last executing test programs: 2m23.788150104s ago: executing program 0 (id=697): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xffd, 0x1003fd, 0x1}, 0x50) 2m23.72255378s ago: executing program 0 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) msgsnd(0x0, &(0x7f0000000300)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2m22.932070448s ago: executing program 0 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m21.910728589s ago: executing program 0 (id=701): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4056, &(0x7f0000000280), 0x1, 0x464, &(0x7f0000000740)="$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") r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff}) copy_file_range(r2, 0x0, r1, 0x0, 0x98, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x1c7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r4, 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0x78) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@errors_remount}, {@discard}]}, 0x1, 0x467, &(0x7f00000004c0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 2m21.181766301s ago: executing program 0 (id=704): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "7b98e86db3dadd9aa66a10d1d80635e303b56127"}, 0x15, 0x2) 2m19.124079394s ago: executing program 0 (id=710): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x38}) 2m18.664877819s ago: executing program 32 (id=710): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x38}) 1m39.884284163s ago: executing program 2 (id=834): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @loopback, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x688, 0xfffffff7, 0x3, 0x40000006}, 0x3c) 1m39.853953916s ago: executing program 2 (id=835): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000070000000000000d00000000000000000000000105006741b75600020000"], &(0x7f0000000000)=""/144, 0x36, 0x90, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) alarm(0x8000000000000001) alarm(0x0) 1m38.79415104s ago: executing program 2 (id=839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000007c0)={0x1}) 1m38.506357748s ago: executing program 2 (id=840): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file7\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfc, 0x2b0, &(0x7f0000000280)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 1m37.736216124s ago: executing program 2 (id=845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1000000}, 0x50) 1m36.444167912s ago: executing program 2 (id=850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2) 1m35.478301627s ago: executing program 33 (id=850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2) 1m16.513253327s ago: executing program 4 (id=914): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000070000000000000d00000000000000000000000105006741b75600020000"], &(0x7f0000000000)=""/144, 0x36, 0x90, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000140)={0x2, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {{0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x55a3}}}, 0x108) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendto$inet6(r3, &(0x7f00000000c0)="b3", 0x1, 0x24000084, 0x0, 0x0) alarm(0x8000000000000001) alarm(0x0) 1m15.424162414s ago: executing program 4 (id=915): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m15.090483057s ago: executing program 4 (id=917): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0xbb, 0x8}, {0x31, 0x200}, 0x5, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m13.776035527s ago: executing program 4 (id=919): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file1\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001040)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m12.42301544s ago: executing program 4 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x17) socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0xffff, 0x0, @mcast1}}}}}}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x82a1, 0x0, 0x2}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m10.376092652s ago: executing program 4 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000440)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=@v3={0x3000000, [{0xff, 0x9}, {0xffffffff, 0x3}]}, 0x18, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8090, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 1m10.107312919s ago: executing program 34 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000440)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=@v3={0x3000000, [{0xff, 0x9}, {0xffffffff, 0x3}]}, 0x18, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8090, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 1m0.117378313s ago: executing program 3 (id=962): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(r2, &(0x7f0000000340), 0x8) 58.796946064s ago: executing program 3 (id=966): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, r1, r2]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$key(0xf, 0x3, 0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x0, 0x20000003}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 57.217331749s ago: executing program 3 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000018, &(0x7f00000013c0)=ANY=[], 0x0, 0x6b4, &(0x7f00000000c0)="$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") 53.516445574s ago: executing program 3 (id=979): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file1\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001040)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 51.648046278s ago: executing program 3 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 48.663438233s ago: executing program 3 (id=990): unshare(0x20000400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, 0x0, 0x0) 48.229322705s ago: executing program 35 (id=990): unshare(0x20000400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, 0x0, 0x0) 9.129506931s ago: executing program 7 (id=1101): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_io_uring_setup(0x10278e, 0x0, 0x0, 0x0) 7.158650365s ago: executing program 6 (id=1111): r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x5, r2}) 6.984015792s ago: executing program 7 (id=1112): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2$9p(0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x1c8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [0x101ffffff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xffffffff, 0x0, 0xff], 'pimreg\x00', 'bridge0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x0, 0x2c}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{}, {0x0, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff000000], 'caif0\x00', 'virt_wifi0\x00', {}, {0xff}, 0xdf, 0x10, 0x0, 0x13}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPOPTSTRIP={0x0, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x9, 0x0, 0x2, 0x41, 0x0, 0x6, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3ee) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/225, 0xe1) mount(0x0, 0x0, 0x0, 0x2084000, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0) r4 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffd3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 6.793926781s ago: executing program 6 (id=1115): sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x81) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000001700106b1d01014000010203010902ca00030100700009040000000101", @ANYRESOCT], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) 6.782657942s ago: executing program 7 (id=1116): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) truncate(&(0x7f0000000340)='./file0/file0\x00', 0x20000) 6.117030468s ago: executing program 1 (id=1120): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2$9p(0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x1c8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [0x101ffffff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xffffffff, 0x0, 0xff], 'pimreg\x00', 'bridge0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x0, 0x2c}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{}, {0x0, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff000000], 'caif0\x00', 'virt_wifi0\x00', {}, {0xff}, 0xdf, 0x10, 0x0, 0x13}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPOPTSTRIP={0x0, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x9, 0x0, 0x2, 0x41, 0x0, 0x6, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3ee) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/225, 0xe1) mount(0x0, 0x0, 0x0, 0x2084000, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0) r4 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffd3) 6.056812993s ago: executing program 6 (id=1121): iopl(0x3) msgctl$IPC_STAT(0x0, 0x2, 0x0) 5.931402226s ago: executing program 1 (id=1122): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000004c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1, 0x3a, '', 0x3a, '', 0x3a, './file0'}, 0x27) 5.884008011s ago: executing program 6 (id=1123): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000070000000000000d00000000000000000000000105006741b75600020000"], &(0x7f0000000000)=""/144, 0x36, 0x90, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) 5.804240408s ago: executing program 1 (id=1124): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000070000000000000d00000000000000000000000105006741b75600020000"], &(0x7f0000000000)=""/144, 0x36, 0x90, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x80002, 0x0) alarm(0x8000000000000001) alarm(0x0) 4.359511121s ago: executing program 5 (id=1134): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x8, 0x0, 0x200000000000, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0), 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x5) getdents64(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x19c1, 0x67) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)={0xa5, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) lseek(r3, 0x3, 0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 4.236588543s ago: executing program 8 (id=1135): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYBLOB="3bf579759e304e431e451b5a6a3409b90927257445cefb45ff1bd7fd33d8bebec840ea62500abf60b08fd113105bdcfb2767ea8e72693b5bb1124daaa05ae1c5088fa792ff8ca988f68d91c48cfc4afa42e6a8cfdbe43b7425293cbdd9cadf5db8a1e95d3632c1b273339d85a9139dfede8a95c019ab3fe9bafa32c1f2f6c137c3be764510f755fac422a741637599bee86675346f0e0deb70ea32cdec647d94eab4ce4d6b1b9851e49bdad01e9c2d95a3dd6ed8ced21c498273990bfe6c673bdf7206a66f4fff5ce853b3c49527e92b2fed0e34442efd59b241faac80ee23655f5d0f3c26bca3093ee4cfca5ac36f", @ANYRES8=0x0, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0x4, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105042, 0x2f) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) 4.124506114s ago: executing program 5 (id=1136): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240), 0x3, 0x581, &(0x7f00000002c0)="$eJzs3V9rW+UfAPDvSdt1f34/18EY6oUUduFkLl1b/0wQNi9FhwO9n6HNymi6jCYdax1su3A33sgQRByIL8B7L4dvwJfg1UAHQ0bVC28iJz1ps7Zp0zQj0Xw+cLbnyTnJc5485/v0e85JSAADazz9JxfxUkR8mUQcbVo3HNnK8bXtVp/emkmXJGq1j39PIskea2yfZP8fySovRsRPn0eczm1tt7K8Ml8olYqLWX2iunB9orK8cubqQmGuOFe8NjU9fe7N6al33n5ry3P/12FfX7v01zcfPXz/3BcnV7/+4fGx+0lcWH+t5n7sw53myniMZ+/JSFzYtOFkFxrrJ0mvd4CODGVxPhLpHHA0hrKoB/77bkdEDRhQifiHAdXIA9Lz3wO9TUV64sl7aydAjWsbG9cBhteujcTB+rnR4dXkmTOj9Hx3rAvtp238+NuD++kSu1yHuN2F9gAa7tyNiLPDw1vnvySb/zp3tn7xeGeb22gx/9VGoz4VA130MM1/Xt8u/8mt5z+xTf5zZJvY7cTu8Z973IVmWkrzv3dj+/5nxoay2v/rOd9IcuVqqXg2Il6IiFMxMprWd7qfc271Ua3Vuub8L13S9hu5YLYfj4dHn33ObKFa2E+fmz25G/HyRv6bxJb5/2A91908/un7canNNk4UH7zSat3u/W/W/Qy49n3Eq9uO/8YdrWTn+5MT9eNhonFUbPXnvRM/t2p/b/3vvnT8D+/c/7Gk+X5tZe9tfHfw72KrdZ0e/weST+rlxjnrzUK1ujgZcSD5cOvjUxvPbdQb26f9P3Vy5/lvu+P/UER82mb/7x2/13LTfhj/2T2N/94Ljz747NtW7bc3/m/US6eyR9qZ/9rdwf28dwAAAAAAANBvcvXv0ya5/Ho5l8vn1z7fcTwO50rlSvX0lfLStdm1792OxUiucaf7aNPnISazz8M26lOb6tMRcSwivho6VK/nZ8ql2V53HgAAAAAAAAAAAAAAAAAAAPrEkRbf/0/9OtTrvQOeOz/5DYNr1/jvxi89AX3J338YXOIfBpf4h8El/mFwiX8YXOIfBpf4h8El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCrLl28mC611ae3ZtL67I3lpfnyjTOzxcp8fmFpJj9TXryenyuX50rF/Ex5YbfXK5XL1yenYunmRLVYqU5UllcuL5SXrlUvX10ozBUvF0caG9553j0DAAAAAAAAAAAAAAAAAACAf4/K8sp8oVQqLiq0LJyPvtiNjgvJbqN8PjsYOmpiuPcdVGizMPpH+xvHLz2emgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg3T8BAAD//08wMOQ=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = fanotify_init(0x1, 0x80000) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r3, 0x455, 0x40001010, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x4) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) 3.499981515s ago: executing program 8 (id=1137): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005200014b72bd70000000000002"], 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 3.325788833s ago: executing program 8 (id=1138): r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x5, r2}) 3.088785616s ago: executing program 5 (id=1139): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff035}, {0x20, 0x81, 0xff, 0xfffff024}, {0x6}]}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) accept(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) 3.059406289s ago: executing program 8 (id=1140): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.147906579s ago: executing program 1 (id=1141): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2$9p(0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x1c8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [0x101ffffff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xffffffff, 0x0, 0xff], 'pimreg\x00', 'bridge0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x0, 0x2c}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{}, {0x0, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff000000], 'caif0\x00', 'virt_wifi0\x00', {}, {0xff}, 0xdf, 0x10, 0x0, 0x13}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPOPTSTRIP={0x0, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x9, 0x0, 0x2, 0x41, 0x0, 0x6, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3ee) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/225, 0xe1) mount(0x0, 0x0, 0x0, 0x2084000, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0) r4 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffd3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 2.090969044s ago: executing program 5 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) request_key(0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) clock_gettime(0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$eJzsmL9vEzEUx792LpcEEIKlAwsDlSiCJs1l6RJBkZCYEFLLrwkielQlaYPSQ6KREKpYWGBjQGJh4B9g6NCJgY1/AAkGQEJiIAMDC4vRs30Xt9dw0VGmvs9gfe337Of34ntDwDDMvuXrl1+fn56fXTgD4BAmUbLr3wuAEEZLx//Ti/unnzcvvHzz8fW71cMPt3aeR1uU2r5Q/kt8D8DbuQIeJZGS3b9JTNrJAmSir0DilNXXIFC1+hYkrlodQuCG1Xcd3SX/avXOcies3u52FknM0FCnIaChsfN+gw2BRTtXSinh2NfW++1WpxP2HOFZ2y6mXCIJ1p5I1a8IH4M5iaZzP6ri9SePN2ge12bGqV8dEnWbRAMC83Z9FqW4NqYkTv7HvOH5hVT+u2ZLrmTISrJsRPPnnhSLhA8jjk7nO2eK0jmXNh1Bnvtg+64ihiaq5N6kPPLpaOFlv8Wz9gfNEevSuFk8qwD4T5m6IlcWsZgYbL1Pm75lbVciO4QY//2Ux71z/CHmr1gF/bb8l4qNutiHTdM/1CuBk05/8pz+UYtW7tXW1vvTyyutpXApXA2CRumgselGVNNjqu8N+3NF96cDzvnFEb6+9PGgFUW9uhl94aOCKOoFeh44n838ZvfHTbstwkUAJ8yE2qafnFhIxRC+8ZHal9RU2olhGIZhGIZhGIZhGIZhGCYXxyH0v6AZBJe1958AAAD//wDHYZU=") lgetxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2.03102772s ago: executing program 8 (id=1143): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.539951688s ago: executing program 1 (id=1144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0xfffffffb) openat(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}, &(0x7f00000004c0)=0x37) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.266047816s ago: executing program 7 (id=1145): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x180}}], 0x1, 0x1) 1.12562032s ago: executing program 5 (id=1146): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x8, 0x0, 0x200000000000, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0), 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x5) getdents64(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x19c1, 