last executing test programs: 1m7.802707974s ago: executing program 0 (id=119): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003d68c5ee1768812002b08140a000000039afc5ad9485bbb6ae0be00000080000000007e06000000000000f15761407a681f009cee4a5acb7f36ba981fb70e31fdced7c85063315033bf79ac2dff060115003901000000fa5aebfb4652c33800000000000900000000e90554062a80e605007f71174a4c0294f12742fdffffff00", 0x8a) 1m7.492245889s ago: executing program 0 (id=123): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 1m7.40224347s ago: executing program 0 (id=126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x14, 0x0, &(0x7f0000002040)) 1m7.210780073s ago: executing program 0 (id=127): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") creat(&(0x7f0000000400)='./bus\x00', 0x2c) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbe, 0x10002, 0x0, 0x1, 0x11, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5c9e000f7c41499dc2aac63a01000000004600004faa2ad9c084ba00100000000000000000000000000000000800", "036c47c6780820040000549ba197fc09000000000000000100002a00ffffffffffffffff0000ecffe8f2000000100000000000000000000000000000006e00", "b7fdbd7b0c00006b1700000000000000000000000001000000000000005200", [0x80000001, 0x9]}) 1m6.874999909s ago: executing program 0 (id=130): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getpid() fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') setresuid(0x0, 0xee01, 0xee00) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 1m3.478630134s ago: executing program 0 (id=138): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000007e00), 0x8001, 0x0) chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x80005, 0x4, 0x2, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x1, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1008, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x1, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m3.313186826s ago: executing program 32 (id=138): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000007e00), 0x8001, 0x0) chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x80005, 0x4, 0x2, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x1, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1008, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x1, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.426721488s ago: executing program 3 (id=379): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301a400000000009500000000009c8d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 9.146038072s ago: executing program 5 (id=380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xfffffffa, 0x40090, 0xc, "00bf46f8bbde7047bcd4a280000400"}) openat$incfs(0xffffffffffffffff, 0x0, 0x10b441, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) 8.404431034s ago: executing program 3 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) unshare(0x22020400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, 0x0) 7.294716922s ago: executing program 3 (id=386): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000040)={[{@sysvgroups}, {@dax_inode}, {@nouid32}, {@mblk_io_submit}]}, 0x1, 0x642, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {0x0, 0x975e}, {0x0, 0x9}], 0x20}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) userfaultfd(0x0) 7.222696623s ago: executing program 5 (id=387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x80, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 5.683863498s ago: executing program 1 (id=390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) preadv2(r2, &(0x7f0000000240)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1, 0x6, 0x4, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r10, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x236b, 0xa}, {@in6=@local, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x70bd26, 0x2, 0x2, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 5.610071079s ago: executing program 5 (id=391): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x11, 0x17e, &(0x7f0000000200)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000016c0)={0x200c}) 5.54171276s ago: executing program 3 (id=392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) 5.5396642s ago: executing program 4 (id=393): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYRES16=r1], 0x40}}, 0x8800) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}], 0x20}}], 0x1, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x5, 0xa, @vifc_lcl_ifindex=r3, @remote}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd22, 0x25dfdbf7, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0x12}]}, 0xfffffffffffffe88}, 0x1, 0x0, 0x0, 0x48851}, 0x2c8c2) 5.349343003s ago: executing program 3 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x8000000, 0x6000, 0x1}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x10e, 0xd4d, 0x6) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 4.642999065s ago: executing program 1 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x1, 0xff, 0x5, 0xc, 0xdc4}, &(0x7f0000000500)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00010000160001002b0000d4f7318e5e00000000000000000000fe88000000fd81b36e0000000000010192b5ac14beb9fb864e2300004e2400000a0080201d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f07000008001f0004"], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) bind$netlink(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 4.551011166s ago: executing program 4 (id=396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 4.295812861s ago: executing program 5 (id=397): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2200000, &(0x7f00000002c0)={[{@noinit_itable}, {@norecovery}, {@nolazytime}, {@abort}, {@jqfmt_vfsold}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) 4.277213001s ago: executing program 3 (id=398): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.766737909s ago: executing program 4 (id=399): shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0xb, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x4, 0x4) 3.393537725s ago: executing program 1 (id=400): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x0, 0x30, 0x4, "2738ad18"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x113) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000ec0)={0x0, 0x14, 0xbb, "9c4f23cbe16b829c352e3229b21e21a337c398171e5619cd61bd78abe74fb6ad09f48e9d57547a0c866c48f22708eb382ec229264bf4c85c3a8a6a37aea064e88a44b258895612a21de7d8dd38bf528359f0308196043a879e67a30ac5d4cf42ee3c2ad99fb7c94f18ce06864416043fa256442397ac06a122d5112d4eb359f976398891c06dd27b31feed08bf28327c3c1952369eda1ba18c770f479b3bbb32e68b17d0743e7c2c923156cfc0021869601a05c704c85c674dfc9a"}, 0x0, 0x0, &(0x7f0000001040)={0x20, 0x81, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 2.45577974s ago: executing program 1 (id=401): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.440783371s ago: executing program 4 (id=403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1d}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.226099494s ago: executing program 5 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xd000, 0x100100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x74, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x8, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x83}, {0xd, 0x88, 0x3, '\x00', 0xff}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0xb, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0xe, 0xe, 0xc, '\x00', 0x7}, {0x83, 0x6, 0x1, '\x00', 0xf2}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0xec}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x8, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0xd}, {0x10, 0x9, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.213421024s ago: executing program 2 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') lseek(r1, 0x8001, 0x1) 2.110062796s ago: executing program 2 (id=406): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x60, &(0x7f0000000500)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2a, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0xfffe}, {"d57f649a56ea4329ce2c2643cfa1b98af0bee5c3deaa"}}}}}}}, 0x0) 2.082578816s ago: executing program 1 (id=407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) preadv2(r2, &(0x7f0000000240)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1, 0x6, 0x4, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r9, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x236b, 0xa}, {@in6=@local, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x70bd26, 0x2, 0x2, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 2.025969147s ago: executing program 5 (id=408): gettid() syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a7f0000000000090503"], 0x0) 1.85863694s ago: executing program 4 (id=409): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x2, 0x21, 0x8, @multicast1, @multicast2}}}}}}, 0x0) 1.720502762s ago: executing program 2 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x2, 0x1033, 0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) syz_clone(0x41000, 0x0, 0x0, &(0x7f0000006800), 0x0, 0x0) 1.670716533s ago: executing program 4 (id=411): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x45f, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) syz_mount_image$exfat(0x0, &(0x7f0000000f00)='./bus\x00', 0x2065820, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x22000, 0x84) getdents(r2, &(0x7f0000001b00)=""/240, 0xf0) 504.235182ms ago: executing program 1 (id=412): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) fanotify_init(0x18, 0x1000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 324.300665ms ago: executing program 2 (id=413): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x1a1342, 0x162) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) readv(0xffffffffffffffff, &(0x7f0000000a40), 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x0, 0x5, 0xf42}, {0x0, 0x2, 0x1, 0xffff000000000002}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4000000, 0x3c}, 0x0, @in=@loopback, 0x3503, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4}}, 0xe8) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) 140.200337ms ago: executing program 2 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x734}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=415): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) pselect6(0x40, &(0x7f0000000240)={0x5, 0xa, 0x5, 0x2, 0x7fff8000000000, 0x8, 0xff, 0x810}, 0x0, &(0x7f00000002c0)={0x8, 0x1, 0xb, 0x4, 0x1, 0x2, 0x100, 0x480000000000000}, &(0x7f0000000300), 0x0) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@link_local, @link_local, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x20000028, &(0x7f00000004c0)}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000040)={@random="b9bc537df788", @random="50a245d5cde0", @void, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0xaa, '(', "364d1f", 0x805}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0xb504, 0x4000) rt_sigprocmask(0x1, &(0x7f0000000400)={[0x8001]}, &(0x7f0000000440), 0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x565, &(0x7f0000000f00)="$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") r6 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r6, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r6, 0x8, 0x0, 0x10000) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f00000000c0)) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 66.698046][ T4173] cgroup: Unknown subsys name 'net' [ 66.840788][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.329507][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.929648][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.962081][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.986741][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 70.014921][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 70.132644][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 70.215843][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.222965][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.231650][ T4186] device bridge_slave_0 entered promiscuous mode [ 70.256920][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.264284][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.272111][ T4184] device bridge_slave_0 entered promiscuous mode [ 70.280232][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.287468][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.295820][ T4185] device bridge_slave_0 entered promiscuous mode [ 70.304067][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.311445][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.319723][ T4185] device bridge_slave_1 entered promiscuous mode [ 70.327395][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.334716][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.342612][ T4186] device bridge_slave_1 entered promiscuous mode [ 70.349958][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.357245][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.365850][ T4188] device bridge_slave_0 