][ T26] audit: type=1107 audit(1765369910.231:158): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 241.502299][ T26] 3Å%l[Fg9B' [ 242.166598][ T6347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'. [ 242.179459][ T6345] loop1: detected capacity change from 0 to 512 [ 242.794526][ T6345] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 242.870913][ T26] audit: type=1800 audit(1765369911.771:159): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.628" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 242.941734][ T6354] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 243.164105][ T6366] loop1: detected capacity change from 0 to 256 [ 243.175422][ T6362] loop0: detected capacity change from 0 to 2048 [ 243.226107][ T6366] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.247941][ T6362] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 243.262694][ T6366] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 243.311082][ T6366] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 243.323551][ T6362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.400635][ T4313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 243.640251][ T6370] loop0: detected capacity change from 0 to 512 [ 244.530705][ T4313] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 244.547106][ T4313] usb 3-1: config 0 has no interface number 0 [ 244.583435][ T6370] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.800584][ T26] audit: type=1107 audit(1765369913.654:160): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wg9ЅYlly-zd#i.j}f~bXPd'RWyP3D [ 244.800584][ T26] 3Å%l[Fg9B' [ 244.937003][ T4313] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=5f.35 [ 244.948542][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.964442][ T4313] usb 3-1: Product: syz [ 244.978780][ T4313] usb 3-1: Manufacturer: syz [ 245.082154][ T4313] usb 3-1: SerialNumber: syz [ 245.108784][ T4313] usb 3-1: config 0 descriptor?? [ 245.327549][ T4313] usb-storage 3-1:0.111: USB Mass Storage device detected [ 245.777628][ T4313] usb-storage 3-1:0.111: device ignored [ 247.182024][ T4313] usb 3-1: USB disconnect, device number 4 [ 247.981970][ T6421] loop3: detected capacity change from 0 to 1024 [ 247.984082][ T6419] loop2: detected capacity change from 0 to 2048 [ 248.036511][ T6419] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 248.067621][ T6419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.472032][ T6427] "syz.2.655" (6427) uses obsolete ecb(arc4) skcipher [ 248.527361][ T6427] syz.2.655 sent an empty control message without MSG_MORE. [ 248.553935][ T6429] loop3: detected capacity change from 0 to 2048 [ 248.634748][ T6429] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.649415][ T6429] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.674080][ T6429] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 248.692963][ T6429] UDF-fs: Scanning with blocksize 512 failed [ 248.751085][ T6429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.804160][ T26] audit: type=1800 audit(1765369917.396:161): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.656" name="file1" dev="loop3" ino=838 res=0 errno=0 [ 248.839554][ T6434] overlayfs: failed to clone upperpath [ 249.052288][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.660'. [ 249.138299][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'. [ 249.298893][ T6439] loop3: detected capacity change from 0 to 512 [ 249.520363][ T6439] EXT4-fs (loop3): Ignoring removed oldalloc option [ 249.652073][ T6439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.488230][ T6453] loop0: detected capacity change from 0 to 512 [ 251.517188][ T6439] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 252.098914][ T6439] EXT4-fs (loop3): 1 truncate cleaned up [ 252.104611][ T6439] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 252.129466][ T6453] EXT4-fs (loop0): Ignoring removed bh option [ 252.169992][ T6453] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 252.254819][ T6453] EXT4-fs (loop0): 1 truncate cleaned up [ 252.267222][ T6453] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000cdc,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 253.286945][ T6470] loop1: detected capacity change from 0 to 512 [ 254.546476][ T4245] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 254.851067][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 255.038425][ T4245] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 255.148648][ T4245] usb 1-1: config 0 has no interface number 0 [ 255.213886][ T4245] usb 1-1: config 0 interface 66 has no altsetting 0 [ 255.273519][ T4245] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.315505][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.532751][ T4245] usb 1-1: config 0 descriptor?? [ 255.574095][ T4245] cp210x 1-1:0.66: