last executing test programs: 2m20.365996603s ago: executing program 2 (id=77): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',root', @ANYBLOB=',grou', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m18.836682824s ago: executing program 2 (id=97): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2m18.590289557s ago: executing program 2 (id=99): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$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") openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x282202, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) brk(0x689d80000000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x84) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) 2m18.392879117s ago: executing program 0 (id=101): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, 0x0, 0x40000c0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) userfaultfd(0x1) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x80047458, &(0x7f00000019c0)) 2m18.180640188s ago: executing program 0 (id=103): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 2m15.504042931s ago: executing program 0 (id=117): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) close(0x3) 2m15.323407178s ago: executing program 0 (id=119): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='check=strict,overriderockperm,map=normal,block=0x0000000000000200,overriderockperm,map=off,session=0x0000000000000051,showassoc,nocompress,gid=', @ANYRESHEX=0x0, @ANYBLOB=',map=off,noYompress,,'], 0x1, 0x9d7, &(0x7f0000001800)="$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") syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000f00)='./file0/../file0/file0\x00', 0x204818, &(0x7f0000000e40)=ANY=[@ANYBLOB='map=off,showassoc,hide,sbsector=0x000000000000a6f2,sbsector=0x0000000000000000,iocharset=cp437,overriderockperm,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x556, &(0x7f00000023c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2m14.260988263s ago: executing program 0 (id=124): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) 2m14.047436084s ago: executing program 2 (id=126): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x20056080}}], 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000300)={&(0x7f0000000000)="baa82b32ebf3abca47c5420903109233dded15396e9ef20c40", 0x19}) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/218, 0xda}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x3, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) dup3(r2, r4, 0x0) 2m13.644723774s ago: executing program 0 (id=128): landlock_create_ruleset(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)="d7c2a74db04a0956169f0741c41621197219876d1586f46d53df421ba4375ca9c9d927bbf98f", 0x26}], 0x1}}], 0x1, 0x0) 2m13.336358814s ago: executing program 32 (id=128): landlock_create_ruleset(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)="d7c2a74db04a0956169f0741c41621197219876d1586f46d53df421ba4375ca9c9d927bbf98f", 0x26}], 0x1}}], 0x1, 0x0) 2m13.260816491s ago: executing program 2 (id=133): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0xa82, 0xfffffffe, 0x10000, 0x1d740000, 0x10}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m12.691550957s ago: executing program 2 (id=135): pipe(&(0x7f0000005880)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m12.552471821s ago: executing program 33 (id=135): pipe(&(0x7f0000005880)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m48.561133388s ago: executing program 3 (id=221): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4}, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 1m47.512096402s ago: executing program 3 (id=226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000cab000)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x3, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x4, 0x800, '\x00', 0x1}, 0x1, [0x1, 0x9, 0x70, 0x2, 0x6, 0x1, 0x9, 0x53f3, 0x3, 0x3, 0x10, 0x2000, 0xa9, 0x7, 0x8, 0x9, 0x6, 0x1ff, 0x4, 0x7, 0x800, 0x4, 0x0, 0x9, 0x7, 0x7a61, 0x40e, 0x3, 0x0, 0x3, 0x1, 0x7, 0x9, 0x7fff, 0x8, 0x4000000000000, 0xf36, 0x8000000, 0x9, 0xd, 0x4, 0x2, 0x1000, 0x7, 0x41bc, 0x5, 0x0, 0x7, 0x194b, 0x1, 0x3, 0x100, 0xcc5, 0x8, 0x8, 0x1, 0x6, 0x6, 0x7c4, 0x100000001, 0x10001, 0x8, 0x4, 0x1, 0xd69f, 0x100000000000101, 0x8001, 0x264, 0x4, 0x1, 0x8000000000000001, 0x7fffffffffffffff, 0x8, 0x1000, 0xc20, 0x4, 0xffffffffffffff7f, 0x5, 0x0, 0x5, 0x2, 0x200, 0x2, 0x1, 0x400, 0x1ff, 0x3, 0x4, 0x8000000000000001, 0x55d475ed, 0x5, 0x4, 0x8000000000b, 0x8, 0x8, 0x250, 0x7, 0x0, 0xa, 0x3, 0x6, 0x7, 0x5, 0x9, 0x80, 0x2, 0x3ff, 0x0, 0x9, 0x7, 0xc1, 0x7, 0x5, 0x1, 0x2, 0x588c, 0xc, 0x21, 0x40, 0xe, 0x401, 0x7fffffff, 0x2, 0x1, 0x70, 0x7, 0xe2, 0xe3]}) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000000)=0x6) 1m46.501836611s ago: executing program 3 (id=229): r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}], 0x1, 0x800, 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) r1 = socket(0x10, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000cc0)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@nodioread_nolock}, {@init_itable}, {@barrier}, {@nodelalloc}, {@i_version}]}, 0x3, 0x44f, &(0x7f0000000500)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x1c2) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fgetxattr(r4, &(0x7f0000001cc0)=@known='trusted.overlay.redirect\x00', &(0x7f0000001d00)=""/67, 0x43) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0}) 1m44.900061448s ago: executing program 3 (id=237): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') r1 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000001380)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da000000", @ANYRES16=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES64=r0, @ANYRESHEX, @ANYRES32=r2, @ANYRESOCT, @ANYRESOCT], 0x10, 0x1da, &(0x7f0000000440)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) 1m42.63720613s ago: executing program 3 (id=246): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='/dev/net/tun\x00', &(0x7f0000000080)='./file0\x00', r0) 1m40.635528618s ago: executing program 3 (id=252): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m40.208547769s ago: executing program 34 (id=252): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 56.310427953s ago: executing program 1 (id=500): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./bus/file0\x00', 0x184028, 0x0, 0x40, 0x0, &(0x7f0000000000)) mount$cgroup(0x0, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080), 0x800001, &(0x7f0000000180)={[{@name={'name', 0x3d, 'blkio.bfq.time\x00'}}]}) 56.165842258s ago: executing program 1 (id=502): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) syz_emit_ethernet(0x36, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="eb0000000000000001000000"]) 55.958379898s ago: executing program 1 (id=504): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000140)='./file0\x00') 55.32586348s ago: executing program 1 (id=509): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x52334a7bac2987bd, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES64], 0x3, 0x250, &(0x7f00000008c0)="$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") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 55.061122416s ago: executing program 1 (id=511): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xd, 0x20401) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0xf000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 53.90338057s ago: executing program 1 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 52.832289875s ago: executing program 35 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 30.10371834s ago: executing program 8 (id=595): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 29.095101759s ago: executing program 8 (id=598): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x189180, 0x2e0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 28.734865824s ago: executing program 4 (id=600): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000b00)=0x6, 0x4) 28.301020567s ago: executing program 8 (id=602): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x4, 0x13012, r1, 0x0) syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) 28.06720899s ago: executing program 4 (id=605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000cab000)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x3, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x4, 