entered promiscuous mode [ 70.378903][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.386519][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.395067][ T4184] device bridge_slave_1 entered promiscuous mode [ 70.420832][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.428309][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.436674][ T4188] device bridge_slave_1 entered promiscuous mode [ 70.475003][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.508885][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.520117][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.547086][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.559816][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.570969][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.591938][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.643939][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.653870][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.661380][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.669581][ T4187] device bridge_slave_0 entered promiscuous mode [ 70.679355][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.686721][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.694773][ T4187] device bridge_slave_1 entered promiscuous mode [ 70.713560][ T4185] team0: Port device team_slave_0 added [ 70.722342][ T4186] team0: Port device team_slave_0 added [ 70.754607][ T4184] team0: Port device team_slave_0 added [ 70.761996][ T4185] team0: Port device team_slave_1 added [ 70.768880][ T4186] team0: Port device team_slave_1 added [ 70.785781][ T4188] team0: Port device team_slave_0 added [ 70.807874][ T4184] team0: Port device team_slave_1 added [ 70.823107][ T4188] team0: Port device team_slave_1 added [ 70.829984][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.837231][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.863530][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.883712][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.918819][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.926319][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.952855][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.966391][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.983885][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.990984][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.017483][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.049624][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.056780][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.083348][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.095231][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.102484][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.129468][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.141307][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.149721][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.175943][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.197549][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.204810][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.231294][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.247540][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.254767][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.281111][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.294601][ T4187] team0: Port device team_slave_0 added [ 71.338991][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.346116][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.363802][ T4187] team0: Port device team_slave_1 added [ 71.386846][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.393889][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.421005][ T4184] device hsr_slave_0 entered promiscuous mode [ 71.428602][ T4184] device hsr_slave_1 entered promiscuous mode [ 71.435691][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.446648][ T4184] Cannot create hsr debugfs directory [ 71.456108][ T4185] device hsr_slave_0 entered promiscuous mode [ 71.463448][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.470703][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.478509][ T4185] Cannot create hsr debugfs directory [ 71.534311][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 71.541202][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 71.543556][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 71.555370][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 71.561816][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 71.566190][ T4188] device hsr_slave_0 entered promiscuous mode [ 71.574973][ T4188] device hsr_slave_1 entered promiscuous mode [ 71.581815][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.589925][ T4188] Cannot create hsr debugfs directory [ 71.607012][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.614479][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.640739][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.653874][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.660837][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.687880][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.837947][ T4187] device hsr_slave_0 entered promiscuous mode [ 71.845335][ T4187] device hsr_slave_1 entered promiscuous mode [ 71.852171][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.859991][ T4187] Cannot create hsr debugfs directory [ 72.070578][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.094102][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.110904][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.120119][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.162589][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.182050][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.191640][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.202008][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.299242][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.323430][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.351837][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.364251][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.381943][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.417895][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.445833][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.455865][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.481810][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.493562][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.514823][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.531978][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.539173][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.556058][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.565942][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.576246][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.589101][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.599353][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.606644][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.619698][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.629282][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.638252][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.645377][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.653304][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.674790][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.712549][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.722076][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.731528][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.742678][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.750941][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.761422][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.770688][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.779891][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.789220][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.799069][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.818008][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.833912][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.858803][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.868016][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.882660][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.898785][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.933779][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.945203][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.954948][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.962263][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.970966][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.980377][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.988943][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.996050][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.004224][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.013448][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.029763][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.039156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.081886][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.098187][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.131403][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.140580][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.149954][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.160161][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.168616][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.188947][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.207610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.217888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.230713][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.254458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.270003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.279457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.292281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.301523][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.308639][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.316845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.331130][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.357570][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.380579][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.389725][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.396893][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.419840][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.448497][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.456810][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.465413][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.472949][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.480853][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.490340][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.499766][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.509299][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.518643][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.528478][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.537774][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.551244][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.567243][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.595518][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.610071][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.619000][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 73.626024][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 73.633564][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.642121][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.649539][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.657722][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 73.673300][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 73.675285][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.683871][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 