cp210x converter detected [ 257.104466][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.110899][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.176015][ T4245] cp210x 1-1:0.66: failed to get vendor val 0x370b size 1: -71 [ 257.183661][ T4245] cp210x 1-1:0.66: querying part number failed [ 257.226391][ T4245] usb 1-1: cp210x converter now attached to ttyUSB0 [ 257.285164][ T6495] loop0: detected capacity change from 0 to 16 [ 258.943843][ T4245] usb 1-1: USB disconnect, device number 6 [ 258.968248][ T6495] erofs: (device loop0): mounted with root inode @ nid 36. [ 259.016066][ T6495] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 259.032041][ T4245] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 259.066265][ T4245] cp210x 1-1:0.66: device disconnected [ 261.143844][ T4267] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.509150][ T6520] input: syz0 as /devices/virtual/input/input9 [ 263.164052][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.684'. [ 263.683205][ T6534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 268.589137][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.798095][ T6566] loop0: detected capacity change from 0 to 4096 [ 270.871859][ T6566] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 271.542763][ T6575] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.771879][ T6580] loop0: detected capacity change from 0 to 512 [ 271.852418][ T4252] Bluetooth: hci4: command 0x0405 tx timeout [ 272.393562][ T6581] overlayfs: missing 'lowerdir' [ 274.749418][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'. [ 275.659780][ T6600] loop1: detected capacity change from 0 to 1024 [ 275.734121][ T6600] hfsplus: invalid btree extent records (0 size) [ 275.740852][ T6600] hfsplus: failed to load catalog file [ 388.407604][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 388.414743][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6604/1:b..l [ 388.423156][ C1] (detected by 1, t=10502 jiffies, g=19381, q=25) [ 388.429671][ C1] task:syz.1.708 state:R running task stack:27520 pid: 6604 ppid: 4183 flags:0x00004000 [ 388.441435][ C1] Call Trace: [ 388.444736][ C1] [ 388.447683][ C1] __schedule+0x11bb/0x4390 [ 388.452223][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 388.458231][ C1] ? mark_lock+0x94/0x320 [ 388.462588][ C1] ? release_firmware_map_entry+0x190/0x190 [ 388.468514][ C1] ? preempt_schedule+0xa7/0xb0 [ 388.473397][ C1] preempt_schedule_common+0x82/0xd0 [ 388.478702][ C1] preempt_schedule+0xa7/0xb0 [ 388.483394][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 388.489052][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 388.494104][ C1] preempt_schedule_thunk+0x16/0x18 [ 388.499342][ C1] _raw_spin_unlock+0x36/0x40 [ 388.504050][ C1] filemap_map_pages+0x1031/0x1390 [ 388.509194][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 388.514323][ C1] ? pte_alloc_one+0x270/0x2f0 [ 388.519125][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 388.525136][ C1] handle_mm_fault+0x257d/0x43b0 [ 388.530108][ C1] ? get_page+0xe0/0xe0 [ 388.534293][ C1] ? vmacache_find+0x52a/0x590 [ 388.539082][ C1] ? find_vma+0xd2/0x230 [ 388.543356][ C1] do_user_addr_fault+0x489/0xc80 [ 388.548414][ C1] exc_page_fault+0x60/0x100 [ 388.553027][ C1] ? clear_bhb_loop+0x30/0x80 [ 388.557731][ C1] asm_exc_page_fault+0x22/0x30 [ 388.562609][ C1] RIP: 0033:0x7f149d8ac2ed [ 388.567065][ C1] RSP: 002b:00007ffd3094e1a0 EFLAGS: 00010202 [ 388.573153][ C1] RAX: 000000110c414000 RBX: 00007f149e752720 RCX: 0000000000000003 [ 388.581141][ C1] RDX: 0000000000000758 RSI: 000000000000041d RDI: 0000000000000008 [ 388.589183][ C1] RBP: ffffffff84010758 R08: 00007f149dc23038 R09: 00007f149dc0f000 [ 388.597170][ C1] R10: 00007f149d43c008 R11: 0000000000000004 R12: 0000000000000004 [ 388.605157][ C1] R13: 0000000000000000 R14: ffffffff84010ace R15: 00000000000004fc [ 388.613139][ C1] ? insn_decode+0x1e/0x490 [ 388.617687][ C1] ? __get_immv+0x3f8/0x600 [ 388.622219][ C1] [ 388.625249][ C1] rcu: rcu_preempt kthread starved for 10518 jiffies! g19381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 388.636461][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 388.646439][ C1] rcu: RCU grace-period kthread stack dump: [ 388.652345][ C1] task:rcu_preempt state:R running task stack:27712 pid: 15 ppid: 2 flags:0x00004000 [ 388.663142][ C1] Call Trace: [ 388.666431][ C1] [ 388.669377][ C1] __schedule+0x11bb/0x4390 [ 388.673928][ C1] ? release_firmware_map_entry+0x190/0x190 [ 388.679854][ C1] schedule+0x11b/0x1e0 [ 388.684041][ C1] schedule_timeout+0x15c/0x280 [ 388.688907][ C1] ? console_conditional_schedule+0x40/0x40 [ 388.694830][ C1] ? update_process_times+0x200/0x200 [ 388.700227][ C1] ? prepare_to_swait_event+0x331/0x350 [ 388.705812][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 