0x800, '\x00', 0x1}, 0x1, [0x1, 0x9, 0x70, 0x2, 0x6, 0x1, 0x9, 0x53f3, 0x3, 0x3, 0x10, 0x2000, 0xa9, 0x7, 0x8, 0x9, 0x6, 0x1ff, 0x4, 0x7, 0x800, 0x4, 0x0, 0x9, 0x7, 0x7a61, 0x40e, 0x3, 0x0, 0x3, 0x1, 0x7, 0x9, 0x7fff, 0x8, 0x4000000000000, 0xf36, 0x8000000, 0x9, 0xd, 0x4, 0x2, 0x1000, 0x7, 0x41bc, 0x5, 0x0, 0x7, 0x194b, 0x1, 0x3, 0x100, 0xcc5, 0x8, 0x8, 0x1, 0x6, 0x6, 0x7c4, 0x100000001, 0x10001, 0x8, 0x4, 0x1, 0xd69f, 0x100000000000101, 0x8001, 0x264, 0x4, 0x1, 0x8000000000000001, 0x7fffffffffffffff, 0x8, 0x1000, 0xc20, 0x4, 0xffffffffffffff7f, 0x5, 0x0, 0x5, 0x2, 0x200, 0x2, 0x1, 0x400, 0x1ff, 0x3, 0x4, 0x8000000000000001, 0x55d475ed, 0x5, 0x4, 0x8000000000b, 0x8, 0x8, 0x250, 0x7, 0x0, 0xa, 0x3, 0x6, 0x7, 0x5, 0x9, 0x80, 0x2, 0x3ff, 0x0, 0x9, 0x7, 0xc1, 0x7, 0x5, 0x1, 0x2, 0x588c, 0xc, 0x21, 0x40, 0xe, 0x401, 0x7fffffff, 0x2, 0x1, 0x70, 0x7, 0xe2, 0xe3]}) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000000)=0x6) 26.979478377s ago: executing program 5 (id=606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 26.816104423s ago: executing program 8 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 26.701083404s ago: executing program 5 (id=609): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) 26.635355791s ago: executing program 8 (id=610): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r1 = creat(0x0, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000001380)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da000000", @ANYRES16=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYRES32=r2, @ANYRESOCT, @ANYRESOCT], 0x10, 0x1da, &(0x7f0000000440)="$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") fallocate(r0, 0x0, 0xbf5, 0x2000402) 26.156352568s ago: executing program 5 (id=612): close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0xa7e, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010105, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4620, 0x4, 0x20000cd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 25.899409263s ago: executing program 8 (id=613): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 25.004981871s ago: executing program 5 (id=614): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknod$loop(&(0x7f00000000c0)='./file1/file4/file6\x00', 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a}, 0x0) 24.783279083s ago: executing program 6 (id=617): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r0, 0xff, 0x24, 0x0, &(0x7f0000000000)) 24.6054149s ago: executing program 6 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000100017"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 24.40970032s ago: executing program 6 (id=619): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x300) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) 24.175493623s ago: executing program 6 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.749300725s ago: executing program 6 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fsc']) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) rename(0x0, &(0x7f0000000300)='./cgroup.cpu/cpuset.cpus\x00') write$tcp_mem(r0, &(0x7f0000000240)={0x0, 0x2c, 0x0, 0x2c, 0x0, 0x2c}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x50) 23.48333401s ago: executing program 6 (id=624): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) mkdir(0x0, 0x108) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mknod$loop(0x0, 0x0, 0x1) 23.327884736s ago: executing program 4 (id=626): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 21.698915336s ago: executing program 5 (id=629): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) 21.223641823s ago: executing program 5 (id=631): mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x4d]}}]}) 18.804570161s ago: executing program 4 (id=637): r0 = syz_open_dev$usbmon(&(0x7f0000000500), 0xffffffff, 0x800) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001680)) 18.589302082s ago: executing program 4 (id=638): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0x47, 0x1b0a9fffe, 0x8, 0x1ff, 0x6, 0x4032}) 18.107543089s ago: executing program 4 (id=639): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000480)) 17.090892289s ago: executing program 7 (id=641): r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}], 0x1, 0x800, 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) r1 = socket(0x10, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(&(0x7f0000000080)='./file1\x00', 0x1c2) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fgetxattr(r4, &(0x7f0000001cc0)=@known='trusted.overlay.redirect\x00', &(0x7f0000001d00)=""/67, 0x43) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0}) 16.931642045s ago: executing program 7 (id=642): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0xe1df, 0xb, 0x3, 0x0, r1}) 16.687423119s ago: executing program 7 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.285583338s ago: executing program 7 (id=644): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) 16.126156464s ago: executing program 7 (id=645): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f00000005c0)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652d666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a85035eb86c32a59f1f3acdb98c", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX, @ANYRES8=0x0], 0x0, 0x6eb, &(0x7f0000000dc0)="$eJzs3UtoHPcdB/DvrFYvFxw58SMtgYgY0lJTW7JwWvdSt5TiQyghPfQsHDkWXttBUopsSqP0ce8hh9JTetAt9FDSu6E9N6SUXHUMFHLJyTeVnZ1d7UqrXcmSJTX5fMTs/Gf+z/nNzszuDmICfG3dvJT64xS5een11ebyxvpcY2R9brzKbiQZS1JL6s1ZM30/Ze6Naso3kxRV+aLT8L97+/lg8fqbn3258XlrqV5NZfmip95wYztXrVVTppOMVPOdRndp8ePt3fe0d2vX9vZqawubAbvYDlz+fKBW4cA2d1jr5H30n/J1UPX9HLfACVW0rps7TCWnkkwkrat+dXaoHe3oDt/acQ8AAAAA9mty/1Wee5InWc3pZzEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Kqqnv9fVFOtnZ5O0X7+/1i1LlX6BBr+IMRPx1vzx89+MAAAAAAAAADwzL38JE+ymtPt5c2ivOf/Stc9/m/k3SxnIUu5nNXMZyUrWcpskqmuhsZW51dWlmbLmsnZATWv5pM+Na/uPsYbh7zNAAAAAAAAAHDCTQzJvztazv7U/X/7v83Nrfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEhTJSGtWTmfb6anU6kkm2uXWkk+SjB3vaPel6Lfy8dGPAwAAAA5konexmNhDnefey5Os5nR7ebMov/OfL78vT+Td3M9KFrOSRhbyVvUduvmtv7axPtfYWJ+715x2tvvjL/Y19LLFtH576N9zkrV6kttZLNdczq0U2SzVqlZe3Fifa87v9R/X+80xFT+qDBjNSFe67PnCx2X6j72/ItT3tYlPqbZrzlSZO9qJyEw1tmaNM+0I9I9Ez97p9zapD+xpNrXOLz9nB/fUP+bvD97mU9tK9f3l5lhsj8TV1Dp76PzgSCTf/vtHv7zTuH/3zu3lSydnk/p6b2iJ7ZGY64rEha9QJIabKSNxrrN8Mz/LL3IpX4y/kaUs5leZz0oWptv589X7ufk6NThSn57qXnpj2Eiax+R05/zVb0zT6RlTpvPTMjWfV8p9ejqLKfIgyUJeK/+uZrZzNtjaw+f2cNTX9nCm7XLxO+WsE6ZM7l72r3tr8rA043qmK67d59ypMq97zVaUnu8bpfa1bu/Xoy71b1WJZgu/G3h9OGrbIzHbFYkXdnu/tEL6l/Jqsty4f3fpzvw7e+zv1WrePI7+cKKuEs2teT4T1cadKV+L8piaKfNe6Fxhe+M1Vt1xaantyDvXqdc6Un+eB3mr50j9fq7lWq6Xpc+XpUd3XLGaeRc6LfWew5t5LzbzOjd2uj9vPUij9XkIgJPt1HdPjU3+d/Jfkx9O/n7yzuTrEz8Z/8H4S2MZ/efoD+szI6/WXir+lg/zm63v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNNbfvjo7nyjsbDUP1Hrn1UMrjXf2Gw/SGxAmZ5EUT0qZw+Fi+WHjzaHNjg4MV4N7ymrH2ai/Ri+4YWnB7ZTP9AwirXt+2ti+L5oP+VpD10UOwLerPzUoWv3vLVm9ATsyu2J6cNrsP2G7craz7t3tOeg78kaSdKv1pATx8jBzjvA8buycu+dK8sPH31v8d782wtvL9wfvXbt+sz1a6/NXbm92FiYab12VTiSh98CR6H740THWJKXh9cd8KBWAAAAAAAAAAAA4Bk6iv+FOO5tBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/3byU+uMUmZ25PNNc3lifazSndnqrZD1JLUnx66T4R3IjrSlTXc0Vu/XzweL1Nz/7cuPzrbbq7fK1ZG3XenuzVk2ZTjJSzQ+rvVvD2xvbSo73yS46kWkG7GI7cHDc/hcAAP//ZuzqYw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44080) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) socket$inet(0xa, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xf, 0x0) 15.829045853s ago: executing program 7 (id=646): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x3, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0xb76}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0x3, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x4, 0x8}], 0xe}) 9.913621765s ago: executing program 36 (id=613): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 7.535912139s ago: executing program 37 (id=624): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) mkdir(0x0, 0x108) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mknod$loop(0x0, 0x0, 0x1) 5.546556794s ago: executing program 38 (id=631): mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x4d]}}]}) 3.054225919s ago: executing program 39 (id=639): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000480)) 0s ago: executing program 40 (id=646): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x3, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0xb76}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0x3, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x4, 0x8}], 0xe}) kernel console output (not intermixed with test programs): nique to avoid problems! [ 108.335118][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.358399][ T13] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.361579][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.375372][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.404332][ T13] usb 5-1: config 0 descriptor?? [ 108.428882][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.463712][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.522148][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.540505][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.564438][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.584696][ T5009] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.605763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.626401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.669188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.715466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.751171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.771474][ T5014] overlayfs: missing 'lowerdir' [ 108.781744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.796934][ T5014] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 108.820250][ T4651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.846391][ T4651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.865650][ T4651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.875945][ T4651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.889495][ T13] microsoft 0003:045E:07DA.0003: unknown main item tag 0xe [ 108.908532][ T4671] device veth0_vlan entered promiscuous mode [ 108.925592][ T13] microsoft 0003:045E:07DA.0003: collection stack underflow [ 108.934143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.949007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.961012][ T13] microsoft 0003:045E:07DA.0003: item 0 1 0 12 parsing failed [ 108.974077][ T13] microsoft 0003:045E:07DA.0003: parse failed [ 109.002587][ T4671] device veth1_vlan entered promiscuous mode [ 109.026679][ T13] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 109.143281][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.171851][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.320655][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.341859][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.359865][ T4246] usb 5-1: USB disconnect, device number 3 [ 109.383986][ T4671] device veth0_macvtap entered promiscuous mode [ 109.404571][ T5021] loop1: detected capacity change from 0 to 512 [ 109.477106][ T4671] device veth1_macvtap entered promiscuous mode [ 109.520265][ T5021] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #12: comm syz.1.213: iget: bad extra_isize 64544 (inode size 256) [ 109.555066][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.591058][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.630717][ T5021] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.213: couldn't read orphan inode 12 (err -117) [ 109.675301][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.693357][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.703440][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.714012][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.725028][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.740220][ T5021] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 9 [ 109.751498][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.783622][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.816977][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.842522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.851755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.866533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.876168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.890721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.929346][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.957086][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.988911][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.011247][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.023615][ T5038] loop4: detected capacity change from 0 to 16 [ 110.039704][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.072669][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.098480][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.127349][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.140919][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.155744][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.203534][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.205351][ T5038] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 110.227060][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.309231][ T4671] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.324361][ T4671] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.338889][ T4671] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.349478][ T4671] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.578656][ T5045] loop3: detected capacity change from 0 to 4096 [ 110.618350][ T5048] 9pnet_virtio: no channels available for device syz [ 110.621651][ T5045] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 110.656239][ T5045] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 110.711830][ T5045] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 110.746559][ T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.790248][ T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.855138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.888503][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.958165][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.003490][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.071662][ T5045] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.086404][ T5045] EXT4-fs (loop3): DAX unsupported by block device. [ 111.245796][ T5070] loop6: detected capacity change from 0 to 512 [ 111.403259][ T5075] overlayfs: missing 'lowerdir' [ 111.489616][ T5075] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.549138][ T5070] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.605324][ T5070] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.192963][ T5089] EXT4-fs error (device loop6): ext4_do_update_inode:5210: inode #2: comm syz.6.136: corrupted inode contents [ 112.206489][ T5089] EXT4-fs error (device loop6): ext4_dirty_inode:6046: inode #2: comm syz.6.136: mark_inode_dirty error [ 112.218863][ T5089] EXT4-fs error (device loop6): ext4_do_update_inode:5210: inode #2: comm syz.6.136: corrupted inode contents [ 112.237823][ T5089] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.136: mark_inode_dirty error [ 113.452733][ T5105] Zero length message leads to an empty skb [ 113.617631][ T5105] loop3: detected capacity change from 0 to 512 [ 113.725389][ T5105] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 113.742491][ T5113] loop5: detected capacity change from 0 to 2048 [ 113.757487][ T5105] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.848001][ T5105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.883691][ T5113] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 113.959026][ T5105] EXT4-fs (loop3): 1 truncate cleaned up [ 113.964739][ T5105] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,nodioread_nolock,init_itable,barrier,nodelalloc,i_version,,errors=continue. Quota mode: none. [ 115.009113][ T5134] overlayfs: missing 'lowerdir' [ 115.069410][ T5135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.315549][ T5139] loop5: detected capacity change from 0 to 764 [ 115.412380][ T5144] loop3: detected capacity change from 0 to 512 [ 115.453493][ T5139] Symlink component flag not implemented [ 115.476403][ T5139] Symlink component flag not implemented [ 115.495981][ T5139] Symlink component flag not implemented (128) [ 115.506973][ T5139] Symlink component flag not implemented (122) [ 115.993343][ T5144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.237: inode #1: comm syz.3.237: iget: illegal inode # [ 116.013061][ T5144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.237: error while reading EA inode 1 err=-117 [ 116.038539][ T5144] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.102549][ T5144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.237: inode #1: comm syz.3.237: iget: illegal inode # [ 116.140003][ T5144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.237: error while reading EA inode 1 err=-117 [ 116.332150][ T5144] EXT4-fs (loop3): 1 orphan inode deleted [ 116.356285][ T5144] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 117.245997][ T4183] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /70/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 117.374328][ T4183] EXT4-fs error (device loop3): ext4_free_branches:1043: inode #13: block 234881024: comm syz-executor: Read failure [ 117.550741][ T4183] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 117.628558][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 117.673366][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 117.683590][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 117.696744][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 117.709445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 117.719137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 117.733969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 117.759546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 117.958294][ T4183] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 118.796270][ T5186] loop5: detected capacity change from 0 to 1024 [ 118.855731][ T5186] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.058175][ T5186] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,init_itable=0x0000000000010004,barrier=0x0000000000000001,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007af,data_err=ignore,nouid32,noquota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 119.345613][ T5200] loop4: detected capacity change from 0 to 512 [ 119.412844][ T5186] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.249: Allocating blocks 497-513 which overlap fs metadata [ 119.519313][ T5200] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.552059][ T5200] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 119.576836][ T5186] EXT4-fs (loop5): pa ffff888074637a80: logic 128, phys. 385, len 8 [ 119.585304][ T5186] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 119.725586][ T5209] loop1: detected capacity change from 0 to 512 [ 119.936126][ T5209] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.947501][ T5209] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.306431][ T5218] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.255: corrupted inode contents [ 120.319322][ T5218] EXT4-fs error (device loop1): ext4_dirty_inode:6046: inode #2: comm syz.1.255: mark_inode_dirty error [ 120.331587][ T5218] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.255: corrupted inode contents [ 120.343986][ T5218] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.255: mark_inode_dirty error [ 120.671292][ T5228] loop4: detected capacity change from 0 to 2048 [ 120.814217][ T5228] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.067109][ T5240] overlayfs: missing 'lowerdir' [ 121.177921][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 121.183760][ T5243] loop4: detected capacity change from 0 to 512 [ 121.217085][ T5243] EXT4-fs (loop4): Ignoring removed nobh option [ 121.231140][ T4270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.270456][ T5243] EXT4-fs (loop4): Test dummy encryption mode enabled [ 121.317274][ T5243] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.403670][ T5243] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.262: iget: bad i_size value: 38620345925642 [ 121.514368][ T5243] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.262: couldn't read orphan inode 15 (err -117) [ 121.527071][ T5243] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 121.534980][ T4270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.563440][ T5243] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.262: iget: bad i_size value: 38620345925642 [ 121.722435][ T4270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.875781][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.902381][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.918474][ T5212] device bridge_slave_0 entered promiscuous mode [ 121.961475][ T4270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.004434][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.012179][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.038887][ T5212] device bridge_slave_1 entered promiscuous mode [ 122.099725][ T4226] Bluetooth: hci0: command 0x0409 tx timeout [ 122.178998][ T5276] loop4: detected capacity change from 0 to 1024 [ 122.186376][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.223366][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.423390][ T5212] team0: Port device team_slave_0 added [ 122.479502][ T5212] team0: Port device team_slave_1 added [ 122.673227][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.716535][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.752644][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.789799][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.811534][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.828060][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.862199][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.027541][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 123.039245][ T5212] device hsr_slave_0 entered promiscuous mode [ 123.133326][ T5212] device hsr_slave_1 entered promiscuous mode [ 123.147908][ T13] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.163405][ T13] usb 2-1: config 0 has no interface number 0 [ 123.177429][ T13] usb 2-1: config 0 interface 184 has no altsetting 0 [ 123.288899][ T5322] loop5: detected capacity change from 0 to 512 [ 123.456681][ T5322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.482383][ T5322] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.680235][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.689395][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.697485][ T13] usb 2-1: Product: syz [ 123.701681][ T13] usb 2-1: Manufacturer: syz [ 123.706309][ T13] usb 2-1: SerialNumber: syz [ 123.713020][ T13] usb 2-1: config 0 descriptor?? [ 123.754504][ T5212] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.772638][ T13] smsc75xx v1.0.0 [ 123.786650][ T13] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 123.802109][ T5336] loop6: detected capacity change from 0 to 256 [ 123.804039][ T13] smsc75xx: probe of 2-1:0.184 failed with error -22 [ 123.846210][ T5212] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.855290][ T5336] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.855484][ T5337] EXT4-fs error (device loop5): ext4_do_update_inode:5210: inode #2: comm syz.5.281: corrupted inode contents [ 123.879486][ T5337] EXT4-fs error (device loop5): ext4_dirty_inode:6046: inode #2: comm syz.5.281: mark_inode_dirty error [ 123.890332][ T5336] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 123.905641][ T5337] EXT4-fs error (device loop5): ext4_do_update_inode:5210: inode #2: comm syz.5.281: corrupted inode contents [ 123.919376][ T5337] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.281: mark_inode_dirty error [ 123.947314][ T5336] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 123.973471][ T5212] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.973950][ T5289] udc-core: couldn't find an available UDC or it's busy [ 124.001164][ T5289] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.008919][ T5212] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.038419][ T4225] usb 2-1: USB disconnect, device number 3 [ 124.220475][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 124.472932][ T5353] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.287' sets config #4 [ 124.655282][ T5358] loop4: detected capacity change from 0 to 128 [ 124.673170][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.711234][ T5364] overlayfs: missing 'lowerdir' [ 124.737504][ T5358] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 124.757547][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.791217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.811378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.823815][ T5358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.871918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.950351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.004662][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.011814][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.050135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.062971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.071557][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.078678][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.112030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.181474][ T4270] device hsr_slave_0 left promiscuous mode [ 125.355855][ T4270] device hsr_slave_1 left promiscuous mode [ 125.365854][ T5381] overlayfs: missing 'lowerdir' [ 125.384800][ T4270] device bridge_slave_1 left promiscuous mode [ 125.416368][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.246923][ T5387] input: syz1 as /devices/virtual/input/input6 [ 126.257512][ T4270] device bridge_slave_0 left promiscuous mode [ 126.263756][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.271930][ T4247] Bluetooth: hci0: command 0x040f tx timeout [ 126.360945][ T4270] device veth1_macvtap left promiscuous mode [ 126.367703][ T4270] device veth0_macvtap left promiscuous mode [ 126.373817][ T4270] device veth1_vlan left promiscuous mode [ 126.381707][ T4270] device veth0_vlan left promiscuous mode [ 126.589431][ T4226] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.725031][ T5401] loop5: detected capacity change from 0 to 256 [ 126.804077][ T5401] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 126.847063][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 126.876786][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 126.967497][ T4226] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.168193][ T4226] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 127.191096][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.232009][ T4226] usb 5-1: Product: syz [ 127.279422][ T4226] usb 5-1: Manufacturer: syz [ 127.322340][ T4226] usb 5-1: SerialNumber: syz [ 127.465387][ T4226] usb 5-1: config 0 descriptor?? [ 127.748824][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.817050][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.854075][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.870200][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.880778][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.944271][ T4226] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 127.981604][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.026932][ T23] usb 5-1: USB disconnect, device number 4 [ 128.056964][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.067370][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 128.082418][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.092851][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.108084][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.210748][ T5212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.281397][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.337898][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 128.345001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.384136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.427583][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.477264][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.487068][ T21] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.561691][ T21] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.607617][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.647975][ T21] usb 7-1: config 0 descriptor?? [ 128.662044][ T5435] loop4: detected capacity change from 0 to 512 [ 128.806519][ T5435] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.820485][ T5435] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.837656][ T5442] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 129.159533][ T21] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 129.200284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.200289][ T21] plantronics 0003:047F:FFFF.0004: parse failed [ 129.217675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.225329][ T5448] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.310: corrupted inode contents [ 129.243465][ T5448] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #2: comm syz.4.310: mark_inode_dirty error [ 129.259295][ T5448] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.310: corrupted inode contents [ 129.274753][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.281866][ T5448] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.310: mark_inode_dirty error [ 129.301186][ T21] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 129.468855][ T21] usb 7-1: USB disconnect, device number 2 [ 129.556699][ T5461] loop5: detected capacity change from 0 to 1024 [ 129.711323][ T5461] hfsplus: invalid extended attribute record [ 129.786556][ T154] hfsplus: b-tree write err: -5, ino 4 [ 129.998024][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.014604][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.075021][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.087021][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.129112][ T5212] device veth0_vlan entered promiscuous mode [ 130.175416][ T5212] device veth1_vlan entered promiscuous mode [ 130.249599][ T5483] overlayfs: missing 'lowerdir' [ 130.309026][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.327986][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.345017][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.482894][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.751402][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.968190][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.093659][ T5212] device veth0_macvtap entered promiscuous mode [ 131.163608][ T5212] device veth1_macvtap entered promiscuous mode [ 131.224663][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.279612][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.320860][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.384562][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.415216][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.476949][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.522921][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.615441][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.436469][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.612165][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.675496][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.697044][ T5517] loop6: detected capacity change from 0 to 512 [ 132.703524][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.714482][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.733126][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.744510][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.764296][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.788066][ T4246] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.827148][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833523][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.853771][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.890056][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.898344][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.907935][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.920166][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.929403][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.944661][ T5212] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.949520][ T5517] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.328: invalid indirect mapped block 10 (level 1) [ 132.968069][ T5212] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.976920][ T5212] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.985827][ T5212] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.121557][ T5517] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.328: invalid indirect mapped block 8 (level 1) [ 133.503504][ T5517] EXT4-fs (loop6): 1 truncate cleaned up [ 133.683967][ T5517] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.066508][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.066578][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.072236][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.089463][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.089534][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.092883][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.129043][ T4246] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.129072][ T4246] usb 6-1: config 0 has no interfaces? [ 134.129100][ T4246] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.129126][ T4246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.131005][ T4246] usb 6-1: config 0 descriptor?? [ 134.240284][ T5526] loop1: detected capacity change from 0 to 2048 [ 134.328300][ T5526] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.839256][ T26] audit: type=1326 audit(1761149185.