73.694918][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.709134][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.716368][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.744932][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.753037][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.763008][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.772985][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.791257][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.803494][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.828491][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.851563][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.862106][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.872608][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.880558][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.888393][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.898365][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.907232][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.926488][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.942578][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.952940][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.962836][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.005195][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.023918][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.040900][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.050989][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.061294][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.070861][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.090985][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.100652][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.109870][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.121568][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.167672][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.188062][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.199962][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.207271][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.221997][ T4185] device veth0_vlan entered promiscuous mode [ 74.246498][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.256608][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.266446][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.276158][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.287336][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.299700][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.306834][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.316131][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.326074][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.341294][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.349529][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.357933][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.374421][ T4185] device veth1_vlan entered promiscuous mode [ 74.387440][ T4186] device veth0_vlan entered promiscuous mode [ 74.415237][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.427009][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.436661][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.445509][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.455267][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.464810][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.472666][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.485445][ T4186] device veth1_vlan entered promiscuous mode [ 74.508335][ T4185] device veth0_macvtap entered promiscuous mode [ 74.522498][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.532004][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.541266][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.550348][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.558730][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.566625][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.575555][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.584848][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.593716][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.610090][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.618666][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.628597][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.641749][ T4185] device veth1_macvtap entered promiscuous mode [ 74.652655][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.668402][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.680251][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.692671][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.701358][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.709947][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.718952][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.726589][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.737421][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.746103][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.755291][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.778867][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.811908][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.842566][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.856062][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.868795][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.891015][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.902165][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.912080][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.921041][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.933534][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.942304][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.956180][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.965818][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.979358][ T4186] device veth0_macvtap entered promiscuous mode [ 75.001531][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.011451][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.026935][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.038449][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065425][ T4186] device veth1_macvtap entered promiscuous mode [ 75.075301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.084028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.126614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.136595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.151100][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.164250][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.176845][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.188280][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.210936][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.224457][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.238612][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.251430][ T4184] device veth0_vlan entered promiscuous mode [ 75.261336][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.271222][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.280670][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.290629][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.301688][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.311309][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.320510][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.329248][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.338467][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.347075][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.355609][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.364284][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.377633][ T4188] device veth0_vlan entered promiscuous mode [ 75.410719][ T4184] device veth1_vlan entered promiscuous mode [ 75.427280][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.438331][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.447836][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.457487][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.483689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.492271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.501502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.545877][ T4188] device veth1_vlan entered promiscuous mode [ 75.560260][ T4187] device veth0_vlan entered promiscuous mode [ 75.595047][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.605493][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.613729][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.621958][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.630932][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.639701][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.649610][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.671568][ T4188] device veth0_macvtap entered promiscuous mode [ 75.684471][ T4187] device veth1_vlan entered promiscuous mode [ 75.693800][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.694986][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 75.701860][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.712753][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 75.722399][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 75.730695][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 75.741777][ T4188] device veth1_macvtap entered promiscuous mode [ 75.763852][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.772063][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.780775][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 75.782442][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.797641][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.806576][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.821436][ T4184] device veth0_macvtap entered promiscuous mode [ 75.845740][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.859789][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.868698][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.878076][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.888141][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.901773][ T4184] device veth1_macvtap entered promiscuous mode [ 75.920413][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.932249][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.938381][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.944840][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.960838][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.971798][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.984614][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.017874][ T4187] device veth0_macvtap entered promiscuous mode [ 76.034404][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.048081][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.057147][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.068454][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.078085][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.086781][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.096423][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.112897][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.124581][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.134789][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.145584][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.158471][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.169045][ T4187] device veth1_macvtap entered promiscuous mode [ 76.186959][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.198725][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.209014][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.219871][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.230268][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.241274][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.257254][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.272135][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.283256][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.292000][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.300484][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.308661][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.317801][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.327125][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.347092][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.358213][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.367118][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.376248][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.402579][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.417802][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.428456][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.439505][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.459226][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.471823][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.484634][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.495868][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.513906][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.562589][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.585370][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.672404][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.692047][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.710538][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.721920][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.735292][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.744458][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.762162][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.772996][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.783517][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.794940][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.806566][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.871089][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.939769][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.002812][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.095088][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.562160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.577130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.602030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.615375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.687127][ T4306] loop0: detected capacity change from 0 to 128 [ 77.700807][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.718592][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.728610][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.731795][ T4306] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.739555][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.739572][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.739591][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.739601][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.739615][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.741308][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.803274][ T4304] Bluetooth: hci1: command 0x0419 tx timeout [ 77.815547][ T4306] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.836557][ T4304] Bluetooth: hci4: command 0x0419 tx timeout [ 77.849934][ T4304] Bluetooth: hci2: command 0x0419 tx timeout [ 77.849990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.863344][ T4304] Bluetooth: hci3: command 0x0419 tx timeout [ 77.880311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.889814][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 77.920306][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.929070][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.931434][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.950242][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.960688][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.969626][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.165897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.178410][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.191249][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.934753][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.950118][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.069467][ T144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.071139][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.132023][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.232724][ T4315] loop0: detected capacity change from 0 to 1024 [ 79.283531][ T4262] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.350600][ T4317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.381159][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.399411][ T4315] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 79.411582][ T4315] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 79.434383][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.469071][ T4315] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 79.491038][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.505488][ T4315] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 79.562866][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.630876][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.736532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.754833][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.755726][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.755752][ T4262] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.755804][ T4262] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.755828][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.807293][ T4324] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 79.819832][ T4262] usb 5-1: config 0 descriptor?? [ 80.438512][ T4262] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 80.471540][ T4336] loop0: detected capacity change from 0 to 512 [ 80.492628][ T4262] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 80.518272][ T4339] loop1: detected capacity change from 0 to 1764 [ 80.539466][ T4340] loop2: detected capacity change from 0 to 1024 [ 80.599000][ T4336] EXT4-fs (loop0): Ignoring removed nobh option [ 80.639744][ T4336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.705824][ T4340] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 80.790995][ T4336] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.11: corrupted inode contents [ 80.811861][ T4175] usb 5-1: USB disconnect, device number 2 [ 80.826482][ T4336] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.11: mark_inode_dirty error [ 80.926655][ T4348] fido_id[4348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 80.959643][ T4336] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.11: corrupted inode contents [ 81.039020][ T4336] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.11: mark_inode_dirty error [ 81.062327][ T4336] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.11: corrupted inode contents [ 81.088114][ T4336] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 81.114264][ T4336] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.11: corrupted inode contents [ 81.136850][ T4336] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.11: mark_inode_dirty error [ 81.156726][ T4336] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 81.175648][ T4189] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.186372][ T4336] EXT4-fs (loop0): 1 truncate cleaned up [ 81.194148][ T4336] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,nobh,,errors=continue. Quota mode: writeback. [ 81.208380][ T4336] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.277880][ T4336] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #12: block 13: comm syz.0.11: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 81.426962][ T4353] loop2: detected capacity change from 0 to 128 [ 81.465722][ T4353] EXT4-fs (loop2): Ignoring removed nobh option [ 81.488799][ T4353] EXT4-fs (loop2): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 81.543492][ T4189] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.561467][ T4189] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.587974][ T4358] loop0: detected capacity change from 0 to 1024 [ 81.713545][ T4189] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 81.748168][ T4189] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 81.805655][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.816954][ T4189] usb 2-1: Product: syz [ 81.821164][ T4189] usb 2-1: Manufacturer: syz [ 82.645736][ T1107] Bluetooth: hci4: command 0x0405 tx timeout [ 82.995430][ T4189] hub 2-1:4.0: USB hub found [ 83.194660][ T4358] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.213353][ T4189] hub 2-1:4.0: 6 ports detected [ 83.233461][ T4189] hub 2-1:4.0: insufficient power available to use all downstream ports [ 83.276709][ T4372] loop3: detected capacity change from 0 to 1024 [ 83.283343][ T4297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.429640][ T4374] 9pnet: Could not find request transport: fd0x0000000000000003 [ 83.475968][ T4372] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 83.488761][ T4372] hfsplus: xattr searching failed [ 83.517627][ T4372] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 83.531552][ T4372] hfsplus: xattr search failed [ 83.540599][ T4297] usb 5-1: Using ep0 maxpacket: 8 [ 83.577033][ T1167] hfsplus: b-tree write err: -5, ino 4 [ 83.613793][ T4376] loop2: detected capacity change from 0 to 256 [ 83.643501][ T4189] hub 2-1:4.0: set hub depth failed [ 83.663627][ T4297] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.672415][ T4297] usb 5-1: config 179 has no interface number 0 [ 83.673779][ T4376] ======================================================= [ 83.673779][ T4376] WARNING: The mand mount option has been deprecated and [ 83.673779][ T4376] and is ignored by this kernel. Remove the mand [ 83.673779][ T4376] option from the mount to silence this warning. [ 83.673779][ T4376] ======================================================= [ 83.702868][ T4297] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.728391][ T4297] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.741519][ T4297] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.753687][ T4297] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 83.765847][ T4297] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.788366][ T4297] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.808461][ T4189] usb 2-1: USB disconnect, device number 2 [ 83.820505][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.893538][ T4367] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.769995][ T4386] loop3: detected capacity change from 0 to 1024 [ 84.820329][ T4297] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 84.842074][ T4386] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.905207][ T4386] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000008,nodelalloc,errors=remount-ro,journal_dev=0x000000000b9c56d7,auto_da_alloc=0x0000000000000343,grpid,barrier=0x00. Quota mode: none. [ 85.010326][ T4367] udc-core: couldn't find an available UDC or it's busy [ 85.028563][ T4367] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.143547][ T4262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.198812][ T4396] loop2: detected capacity change from 0 to 512 [ 85.201933][ T4401] loop3: detected capacity change from 0 to 512 [ 85.225038][ T4396] EXT4-fs (loop2): Unrecognized mount option "defcontext=unconfined_u" or missing value [ 85.249914][ T13] usb 5-1: USB disconnect, device number 3 [ 85.255948][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.256090][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.300845][ T4401] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 85.389567][ T4401] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.413715][ T4262] usb 2-1: Using ep0 maxpacket: 32 [ 85.521911][ T4401] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.27: corrupted inode contents [ 85.546861][ T4401] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz.3.27: mark_inode_dirty error [ 85.563376][ T4262] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 85.578937][ T4401] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.27: corrupted inode contents [ 85.593724][ T4401] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.27: mark_inode_dirty error [ 85.743515][ T4262] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 85.763345][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.813286][ T4262] usb 2-1: Product: syz [ 85.817520][ T4262] usb 2-1: Manufacturer: syz [ 85.822169][ T4262] usb 2-1: SerialNumber: syz [ 85.901887][ T4262] usb 2-1: config 0 descriptor?? [ 85.933768][ T4388] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.957054][ T4406] loop3: detected capacity change from 0 to 512 [ 85.966625][ T4409] loop4: detected capacity change from 0 to 2048 [ 85.976381][ T4413] loop0: detected capacity change from 0 to 2048 [ 86.040082][ T4406] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 86.048896][ T4409] loop4: p1 < > p3 [ 86.057120][ T4406] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.068086][ T4409] loop4: p3 size 134217728 extends beyond EOD, truncated [ 86.081070][ T4413] EXT4-fs (loop0): Ignoring removed nobh option [ 86.113000][ T4406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 86.129447][ T4406] System zones: 1-12 [ 86.140650][ T4406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.204702][ T3562] loop4: p1 < > p3 [ 86.222356][ T4406] EXT4-fs (loop3): 1 truncate cleaned up [ 86.237869][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,quota,grpjquota=,noquota,,errors=continue. Quota mode: none. [ 86.272176][ T3562] loop4: p3 size 134217728 extends beyond EOD, truncated [ 86.301180][ T4406] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,debug,quota,,errors=continue. Quota mode: writeback. [ 86.326883][ T4413] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.370993][ T4304] usb 2-1: USB disconnect, device number 3 [ 86.473980][ T4421] syz.2.31[4421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.474866][ T4421] syz.2.31[4421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.751357][ T7] cfg80211: failed to load regulatory.db [ 87.553139][ C1] sched: RT throttling activated [ 88.812372][ T1107] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.913775][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.021785][ T4433] loop3: detected capacity change from 0 to 128 [ 89.956910][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 89.975916][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 90.033357][ T4433] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.053107][ T4433] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.108399][ T26] audit: type=1800 audit(1751732843.548:2): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.33" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 91.558232][ T4464] loop0: detected capacity change from 0 to 512 [ 91.608514][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 91.643929][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 91.813256][ T4464] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 92.690959][ T4464] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 92.751257][ T4464] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 92.817867][ T4464] EXT4-fs (loop0): 1 truncate cleaned up [ 92.849526][ T4464] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback. [ 93.085050][ T4491] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.303686][ T7] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 94.013631][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.054227][ T7] usb 5-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 94.113830][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.179659][ T7] usb 5-1: config 0 descriptor?? [ 94.200489][ T4506] loop2: detected capacity change from 0 to 512 [ 94.228697][ T4506] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 94.248189][ T4506] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 94.703801][ T7] wacom 0003:056A:0031.0002: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.4-1/input0 [ 94.908838][ T21] usb 5-1: USB disconnect, device number 5 [ 94.921989][ T4524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.247744][ T4506] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 95.272605][ T4506] ip6erspan0: linktype set to 768 [ 95.384390][ T4545] loop3: detected capacity change from 0 to 1024 [ 95.438344][ T4545] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 95.545828][ T4545] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 95.705438][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.803282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 95.816692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 95.825932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.852481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.866477][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 95.904372][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 95.918453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.930240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.940857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.952599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 96.601750][ T4560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.883296][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 96.960557][ T4567] loop4: detected capacity change from 0 to 764 [ 97.028002][ T4567] Symlink component flag not implemented [ 97.036466][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.063249][ T7] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 97.072795][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.090964][ T4567] Symlink component flag not implemented (116) [ 97.147289][ T7] usb 1-1: config 0 descriptor?? [ 97.157836][ T4572] loop2: detected capacity change from 0 to 1024 [ 97.227052][ T4572] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 97.253328][ T4572] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 97.283420][ T4572] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 97.311192][ T4572] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 97.426608][ T1107] Bluetooth: hci4: command 0x0405 tx timeout [ 97.654833][ T4580] loop3: detected capacity change from 0 to 1024 [ 97.883254][ T4580] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.210217][ T7] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 98.534302][ T7] usb 1-1: USB disconnect, device number 2 [ 98.776576][ T4585] loop4: detected capacity change from 0 to 16 [ 98.884601][ T4585] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.897850][ T4588] loop3: detected capacity change from 0 to 512 [ 99.019474][ T4588] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.063379][ T4588] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 99.166512][ T4588] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 99.193928][ T4588] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 99.262701][ T4590] fido_id[4590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 99.308327][ T4588] System zones: 0-2, 18-18, 34-35 [ 99.433754][ T4596] loop4: detected capacity change from 0 to 256 [ 99.441745][ T4588] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.578659][ T4593] loop0: detected capacity change from 0 to 8192 [ 99.681392][ T4602] loop2: detected capacity change from 0 to 8 [ 100.454953][ T4602] SQUASHFS error: zstd decompression error: 2 [ 100.461765][ T4602] SQUASHFS error: zstd decompression failed, data probably corrupt [ 100.552732][ T4602] SQUASHFS error: Failed to read block 0x62b: -5 [ 100.563504][ T4602] SQUASHFS error: Unable to read metadata cache entry [629] [ 100.605301][ T4610] loop4: detected capacity change from 0 to 256 [ 100.611535][ T4602] SQUASHFS error: Unable to read directory block [629:ff26] [ 101.954385][ T4634] loop3: detected capacity change from 0 to 256 [ 102.044076][ T4634] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.211310][ T4636] loop0: detected capacity change from 0 to 128 [ 102.219031][ T4634] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.301901][ T4638] loop2: detected capacity change from 0 to 256 [ 102.362554][ T4636] FAT-fs (loop0): bogus sectors per cluster 0 [ 102.382937][ T4636] FAT-fs (loop0): Can't find a valid FAT filesystem [ 103.500316][ T4647] loop0: detected capacity change from 0 to 128 [ 103.585978][ T4647] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.625672][ T4647] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.773955][ T2301] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.896642][ T4655] loop3: detected capacity change from 0 to 128 [ 104.174998][ T2301] usb 5-1: Using ep0 maxpacket: 16 [ 107.483306][ T2301] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 107.513279][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.521468][ T2301] usb 5-1: Product: syz [ 107.567032][ T2301] usb 5-1: config 0 descriptor?? [ 107.603413][ T2301] usb 5-1: can't set config #0, error -71 [ 107.627520][ T4680] capability: warning: `syz.2.109' uses deprecated v2 capabilities in a way that may be insecure [ 107.664337][ T2301] usb 5-1: USB disconnect, device number 6 [ 108.617344][ T4692] loop0: detected capacity change from 0 to 256 [ 110.460593][ T4697] loop4: detected capacity change from 0 to 512 [ 112.530853][ T4697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.589777][ T4697] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.824282][ T4725] loop2: detected capacity change from 0 to 256 [ 112.993076][ T4725] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 113.072847][ T4734] loop4: detected capacity change from 0 to 1024 [ 113.183948][ T4741] loop0: detected capacity change from 0 to 128 [ 113.339347][ T4741] loop0: detected capacity change from 128 to 127 [ 114.974480][ T4185] FAT-fs (loop0): error, invalid access to FAT (entry 0x590d5576) [ 115.143694][ T2301] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.162752][ T4185] FAT-fs (loop0): Filesystem has been set read-only [ 115.503354][ T2301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.550555][ T2301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.383294][ T2301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.403206][ T2301] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.412475][ T2301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.465020][ T2301] usb 5-1: config 0 descriptor?? [ 116.496028][ T2301] usb 5-1: can't set config #0, error -71 [ 116.520146][ T2301] usb 5-1: USB disconnect, device number 7 [ 116.797749][ T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 116.898586][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.178058][ T21] usb 3-1: config 9 has an invalid interface number: 123 but max is 0 [ 117.196714][ T21] usb 3-1: config 9 has no interface number 0 [ 117.227186][ T21] usb 3-1: config 9 interface 123 has no altsetting 0 [ 117.283617][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.322456][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.349030][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.368089][ T1107] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.382055][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.411554][ T1107] usb 4-1: config 0 descriptor?? [ 117.417224][ T21] usb 3-1: New USB device found, idVendor=9ad7, idProduct=444c, bcdDevice=68.e4 [ 117.953184][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.961321][ T21] usb 3-1: Product: syz [ 117.967350][ T21] usb 3-1: Manufacturer: syz [ 117.972011][ T21] usb 3-1: SerialNumber: syz [ 118.305042][ T21] usb-storage 3-1:9.123: USB Mass Storage device detected [ 118.309333][ T4783] loop4: detected capacity change from 0 to 512 [ 118.324617][ T4773] chnl_net:caif_netlink_parms(): no params data found [ 118.427443][ T4783] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.144: inline data xattr refers to an external xattr inode [ 118.449884][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.461257][ T21] usb 3-1: USB disconnect, device number 2 [ 118.470089][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.481380][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.484430][ T4783] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.144: couldn't read orphan inode 12 (err -117) [ 118.491401][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.508260][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.515794][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.529137][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.531948][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.537507][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.556579][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.564608][ T4783] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.567940][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.583076][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.593237][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.600680][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.615543][ T4773] device bridge_slave_0 entered promiscuous mode [ 118.631566][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 118.653822][ T1107] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 118.662266][ T4783] EXT4-fs (loop4): shut down requested (1) [ 118.667236][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.679339][ T1107] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 118.708350][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.751467][ T4773] device bridge_slave_1 entered promiscuous mode [ 118.776870][ T1107] usb 4-1: USB disconnect, device number 2 [ 118.888127][ T4796] fido_id[4796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 118.928972][ T4799] loop4: detected capacity change from 0 to 512 [ 118.951127][ T4773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.984352][ T4773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.002564][ T4799] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 119.082881][ T4799] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 119.099093][ T4801] loop2: detected capacity change from 0 to 8192 [ 119.102894][ T4799] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 119.146841][ T4799] EXT4-fs (loop4): 1 truncate cleaned up [ 119.158583][ T4799] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback. [ 119.174664][ T4773] team0: Port device team_slave_0 added [ 119.202665][ T4773] team0: Port device team_slave_1 added [ 119.246837][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.254623][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.371399][ T4812] loop3: detected capacity change from 0 to 1024 [ 119.447311][ T4773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.460963][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.468041][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.494013][ T4773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.782480][ T4812] hfsplus: request for non-existent node 16777216 in B*Tree [ 119.875654][ T4812] hfsplus: request for non-existent node 16777216 in B*Tree [ 119.941173][ T4773] device hsr_slave_0 entered promiscuous mode [ 120.000356][ T4773] device hsr_slave_1 entered promiscuous mode [ 120.007830][ T4812] hfsplus: request for non-existent node 16777216 in B*Tree [ 120.038198][ T4773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.095290][ T4189] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.105495][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 120.113614][ T4812] hfsplus: request for non-existent node 16777216 in B*Tree [ 120.121063][ T4812] hfsplus: request for non-existent node 16777216 in B*Tree [ 120.145411][ T4773] Cannot create hsr debugfs