0x67) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000027000000021011"], 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)={0xa5, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) lseek(r3, 0x3, 0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 728.125019ms ago: executing program 7 (id=1147): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 727.561399ms ago: executing program 8 (id=1148): pipe(0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x8000000000000fc, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x4850, 0x8, 0x1, 0x7f}, &(0x7f0000000000), &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x2, 0x3, 0xff) socket$inet6_icmp(0xa, 0x2, 0x3a) setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "7b98e86db3dadd9aa66a10d1d80635e303b56127"}, 0x15, 0x2) add_key$user(&(0x7f0000001100), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 465.270784ms ago: executing program 6 (id=1149): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000280)='./file0\x00', 0x450, &(0x7f00000000c0)=ANY=[@ANYBLOB='nonumtail,\x00\x00\x00'], 0x1, 0x22d, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, 0xfffffffffffffffe, 0x29) 446.075487ms ago: executing program 7 (id=1150): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240), 0x3, 0x581, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = fanotify_init(0x1, 0x80000) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r3, 0x455, 0x40001010, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x4) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) 360.668595ms ago: executing program 5 (id=1151): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000070000000000000d00000000000000000000000105006741b75600020000"], &(0x7f0000000000)=""/144, 0x36, 0x90, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x80002, 0x0) alarm(0x8000000000000001) alarm(0x0) 173.348953ms ago: executing program 1 (id=1152): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2$9p(0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x1c8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [0x101ffffff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xffffffff, 0x0, 0xff], 'pimreg\x00', 'bridge0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x0, 0x2c}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{}, {0x0, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff000000], 'caif0\x00', 'virt_wifi0\x00', {}, {0xff}, 0xdf, 0x10, 0x0, 0x13}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPOPTSTRIP={0x0, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x9, 0x0, 0x2, 0x41, 0x0, 0x6, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3ee) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/225, 0xe1) mount(0x0, 0x0, 0x0, 0x2084000, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffd3) 0s ago: executing program 6 (id=1153): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff035}, {0x20, 0x81, 0xff, 0xfffff024}, {0x6}]}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) accept(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) kernel console output (not intermixed with test programs): d22, utbl_chksum : 0xe619d30d) [ 213.465982][ T6423] EXT4-fs (loop3): 1 truncate cleaned up [ 213.471686][ T6423] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 215.771279][ T6448] tipc: Enabled bearer , priority 0 [ 215.801359][ T6456] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 215.808021][ T6456] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.121483][ T6450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 216.128148][ T6450] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.203558][ T6451] tipc: Resetting bearer [ 216.515445][ T6450] vhci_hcd vhci_hcd.0: Device attached [ 216.522076][ T6446] tipc: Disabling bearer [ 216.537397][ T6463] loop0: detected capacity change from 0 to 1024 [ 216.556761][ T6456] vhci_hcd vhci_hcd.0: Device attached [ 216.566618][ T6465] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 216.569675][ T6450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.573292][ T6465] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.602295][ T6465] vhci_hcd vhci_hcd.0: Device attached [ 216.870086][ T6465] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.530844][ T6450] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 217.537594][ T6450] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.893594][ T6456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 217.900248][ T6456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 218.927399][ T6450] vhci_hcd vhci_hcd.0: Device attached [ 218.946018][ T6456] vhci_hcd vhci_hcd.0: Device attached [ 218.967655][ T6490] loop4: detected capacity change from 0 to 16 [ 219.262849][ T6457] vhci_hcd: connection closed [ 219.263264][ T6453] vhci_hcd: connection reset by peer [ 219.271563][ T6477] vhci_hcd: connection closed [ 219.273736][ T6476] vhci_hcd: connection closed [ 219.278661][ T6466] vhci_hcd: connection closed [ 219.284487][ T6490] erofs: (device loop4): mounted with root inode @ nid 36. [ 219.310890][ T154] vhci_hcd: stop threads [ 219.320400][ T154] vhci_hcd: release socket [ 219.750389][ T154] vhci_hcd: disconnect device [ 219.768146][ T154] vhci_hcd: stop threads [ 219.800621][ T154] vhci_hcd: release socket [ 219.823479][ T154] vhci_hcd: disconnect device [ 219.840187][ T154] vhci_hcd: stop threads [ 219.849841][ T154] vhci_hcd: release socket [ 219.864210][ T6509] loop3: detected capacity change from 0 to 1024 [ 220.064254][ T154] vhci_hcd: disconnect device [ 220.157685][ T6509] EXT4-fs (loop3): Ignoring removed orlov option [ 220.165648][ T154] vhci_hcd: stop threads [ 220.182550][ T154] vhci_hcd: release socket [ 220.348474][ T154] vhci_hcd: disconnect device [ 220.448105][ T6509] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue. Quota mode: none. [ 220.493120][ T154] vhci_hcd: stop threads [ 220.660949][ T4249] vhci_hcd: vhci_device speed not set [ 220.676476][ T6509] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.770034][ T6523] loop0: detected capacity change from 0 to 1024 [ 220.783114][ T6520] loop2: detected capacity change from 0 to 1024 [ 220.848548][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 220.864939][ T154] vhci_hcd: release socket [ 220.884348][ T154] vhci_hcd: disconnect device [ 220.891359][ T26] audit: type=1800 audit(1761045075.417:111): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.685" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 220.941161][ T26] audit: type=1800 audit(1761045075.447:112): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.685" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 220.979922][ T6528] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.685: lblock 0 mapped to illegal pblock 0 (length 6) [ 221.800077][ T144] hfsplus: b-tree write err: -5, ino 4 [ 221.898220][ T6528] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.685: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 221.938108][ T6509] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.685: lblock 0 mapped to illegal pblock 0 (length 1) [ 221.997255][ T6509] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.685: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 222.051718][ T6543] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 222.058389][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.129926][ T6532] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.685: lblock 0 mapped to illegal pblock 0 (length 1) [ 222.132812][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 222.176029][ T6532] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.685: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 222.205476][ T4233] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 222.334544][ T6549] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 222.341202][ T6549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.625114][ T4233] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 222.634154][ T4233] usb usb40-port1: attempt power cycle [ 222.694273][ T4325] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 222.786946][ T6543] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.797162][ T6549] vhci_hcd vhci_hcd.0: Device attached [ 222.827266][ T6556] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 222.833956][ T6556] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.865454][ T6556] vhci_hcd vhci_hcd.0: Device attached [ 222.930739][ T6549] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 222.937374][ T6549] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.966393][ T6543] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 222.973060][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.995359][ T4233] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 223.009232][ T6556] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.063658][ T6549] vhci_hcd vhci_hcd.0: Device attached [ 223.180894][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 223.907677][ T4233] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 223.935042][ T4233] usb usb40-port1: unable to enumerate USB device [ 223.988420][ T6561] vhci_hcd: connection closed [ 223.988720][ T6560] vhci_hcd: connection closed [ 223.988752][ T6558] vhci_hcd: connection closed [ 223.993752][ T4494] vhci_hcd: stop threads [ 224.011960][ T6551] vhci_hcd: connection closed [ 224.012184][ T6544] vhci_hcd: connection reset by peer [ 224.084717][ T4494] vhci_hcd: release socket [ 224.090405][ T4494] vhci_hcd: disconnect device [ 224.091586][ T6575] loop0: detected capacity change from 0 to 512 [ 224.121178][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 224.152644][ T6575] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.169304][ T4494] vhci_hcd: stop threads [ 224.173607][ T4494] vhci_hcd: release socket [ 224.198287][ T4494] vhci_hcd: disconnect device [ 224.209123][ T6575] EXT4-fs (loop0): 1 truncate cleaned up [ 224.219384][ T6575] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.230532][ T4494] vhci_hcd: stop threads [ 224.259008][ T4494] vhci_hcd: release socket [ 224.304455][ T4494] vhci_hcd: disconnect device [ 224.319589][ T4494] vhci_hcd: stop threads [ 224.323888][ T4494] vhci_hcd: release socket [ 224.334399][ T4494] vhci_hcd: disconnect device [ 224.366186][ T4494] vhci_hcd: stop threads [ 224.371373][ T4494] vhci_hcd: release socket [ 224.382454][ T4494] vhci_hcd: disconnect device [ 224.621555][ T6582] loop4: detected capacity change from 0 to 1024 [ 224.631847][ T4190] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 3506399615 in block_group 0 [ 224.679779][ T4190] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 224.761763][ T4190] EXT4-fs error (device loop0): ext4_dirty_inode:6046: inode #2: comm syz-executor: mark_inode_dirty error [ 224.832115][ T4190] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 3506399615 in block_group 0 [ 224.874385][ T4190] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 3506399615 in block_group 0 [ 225.464360][ T6579] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 1613356542 in block_group 0 [ 225.606992][ T4710] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:11: Invalid inode table block 3506399615 in block_group 0 [ 226.097406][ T4494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.068321][ T6598] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 227.075086][ T6598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.093339][ T6598] vhci_hcd vhci_hcd.0: Device attached [ 227.135387][ T6603] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 227.142019][ T6603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.168051][ T6603] vhci_hcd vhci_hcd.0: Device attached [ 227.208521][ T4494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.222744][ T6598] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.273429][ T6598] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 227.273678][ T6615] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.280161][ T6598] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.281021][ T6598] vhci_hcd vhci_hcd.0: Device attached [ 227.321005][ T6617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.334256][ T6606] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 227.340887][ T6606] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 227.374182][ T6609] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 227.380754][ T6609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.381528][ T6603] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 227.395217][ T6603] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 227.428571][ T4494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.439233][ T6603] vhci_hcd vhci_hcd.0: Device attached [ 227.445804][ T6598] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.454226][ T6606] vhci_hcd vhci_hcd.0: Device attached [ 227.454609][ T4234] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 227.474257][ T6609] vhci_hcd vhci_hcd.0: Device attached [ 227.489223][ T6606] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 227.496030][ T6606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.519963][ T6603] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.532456][ T6606] vhci_hcd vhci_hcd.0: Device attached [ 227.599717][ T4494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.645870][ T6620] vhci_hcd: connection closed [ 227.646257][ T4710] vhci_hcd: stop threads [ 227.675054][ T6618] vhci_hcd: connection closed [ 227.675143][ T6612] vhci_hcd: connection closed [ 227.680591][ T6611] vhci_hcd: connection closed [ 227.686499][ T6604] vhci_hcd: connection closed [ 227.692136][ T6601] vhci_hcd: connection reset by peer [ 227.713170][ T4710] vhci_hcd: release socket [ 227.718316][ T4710] vhci_hcd: disconnect device [ 227.731221][ T6610] vhci_hcd: connection closed [ 227.749918][ T4710] vhci_hcd: stop threads [ 227.764236][ T4710] vhci_hcd: release socket [ 227.780456][ T4710] vhci_hcd: disconnect device [ 227.809067][ T4710] vhci_hcd: stop threads [ 227.813365][ T4710] vhci_hcd: release socket [ 227.855365][ T4710] vhci_hcd: disconnect device [ 227.860586][ T4710] vhci_hcd: stop threads [ 227.865274][ T6616] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 227.870579][ T4710] vhci_hcd: release socket [ 227.880776][ T4710] vhci_hcd: disconnect device [ 227.901952][ T4710] vhci_hcd: stop threads [ 227.911579][ T4710] vhci_hcd: release socket [ 227.934053][ T4710] vhci_hcd: disconnect device [ 227.953118][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 227.976829][ T4710] vhci_hcd: stop threads [ 227.981136][ T4710] vhci_hcd: release socket [ 228.017170][ T4710] vhci_hcd: disconnect device [ 228.022111][ T4710] vhci_hcd: stop threads [ 228.027293][ T4710] vhci_hcd: release socket [ 228.043494][ T4710] vhci_hcd: disconnect device [ 228.104275][ T4233] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 228.114365][ T4325] vhci_hcd: vhci_device speed not set [ 228.166174][ T4494] tipc: Left network mode [ 228.501004][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.531951][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.534323][ T4233] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 228.553242][ T6622] device bridge_slave_0 entered promiscuous mode [ 228.570362][ T4233] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.595312][ T4233] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 228.611472][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.641886][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.649629][ T4233] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 228.653319][ T6622] device bridge_slave_1 entered promiscuous mode [ 228.774639][ T4233] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.783924][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.820477][ T4233] usb 5-1: SerialNumber: syz [ 228.911292][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.953513][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.973395][ T6661] loop3: detected capacity change from 0 to 8 [ 229.091476][ T6622] team0: Port device team_slave_0 added [ 229.097947][ T4327] usb 5-1: USB disconnect, device number 7 [ 229.145836][ T6622] team0: Port device team_slave_1 added [ 229.154472][ T4249] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 229.239680][ T6665] loop3: detected capacity change from 0 to 256 [ 229.290390][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.299956][ T6665] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.344023][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.364176][ T6665] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 229.424046][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.432478][ T6665] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 229.472168][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.474262][ T4249] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 229.493593][ T4249] usb usb42-port1: attempt power cycle [ 229.496766][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.571605][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.634173][ T4233] Bluetooth: hci4: command 0x0409 tx timeout [ 229.775080][ T6672] loop1: detected capacity change from 0 to 256 [ 230.047954][ T6672] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.193578][ T6672] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 230.206995][ T6622] device hsr_slave_0 entered promiscuous mode [ 230.270933][ T6672] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 230.314307][ T6622] device hsr_slave_1 entered promiscuous mode [ 230.330582][ T6622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.358258][ T4249] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 230.379733][ T6622] Cannot create hsr debugfs directory [ 230.677886][ T26] audit: type=1800 audit(1761045085.197:113): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.725" name="file1" dev="loop1" ino=1048646 res=0 errno=0 [ 230.871989][ T6680] loop3: detected capacity change from 0 to 1024 [ 230.985760][ T6680] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 231.137057][ T4249] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 231.144863][ T4249] usb usb42-port1: unable to enumerate USB device [ 231.156974][ T6680] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,nombcache,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 231.362060][ T6691] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 231.368761][ T6691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 231.444224][ T6691] vhci_hcd vhci_hcd.0: Device attached [ 231.473289][ T6695] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 231.479950][ T6695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.488788][ T6695] vhci_hcd vhci_hcd.0: Device attached [ 231.704189][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 231.830034][ T6695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.863882][ T6691] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 231.870544][ T6691] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 232.012035][ T6695] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 232.018709][ T6695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.116962][ T4494] device hsr_slave_0 left promiscuous mode [ 232.162321][ T6695] vhci_hcd vhci_hcd.0: Device attached [ 232.176466][ T6691] vhci_hcd vhci_hcd.0: Device attached [ 232.182616][ T4494] device hsr_slave_1 left promiscuous mode [ 232.199808][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.258650][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.275256][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.283431][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.291991][ T4494] device bridge_slave_1 left promiscuous mode [ 232.306245][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.345858][ T4494] device bridge_slave_0 left promiscuous mode [ 232.348921][ T6705] vhci_hcd: connection closed [ 232.355584][ T6696] vhci_hcd: connection closed [ 232.356856][ T6703] vhci_hcd: connection closed [ 232.360770][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.365188][ T6692] vhci_hcd: connection closed [ 232.377333][ T4710] vhci_hcd: stop threads [ 232.407415][ T4710] vhci_hcd: release socket [ 232.434287][ T4710] vhci_hcd: disconnect device [ 232.453060][ T4710] vhci_hcd: stop threads [ 232.459479][ T4710] vhci_hcd: release socket [ 232.470545][ T4494] device veth1_macvtap left promiscuous mode [ 232.485004][ T4710] vhci_hcd: disconnect device [ 232.488819][ T4494] device veth0_macvtap left promiscuous mode [ 232.491016][ T6725] loop2: detected capacity change from 0 to 256 [ 232.503117][ T4710] vhci_hcd: stop threads [ 232.507888][ T4710] vhci_hcd: release socket [ 232.512703][ T4710] vhci_hcd: disconnect device [ 232.521337][ T4494] device veth1_vlan left promiscuous mode [ 232.527672][ T4710] vhci_hcd: stop threads [ 232.532147][ T4710] vhci_hcd: release socket [ 232.537866][ T4494] device veth0_vlan left promiscuous mode [ 232.543872][ T4710] vhci_hcd: disconnect device [ 232.557462][ T6725] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.584434][ T6725] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 232.635927][ T6725] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 232.664233][ T4234] vhci_hcd: vhci_device speed not set [ 233.784410][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 234.124956][ T1108] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 234.161875][ T6732] usb usb8: usbfs: process 6732 (syz.1.732) did not claim interface 0 before use [ 234.302801][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 234.314082][ T4325] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 234.342573][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 234.383763][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.410878][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.444576][ T1108] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 234.462503][ T1108] usb usb36-port1: attempt power cycle [ 234.590849][ T4494] bond0 (unregistering): Released all slaves [ 234.674538][ T4325] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 234.694181][ T4325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.712794][ T4325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 234.725766][ T4325] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 234.791367][ T6750] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 234.798036][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.814857][ T1108] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 234.825535][ T4325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.834432][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 234.840842][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.738'. [ 234.855256][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.895639][ T6622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.904139][ T4327] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 234.911703][ T6750] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 234.913765][ T4325] usb 3-1: SerialNumber: syz [ 234.918340][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.931963][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 234.953344][ T6763] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 234.960002][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 234.976771][ T6622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.001692][ T6750] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.022700][ T6622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.051626][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 235.097345][ T6772] loop3: detected capacity change from 0 to 128 [ 235.103842][ T6769] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 235.110482][ T6769] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.121532][ T6622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.144886][ T1108] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 235.154119][ T6769] vhci_hcd vhci_hcd.0: Device attached [ 235.159998][ T1108] usb usb36-port1: unable to enumerate USB device [ 235.194805][ T6750] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 235.201568][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 235.231376][ T4249] usb 3-1: USB disconnect, device number 8 [ 235.264233][ T4327] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 235.302345][ T4327] usb 5-1: config 0 has no interface number 0 [ 235.325813][ T6763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.344137][ T4327] usb 5-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 235.360074][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 235.484824][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.727239][ T6770] vhci_hcd: connection closed [ 235.734948][ T6778] vhci_hcd: connection closed [ 235.750522][ T6764] vhci_hcd: connection closed [ 235.784431][ T4276] vhci_hcd: stop threads [ 235.795004][ T4276] vhci_hcd: release socket [ 235.822188][ T6750] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(23) [ 235.828849][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.931993][ T4327] usb 5-1: config 0 descriptor?? [ 235.961022][ T4276] vhci_hcd: disconnect device [ 236.019191][ T4276] vhci_hcd: stop threads [ 236.023496][ T4276] vhci_hcd: release socket [ 236.041231][ T4327] usb-storage 5-1:0.125: USB Mass Storage device detected [ 236.110493][ T4234] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 236.111817][ T6760] vhci_hcd: connection closed [ 236.118367][ T6753] vhci_hcd: connection closed [ 236.119084][ T6754] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 236.130431][ T6786] vhci_hcd: connection closed [ 236.136241][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 236.148323][ T4276] vhci_hcd: disconnect device [ 236.154492][ T4276] vhci_hcd: stop threads [ 236.154499][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 236.158867][ T4276] vhci_hcd: release socket [ 236.169306][ T4276] vhci_hcd: disconnect device [ 236.174833][ T4276] vhci_hcd: stop threads [ 236.179334][ T4276] vhci_hcd: release socket [ 236.183843][ T4276] vhci_hcd: disconnect device [ 236.189059][ T4276] vhci_hcd: stop threads [ 236.193334][ T4276] vhci_hcd: release socket [ 236.198358][ T4276] vhci_hcd: disconnect device [ 236.218299][ T4276] vhci_hcd: stop threads [ 236.222603][ T4276] vhci_hcd: release socket [ 236.260317][ T4276] vhci_hcd: disconnect device [ 236.408674][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.417430][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 236.449411][ T6796] loop2: detected capacity change from 0 to 2048 [ 236.479353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.503755][ T1108] usb 5-1: USB disconnect, device number 8 [ 236.518161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.566570][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.627043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.671325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.700129][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.707298][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.804924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.868654][ T6808] loop1: detected capacity change from 0 to 256 [ 236.882981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.921276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.948135][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.955322][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.991147][ T6808] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.002651][ T6811] loop2: detected capacity change from 0 to 256 [ 237.033219][ T6808] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 237.034875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.084507][ T6808] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 237.098884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.235717][ T6811] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.289064][ T6811] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 237.332489][ T6622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.343813][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.357402][ T6811] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 237.865891][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.901391][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.044322][ T1108] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 238.063184][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.091668][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.111186][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.120859][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.130109][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.138981][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.148529][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.156941][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.414325][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.810873][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.979373][ T1108] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.004183][ T4327] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 239.090791][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.131994][ T1108] usb 5-1: SerialNumber: syz [ 239.409290][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.425519][ T4327] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 239.438365][ T1108] usb 5-1: 0:2 : does not exist [ 239.446259][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.452163][ T4327] usb 2-1: config 0 has no interface number 0 [ 239.465621][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.497071][ T1108] usb 5-1: USB disconnect, device number 9 [ 239.507421][ T4327] usb 2-1: config 0 interface 124 has no altsetting 0 [ 239.694739][ T4327] usb 2-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=32.00 [ 239.716594][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.767349][ T4327] usb 2-1: Product: syz [ 239.770899][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.793430][ T4327] usb 2-1: Manufacturer: syz [ 239.813143][ T4327] usb 2-1: SerialNumber: syz [ 239.837791][ T4327] usb 2-1: config 0 descriptor?? [ 240.684247][ T4249] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 240.741598][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.797017][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.812624][ T6860] loop2: detected capacity change from 0 to 1024 [ 240.959923][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.982724][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.017244][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.034954][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.066067][ T6622] device veth0_vlan entered promiscuous mode [ 241.114619][ T4249] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 241.129539][ T6864] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 241.131305][ T6622] device veth1_vlan entered promiscuous mode [ 241.136318][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.153098][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 241.155561][ T4249] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.174126][ T6864] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 241.180778][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.217854][ T4249] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 241.231041][ T4327] ftdi_sio 2-1:0.124: FTDI USB Serial Device converter detected [ 241.234172][ T4292] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 241.238998][ T4249] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 241.246602][ T4234] vhci_hcd: vhci_device speed not set [ 241.261564][ T4327] usb 2-1: Detected FT-X [ 241.271199][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 241.291919][ T6871] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 241.298667][ T6871] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.307486][ T4327] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 241.330527][ T6864] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.343849][ T4327] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 241.356880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.364977][ T4249] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.374651][ T4327] ftdi_sio 2-1:0.124: GPIO initialisation failed: -71 [ 241.382992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.391859][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.400542][ T6871] vhci_hcd vhci_hcd.0: Device attached [ 241.410325][ T4327] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 241.418524][ T4249] usb 5-1: SerialNumber: syz [ 241.424846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.434078][ T6864] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 241.440721][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.466555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.474645][ T4327] usb 2-1: USB disconnect, device number 5 [ 241.483039][ T6870] loop1: detected capacity change from 0 to 2048 [ 241.489427][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 241.501593][ T21] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 241.504137][ T6864] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.522063][ T6622] device veth0_macvtap entered promiscuous mode [ 241.529758][ T4327] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 241.547946][ T4292] usb 3-1: Using ep0 maxpacket: 32 [ 241.551403][ T6622] device veth1_macvtap entered promiscuous mode [ 241.559800][ T6871] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 241.566430][ T6871] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 241.592415][ T4327] ftdi_sio 2-1:0.124: device disconnected [ 241.636206][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.661847][ T6871] vhci_hcd vhci_hcd.0: Device attached [ 241.676363][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.714959][ T6879] vhci_hcd: connection closed [ 241.715200][ T4710] vhci_hcd: stop threads [ 241.716307][ T6872] vhci_hcd: connection closed [ 241.720020][ T4710] vhci_hcd: release socket [ 241.733570][ T6877] vhci_hcd: connection closed [ 241.734252][ T6867] vhci_hcd: connection closed [ 241.735427][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.739193][ T6865] vhci_hcd: connection reset by peer [ 241.743651][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.743667][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.743689][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.764257][ T4292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.798355][ T1108] usb 5-1: USB disconnect, device number 10 [ 241.817117][ T4710] vhci_hcd: disconnect device [ 241.847007][ T4710] vhci_hcd: stop threads [ 241.851308][ T4710] vhci_hcd: release socket [ 241.856288][ T4710] vhci_hcd: disconnect device [ 241.872044][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.884532][ T4710] vhci_hcd: stop threads [ 241.900312][ T4710] vhci_hcd: release socket [ 241.912935][ T6888] loop1: detected capacity change from 0 to 1024 [ 241.920399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.924511][ T4710] vhci_hcd: disconnect device [ 241.934649][ T4710] vhci_hcd: stop threads [ 241.938923][ T4710] vhci_hcd: release socket [ 241.943641][ T4710] vhci_hcd: disconnect device [ 241.946291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.956105][ T4710] vhci_hcd: stop threads [ 241.956237][ T4292] usb 3-1: config 1 has an invalid interface number: 24 but max is 0 [ 241.960378][ T4710] vhci_hcd: release socket [ 241.974546][ T4292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.989222][ T4710] vhci_hcd: disconnect device [ 241.994924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.014042][ T4292] usb 3-1: config 1 has no interface number 0 [ 242.020203][ T4292] usb 3-1: config 1 interface 24 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 242.044676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.049223][ T6888] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 242.064041][ T4292] usb 3-1: config 1 interface 24 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 242.071867][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.094327][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.097995][ T4292] usb 3-1: config 1 interface 24 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 0 [ 242.135647][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.149301][ T4292] usb 3-1: config 1 interface 24 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.194326][ T4292] usb 3-1: config 1 interface 24 has no altsetting 0 [ 242.240582][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.333822][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.344825][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.356131][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.367728][ T6622] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.377607][ T6622] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.384231][ T4246] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 242.386958][ T6622] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.424523][ T4292] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=24.72 [ 242.449312][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.549542][ T6622] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.661690][ T4292] usb 3-1: Product: èš³á¬ì¿™ãŒ‡æ ªÍ㰥鈇á˜ë±µè±šì®¬ë·šæ•°ë¬è…¾î³•ì®±á‚›è†Šâ§†çŸ§ß å¡´ [ 242.796277][ T4246] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 242.804399][ T4246] usb usb36-port1: attempt power cycle [ 242.819114][ T6896] loop4: detected capacity change from 0 to 256 [ 242.906752][ T4292] usb 3-1: Manufacturer: â  [ 242.962616][ T4292] usb 3-1: SerialNumber: â ‰ [ 243.043851][ T6896] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.077155][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.117693][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.135145][ T6896] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 243.246280][ T6896] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 243.258945][ T4246] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 243.473502][ T4292] ims_pcu: probe of 3-1:1.24 failed with error -22 [ 243.494922][ T4292] usb 3-1: USB disconnect, device number 9 [ 247.360239][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.535092][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.622436][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.686646][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.869710][ T4246] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 247.877681][ T4246] usb usb36-port1: unable to enumerate USB device [ 247.879387][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.944711][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.954361][ T21] vhci_hcd: vhci_device speed not set [ 248.502011][ T6924] loop3: detected capacity change from 0 to 2048 [ 249.547881][ T6940] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 250.082260][ T6948] loop4: detected capacity change from 0 to 136 [ 250.285087][ T6951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 252.264985][ T6968] loop5: detected capacity change from 0 to 1024 [ 254.765804][ T7014] loop4: detected capacity change from 0 to 1024 [ 255.113040][ T7023] loop3: detected capacity change from 0 to 1024 [ 255.488220][ T7023] hfsplus: keylen 65060 too large [ 255.504170][ T7023] hfsplus: xattr searching failed [ 255.512631][ T7023] hfsplus: keylen 65060 too large [ 255.581808][ T7028] netlink: 136 bytes leftover after parsing attributes in process `syz.1.789'. [ 255.594944][ T7023] hfsplus: xattr searching failed [ 255.627422][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.633914][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.704127][ T4325] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 255.958053][ T7042] loop3: detected capacity change from 0 to 256 [ 256.484427][ T4292] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 256.839637][ T7042] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.864141][ T7042] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 256.864461][ T4292] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 256.893085][ T7050] loop2: detected capacity change from 0 to 2048 [ 256.910456][ T4292] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.942440][ T7042] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 256.981056][ T4292] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 257.029051][ T4292] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 257.069941][ T4325] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 257.093925][ T4325] usb 5-1: config 0 has no interface number 0 [ 257.100582][ T4325] usb 5-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 257.209269][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.271566][ T4325] usb 5-1: config 0 descriptor?? [ 257.304424][ T4292] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.313521][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.342726][ T4325] usb-storage 5-1:0.125: USB Mass Storage device detected [ 257.354096][ T4292] usb 6-1: SerialNumber: syz [ 257.529314][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'. [ 257.613793][ T21] usb 5-1: USB disconnect, device number 11 [ 257.626343][ T7081] loop3: detected capacity change from 0 to 8 [ 257.858799][ T7081] squashfs image failed sanity check [ 258.013442][ T7094] loop2: detected capacity change from 0 to 1024 [ 258.916434][ T4325] usb 6-1: USB disconnect, device number 2 [ 259.037500][ T7118] loop2: detected capacity change from 0 to 512 [ 259.068806][ T7120] loop5: detected capacity change from 0 to 256 [ 259.130552][ T7114] loop3: detected capacity change from 0 to 2048 [ 259.215162][ T7120] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.249861][ T7120] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 259.376083][ T7120] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 259.472711][ T7135] loop2: detected capacity change from 0 to 1024 [ 259.659743][ T7135] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 259.704885][ T7135] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.754959][ T7135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 259.763179][ T7135] System zones: 0-1, 3-36 [ 259.848607][ T7148] loop1: detected capacity change from 0 to 1764 [ 259.864587][ T7135] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 260.172184][ T7157] loop3: detected capacity change from 0 to 1024 [ 261.766735][ T4292] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 264.064196][ T4226] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 264.194401][ T4292] usb 5-1: device not accepting address 12, error -71 [ 264.403469][ T7196] loop3: detected capacity change from 0 to 256 [ 264.507800][ T7196] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.529677][ T4226] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 264.547144][ T7196] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 264.556112][ T4226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.572768][ T4226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 264.605259][ T7196] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 264.622267][ T4226] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 264.914279][ T4226] usb 3-1: string descriptor 0 read error: -71 [ 264.920557][ T4226] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.941776][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.010445][ T26] audit: type=1800 audit(1761045120.537:114): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.829" name="file1" dev="loop3" ino=1048653 res=0 errno=0 [ 265.754255][ T4226] usb 3-1: can't set config #1, error -71 [ 265.762360][ T4226] usb 3-1: USB disconnect, device number 10 [ 266.280759][ T7225] device syzkaller0 entered promiscuous mode [ 266.731885][ T7225] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 267.134588][ T7234] binder: 7233:7234 ioctl c018620c 2000000007c0 returned -1 [ 267.405951][ T7242] loop2: detected capacity change from 0 to 128 [ 267.830032][ T26] audit: type=1800 audit(1761045123.357:115): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.840" name="bus" dev="loop2" ino=1048655 res=0 errno=0 [ 267.874505][ T7242] Trying to write to read-only block-device loop2 [ 267.912511][ T7246] loop3: detected capacity change from 0 to 1764 [ 267.923493][ T7242] Trying to write to read-only block-device loop2 [ 268.115840][ T4183] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 268.123719][ T4183] FAT-fs (loop2): Filesystem has been set read-only [ 268.150086][ T7259] loop4: detected capacity change from 0 to 256 [ 268.184554][ T4183] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 268.235034][ T4183] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 268.266248][ T7259] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.344048][ T7259] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 268.397887][ T7259] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 268.497921][ T5174] Trying to write to read-only block-device loop2 [ 269.104715][ T7269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 269.969059][ T4716] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.203697][ T4716] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.315255][ T4716] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.391559][ T4716] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.621129][ T4716] tipc: Left network mode [ 270.681596][ T7287] loop3: detected capacity change from 0 to 512 [ 270.768527][ T7292] loop1: detected capacity change from 0 to 128 [ 271.319752][ T7287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 271.556120][ T7287] EXT4-fs (loop3): 1 truncate cleaned up [ 271.561929][ T7287] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 271.727279][ T26] audit: type=1800 audit(1761045127.247:116): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.857" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 271.787862][ T26] audit: type=1800 audit(1761045127.247:117): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.857" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 273.925702][ T7337] loop1: detected capacity change from 0 to 8 [ 274.088598][ T7337] SQUASHFS error: lzo decompression failed, data probably corrupt [ 274.104783][ T7337] SQUASHFS error: Failed to read block 0x0: -5 [ 274.111528][ T7337] SQUASHFS error: Unable to read data cache entry [0] [ 274.143251][ T7337] SQUASHFS error: Unable to read page, block 0, size ff [ 274.174499][ T7337] SQUASHFS error: Unable to read data cache entry [0] [ 274.186007][ T7337] SQUASHFS error: Unable to read page, block 0, size ff [ 274.215228][ T7337] SQUASHFS error: lzo decompression failed, data probably corrupt [ 274.255428][ T7337] SQUASHFS error: Failed to read block 0x0: -5 [ 274.288589][ T7337] SQUASHFS error: lzo decompression failed, data probably corrupt [ 274.326486][ T7337] SQUASHFS error: Failed to read block 0x0: -5 [ 274.358638][ T26] audit: type=1800 audit(1761045129.887:118): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.864" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 274.567280][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 274.832421][ T4716] device hsr_slave_0 left promiscuous mode [ 274.870045][ T4716] device hsr_slave_1 left promiscuous mode [ 274.910154][ T4716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.944066][ T4249] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 274.970880][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.030569][ T4716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.050199][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.076677][ T4716] device bridge_slave_1 left promiscuous mode [ 275.103537][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.132812][ T4716] device bridge_slave_0 left promiscuous mode [ 275.149477][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.186247][ T4716] device veth1_macvtap left promiscuous mode [ 275.192449][ T4716] device veth0_macvtap left promiscuous mode [ 275.198952][ T4716] device veth1_vlan left promiscuous mode [ 275.211013][ T4716] device veth0_vlan left promiscuous mode [ 275.412009][ T4325] Bluetooth: hci1: command 0x0409 tx timeout [ 275.511550][ T4249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.529894][ T4249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.552941][ T4249] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.568881][ T4249] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.579467][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.608471][ T4249] usb 6-1: config 0 descriptor?? [ 275.740451][ T4716] team0 (unregistering): Port device team_slave_1 removed [ 275.770368][ T4716] team0 (unregistering): Port device team_slave_0 removed [ 275.801613][ T4716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.832790][ T4716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.013437][ T4716] bond0 (unregistering): Released all slaves [ 276.156086][ T4249] plantronics 0003:047F:FFFF.0005: unbalanced delimiter at end of report description [ 276.188203][ T4249] plantronics 0003:047F:FFFF.0005: parse failed [ 276.312972][ T4249] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 276.555239][ T4249] usb 6-1: USB disconnect, device number 3 [ 276.750277][ T7366] loop4: detected capacity change from 0 to 256 [ 276.839218][ T7366] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.894270][ T7366] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 276.936425][ T7366] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 277.037342][ T7379] loop5: detected capacity change from 0 to 256 [ 277.069513][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.078877][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.081759][ T7379] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.087433][ T7317] device bridge_slave_0 entered promiscuous mode [ 277.139173][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.151765][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.212487][ T7317] device bridge_slave_1 entered promiscuous mode [ 277.262666][ T7379] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 277.309908][ T7379] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 277.465319][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 277.750451][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.762732][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.821641][ T7317] team0: Port device team_slave_0 added [ 278.216251][ T7317] team0: Port device team_slave_1 added [ 278.342969][ T7407] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 279.043584][ T7409] loop3: detected capacity change from 0 to 8 [ 279.463016][ T7415] overlayfs: missing 'lowerdir' [ 279.544162][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 279.742186][ T7409] SQUASHFS error: lzo decompression failed, data probably corrupt [ 279.776075][ T7409] SQUASHFS error: Failed to read block 0x0: -5 [ 279.803666][ T7409] SQUASHFS error: Unable to read data cache entry [0] [ 279.836100][ T7409] SQUASHFS error: Unable to read page, block 0, size ff [ 279.846458][ T7409] SQUASHFS error: Unable to read data cache entry [0] [ 279.853400][ T7409] SQUASHFS error: Unable to read page, block 0, size ff [ 279.971139][ T7409] SQUASHFS error: lzo decompression failed, data probably corrupt [ 279.995432][ T7409] SQUASHFS error: Failed to read block 0x0: -5 [ 280.028793][ T7409] SQUASHFS error: lzo decompression failed, data probably corrupt [ 280.039475][ T7409] SQUASHFS error: Failed to read block 0x0: -5 [ 280.046285][ T26] audit: type=1800 audit(1761045135.577:119): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.880" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 280.205880][ T7416] loop5: detected capacity change from 0 to 128 [ 280.278542][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.314037][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.411995][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.461084][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.483428][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.512397][ T7430] mmap: syz.1.886 (7430) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 280.567694][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.919472][ T7317] device hsr_slave_0 entered promiscuous mode [ 280.947477][ T7317] device hsr_slave_1 entered promiscuous mode [ 281.265972][ T7444] loop5: detected capacity change from 0 to 256 [ 282.569554][ T4325] Bluetooth: hci1: command 0x0419 tx timeout [ 282.683748][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 282.708854][ T7444] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.754751][ T7444] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 282.803596][ T7444] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 284.073157][ T7466] netlink: 'syz.5.896': attribute type 3 has an invalid length. [ 284.133269][ T7317] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 284.172800][ T7317] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.196951][ T7317] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.208759][ T7317] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.368675][ T7481] loop5: detected capacity change from 0 to 1024 [ 284.573278][ T7481] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 284.629371][ T7481] EXT4-fs (loop5): orphan cleanup on readonly fs [ 284.669375][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.708872][ T7481] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.899: Freeing blocks not in datazone - block = 0, count = 4096 [ 284.765574][ T7481] EXT4-fs (loop5): 1 orphan inode deleted [ 284.771478][ T7481] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 285.083329][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.339170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.456844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.560383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.662451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.697296][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.704495][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.753381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.778832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.809860][ T7509] loop3: detected capacity change from 0 to 164 [ 285.827006][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.834403][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.876602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.020023][ T7509] Unable to read rock-ridge attributes [ 286.044581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.067024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.126929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.191184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.317018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.502930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.544870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.724780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.042354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.113362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.199363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.272343][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.336842][ T7506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 288.941786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.970682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.031392][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.846004][ T7560] loop3: detected capacity change from 0 to 1024 [ 291.243176][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.263547][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.010391][ T7317] device veth0_vlan entered promiscuous mode [ 292.133573][ T7584] loop4: detected capacity change from 0 to 764 [ 292.144236][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.161950][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.197455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.216666][ T7584] rock: directory entry would overflow storage [ 292.222878][ T7584] rock: sig=0x4654, size=5, remaining=4 [ 292.477552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.870629][ T7317] device veth1_vlan entered promiscuous mode [ 293.636109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.656445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.946224][ T7606] loop3: detected capacity change from 0 to 1024 [ 293.957191][ T7317] device veth0_macvtap entered promiscuous mode [ 293.981921][ T7317] device veth1_macvtap entered promiscuous mode [ 293.999895][ T7612] loop5: detected capacity change from 0 to 512 [ 294.052805][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.133395][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.147255][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.158065][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.169559][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.193674][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.216859][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.246481][ T7614] loop3: detected capacity change from 0 to 1024 [ 294.283003][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.305806][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.350747][ T7612] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.439872][ T7612] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.072349][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.114138][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.183317][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.259034][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.269278][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.279809][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.291561][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.321453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.357905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.393689][ T7317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.435392][ T7317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.471205][ T7631] loop3: detected capacity change from 0 to 256 [ 295.484070][ T7317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.508305][ T7317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.660628][ T7631] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.733938][ T7631] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 295.885247][ T7637] loop5: detected capacity change from 0 to 8 [ 295.955988][ T7631] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 296.148278][ T7637] SQUASHFS error: lzo decompression failed, data probably corrupt [ 296.259329][ T7637] SQUASHFS error: Failed to read block 0x0: -5 [ 296.503648][ T4718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.564152][ T4718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.616050][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.634198][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.651389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.671794][ T7637] SQUASHFS error: Unable to read data cache entry [0] [ 296.737669][ T7637] SQUASHFS error: Unable to read page, block 0, size ff [ 296.777825][ T7637] SQUASHFS error: Unable to read data cache entry [0] [ 296.810850][ T7637] SQUASHFS error: Unable to read page, block 0, size ff [ 296.846430][ T7637] SQUASHFS error: lzo decompression failed, data probably corrupt [ 296.897955][ T7637] SQUASHFS error: Failed to read block 0x0: -5 [ 296.905300][ T7637] SQUASHFS error: lzo decompression failed, data probably corrupt [ 296.913303][ T7637] SQUASHFS error: Failed to read block 0x0: -5 [ 296.920032][ T26] audit: type=1800 audit(1761045152.447:120): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.930" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 296.956207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.103221][ T26] audit: type=1326 audit(1761045152.627:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4603b4fc9 code=0x7ffc0000 [ 297.203930][ T26] audit: type=1326 audit(1761045152.627:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4603b4fc9 code=0x7ffc0000 [ 297.242760][ T26] audit: type=1326 audit(1761045152.677:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb4603b4fc9 code=0x7ffc0000 [ 297.266157][ T26] audit: type=1326 audit(1761045152.677:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4603b4fc9 code=0x7ffc0000 [ 297.314343][ T26] audit: type=1326 audit(1761045152.677:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4603b4fc9 code=0x7ffc0000 [ 297.410785][ T7660] device syzkaller0 entered promiscuous mode [ 297.433707][ T7660] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 298.358919][ T7640] chnl_net:caif_netlink_parms(): no params data found [ 298.491525][ T7683] loop3: detected capacity change from 0 to 256 [ 299.362147][ T4241] Bluetooth: hci2: command 0x0409 tx timeout [ 299.948125][ T7683] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.049162][ T7683] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 300.107575][ T7683] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 300.186410][ T7640] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.237568][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.285502][ T7640] device bridge_slave_0 entered promiscuous mode [ 300.455989][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.578351][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.932376][ T7699] loop1: detected capacity change from 0 to 512 [ 301.086850][ T7640] device bridge_slave_1 entered promiscuous mode [ 301.225058][ T7699] EXT4-fs (loop1): inline encryption not supported [ 301.231707][ T7699] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 301.239504][ T7699] EXT4-fs (loop1): Test dummy encryption mode enabled [ 301.317633][ T7699] EXT4-fs (loop1): orphan cleanup on readonly fs [ 301.324244][ T7699] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.943: invalid indirect mapped block 131072 (level 2) [ 301.342894][ T7699] EXT4-fs (loop1): Remounting filesystem read-only [ 301.349667][ T7699] EXT4-fs (loop1): 1 truncate cleaned up [ 301.355411][ T7699] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,bsdgroups,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 301.563129][ T7640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.591052][ T7640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.886906][ T7640] team0: Port device team_slave_0 added [ 301.916383][ T7708] loop1: detected capacity change from 0 to 1024 [ 301.954048][ T7640] team0: Port device team_slave_1 added [ 302.024633][ T4325] Bluetooth: hci2: command 0x041b tx timeout [ 302.137847][ T26] audit: type=1326 audit(1761045157.667:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 302.175033][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.203128][ T7716] loop5: detected capacity change from 0 to 512 [ 302.212622][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.250098][ T26] audit: type=1326 audit(1761045157.717:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 302.310038][ T7716] EXT4-fs (loop5): Ignoring removed bh option [ 302.329143][ T7716] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 302.390433][ T7640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.403212][ T26] audit: type=1326 audit(1761045157.717:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 302.430097][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.483563][ T7716] EXT4-fs (loop5): 1 truncate cleaned up [ 302.493280][ T7716] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 302.554206][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.633894][ T26] audit: type=1326 audit(1761045157.717:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 302.707168][ T7640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.757600][ T26] audit: type=1326 audit(1761045158.187:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 302.922447][ T26] audit: type=1326 audit(1761045158.187:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 303.065080][ T26] audit: type=1326 