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.7.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ec3a7fc9 code=0x7fc00000 [ 135.862478][ T5520] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 135.967486][ T4246] usb 6-1: can't set config #0, error -71 [ 135.974825][ T4246] usb 6-1: USB disconnect, device number 2 [ 136.055133][ T5550] overlayfs: missing 'lowerdir' [ 136.396203][ T5555] loop4: detected capacity change from 0 to 1024 [ 136.501451][ T5555] hfsplus: unable to find HFS+ superblock [ 136.729448][ T5570] loop1: detected capacity change from 0 to 512 [ 136.863731][ T5578] loop5: detected capacity change from 0 to 512 [ 136.965172][ T5570] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.055526][ T5570] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.210464][ T5578] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.228141][ T5578] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.244868][ T5588] loop6: detected capacity change from 0 to 512 [ 137.351343][ T5588] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 137.351343][ T5588] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 137.351343][ T5588] [ 137.425261][ T5588] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.458879][ T5578] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 137.459870][ T5598] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.339: corrupted inode contents [ 137.484347][ T5598] EXT4-fs error (device loop1): ext4_dirty_inode:6046: inode #2: comm syz.1.339: mark_inode_dirty error [ 137.508203][ T5598] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.339: corrupted inode contents [ 137.520664][ T5598] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.339: mark_inode_dirty error [ 137.567568][ T5578] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 137.577872][ T5588] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 137.597461][ T5578] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.342: Failed to acquire dquot type 0 [ 137.746850][ T5588] EXT4-fs (loop6): 1 truncate cleaned up [ 137.746871][ T5588] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 137.752940][ T144] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 137.826500][ T144] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:1: Failed to release dquot type 1 [ 137.967514][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.217461][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 138.337630][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.359208][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.377257][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.396832][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.463804][ T23] usb 5-1: config 0 descriptor?? [ 138.548443][ T23] hub 5-1:0.0: USB hub found [ 138.785485][ T5604] loop4: detected capacity change from 0 to 1024 [ 138.795675][ T5640] loop5: detected capacity change from 0 to 2048 [ 138.851528][ T5640] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 138.899364][ T5640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.927633][ T5604] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 138.927633][ T5604] [ 138.972167][ T5604] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 139.047457][ T23] hub 5-1:0.0: 1 port detected [ 139.277679][ T23] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 139.295064][ T23] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 139.447513][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 139.453583][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 139.513945][ T5658] loop5: detected capacity change from 0 to 1024 [ 139.552223][ T23] usb 5-1: USB disconnect, device number 5 [ 139.620299][ T5660] loop1: detected capacity change from 0 to 512 [ 139.769695][ T5660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.895340][ T5669] overlayfs: missing 'lowerdir' [ 139.950672][ T5676] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 140.114935][ T5685] loop5: detected capacity change from 0 to 1024 [ 141.296038][ T26] audit: type=1800 audit(1761149191.179:6): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.364" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 141.336650][ T5699] loop4: detected capacity change from 0 to 512 [ 141.422477][ T5699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.546245][ T5699] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.690916][ T1534] hfsplus: b-tree write err: -5, ino 4 [ 141.698905][ T5708] loop1: detected capacity change from 0 to 512 [ 141.877416][ T5708] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 141.905369][ T5708] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.017776][ T5708] EXT4-fs (loop1): 1 truncate cleaned up [ 142.023492][ T5708] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,nodioread_nolock,init_itable,barrier,nodelalloc,i_version,,errors=continue. Quota mode: none. [ 142.480994][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.7.373'. [ 143.187345][ T5730] loop1: detected capacity change from 0 to 512 [ 143.258034][ T5736] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.368: corrupted inode contents [ 143.273160][ T5736] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #2: comm syz.4.368: mark_inode_dirty error [ 143.290909][ T5736] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.368: corrupted inode contents [ 143.337988][ T5736] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.368: mark_inode_dirty error [ 143.424082][ T5730] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.651420][ T23] Bluetooth: hci0: command 0x1407 tx timeout [ 143.899115][ T5756] overlayfs: missing 'lowerdir' [ 143.968531][ T5756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.493058][ T5771] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 145.257052][ T5773] loop1: detected capacity change from 0 to 512 [ 145.277183][ C0] sched: RT throttling activated [ 145.530109][ T5786] loop6: detected capacity change from 0 to 512 [ 145.675590][ T5773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 145.703919][ T5773] System zones: 1-12 [ 145.717783][ T5786] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.796064][ T5773] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.387: error while reading EA inode 32 err=-116 [ 145.811194][ T5786] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.938245][ T5773] EXT4-fs (loop1): Remounting filesystem read-only [ 145.945574][ T5773] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.387: error while reading EA inode 32 err=-116 [ 145.981275][ T5773] EXT4-fs (loop1): Remounting filesystem read-only [ 146.014424][ T5773] EXT4-fs (loop1): 1 orphan inode deleted [ 146.051080][ T5773] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,. Quota mode: none. [ 146.255643][ T5773] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.387: invalid indirect mapped block 234881024 (level 0) [ 146.322211][ T5773] EXT4-fs (loop1): Remounting filesystem read-only [ 146.519737][ T5811] loop4: detected capacity change from 0 to 128 [ 146.616482][ T5811] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.670400][ T5811] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.804188][ T5811] cgroup: Unknown subsys name 'audit' [ 146.894019][ T5818] loop1: detected capacity change from 0 to 1024 [ 147.043671][ T5818] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.063552][ T5827] EXT4-fs error (device loop6): ext4_do_update_inode:5210: inode #2: comm syz.6.390: corrupted inode contents [ 147.076196][ T5827] EXT4-fs error (device loop6): ext4_dirty_inode:6046: inode #2: comm syz.6.390: mark_inode_dirty error [ 147.088648][ T5827] EXT4-fs error (device loop6): ext4_do_update_inode:5210: inode #2: comm syz.6.390: corrupted inode contents [ 147.106400][ T5827] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.390: mark_inode_dirty error [ 147.173966][ T5829] loop4: detected capacity change from 0 to 512 [ 147.397656][ T5829] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.397: iget: bad i_size value: 38620345925642 [ 147.441995][ T5829] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.397: couldn't read orphan inode 15 (err -117) [ 147.475419][ T5829] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.177289][ T4683] Bluetooth: hci3: command 0x0401 tx timeout [ 148.229325][ T5861] loop4: detected capacity change from 0 to 512 [ 148.325281][ T5865] capability: warning: `syz.1.406' uses deprecated v2 capabilities in a way that may be insecure [ 148.358499][ T5861] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.936033][ T5876] loop1: detected capacity change from 0 to 256 [ 149.129198][ T5876] FAT-fs (loop1): Directory bread(block 64) failed [ 149.150631][ T5876] FAT-fs (loop1): Directory bread(block 65) failed [ 149.174214][ T5876] FAT-fs (loop1): Directory bread(block 66) failed [ 149.219927][ T5876] FAT-fs (loop1): Directory bread(block 67) failed [ 149.226586][ T5876] FAT-fs (loop1): Directory bread(block 68) failed [ 149.263936][ T5876] FAT-fs (loop1): Directory bread(block 69) failed [ 149.290816][ T5876] FAT-fs (loop1): Directory bread(block 70) failed [ 149.310656][ T5876] FAT-fs (loop1): Directory bread(block 71) failed [ 149.323608][ T5876] FAT-fs (loop1): Directory bread(block 72) failed [ 149.364754][ T5876] FAT-fs (loop1): Directory bread(block 73) failed [ 149.966915][ T4889] attempt to access beyond end of device [ 149.966915][ T4889] loop1: rw=1, want=1256, limit=256 [ 150.021299][ T4889] attempt to access beyond end of device [ 150.021299][ T4889] loop1: rw=1, want=1832, limit=256 [ 150.132248][ T4889] attempt to access beyond end of device [ 150.132248][ T4889] loop1: rw=1, want=4480, limit=256 [ 150.494317][ T5921] loop4: detected capacity change from 0 to 512 [ 150.526895][ T5918] loop7: detected capacity change from 0 to 2048 [ 150.606987][ T5918] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 150.621875][ T5926] loop5: detected capacity change from 0 to 1024 [ 150.649459][ T5918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.682853][ T5921] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 150.682853][ T5921] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 150.682853][ T5921] [ 150.730982][ T5926] EXT4-fs (loop5): Unrecognized mount option "permit_directio" or missing value [ 150.825300][ T5921] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 150.968415][ T5921] EXT4-fs (loop4): 1 truncate cleaned up [ 151.002803][ T5921] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 151.137976][ T5941] syz.1.429 uses obsolete (PF_INET,SOCK_PACKET) [ 151.192887][ T5921] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 4: comm syz.4.423: lblock 0 mapped to illegal pblock 4 (length 1) [ 151.535794][ T5950] netlink: 13 bytes leftover after parsing attributes in process `syz.5.430'. [ 153.121681][ T5983] loop7: detected capacity change from 0 to 256 [ 154.706021][ T5997] loop1: detected capacity change from 0 to 1024 [ 155.943074][ T5997] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 155.955344][ T5997] jbd2_journal_init_inode: Cannot locate journal superblock [ 155.962813][ T5997] EXT4-fs (loop1): Could not load journal inode [ 156.379182][ T6018] loop5: detected capacity change from 0 to 128 [ 157.959053][ T6072] loop7: detected capacity change from 0 to 512 [ 158.035883][ T6074] loop1: detected capacity change from 0 to 256 [ 158.050195][ T6076] loop4: detected capacity change from 0 to 512 [ 158.134070][ T6074] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.157855][ T6072] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.227847][ T6074] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 158.257406][ T6072] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.273529][ T6076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.287885][ T6074] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 158.365094][ T6076] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.580190][ T4246] Bluetooth: hci0: command 0x1407 tx timeout [ 158.724553][ T6099] loop6: detected capacity change from 0 to 8 [ 158.830013][ T6098] loop7: detected capacity change from 0 to 2048 [ 159.006809][ T6098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.914980][ T6112] loop6: detected capacity change from 0 to 512 [ 160.094005][ T6112] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.500106][ T6140] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.466: corrupted inode contents [ 160.536398][ T6141] loop5: detected capacity change from 0 to 512 [ 160.567790][ T6140] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #2: comm syz.4.466: mark_inode_dirty error [ 160.638092][ T6141] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.877851][ T6140] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.466: corrupted inode contents [ 161.147369][ T6140] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.466: mark_inode_dirty error [ 161.890163][ T6159] loop1: detected capacity change from 0 to 8 [ 162.103802][ T6170] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 162.137299][ T4683] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 162.266856][ T6172] loop1: detected capacity change from 0 to 512 [ 162.424850][ T6172] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.436238][ T6182] loop5: detected capacity change from 0 to 512 [ 162.469825][ T6172] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 162.540740][ T6182] EXT4-fs (loop5): Ignoring removed nobh option [ 162.567486][ T4683] usb 8-1: config 0 has an invalid interface number: 125 but max is 0 [ 162.585950][ T4683] usb 8-1: config 0 has no interface number 0 [ 162.592690][ T4683] usb 8-1: config 0 interface 125 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 162.641529][ T6182] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 162.647542][ T4246] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 162.657482][ T6182] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.495: invalid indirect mapped block 256 (level 1) [ 162.657936][ T6182] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.495: invalid indirect mapped block 2683928664 (level 1) [ 162.686646][ T6182] EXT4-fs (loop5): 1 truncate cleaned up [ 162.692956][ T6182] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x0000000000000f49,nobh,nojournal_checksum,noquota,usrjquota=.grpquota,barrier=0x0000000000000008,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 162.837881][ T4683] usb 8-1: New USB device found, idVendor=0506, idProduct=03e8, bcdDevice=10.01 [ 162.868801][ T4683] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.915396][ T4683] usb 8-1: Product: syz [ 162.930616][ T6190] loop1: detected capacity change from 0 to 512 [ 162.943715][ T4683] usb 8-1: Manufacturer: syz [ 162.975514][ T4683] usb 8-1: SerialNumber: syz [ 163.010706][ T4683] usb 8-1: config 0 descriptor?? [ 163.041951][ T6190] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.496: bg 0: block 248: padding at end of block bitmap is not set [ 163.075191][ T6190] Quota error (device loop1): write_blk: dquota write failed [ 163.108822][ T6190] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 163.142000][ T6190] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.496: Failed to acquire dquot type 1 [ 163.163543][ T6190] EXT4-fs (loop1): 1 truncate cleaned up [ 163.179737][ T6190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.191893][ T4246] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 163.222665][ T4246] usb 7-1: config 1 has no interface number 0 [ 163.243135][ T6201] loop4: detected capacity change from 0 to 512 [ 163.250182][ T6190] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.265129][ T6201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.278137][ T6190] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.496: deleted inode referenced: 12 [ 163.288338][ T4246] usb 7-1: config 1 interface 105 has no altsetting 0 [ 163.304205][ T6201] EXT4-fs (loop4): 1 truncate