directory [ 120.156058][ T4812] hfsplus: request for non-existent node 16777216 in B*Tree [ 120.252408][ T26] audit: type=1800 audit(1751732873.688:3): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.152" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 120.252953][ T4817] hfsplus: request for non-existent node 16777216 in B*Tree [ 121.039724][ T4817] hfsplus: request for non-existent node 16777216 in B*Tree [ 121.074538][ T4817] hfsplus: request for non-existent node 16777216 in B*Tree [ 121.122344][ T4817] hfsplus: request for non-existent node 16777216 in B*Tree [ 121.173299][ T4189] usb 3-1: Using ep0 maxpacket: 16 [ 121.210985][ T4773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.246686][ T4773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.274337][ T4773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.278479][ T3063] hfsplus: request for non-existent node 16777216 in B*Tree [ 121.293892][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.308055][ T4773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.311584][ T3063] hfsplus: request for non-existent node 16777216 in B*Tree [ 121.323163][ T4189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.337336][ T4189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.358169][ T4189] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.377283][ T4189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.424543][ T4189] usb 3-1: config 0 descriptor?? [ 121.555569][ T4773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.569846][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.578409][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.591917][ T4773] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.602789][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.613874][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.622595][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.629773][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.638421][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.658781][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.667903][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.676625][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.683755][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.691752][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.713948][ T4262] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.726670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.742001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.763078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.777416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.799924][ T4773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.811190][ T4773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.831478][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.844043][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.853702][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.862601][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.880824][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.891501][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.909407][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.955501][ T4262] usb 4-1: Using ep0 maxpacket: 16 [ 121.972156][ T4175] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.982335][ T4189] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 121.991023][ T4189] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 121.998669][ T4189] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 122.006542][ T4189] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 122.013873][ T4189] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 122.022417][ T4189] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 122.030292][ T4189] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 122.073897][ T4262] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 122.109289][ T4262] usb 4-1: config 0 has no interface number 0 [ 122.206951][ T4262] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 122.317229][ T4262] usb 4-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 122.436076][ T4262] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 122.693612][ T4262] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 122.733538][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.742105][ T4262] usb 4-1: Product: syz [ 122.782334][ T4854] loop2: detected capacity change from 0 to 512 [ 122.783655][ T4189] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 122.803096][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 122.803694][ T4262] usb 4-1: Manufacturer: syz [ 122.810103][ T4189] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 122.826530][ T4189] microsoft 0003:045E:07DA.0005: no inputs found [ 122.833196][ T4189] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 122.853781][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.859140][ T4189] usb 3-1: USB disconnect, device number 3 [ 122.864646][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.875865][ T4262] usb 4-1: SerialNumber: syz [ 122.885342][ T4262] usb 4-1: config 0 descriptor?? [ 122.891612][ T4773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.899079][ T4175] usb 5-1: Using ep0 maxpacket: 32 [ 122.903812][ T4834] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.914135][ T4834] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.928069][ T4854] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 122.974108][ T4854] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 122.982318][ T4854] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 122.995478][ T4854] EXT4-fs (loop2): 1 truncate cleaned up [ 123.011693][ T4854] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback. [ 123.046400][ T4175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.073310][ T4175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.100331][ T4860] fido_id[4860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 123.115265][ T4175] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.124519][ T4175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.206940][ T4175] usb 5-1: config 0 descriptor?? [ 123.259101][ T4175] hub 5-1:0.0: USB hub found [ 123.360122][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.397294][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.748818][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.764208][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.792531][ T4773] device veth0_vlan entered promiscuous mode [ 123.811125][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.829732][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.852614][ T4773] device veth1_vlan entered promiscuous mode [ 123.868076][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.917881][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.933024][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.955221][ T4773] device veth0_macvtap entered promiscuous mode [ 123.976269][ T4773] device veth1_macvtap entered promiscuous mode [ 124.007209][ T4175] hub 5-1:0.0: 1 port detected [ 124.027312][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.038198][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.048353][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.059259][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.070991][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.081484][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.091617][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.119812][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.129782][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.138364][ T4874] loop2: detected capacity change from 0 to 1024 [ 124.140274][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.161924][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.175733][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.191041][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.203053][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.212424][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.230635][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.242350][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.252725][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.263758][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.277608][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.300276][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.310613][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.321753][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.342566][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.355263][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.373438][ T9] hfsplus: b-tree write err: -5, ino 4 [ 124.380515][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.391609][ T4773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.402748][ T4773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.411563][ T4773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.420442][ T4773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.432811][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.451094][ T4189] usb 4-1: USB disconnect, device number 3 [ 124.485769][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.523694][ T4175] hub 5-1:0.0: activate --> -90 [ 124.636254][ T4878] loop2: detected capacity change from 0 to 2048 [ 124.761499][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.259661][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 126.313527][ T21] usb 5-1: USB disconnect, device number 8 [ 126.338443][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.350350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.359769][ T4878] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.416122][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.427522][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.439869][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.864561][ T4900] loop3: detected capacity change from 0 to 512 [ 127.100729][ T4900] EXT4-fs (loop3): Ignoring removed nobh option [ 127.348218][ T4900] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 127.407914][ T4900] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 127.444000][ T4900] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.174: Corrupt directory, running e2fsck is recommended [ 127.461685][ T4900] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 127.492473][ T4900] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.174: corrupted in-inode xattr [ 127.550882][ T4900] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.174: couldn't read orphan inode 15 (err -117) [ 127.580383][ T4900] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.journal_checksum,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 127.810687][ T4900] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 127.824185][ T4900] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 127.835759][ T4900] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.174: Corrupt directory, running e2fsck is recommended [ 127.851597][ T4921] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 127.894538][ T4921] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 127.969867][ T4921] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.174: Corrupt directory, running e2fsck is recommended [ 128.296100][ T4900] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.417032][ T4900] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 128.591937][ T4921] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.618271][ T4900] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.174: Corrupt directory, running e2fsck is recommended [ 128.696838][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 128.747239][ T4928] loop2: detected capacity change from 0 to 128 [ 128.861126][ T4928] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 129.017571][ T4938] loop4: detected capacity change from 0 to 128 [ 129.078569][ T4940] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 87) has entry at pos 0 with incorrect tag 10a [ 129.166117][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.198309][ T4938] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.299752][ T26] audit: type=1800 audit(1751732882.738:4): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.181" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 130.377250][ T4959] loop5: detected capacity change from 0 to 1024 [ 130.460003][ T4962] loop3: detected capacity change from 0 to 16 [ 131.283244][ T4962] erofs: Bad value for 'cache_strategy' [ 131.749117][ T4975] loop5: detected capacity change from 0 to 1024 [ 131.977259][ T4975] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 131.993798][ T4975] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 132.013585][ T4975] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 132.179250][ T4975] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 