audit(1761045158.187:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 303.139123][ T7640] device hsr_slave_0 entered promiscuous mode [ 303.209394][ T26] audit: type=1326 audit(1761045158.197:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 303.234684][ T7640] device hsr_slave_1 entered promiscuous mode [ 303.325021][ T7640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.332839][ T7640] Cannot create hsr debugfs directory [ 303.337231][ T26] audit: type=1326 audit(1761045158.197:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 304.184986][ T4241] Bluetooth: hci2: command 0x040f tx timeout [ 304.252996][ T7755] loop5: detected capacity change from 0 to 8 [ 304.277679][ T26] audit: type=1326 audit(1761045158.197:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c620fc9 code=0x7ffc0000 [ 304.728420][ T7755] SQUASHFS error: lzo decompression failed, data probably corrupt [ 304.747166][ T7755] SQUASHFS error: Failed to read block 0x0: -5 [ 304.753523][ T7755] SQUASHFS error: Unable to read data cache entry [0] [ 304.773391][ T7755] SQUASHFS error: Unable to read page, block 0, size ff [ 304.782049][ T7755] SQUASHFS error: Unable to read data cache entry [0] [ 304.791452][ T7755] SQUASHFS error: Unable to read page, block 0, size ff [ 304.824873][ T7755] SQUASHFS error: lzo decompression failed, data probably corrupt [ 304.871699][ T7755] SQUASHFS error: Failed to read block 0x0: -5 [ 304.904899][ T7755] SQUASHFS error: lzo decompression failed, data probably corrupt [ 304.939211][ T7755] SQUASHFS error: Failed to read block 0x0: -5 [ 305.403496][ T7640] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 305.453935][ T7640] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 305.495507][ T7640] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 305.547530][ T7640] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 305.554887][ T4241] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 305.974692][ T4241] usb 7-1: unable to get BOS descriptor or descriptor too short [ 305.990991][ T7640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.002158][ T7795] loop3: detected capacity change from 0 to 256 [ 306.046734][ T4241] usb 7-1: not running at top speed; connect to a high speed hub [ 306.061193][ T7640] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.108545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.126499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.144575][ T4241] usb 7-1: config 8 has an invalid interface number: 193 but max is 1 [ 306.192099][ T4241] usb 7-1: config 8 has an invalid interface number: 155 but max is 1 [ 306.209171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.219586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.232727][ T4241] usb 7-1: config 8 has no interface number 0 [ 306.244164][ T7795] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.249371][ T4241] usb 7-1: config 8 has no interface number 1 [ 306.262157][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.269322][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.298264][ T4241] usb 7-1: config 8 interface 193 has no altsetting 0 [ 306.304026][ T7795] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 306.313240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.331993][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 306.369584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.400112][ T7795] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 306.404688][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.419437][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.484372][ T4241] usb 7-1: New USB device found, idVendor=8f8b, idProduct=9880, bcdDevice=9e.61 [ 306.496515][ T4241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.514588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.530335][ T4241] usb 7-1: Product: syz [ 306.535776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.544189][ T4241] usb 7-1: Manufacturer: syz [ 306.549129][ T4241] usb 7-1: SerialNumber: syz [ 306.905008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.039777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.084862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.093580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.127400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.364444][ T7817] binder: BINDER_SET_CONTEXT_MGR already set [ 307.370903][ T7817] binder: 7813:7817 ioctl 4018620d 200000000040 returned -16 [ 308.466553][ T4241] usb-storage 7-1:8.193: USB Mass Storage device detected [ 308.624727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.633021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.703340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.774800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.821868][ T4241] usb 7-1: bad CDC descriptors [ 308.833526][ T4241] usb 7-1: bad CDC descriptors [ 308.841159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.865615][ T4241] usb 7-1: USB disconnect, device number 2 [ 308.895221][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.947832][ T7833] loop5: detected capacity change from 0 to 256 [ 309.052130][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 309.109174][ T7833] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.146647][ T7833] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 309.254182][ T7833] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 309.762380][ T4716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.835356][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.843233][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.916472][ T7858] loop1: detected capacity change from 0 to 512 [ 309.948826][ T7858] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 309.961523][ T4716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.016991][ T7640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.085590][ T7858] EXT4-fs (loop1): 1 truncate cleaned up [ 310.127890][ T7858] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 310.151060][ T4716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.231195][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 310.231212][ T26] audit: type=1800 audit(1761045165.757:139): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.976" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 310.556799][ T7874] loop3: detected capacity change from 0 to 1024 [ 310.573570][ T4716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.407010][ T7882] loop3: detected capacity change from 0 to 764 [ 312.480316][ T7882] rock: directory entry would overflow storage [ 312.487608][ T7882] rock: sig=0x4654, size=5, remaining=4 [ 313.378939][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.413665][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.554822][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.563200][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.682786][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.705488][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.770575][ T7640] device veth0_vlan entered promiscuous mode [ 313.861958][ T7640] device veth1_vlan entered promiscuous mode [ 314.030846][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.058853][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.104458][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.154921][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.229311][ T7640] device veth0_macvtap entered promiscuous mode [ 314.416828][ T7640] device veth1_macvtap entered promiscuous mode [ 314.443289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.455617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.549559][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.594751][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.609495][ T7920] loop5: detected capacity change from 0 to 4096 [ 314.664311][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.667276][ T7920] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 314.702946][ T7920] EXT4-fs (loop5): Test dummy encryption mode enabled [ 314.704012][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.764065][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.765941][ T7920] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 314.834147][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.845256][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.864080][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.875581][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.885148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.916892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.939105][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.974108][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.009567][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.062798][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.094092][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.126233][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.144026][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.187796][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.225504][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.408354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.460858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.499919][ T7640] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.671774][ T4330] Bluetooth: hci1: command 0x0000 tx timeout [ 315.696098][ T7640] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.705395][ T7640] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.714560][ T7640] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.828578][ T7946] loop5: detected capacity change from 0 to 1024 [ 317.066385][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073788][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.685070][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.713799][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.775703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 317.915541][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.952883][ T4716] device hsr_slave_0 left promiscuous mode [ 317.987106][ T7962] loop5: detected capacity change from 0 to 1024 [ 317.993826][ T4716] device hsr_slave_1 left promiscuous mode [ 318.022745][ T4716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.103287][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.114120][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.179996][ T4716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.197833][ T7962] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 318.275873][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.342116][ T4716] device bridge_slave_1 left promiscuous mode [ 318.374644][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.410045][ T4716] device bridge_slave_0 left promiscuous mode [ 318.437279][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.533633][ T4716] device veth1_macvtap left promiscuous mode [ 318.549430][ T4716] device veth0_macvtap left promiscuous mode [ 318.560215][ T4716] device veth1_vlan left promiscuous mode [ 318.569552][ T4716] device veth0_vlan left promiscuous mode [ 320.691500][ T2304] Bluetooth: hci3: command 0x0409 tx timeout [ 321.455320][ T4241] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 321.623865][ T8001] loop5: detected capacity change from 0 to 1024 [ 321.874535][ T4241] usb 7-1: config 0 has an invalid interface number: 125 but max is 0 [ 321.935381][ T4241] usb 7-1: config 0 has no interface number 0 [ 322.072695][ T4241] usb 7-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 322.174055][ T4241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.224567][ T4241] usb 7-1: config 0 descriptor?? [ 322.321438][ T8003] loop5: detected capacity change from 0 to 256 [ 322.323011][ T4241] usb-storage 7-1:0.125: USB Mass Storage device detected [ 322.438780][ T8003] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.520758][ T8003] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 322.550660][ T8003] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 322.585504][ T4716] team0 (unregistering): Port device team_slave_1 removed [ 322.661831][ T4716] team0 (unregistering): Port device team_slave_0 removed [ 322.814634][ T4716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.839589][ T4716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.904160][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 323.016396][ T4716] bond0 (unregistering): Released all slaves [ 323.082712][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.104858][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1001'. [ 323.134262][ T8009] sch_tbf: burst 0 is lower than device veth1_vlan mtu (1514) ! [ 323.167893][ T4241] usb 7-1: USB disconnect, device number 3 [ 323.375301][ T8016] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 323.600660][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 324.094088][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.101301][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.252198][ T7972] device bridge_slave_0 entered promiscuous mode [ 324.532576][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.566506][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.954178][ T7972] device bridge_slave_1 entered promiscuous mode [ 324.985805][ T8050] loop7: detected capacity change from 0 to 22 [ 324.996125][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 325.482208][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.678206][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.765890][ T8050] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 325.795782][ T8050] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 325.850048][ T8059] 9pnet: Insufficient options for proto=fd [ 325.929709][ T8062] loop5: detected capacity change from 0 to 8 [ 325.999607][ T7972] team0: Port device team_slave_0 added [ 326.075543][ T7972] team0: Port device team_slave_1 added [ 326.257595][ T8062] SQUASHFS error: lzo decompression failed, data probably corrupt [ 326.266156][ T2304] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 326.274653][ T8062] SQUASHFS error: Failed to read block 0x0: -5 [ 326.282127][ T8062] SQUASHFS error: Unable to read data cache entry [0] [ 326.292161][ T8062] SQUASHFS error: Unable to read page, block 0, size ff [ 326.331928][ T8062] SQUASHFS error: Unable to read data cache entry [0] [ 326.367700][ T8062] SQUASHFS error: Unable to read page, block 0, size ff [ 326.410111][ T8062] SQUASHFS error: lzo decompression failed, data probably corrupt [ 326.461947][ T8062] SQUASHFS error: Failed to read block 0x0: -5 [ 326.495929][ T8062] SQUASHFS error: lzo decompression failed, data probably corrupt [ 326.542640][ T8062] SQUASHFS error: Failed to read block 0x0: -5 [ 326.590277][ T26] audit: type=1800 audit(1761045182.117:140): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1008" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 326.642698][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.671538][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.705700][ T2304] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 326.728257][ T2304] usb 2-1: config 0 has no interface number 0 [ 326.771445][ T2304] usb 2-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 326.804343][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.825303][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.903831][ T2304] usb 2-1: config 0 descriptor?? [ 327.073387][ T2304] usb-storage 2-1:0.125: USB Mass Storage device detected [ 327.082261][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.122269][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 327.130567][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.245878][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.430134][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 327.528527][ T8079] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 327.605766][ T4327] usb 2-1: USB disconnect, device number 6 [ 327.677323][ T7972] device hsr_slave_0 