388.710683][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 388.715915][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 388.720616][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 388.725419][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 388.730648][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 388.735900][ C1] rcu_gp_kthread+0x98/0x350 [ 388.740519][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 388.745655][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 388.751576][ C1] ? __kthread_parkme+0x157/0x1b0 [ 388.756769][ C1] kthread+0x436/0x520 [ 388.760858][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 388.765984][ C1] ? kthread_blkcg+0xd0/0xd0 [ 388.770600][ C1] ret_from_fork+0x1f/0x30 [ 388.775049][ C1] [ 388.778096][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 388.784430][ C1] NMI backtrace for cpu 1 [ 388.788760][ C1] CPU: 1 PID: 6602 Comm: syz.3.706 Not tainted syzkaller #0 [ 388.796061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.806134][ C1] Call Trace: [ 388.809422][ C1] [ 388.812274][ C1] dump_stack_lvl+0x168/0x230 [ 388.817059][ C1] ? show_regs_print_info+0x20/0x20 [ 388.822269][ C1] ? load_image+0x3b0/0x3b0 [ 388.826784][ C1] ? irq_work_queue+0xbf/0x140 [ 388.831563][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 388.836525][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 388.842709][ C1] ? _printk+0xcc/0x110 [ 388.846873][ C1] ? cpu_online+0x1d/0x30 [ 388.851213][ C1] ? load_image+0x3b0/0x3b0 [ 388.855735][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 388.861827][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 388.867861][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 388.874041][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 388.879543][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 388.884545][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 388.889769][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 388.894671][ C1] ? account_process_tick+0x227/0x3a0 [ 388.900078][ C1] update_process_times+0x193/0x200 [ 388.905304][ C1] tick_sched_timer+0x37d/0x560 [ 388.910199][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 388.915440][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 388.921019][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 388.926208][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 388.932299][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 388.937276][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 388.943272][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 388.948922][ C1] [ 388.951879][ C1] [ 388.954827][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 388.960821][ C1] RIP: 0010:__local_bh_enable_ip+0x132/0x1b0 [ 388.966851][ C1] Code: 8a e8 02 85 59 08 65 66 8b 05 8a 25 bb 7e 66 85 c0 75 54 bf 01 00 00 00 e8 ab fe 08 00 e8 66 76 35 00 fb 65 8b 05 36 fc b9 7e <85> c0 75 05 e8 45 07 b8 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 388.986485][ C1] RSP: 0018:ffffc900049a7aa0 EFLAGS: 00000286 [ 388.992593][ C1] RAX: 0000000080000000 RBX: 0000000000000200 RCX: 3431f825aa993200 [ 389.000579][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1be0 RDI: ffffffff8a59e800 [ 389.008580][ C1] RBP: ffffc900049a7b30 R08: dffffc0000000000 R09: ffffed1027fd4641 [ 389.016583][ C1] R10: ffffed1027fd4641 R11: 1ffff11027fd4640 R12: ffffffff812bde55 [ 389.024573][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000934f54 [ 389.032567][ C1] ? local_bh_enable+0x5/0x20 [ 389.037287][ C1] ? _local_bh_enable+0xa0/0xa0 [ 389.042158][ C1] ? rcu_is_watching+0x11/0xa0 [ 389.046952][ C1] fpu__restore_sig+0x785/0xf50 [ 389.051837][ C1] ? copy_fpstate_to_sigframe+0xb90/0xb90 [ 389.057609][ C1] ? __might_fault+0xb3/0x110 [ 389.062323][ C1] ? _copy_from_user+0x111/0x170 [ 389.067294][ C1] __ia32_sys_rt_sigreturn+0x649/0x790 [ 389.072788][ C1] ? rcu_lock_release+0x5/0x20 [ 389.077577][ C1] ? load_gs_index+0x120/0x120 [ 389.082386][ C1] ? lock_chain_count+0x20/0x20 [ 389.087271][ C1] ? trace_sys_enter+0x1f/0x80 [ 389.092060][ C1] do_syscall_64+0x4c/0xa0 [ 389.096495][ C1] ? clear_bhb_loop+0x30/0x80 [ 389.101203][ C1] ? clear_bhb_loop+0x30/0x80 [ 389.105905][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.111818][ C1] RIP: 0033:0x7fc9fc550749 [ 389.116257][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.135898][ C1] RSP: 002b:00007fc9fa7b70e8 EFLAGS: 00000246 [ 389.141997][ C1] RAX: fffffffffffffffc RBX: 00007fc9fc7a6fa8 RCX: 00007fc9fc550749 [ 389.149978][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc9fc7a6fa8 [ 389.157965][ C1] RBP: 00007fc9fc7a6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 389.165982][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.173979][ C1] R13: 00007fc9fc7a7038 R14: 00007fffa9e3fec0 R15: 00007fffa9e3ffa8 [ 389.181984][ C1]