132.793199][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.816989][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.825848][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.835616][ T4985] loop3: detected capacity change from 0 to 128 [ 133.028676][ T4985] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.074925][ T4985] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.154064][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.222495][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 133.396975][ T26] audit: type=1800 audit(1751732886.838:5): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.202" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 133.551884][ T4992] loop5: detected capacity change from 0 to 128 [ 133.583393][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.613833][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.868264][ T4992] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 134.079010][ T21] usb 5-1: Product: syz [ 134.083456][ T21] usb 5-1: Manufacturer: syz [ 134.088085][ T21] usb 5-1: SerialNumber: syz [ 134.144620][ T21] usb 5-1: selecting invalid altsetting 1 [ 134.363589][ T21] cdc_ncm 5-1:1.0: bind() failure [ 134.385785][ T21] cdc_ncm 5-1:1.1: skipping garbage [ 134.393376][ T21] cdc_ncm 5-1:1.1: invalid descriptor buffer length [ 134.400015][ T21] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 134.448671][ T21] cdc_ncm 5-1:1.1: bind() failure [ 134.489976][ T21] usb 5-1: USB disconnect, device number 9 [ 134.707638][ T5012] loop3: detected capacity change from 0 to 1024 [ 135.342710][ T5016] process 'syz.3.209' launched './file2' with NULL argv: empty string added [ 135.941309][ T5023] loop5: detected capacity change from 0 to 512 [ 136.100143][ T5026] loop3: detected capacity change from 0 to 1024 [ 136.233422][ T5023] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 136.288076][ T5023] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.324603][ T5026] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 136.354900][ T5026] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 136.403395][ T5026] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 136.423971][ T5026] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 136.957943][ T5023] EXT4-fs error (device loop5): ext4_dx_csum_verify:502: inode #2: comm syz.5.212: dir seems corrupt? Run e2fsck -D. [ 136.962783][ T4350] udevd[4350]: incorrect jbd checksum on /dev/loop5 [ 137.000998][ T5023] EXT4-fs (loop5): Remounting filesystem read-only [ 137.063616][ T5023] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.212: Directory index failed checksum [ 137.173619][ T5023] EXT4-fs (loop5): Remounting filesystem read-only [ 137.481882][ T5042] fuse: Unknown parameter '0x0000000000000009' [ 138.804116][ T5068] loop3: detected capacity change from 0 to 1024 [ 139.052044][ T5068] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 139.302508][ T5068] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 139.678575][ T5068] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 139.754436][ T5068] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 140.097712][ T5094] af_packet: tpacket_rcv: packet too big, clamped from 7 to 4294967272. macoff=96 [ 140.294575][ T5098] loop5: detected capacity change from 0 to 512 [ 140.445872][ T5098] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.465762][ T5098] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.721998][ T5122] loop2: detected capacity change from 0 to 1024 [ 141.812488][ T5122] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 141.857061][ T5122] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 141.927896][ T5122] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 141.971062][ T5122] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 143.311358][ T5133] loop3: detected capacity change from 0 to 1024 [ 143.344150][ T5137] loop2: detected capacity change from 0 to 256 [ 143.386907][ T5133] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.247: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 143.540806][ T5133] EXT4-fs error (device loop3): ext4_quota_enable:6418: comm syz.3.247: Bad quota inode: 3, type: 0 [ 143.595914][ T5133] EXT4-fs warning (device loop3): ext4_enable_quotas:6459: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 143.666837][ T5133] EXT4-fs (loop3): mount failed [ 143.684816][ T5143] loop2: detected capacity change from 0 to 512 [ 143.821452][ T5143] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.251: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 143.949642][ T5153] loop5: detected capacity change from 0 to 1024 [ 144.050659][ T5143] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.251: couldn't read orphan inode 16 (err -117) [ 144.102073][ T5143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.119316][ T5143] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.142904][ T5153] EXT4-fs (loop5): Ignoring removed orlov option [ 144.230472][ T5153] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 145.655729][ T5177] loop4: detected capacity change from 0 to 128 [ 145.866395][ T5182] loop3: detected capacity change from 0 to 256 [ 145.898169][ T5177] EXT4-fs (loop4): Ignoring removed nobh option [ 145.918626][ T5177] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 145.954858][ T5181] loop5: detected capacity change from 0 to 1024 [ 145.966600][ T5182] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 145.992434][ T5181] EXT4-fs (loop5): Ignoring removed nobh option [ 145.999003][ T5181] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.029374][ T5177] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.050181][ T5181] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 146.134350][ T26] audit: type=1800 audit(1751732899.578:6): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.263" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 146.316875][ T5189] loop3: detected capacity change from 0 to 256 [ 146.343568][ T5189] exfat: Unknown parameter 'ÿÿÿÿ0x000000000000000300000000000000000000' [ 148.609565][ T5215] loop5: detected capacity change from 0 to 512 [ 148.626133][ T5216] loop2: detected capacity change from 0 to 512 [ 148.707479][ T5216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.769582][ T5216] EXT4-fs (loop2): 1 truncate cleaned up [ 148.783341][ T5216] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.817171][ T5216] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #17: comm syz.2.276: Siphash requires key [ 148.844096][ T5215] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.887113][ T5215] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.965784][ T5215] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 149.028656][ T5227] loop4: detected capacity change from 0 to 1024 [ 149.089264][ T5234] loop2: detected capacity change from 0 to 1024 [ 149.287550][ T5234] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 149.296208][ T5227] EXT4-fs (loop4): inline encryption not supported [ 149.307628][ T5227] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.349080][ T5234] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 149.403286][ T5234] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 149.439961][ T5234] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 149.466026][ T5227] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 150.142647][ T5249] loop2: detected capacity change from 0 to 512 [ 150.247592][ T5249] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.362990][ T5249] EXT4-fs (loop2): 1 truncate cleaned up [ 150.373820][ T5260] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.392667][ T5249] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,inode_readahead_blks=0x0000000000000040,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 151.638871][ T5285] loop4: detected capacity change from 0 to 8 [ 151.659849][ T5285] squashfs: Unknown parameter '€' [ 151.995209][ T5293] loop2: detected capacity change from 0 to 1024 [ 152.048887][ T5293] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 152.089996][ T5293] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 152.111514][ T5293] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 152.801563][ T5293] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 152.943320][ T4297] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 153.203271][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 154.357818][ T5325] loop5: detected capacity change from 0 to 16 [ 154.439170][ T4297] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.451525][ T4297] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 154.461485][ T4297] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 154.465523][ T5329] loop3: detected capacity change from 0 to 1024 [ 154.471314][ T4297] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 154.499562][ T5325] erofs: (device loop5): mounted with root inode @ nid 36. [ 154.543339][ T4297] usb 5-1: string descriptor 0 read error: -71 [ 154.553034][ T4297] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.631500][ T5325] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 154.666554][ T4201] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 154.699889][ T5325] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 154.727162][ T26] audit: type=1800 audit(1751732908.168:7): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.307" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 154.855616][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.210132][ T5325] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 155.239135][ T5325] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 155.320524][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 155.593526][ T4297] usb 5-1: can't set config #1, error -71 [ 155.611135][ T4297] usb 5-1: USB disconnect, device number 10 [ 156.655024][ T5356] loop3: detected capacity change from 0 to 16 [ 156.720791][ T5356] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.382807][ T5370] loop4: detected capacity change from 0 to 512 [ 158.456412][ T5370] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 158.639883][ T5370] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 158.721809][ T5370] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 158.778015][ T5370] EXT4-fs (loop4): 1 truncate cleaned up [ 158.811176][ T5370] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback. [ 158.847203][ T5375] loop5: detected capacity change from 0 to 2048 [ 158.857605][ T5379] loop3: detected capacity change from 0 to 1024 [ 158.967130][ T5379] EXT4-fs (loop3): Ignoring removed nobh option [ 159.033258][ T5375] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.036805][ T5379] EXT4-fs (loop3): Ignoring removed bh option [ 159.050782][ T5379] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.406798][ T5379] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nojournal_checksum,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 162.399378][ T4246] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.644347][ T4248] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.083504][ T4248] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.243591][ T4246] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 163.280197][ T4246] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 163.333309][ T4248] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 163.352375][ T4248] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 163.673682][ T4248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.746835][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.911724][ T4248] usb 5-1: Product: syz [ 164.083231][ T4248] usb 5-1: Manufacturer: syz [ 164.093378][ T4248] usb 5-1: SerialNumber: syz [ 164.313265][ T4246] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 164.322378][ T4246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.364036][ T4246] usb 3-1: config 0 descriptor?? [ 164.383297][ T4246] usb 3-1: can't set config #0, error -71 [ 164.429896][ T4248] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 164.439671][ T4246] usb 3-1: USB disconnect, device number 4 [ 164.447219][ T4248] cdc_ncm 5-1:1.0: bind() failure [ 164.466514][ T4248] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 164.503574][ T4248] cdc_ncm 5-1:1.1: bind() failure [ 164.544676][ T4248] usb 5-1: USB disconnect, device number 11 [ 164.587547][ T5453] loop5: detected capacity change from 0 to 1024 [ 165.094846][ T5453] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.102574][ T5474] loop3: detected capacity change from 0 to 512 [ 165.142276][ T5474] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 166.871462][ T5474] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 166.933554][ T5474] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 166.957138][ T5474] EXT4-fs (loop3): 1 truncate cleaned up [ 166.966197][ T5488] loop4: detected capacity change from 0 to 256 [ 166.969806][ T5474] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback. [ 167.038424][ T5488] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.312434][ T5524] loop4: detected capacity change from 0 to 