entered promiscuous mode [ 327.888649][ T7972] device hsr_slave_1 entered promiscuous mode [ 327.934127][ T7972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.941740][ T7972] Cannot create hsr debugfs directory [ 328.087228][ T8087] loop7: detected capacity change from 0 to 256 [ 328.373301][ T8087] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.474248][ T8087] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 328.573404][ T8087] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 328.911833][ T8102] 9pnet: Insufficient options for proto=fd [ 329.010545][ T7972] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.066867][ T7972] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.148674][ T7972] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 329.185082][ T7972] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 329.211195][ T8109] loop1: detected capacity change from 0 to 22 [ 329.252839][ T8109] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 329.295959][ T8109] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 329.541983][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.596023][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.625751][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.637426][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.753536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.815901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.961052][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.968396][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.104793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.163858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.236790][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.243901][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.313121][ T8132] loop6: detected capacity change from 0 to 1024 [ 330.409740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.444410][ T8132] EXT4-fs (loop6): Ignoring removed nobh option [ 330.451069][ T8132] EXT4-fs (loop6): Ignoring removed bh option [ 330.487333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.497370][ T8132] EXT4-fs (loop6): Ignoring removed nobh option [ 330.534578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.566747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.588313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.589263][ T8132] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback. [ 330.609639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.838245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.025190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.035935][ T21] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 331.846013][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.854170][ T21] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 331.862375][ T21] usb 2-1: config 0 has no interface number 0 [ 331.870588][ T21] usb 2-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 331.879999][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.885812][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.898182][ T21] usb 2-1: config 0 descriptor?? [ 331.962136][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.971952][ T21] usb-storage 2-1:0.125: USB Mass Storage device detected [ 332.024373][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.060735][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.084765][ T8154] loop6: detected capacity change from 0 to 8 [ 332.208189][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 332.296235][ T8154] SQUASHFS error: lzo decompression failed, data probably corrupt [ 332.309036][ T8154] SQUASHFS error: Failed to read block 0x0: -5 [ 332.343835][ T8154] SQUASHFS error: Unable to read data cache entry [0] [ 332.378180][ T8154] SQUASHFS error: Unable to read page, block 0, size ff [ 332.413057][ T8154] SQUASHFS error: Unable to read data cache entry [0] [ 332.436060][ T8154] SQUASHFS error: Unable to read page, block 0, size ff [ 332.465079][ T8154] SQUASHFS error: lzo decompression failed, data probably corrupt [ 332.473491][ T8154] SQUASHFS error: Failed to read block 0x0: -5 [ 332.506064][ T8154] SQUASHFS error: lzo decompression failed, data probably corrupt [ 332.551796][ T8154] SQUASHFS error: Failed to read block 0x0: -5 [ 332.622361][ T26] audit: type=1800 audit(1761045188.147:141): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1031" name="file2" dev="loop6" ino=3 res=0 errno=0 [ 332.724955][ T1108] usb 2-1: USB disconnect, device number 7 [ 333.061854][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.121534][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.162291][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.248771][ T8174] loop7: detected capacity change from 0 to 22 [ 333.300862][ T8174] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 333.460573][ T8174] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 334.918058][ T8200] loop7: detected capacity change from 0 to 1024 [ 334.969702][ T8205] 9pnet: Insufficient options for proto=fd [ 335.174221][ T8200] EXT4-fs (loop7): Ignoring removed nobh option [ 335.180504][ T8200] EXT4-fs (loop7): Ignoring removed bh option [ 335.246070][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.264044][ T8200] EXT4-fs (loop7): Ignoring removed nobh option [ 335.283028][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.426893][ T8200] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback. [ 335.433232][ T8216] loop5: detected capacity change from 0 to 256 [ 335.574102][ T8216] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.702092][ T8216] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 336.334879][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.504639][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.520814][ T8216] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 336.546346][ T7972] device veth0_vlan entered promiscuous mode [ 336.569248][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.587181][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.638204][ T8234] loop7: detected capacity change from 0 to 22 [ 336.673312][ T7972] device veth1_vlan entered promiscuous mode [ 336.700081][ T8234] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 336.759534][ T8234] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 337.243377][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.478491][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.899269][ T7972] device veth0_macvtap entered promiscuous mode [ 338.543347][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.558313][ T7972] device veth1_macvtap entered promiscuous mode [ 338.758349][ T8264] loop6: detected capacity change from 0 to 1024 [ 338.952593][ T8264] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.655661][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.666444][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.676357][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.686846][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.697465][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.708653][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.718681][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.757951][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.834388][ T21] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 340.856657][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.886327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.906761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.955212][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.979372][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.989462][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.000046][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.014739][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.026872][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.038990][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.051201][ T8280] loop1: detected capacity change from 0 to 22 [ 341.059409][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.071739][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.081681][ T8280] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 341.110192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.136042][ T8280] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 341.155137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.232024][ T21] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 341.259439][ T21] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.277029][ T7972] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.300966][ T7972] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.320252][ T7972] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.329450][ T7972] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.436232][ T21] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 341.447787][ T21] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 342.175858][ T21] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.187033][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.195477][ T21] usb 8-1: SerialNumber: syz [ 342.315827][ T21] usb 8-1: can't set config #1, error -71 [ 342.364132][ T21] usb 8-1: USB disconnect, device number 2 [ 342.671030][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.729914][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.379644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.494398][ T4720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.502807][ T4720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.575227][ T8311] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 343.581876][ T8311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 343.620157][ T8311] vhci_hcd vhci_hcd.0: Device attached [ 343.642159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.662511][ T8317] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 343.669164][ T8317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.692418][ T8316] loop1: detected capacity change from 0 to 1024 [ 343.758697][ T8317] vhci_hcd vhci_hcd.0: Device attached [ 343.777622][ T4716] device hsr_slave_0 left promiscuous mode [ 343.821773][ T8324] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.824085][ T8311] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 343.836499][ T8311] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 343.844485][ T4233] vhci_hcd: vhci_device speed not set [ 343.864774][ T4716] device hsr_slave_1 left promiscuous mode [ 343.872686][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.901886][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.915312][ T4233] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 343.923776][ T8316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.080522][ T8311] vhci_hcd vhci_hcd.0: Device attached [ 344.546864][ T8322] vhci_hcd: connection closed [ 344.547070][ T8318] vhci_hcd: connection closed [ 344.547099][ T8313] vhci_hcd: connection reset by peer [ 344.562484][ T4720] vhci_hcd: stop threads [ 344.574329][ T4720] vhci_hcd: release socket [ 344.589695][ T4720] vhci_hcd: disconnect device [ 344.593062][ T4716] device bridge_slave_1 left promiscuous mode [ 344.600690][ T4720] vhci_hcd: stop threads [ 344.600954][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.609991][ T4720] vhci_hcd: release socket [ 344.957512][ T8343] loop8: detected capacity change from 0 to 1024 [ 345.562841][ T4720] vhci_hcd: disconnect device [ 345.639215][ T4720] vhci_hcd: stop threads [ 345.648915][ T4720] vhci_hcd: release socket [ 345.664105][ T4720] vhci_hcd: disconnect device [ 345.725813][ T4716] device bridge_slave_0 left promiscuous mode [ 345.789235][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.487058][ T8352] loop6: detected capacity change from 0 to 1024 [ 346.684191][ T8352] EXT4-fs (loop6): Ignoring removed nobh option [ 346.732178][ T8352] EXT4-fs (loop6): Ignoring removed bh option [ 346.784032][ T8352] EXT4-fs (loop6): Ignoring removed nobh option [ 346.803271][ T8361] loop8: detected capacity change from 0 to 8 [ 346.954761][ T8361] SQUASHFS error: lzo decompression failed, data probably corrupt [ 346.970667][ T8361] SQUASHFS error: Failed to read block 0x0: -5 [ 347.005790][ T8361] SQUASHFS error: Unable to read data cache entry [0] [ 347.045010][ T8361] SQUASHFS error: Unable to read page, block 0, size ff [ 347.059207][ T8361] SQUASHFS error: Unable to read data cache entry [0] [ 347.092894][ T8361] SQUASHFS error: Unable to read page, block 0, size ff [ 347.132236][ T8361] SQUASHFS error: lzo decompression failed, data probably corrupt [ 347.172516][ T8361] SQUASHFS error: Failed to read block 0x0: -5 [ 347.226523][ T8361] SQUASHFS error: lzo decompression failed, data probably corrupt [ 347.238506][ T8361] SQUASHFS error: Failed to read block 0x0: -5 [ 347.247254][ T26] audit: type=1800 audit(1761045202.777:142): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1075" name="file2" dev="loop8" ino=3 res=0 errno=0 [ 347.374881][ T8352] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback. [ 347.700873][ T8368] loop2: detected capacity change from 0 to 7 [ 347.811246][ T4624] Dev loop2: unable to read RDB block 7 [ 347.828142][ T8370] 9pnet: Insufficient options for proto=fd [ 347.838754][ T4624] loop2: unable to read partition table [ 347.869836][ T4624] loop2: partition table beyond EOD, truncated [ 347.908406][ T8368] Dev loop2: unable to read RDB block 7 [ 347.992184][ T8368] loop2: unable to read partition table [ 348.017370][ T8368] loop2: partition table beyond EOD, truncated [ 348.040118][ T8368] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.256256][ T4716] team0 (unregistering): Port device team_slave_1 removed [ 348.311345][ T4716] team0 (unregistering): Port device team_slave_0 removed [ 348.356703][ T4716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.392625][ T4716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.402839][ T8378] input: syz1 as /devices/virtual/input/input11 [ 348.652865][ T4716] bond0 (unregistering): Released all slaves [ 349.084317][ T4233] vhci_hcd: vhci_device speed not set [ 349.317947][ T8399] loop6: detected capacity change from 0 to 128 [ 349.341283][ T8397] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 349.347965][ T8397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.437579][ T8397] vhci_hcd vhci_hcd.0: Device attached [ 349.632901][ T8403] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 349.639574][ T8403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 349.650860][ T8397] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12) [ 349.657517][ T8397] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.694152][ T4325] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 349.752034][ T8403] vhci_hcd vhci_hcd.0: Device attached [ 349.762996][ T8408] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(18) [ 349.769656][ T8408] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 349.850535][ T8408] vhci_hcd vhci_hcd.0: Device attached [ 350.066055][ T8397] vhci_hcd vhci_hcd.0: Device attached [ 350.085581][ T8421] loop1: detected capacity change from 0 to 256 [ 350.164654][ T21] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 350.177218][ T8409] vhci_hcd: connection closed [ 350.177356][ T8407] vhci_hcd: connection closed [ 350.177650][ T4712] vhci_hcd: stop threads [ 350.188231][ T8405] vhci_hcd: connection closed [ 350.191838][ T8398] vhci_hcd: connection reset by peer [ 350.264027][ T4712] vhci_hcd: release socket [ 350.304321][ T4712] vhci_hcd: disconnect device [ 350.319598][ T4712] vhci_hcd: stop threads [ 350.524288][ T21] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 350.533986][ T4712] vhci_hcd: release socket [ 350.544151][ T4712] vhci_hcd: disconnect device [ 350.549325][ T4712] vhci_hcd: stop threads [ 350.554225][ T21] usb usb46-port1: attempt power cycle [ 350.842779][ T4712] vhci_hcd: release socket [ 350.926186][ T4712] vhci_hcd: disconnect device [ 350.987833][ T21] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 351.254540][ T4712] vhci_hcd: stop threads [ 351.258841][ T4712] vhci_hcd: release socket [ 351.267765][ T4712] vhci_hcd: disconnect device [ 351.531946][ T8435] 9pnet: Insufficient options for proto=fd [ 351.742176][ T21] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 351.762856][ T21] usb usb46-port1: unable to enumerate USB device [ 352.409383][ T8445] loop7: detected capacity change from 0 to 8 [ 352.852657][ T8445] SQUASHFS error: lzo decompression failed, data probably corrupt [ 352.865347][ T8445] SQUASHFS error: Failed to read block 0x0: -5 [ 352.874900][ T8445] SQUASHFS error: Unable to read data cache entry [0] [ 352.883864][ T8445] SQUASHFS error: Unable to read page, block 0, size ff [ 352.897766][ T8445] SQUASHFS error: Unable to read data cache entry [0] [ 352.907317][ T8445] SQUASHFS error: Unable to read page, block 0, size ff [ 352.950390][ T8445] SQUASHFS error: lzo decompression failed, data probably corrupt [ 352.988509][ T8445] SQUASHFS error: Failed to read block 0x0: -5 [ 353.031289][ T8445] SQUASHFS error: lzo decompression failed, data probably corrupt [ 353.074027][ T8445] SQUASHFS error: Failed to read block 0x0: -5 [ 353.090758][ T26] audit: type=1800 audit(1761045208.617:143): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1089" name="file2" dev="loop7" ino=3 res=0 errno=0 [ 353.729374][ T8457] loop8: detected capacity change from 0 to 764 [ 353.769528][ T8457] rock: directory entry would overflow storage [ 354.145419][ T4276] wlan1: Trigger new scan to find an IBSS to join [ 354.585934][ T8457] rock: sig=0x4654, size=5, remaining=4 [ 354.764110][ T8463] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 354.770769][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.783582][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 354.848406][ T4325] vhci_hcd: vhci_device speed not set [ 355.128414][ T8463] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 355.135082][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 355.178360][ T4233] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 355.399347][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 355.432742][ T8467] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 355.439449][ T8467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 356.364452][ T8467] vhci_hcd vhci_hcd.0: Device attached [ 356.598982][ T8469] vhci_hcd: connection closed [ 356.599685][ T144] vhci_hcd: stop threads [ 356.608864][ T8468] vhci_hcd: connection closed [ 356.609039][ T8464] vhci_hcd: connection reset by peer [ 356.654259][ T2304] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 356.684037][ T144] vhci_hcd: release socket [ 356.707511][ T144] vhci_hcd: disconnect device [ 356.720784][ T144] vhci_hcd: stop threads [ 356.739417][ T144] vhci_hcd: release socket [ 356.789573][ T144] vhci_hcd: disconnect device [ 356.818717][ T144] vhci_hcd: stop threads [ 356.823028][ T144] vhci_hcd: release socket [ 356.874349][ T144] vhci_hcd: disconnect device [ 356.995022][ T2304] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 357.013278][ T2304] usb usb48-port1: attempt power cycle [ 357.850586][ T2304] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 358.012564][ T8505] loop1: detected capacity change from 0 to 1024 [ 358.060543][ T8505] EXT4-fs (loop1): Ignoring removed nobh option [ 358.104170][ T8505] EXT4-fs (loop1): Ignoring removed bh option [ 358.122552][ T8505] EXT4-fs (loop1): Ignoring removed nobh option [ 358.205133][ T8505] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback. [ 358.235407][ T8515] fuse: Bad value for 'fd' [ 358.247619][ T2304] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 358.271895][ T2304] usb usb48-port1: unable to enumerate USB device [ 358.794625][ T144] wlan1: Creating new IBSS network, BSSID 96:c3:71:bc:d6:97 [ 358.901785][ T8533] loop8: detected capacity change from 0 to 512 [ 358.994066][ T8530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 359.000732][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 359.040609][ T8533] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.055571][ T8533] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.068896][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 359.128253][ T8548] loop7: detected capacity change from 0 to 256 [ 359.205630][ T8545] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 359.212301][ T8545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 359.230017][ T8551] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 359.236683][ T8551] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 359.280288][ T8548] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.311734][ T8530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 359.318396][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 359.354354][ T8548] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 359.391992][ T8545] vhci_hcd vhci_hcd.0: Device attached [ 359.430712][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 359.451161][ T8551] vhci_hcd vhci_hcd.0: Device attached [ 359.454031][ T8548] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 359.533848][ T8552] vhci_hcd: connection closed [ 359.534433][ T8547] vhci_hcd: connection closed [ 359.539192][ T8556] vhci_hcd: connection closed [ 359.549981][ T8537] vhci_hcd: connection closed [ 359.554821][ T4492] vhci_hcd: stop threads [ 359.564458][ T4492] vhci_hcd: release socket [ 359.582380][ T4492] vhci_hcd: disconnect device [ 359.622685][ T4492] vhci_hcd: stop threads [ 359.654996][ T4492] vhci_hcd: release socket [ 359.674170][ T4492] vhci_hcd: disconnect device [ 359.699508][ T4492] vhci_hcd: stop threads [ 359.704085][ T4492] vhci_hcd: release socket [ 359.736709][ T4492] vhci_hcd: disconnect device [ 359.754667][ T4492] vhci_hcd: stop threads [ 359.774031][ T4492] vhci_hcd: release socket [ 359.794337][ T4492] vhci_hcd: disconnect device [ 360.344127][ T4233] vhci_hcd: vhci_device speed not set [ 360.957070][ T8610] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 360.963649][ T8610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.016020][ T8610] vhci_hcd vhci_hcd.0: Device attached [ 361.035302][ T8615] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(12) [ 361.041969][ T8615] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.064181][ T8620] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(15) [ 361.070838][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 361.177077][ T8620] vhci_hcd vhci_hcd.0: Device attached [ 361.264911][ T8615] vhci_hcd vhci_hcd.0: Device attached [ 361.284264][ T4325] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 361.340681][ T8621] vhci_hcd: connection closed [ 361.343440][ T4492] vhci_hcd: stop threads [ 361.356455][ T8616] vhci_hcd: connection closed [ 361.362811][ T8612] vhci_hcd: connection reset by peer [ 361.364844][ T4492] vhci_hcd: release socket [ 361.421881][ T2304] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 361.434047][ T4492] vhci_hcd: disconnect device [ 361.459886][ T4492] vhci_hcd: stop threads [ 361.484004][ T4492] vhci_hcd: release socket [ 361.504506][ T4492] vhci_hcd: disconnect device [ 361.527725][ T4492] vhci_hcd: stop threads [ 361.572726][ T4492] vhci_hcd: release socket [ 361.577521][ T4492] vhci_hcd: disconnect device [ 361.690924][ T8639] loop8: detected capacity change from 0 to 1024 [ 361.704183][ T21] Bluetooth: hci3: command 0x0407 tx timeout [ 361.764596][ T2304] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 361.782612][ T2304] usb usb36-port1: attempt power cycle [ 361.869210][ T8643] loop5: detected capacity change from 0 to 1024 [ 361.902976][ T26] audit: type=1800 audit(1761045217.427:144): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1135" name="file0" dev="loop8" ino=25 res=0 errno=0 [ 361.991999][ T8643] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.003055][ T8639] hfsplus: bad catalog file entry [ 362.202273][ T2304] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 362.505800][ T2304] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 362.519841][ T2304] usb usb36-port1: unable to enumerate USB device [ 363.936257][ T8677] loop5: detected capacity change from 0 to 16 [ 364.176306][ T8677] erofs: (device loop5): mounted with root inode @ nid 36. [ 364.244670][ T8673] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 364.251241][ T8673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 364.678460][ T8679] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(12) [ 364.685134][ T8679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 364.714148][ T8673] vhci_hcd vhci_hcd.0: Device attached [ 364.719863][ T8682] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(15) [ 364.726845][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 364.811381][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 364.923287][ T8679] vhci_hcd vhci_hcd.0: Device attached [ 364.952963][ T8683] vhci_hcd: connection closed [ 364.953055][ T8680] vhci_hcd: connection closed [ 364.954504][ T9] vhci_hcd: stop threads [ 364.967118][ T8674] vhci_hcd: connection closed [ 364.974801][ T8695] loop5: detected capacity change from 0 to 22 [ 365.054921][ T9] vhci_hcd: release socket [ 365.064478][ T9] vhci_hcd: disconnect device [ 365.074851][ T9] vhci_hcd: stop threads [ 365.079275][ T9] vhci_hcd: release socket [ 365.093169][ T9] vhci_hcd: disconnect device [ 365.094944][ T8695] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 365.125120][ T9] vhci_hcd: stop threads [ 365.156112][ T9] vhci_hcd: release socket [ 365.167148][ T9] vhci_hcd: disconnect device [ 365.172998][ T8695] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 365.662198][ T8707] loop7: detected capacity change from 0 to 1024 [ 368.514074][ T8707] EXT4-fs: error -4 creating inode table initialization thread [ 378.524555][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530916][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.947692][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.954160][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.103905][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 472.110937][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4624/1:b..l [ 472.119327][ C0] (detected by 0, t=10502 jiffies, g=34085, q=426) [ 472.125915][ C0] task:udevd state:R running task stack:24864 pid: 4624 ppid: 3561 flags:0x00004002 [ 472.137829][ C0] Call Trace: [ 472.141117][ C0] [ 472.144052][ C0] __schedule+0x11bb/0x4390 [ 472.148580][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 472.153606][ C0] ? release_firmware_map_entry+0x190/0x190 [ 472.159542][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 472.164836][ C0] preempt_schedule_irq+0xb1/0x150 [ 472.169949][ C0] ? __cond_resched+0xb0/0xb0 [ 472.174623][ C0] ? rcu_is_watching+0x11/0xa0 [ 472.179388][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 472.185190][ C0] irqentry_exit+0x63/0x70 [ 472.189604][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 472.195589][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 472.200877][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 472.220486][ C0] RSP: 0018:ffffc9000352f780 EFLAGS: 00000206 [ 472.226579][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4fb4dcc09c024a00 [ 472.234554][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2b40 RDI: ffffffff8a59a880 [ 472.242557][ C0] RBP: ffffc9000352f8a0 R08: dffffc0000000000 R09: fffffbfff1ff7a19 [ 472.250527][ C0] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: ffffffff8c11c720 [ 472.258613][ C0] R13: 1ffff920006a5efc R14: 0000000000000246 R15: dffffc0000000000 [ 472.266604][ C0] ? read_lock_is_recursive+0x10/0x10 [ 472.272106][ C0] ? deref_stack_reg+0xd0/0x120 [ 472.276976][ C0] ? preempt_count_add+0x8d/0x190 [ 472.282002][ C0] rcu_lock_acquire+0x2a/0x30 [ 472.286676][ C0] ? rcu_lock_acquire+0x5/0x30 [ 472.291436][ C0] is_bpf_text_address+0x1d/0x270 [ 472.296467][ C0] __kernel_text_address+0x9a/0x100 [ 472.301666][ C0] unwind_get_return_address+0x49/0x80 [ 472.307127][ C0] ? stack_trace_save+0xe0/0xe0 [ 472.311974][ C0] arch_stack_walk+0xf2/0x140 [ 472.316657][ C0] ? kmem_cache_free+0x8f/0x210 [ 472.321504][ C0] stack_trace_save+0x98/0xe0 [ 472.326180][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 472.331311][ C0] ? memset+0x1e/0x40 [ 472.335298][ C0] kasan_set_track+0x4b/0x70 [ 472.339894][ C0] ? kasan_set_track+0x4b/0x70 [ 472.344655][ C0] ? kasan_set_free_info+0x1f/0x40 [ 472.349759][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 472.354954][ C0] ? slab_free_freelist_hook+0xea/0x170 [ 472.360500][ C0] ? kmem_cache_free+0x8f/0x210 [ 472.365351][ C0] ? do_sys_openat2+0x207/0x4a0 [ 472.370210][ C0] ? __x64_sys_openat+0x135/0x160 [ 472.375231][ C0] ? do_syscall_64+0x4c/0xa0 [ 472.379817][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.385912][ C0] kasan_set_free_info+0x1f/0x40 [ 472.390849][ C0] ____kasan_slab_free+0xd5/0x110 [ 472.395872][ C0] slab_free_freelist_hook+0xea/0x170 [ 472.401273][ C0] ? do_sys_openat2+0x207/0x4a0 [ 472.406123][ C0] kmem_cache_free+0x8f/0x210 [ 472.410798][ C0] ? fd_install+0x2b1/0x4c0 [ 472.415298][ C0] do_sys_openat2+0x207/0x4a0 [ 472.419982][ C0] ? do_sys_open+0xe0/0xe0 [ 472.424396][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 472.430376][ C0] ? lock_chain_count+0x20/0x20 [ 472.435224][ C0] ? vtime_user_exit+0x2dc/0x400 [ 472.440173][ C0] __x64_sys_openat+0x135/0x160 [ 472.445037][ C0] do_syscall_64+0x4c/0xa0 [ 472.449454][ C0] ? clear_bhb_loop+0x30/0x80 [ 472.454127][ C0] ? clear_bhb_loop+0x30/0x80 [ 472.458957][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.464861][ C0] RIP: 0033:0x7f56b69c7407 [ 472.469282][ C0] RSP: 002b:00007ffeeb9ae320 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 472.477819][ C0] RAX: ffffffffffffffda RBX: 00007f56b68d9880 RCX: 00007f56b69c7407 [ 472.485810][ C0] RDX: 0000000000080241 RSI: 00007ffeeb9ae880 RDI: ffffffffffffff9c [ 472.493792][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 472.501976][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 00005597ae96edfc [ 472.509959][ C0] R13: 00005597ae96edfc R14: 0000000000000001 R15: 00005597ae989140 [ 472.517949][ C0] [ 472.520979][ C0] rcu: rcu_preempt kthread starved for 9766 jiffies! g34085 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 472.532097][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 472.542068][ C0] rcu: RCU grace-period kthread stack dump: [ 472.547956][ C0] task:rcu_preempt state:R running task stack:27232 pid: 15 ppid: 2 flags:0x00004000 [ 472.558762][ C0] Call Trace: [ 472.562047][ C0] [ 472.565006][ C0] __schedule+0x11bb/0x4390 [ 472.569530][ C0] ? release_firmware_map_entry+0x190/0x190 [ 472.575431][ C0] schedule+0x11b/0x1e0 [ 472.579585][ C0] schedule_timeout+0x15c/0x280 [ 472.584585][ C0] ? console_conditional_schedule+0x40/0x40 [ 472.590492][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 472.596398][ C0] ? update_process_times+0x200/0x200 [ 472.601773][ C0] ? prepare_to_swait_event+0x331/0x350 [ 472.607327][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 472.612185][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 472.617388][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 472.623541][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 472.628314][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 472.633648][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 472.638872][ C0] rcu_gp_kthread+0x98/0x350 [ 472.643485][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 472.648611][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 472.654601][ C0] ? __kthread_parkme+0x157/0x1b0 [ 472.659640][ C0] kthread+0x436/0x520 [ 472.663707][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 472.668816][ C0] ? kthread_blkcg+0xd0/0xd0 [ 472.673413][ C0] ret_from_fork+0x1f/0x30 [ 472.677847][ C0] [ 472.680859][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 472.687176][ C0] Sending NMI from CPU 0 to CPUs 1: [ 472.692396][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10