256 [ 169.370575][ T5524] exfat: Unknown parameter './file0' [ 170.559209][ T5534] loop4: detected capacity change from 0 to 1024 [ 170.585425][ T5542] loop3: detected capacity change from 0 to 1024 [ 170.662263][ T26] audit: type=1800 audit(1751732924.098:8): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.376" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 170.687331][ T5542] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.708950][ T5542] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.730502][ T5550] loop4: detected capacity change from 0 to 1024 [ 171.818211][ T5550] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 172.061888][ T5550] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 173.085181][ T5573] loop3: detected capacity change from 0 to 1024 [ 173.160725][ T5573] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 173.191530][ T5573] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 173.245210][ T5573] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 173.255811][ T5573] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 174.583439][ T4248] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.873632][ T5589] loop5: detected capacity change from 0 to 16 [ 174.944500][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 175.103459][ T5589] erofs: (device loop5): mounted with root inode @ nid 36. [ 175.124702][ T4248] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.182726][ T4248] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.723865][ T4248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 175.806530][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.828481][ T4248] usb 3-1: SerialNumber: syz [ 175.874652][ T4248] cdc_ether 3-1:1.0: skipping garbage [ 176.019442][ T4248] usb 3-1: bad CDC descriptors [ 176.025647][ T4248] usb-storage 3-1:1.0: USB Mass Storage device detected [ 176.042310][ T4248] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 176.332131][ T4248] usb 3-1: USB disconnect, device number 5 [ 177.034747][ T5615] loop5: detected capacity change from 0 to 1024 [ 177.584805][ T5615] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,norecovery,nolazytime,abort,jqfmt=vfsold,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 177.904746][ T5615] EXT4-fs (loop5): shut down requested (0) [ 177.920445][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.174504][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 178.313596][ T7] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.325465][ T7] usb 4-1: config 179 has no interface number 0 [ 178.348829][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 178.389137][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 178.411102][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.427094][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 178.596484][ T7] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.610277][ T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 178.619408][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.653524][ T5612] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.674171][ T4304] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 178.848318][ T5651] loop4: detected capacity change from 0 to 512 [ 179.881831][ T5651] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.892438][ T4246] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 179.943439][ T4304] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 179.961364][ T4304] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 179.983533][ T5651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.014040][ T4304] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.029487][ T5651] EXT4-fs (loop4): 1 truncate cleaned up [ 180.062116][ T5612] udc-core: couldn't find an available UDC or it's busy [ 180.073404][ T5612] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.081151][ T4304] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 180.083305][ T5651] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 180.096271][ T4304] usb 6-1: config 0 has no interface number 0 [ 180.115881][ T4304] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 180.127099][ T4304] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 180.137102][ T4304] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.147055][ T4304] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.160177][ T4304] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 180.169542][ T4304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.204772][ T4304] usb 6-1: config 0 descriptor?? [ 180.246393][ T4304] gspca_main: spca561-2.14.0 probing abcd:cdee [ 180.331211][ T4246] usb 4-1: USB disconnect, device number 4 [ 180.343181][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 180.401991][ T5651] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 180.419947][ T5651] ------------[ cut here ]------------ [ 180.425634][ T5651] WARNING: CPU: 1 PID: 5651 at fs/crypto/fname.c:543 fscrypt_fname_siphash+0xa4/0xe0 [ 180.435227][ T5651] Modules linked in: [ 180.439164][ T5651] CPU: 1 PID: 5651 Comm: syz.4.411 Not tainted 5.15.186-syzkaller #0 [ 180.447818][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.459683][ T5651] RIP: 0010:fscrypt_fname_siphash+0xa4/0xe0 [ 180.466214][ T5651] Code: 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 75 32 8b 33 49 83 c6 40 4c 89 f2 5b 41 5c 41 5e 41 5f e9 61 f6 1f 02 e8 fc ad 99 ff <0f> 0b eb b3 44 89 f9 80 e1 07 38 c1 7c 9e 4c 89 ff e8 b6 26 df ff [ 180.486345][ T5651] RSP: 0018:ffffc900039b7578 EFLAGS: 00010283 [ 180.493028][ T5651] RAX: ffffffff81de1514 RBX: ffffc900039b7660 RCX: 0000000000080000 [ 180.501678][ T5651] RDX: ffffc9000e0b9000 RSI: 00000000000000cd RDI: 00000000000000ce [ 180.511594][ T5651] RBP: ffffc900039b76d0 R08: ffff888017bc1dc0 R09: 0000000000000007 [ 180.521272][ T5651] R10: 0000000000000006 R11: 0000000000000002 R12: dffffc0000000000 [ 180.529675][ T4304] spca561: probe of 6-1:0.156 failed with error -22 [ 180.536480][ T5651] R13: 000000008d4c4d91 R14: ffff88805f31a000 R15: ffff88805f31a050 [ 180.537650][ T4304] usb 6-1: MIDIStreaming interface descriptor not found [ 180.552509][ T5651] FS: 00007f98de0d06c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 180.562051][ T5651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.574625][ T4304] usb 6-1: USB disconnect, device number 2 [ 180.583534][ T5651] CR2: 00007f3162d2b000 CR3: 000000005ed87000 CR4: 00000000003506f0 [ 180.634714][ T5651] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.642751][ T5651] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.654897][ T5651] Call Trace: [ 180.658239][ T5651] [ 180.661194][ T5651] __ext4fs_dirhash+0x8bc/0xf40 [ 180.666572][ T5651] ? ext4fs_dirhash+0x2d0/0x2d0 [ 180.671497][ T5651] ext4fs_dirhash+0x150/0x2d0 [ 180.692026][ T5651] ? ext4_sync_file+0xae0/0xae0 [ 180.710642][ T5651] htree_dirblock_to_tree+0x6c9/0xe70 [ 180.716486][ T5651] ? unwind_get_return_address+0x49/0x80 [ 180.722176][ T5651] ? stack_trace_save+0xe0/0xe0 [ 180.728932][ T5651] ? ext4_htree_fill_tree+0x10e0/0x10e0 [ 180.735368][ T5651] ext4_htree_fill_tree+0x5d4/0x10e0 [ 180.740729][ T5651] ? ext4_handle_dirty_dirblock+0x610/0x610 [ 180.746878][ T5651] ext4_readdir+0x2c16/0x3a60 [ 180.751764][ T5651] ? ext4_dir_llseek+0x4b0/0x4b0 [ 180.756807][ T5651] ? __might_sleep+0xf0/0xf0 [ 180.761547][ T5651] ? read_lock_is_recursive+0x10/0x10 [ 180.767331][ T5651] ? mutex_lock_io_nested+0x60/0x60 [ 180.772597][ T5651] ? end_current_label_crit_section+0x14b/0x170 [ 180.779209][ T5651] ? preempt_count_add+0x8d/0x190 [ 180.784523][ T5651] ? down_read_killable+0x1ce/0x340 [ 180.789762][ T5651] ? fsnotify_perm+0x254/0x560 [ 180.795494][ T5651] iterate_dir+0x218/0x560 [ 180.800126][ T5651] ? ext4_dir_llseek+0x4b0/0x4b0 [ 180.805169][ T5651] __se_sys_getdents+0xe5/0x250 [ 180.810162][ T5651] ? __x64_sys_getdents+0x80/0x80 [ 180.815470][ T5651] ? fillonedir+0x4c0/0x4c0 [ 180.820022][ T5651] ? vtime_user_exit+0x2dc/0x400 [ 180.825069][ T5651] ? lockdep_hardirqs_on+0x94/0x140 [ 180.830490][ T5651] do_syscall_64+0x4c/0xa0 [ 180.836654][ T5651] ? clear_bhb_loop+0x30/0x80 [ 180.841383][ T5651] ? clear_bhb_loop+0x30/0x80 [ 180.846308][ T5651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.852415][ T5651] RIP: 0033:0x7f98e0268929 [ 180.856960][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.883835][ T5651] RSP: 002b:00007f98de0d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 180.892335][ T5651] RAX: ffffffffffffffda RBX: 00007f98e048ffa0 RCX: 00007f98e0268929 [ 180.893641][ T4469] udevd[4469]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.911158][ T5651] RDX: 00000000000000f0 RSI: 0000200000001b00 RDI: 0000000000000004 [ 180.953050][ T5651] RBP: 00007f98e02eab39 R08: 0000000000000000 R09: 0000000000000000 [ 180.961309][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.974373][ T5651] R13: 0000000000000000 R14: 00007f98e048ffa0 R15: 00007ffccc42ef78 [ 180.984398][ T5651] [ 180.987632][ T5651] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 180.995023][ T5651] CPU: 0 PID: 5651 Comm: syz.4.411 Not tainted 5.15.186-syzkaller #0 [ 181.003138][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.013222][ T5651] Call Trace: [ 181.016525][ T5651] [ 181.019477][ T5651] dump_stack_lvl+0x168/0x230 [ 181.024177][ T5651] ? show_regs_print_info+0x20/0x20 [ 181.029397][ T5651] ? load_image+0x3b0/0x3b0 [ 181.033934][ T5651] panic+0x2c9/0x7f0 [ 181.037861][ T5651] ? bpf_jit_dump+0xd0/0xd0 [ 181.042423][ T5651] ? fscrypt_fname_siphash+0xa4/0xe0 [ 181.047720][ T5651] __warn+0x248/0x2b0 [ 181.051733][ T5651] ? fscrypt_fname_siphash+0xa4/0xe0 [ 181.057052][ T5651] report_bug+0x1b7/0x2e0 [ 181.061419][ T5651] handle_bug+0x3a/0x70 [ 181.065597][ T5651] exc_invalid_op+0x16/0x40 [ 181.070128][ T5651] asm_exc_invalid_op+0x16/0x20 [ 181.075005][ T5651] RIP: 0010:fscrypt_fname_siphash+0xa4/0xe0 [ 181.080937][ T5651] Code: 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 75 32 8b 33 49 83 c6 40 4c 89 f2 5b 41 5c 41 5e 41 5f e9 61 f6 1f 02 e8 fc ad 99 ff <0f> 0b eb b3 44 89 f9 80 e1 07 38 c1 7c 9e 4c 89 ff e8 b6 26 df ff [ 181.100819][ T5651] RSP: 0018:ffffc900039b7578 EFLAGS: 00010283 [ 181.106933][ T5651] RAX: ffffffff81de1514 RBX: ffffc900039b7660 RCX: 0000000000080000 [ 181.115043][ T5651] RDX: ffffc9000e0b9000 RSI: 00000000000000cd RDI: 00000000000000ce [ 181.123060][ T5651] RBP: ffffc900039b76d0 R08: ffff888017bc1dc0 R09: 0000000000000007 [ 181.131103][ T5651] R10: 0000000000000006 R11: 0000000000000002 R12: dffffc0000000000 [ 181.139097][ T5651] R13: 000000008d4c4d91 R14: ffff88805f31a000 R15: ffff88805f31a050 [ 181.147102][ T5651] ? fscrypt_fname_siphash+0xa4/0xe0 [ 181.152402][ T5651] ? fscrypt_fname_siphash+0xa4/0xe0 [ 181.157704][ T5651] __ext4fs_dirhash+0x8bc/0xf40 [ 181.162596][ T5651] ? ext4fs_dirhash+0x2d0/0x2d0 [ 181.167459][ T5651] ext4fs_dirhash+0x150/0x2d0 [ 181.172275][ T5651] ? ext4_sync_file+0xae0/0xae0 [ 181.177142][ T5651] htree_dirblock_to_tree+0x6c9/0xe70 [ 181.182535][ T5651] ? unwind_get_return_address+0x49/0x80 [ 181.188173][ T5651] ? stack_trace_save+0xe0/0xe0 [ 181.193035][ T5651] ? ext4_htree_fill_tree+0x10e0/0x10e0 [ 181.198604][ T5651] ext4_htree_fill_tree+0x5d4/0x10e0 [ 181.203940][ T5651] ? ext4_handle_dirty_dirblock+0x610/0x610 [ 181.209875][ T5651] ext4_readdir+0x2c16/0x3a60 [ 181.214600][ T5651] ? ext4_dir_llseek+0x4b0/0x4b0 [ 181.219567][ T5651] ? __might_sleep+0xf0/0xf0 [ 181.224169][ T5651] ? read_lock_is_recursive+0x10/0x10 [ 181.229690][ T5651] ? mutex_lock_io_nested+0x60/0x60 [ 181.234932][ T5651] ? end_current_label_crit_section+0x14b/0x170 [ 181.241219][ T5651] ? preempt_count_add+0x8d/0x190 [ 181.246267][ T5651] ? down_read_killable+0x1ce/0x340 [ 181.251498][ T5651] ? fsnotify_perm+0x254/0x560 [ 181.256279][ T5651] iterate_dir+0x218/0x560 [ 181.260717][ T5651] ? ext4_dir_llseek+0x4b0/0x4b0 [ 181.265660][ T5651] __se_sys_getdents+0xe5/0x250 [ 181.270519][ T5651] ? __x64_sys_getdents+0x80/0x80 [ 181.275559][ T5651] ? fillonedir+0x4c0/0x4c0 [ 181.280097][ T5651] ? vtime_user_exit+0x2dc/0x400 [ 181.285058][ T5651] ? lockdep_hardirqs_on+0x94/0x140 [ 181.290315][ T5651] do_syscall_64+0x4c/0xa0 [ 181.294738][ T5651] ? clear_bhb_loop+0x30/0x80 [ 181.299440][ T5651] ? clear_bhb_loop+0x30/0x80 [ 181.304137][ T5651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.310050][ T5651] RIP: 0033:0x7f98e0268929 [ 181.314474][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.334108][ T5651] RSP: 002b:00007f98de0d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 181.342551][ T5651] RAX: ffffffffffffffda RBX: 00007f98e048ffa0 RCX: 00007f98e0268929 [ 181.350533][ T5651] RDX: 00000000000000f0 RSI: 0000200000001b00 RDI: 0000000000000004 [ 181.358516][ T5651] RBP: 00007f98e02eab39 R08: 0000000000000000 R09: 0000000000000000 [ 181.366512][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.374492][ T5651] R13: 0000000000000000 R14: 00007f98e048ffa0 R15: 00007ffccc42ef78 [ 181.382499][ T5651] [ 181.385737][ T5651] Kernel Offset: disabled [ 181.390289][ T5651] Rebooting in 86400 seconds..