cleaned up [ 163.306044][ T4683] kaweth 8-1:0.125: Firmware present in device. [ 163.317364][ T6201] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,bsdgroups,noblock_validity,,errors=continue. Quota mode: none. [ 163.360469][ T4683] kaweth 8-1:0.125: Error reading configuration (-71), no net device created [ 163.396238][ T6201] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.498: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 163.434005][ T4683] kaweth: probe of 8-1:0.125 failed with error -5 [ 163.486639][ T4683] usb 8-1: USB disconnect, device number 2 [ 163.532865][ T4246] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 163.556716][ T4246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.580042][ T4246] usb 7-1: Product: syz [ 163.589075][ T4246] usb 7-1: Manufacturer: syz [ 163.596140][ T4246] usb 7-1: SerialNumber: syz [ 163.638316][ T6210] cgroup: No subsys list or none specified [ 163.990632][ T6224] loop1: detected capacity change from 0 to 256 [ 164.024438][ T6227] loop5: detected capacity change from 0 to 512 [ 164.076407][ T6227] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.092858][ T6224] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.196048][ T6227] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.233186][ T6224] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 164.245574][ T6232] loop7: detected capacity change from 0 to 512 [ 164.286348][ T6224] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 164.308524][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.330791][ T4246] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 164.352913][ T6232] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.406520][ T6232] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.430574][ T4246] aqc111: probe of 7-1:1.105 failed with error -61 [ 164.545050][ T4246] usb 7-1: USB disconnect, device number 3 [ 164.652817][ T6243] loop1: detected capacity change from 0 to 128 [ 164.688975][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 164.737375][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 164.775549][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 164.796117][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 165.008001][ T13] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 165.140537][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.372936][ T13] usb 5-1: Product: syz [ 165.460471][ T13] usb 5-1: Manufacturer: syz [ 165.623276][ T13] usb 5-1: SerialNumber: syz [ 165.658680][ T13] usb 5-1: config 0 descriptor?? [ 165.835994][ T6259] EXT4-fs error (device loop7): ext4_do_update_inode:5210: inode #2: comm syz.7.508: corrupted inode contents [ 165.940576][ T6265] loop6: detected capacity change from 0 to 512 [ 165.956008][ T4684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.037725][ T6265] EXT4-fs (loop6): Test dummy encryption mode enabled [ 166.044333][ T6259] EXT4-fs error (device loop7): ext4_dirty_inode:6046: inode #2: comm syz.7.508: mark_inode_dirty error [ 166.057744][ T6259] EXT4-fs error (device loop7): ext4_do_update_inode:5210: inode #2: comm syz.7.508: corrupted inode contents [ 166.065648][ T13] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 166.087942][ T6265] EXT4-fs (loop6): Test dummy encryption mode enabled [ 166.109256][ T6259] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.508: mark_inode_dirty error [ 166.121939][ T6265] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,stripe=0x0000000000000002,barrier,barrier=0x0000000000000044,auto_da_alloc,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 166.371568][ T4684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.732367][ T4246] usb 5-1: USB disconnect, device number 6 [ 166.890943][ T6265] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #2: comm syz.6.515: Directory hole found for htree leaf block 0 [ 166.946282][ T4684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.086922][ T4684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.123110][ T6277] loop6: detected capacity change from 0 to 256 [ 167.235322][ T6280] loop5: detected capacity change from 0 to 2048 [ 167.368500][ T6277] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 167.401901][ T6280] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.628535][ T6288] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.520: Inode bitmap for bg 0 marked uninitialized [ 168.137452][ T6302] loop5: detected capacity change from 0 to 512 [ 168.306455][ T6302] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,bsdgroups,. Quota mode: writeback. [ 168.492171][ T6302] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.077063][ T6319] loop7: detected capacity change from 0 to 512 [ 169.627465][ T4254] Bluetooth: hci1: command 0x0409 tx timeout [ 169.673366][ T6319] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 170.058274][ T6319] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 170.123337][ T6319] EXT4-fs (loop7): 1 truncate cleaned up [ 170.188487][ T6284] chnl_net:caif_netlink_parms(): no params data found [ 170.195478][ T6319] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,nodioread_nolock,init_itable,barrier,nodelalloc,i_version,,errors=continue. Quota mode: none. [ 170.248744][ T6335] loop5: detected capacity change from 0 to 2048 [ 170.316981][ T6335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.254996][ T6348] loop4: detected capacity change from 0 to 512 [ 171.322655][ T6348] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.427617][ T6348] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.428565][ T6344] raw_sendmsg: syz.6.533 forgot to set AF_INET. Fix it! [ 171.539773][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.590646][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.616020][ T6284] device bridge_slave_0 entered promiscuous mode [ 171.652827][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.680602][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.705826][ T6284] device bridge_slave_1 entered promiscuous mode [ 171.707568][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 171.821610][ T6284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.833944][ T6284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.887310][ T13] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 171.890187][ T6284] team0: Port device team_slave_0 added [ 171.963268][ T4684] device hsr_slave_0 left promiscuous mode [ 171.980989][ T4684] device hsr_slave_1 left promiscuous mode [ 171.997775][ T4684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.005257][ T4684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.027107][ T4684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.039569][ T4684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.051864][ T4684] device bridge_slave_1 left promiscuous mode [ 172.058807][ T4684] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.086423][ T4684] device bridge_slave_0 left promiscuous mode [ 172.101275][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.535: corrupted inode contents [ 172.107427][ T4684] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.127385][ T13] usb 8-1: Using ep0 maxpacket: 16 [ 172.133841][ T4684] device veth1_macvtap left promiscuous mode [ 172.148950][ T4684] device veth0_macvtap left promiscuous mode [ 172.155146][ T4684] device veth1_vlan left promiscuous mode [ 172.167890][ T4684] device veth0_vlan left promiscuous mode [ 172.169197][ T6374] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #2: comm syz.4.535: mark_inode_dirty error [ 172.218009][ T6374] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.535: corrupted inode contents [ 172.274839][ T13] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 172.283897][ T13] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 172.292786][ T6374] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.535: mark_inode_dirty error [ 172.294560][ T13] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.494668][ T13] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.511826][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.527235][ T13] usb 8-1: Product: syz [ 172.537486][ T13] usb 8-1: Manufacturer: syz [ 172.548019][ T13] usb 8-1: SerialNumber: syz [ 172.585270][ T4684] team0 (unregistering): Port device team_slave_1 removed [ 172.603995][ T4684] team0 (unregistering): Port device team_slave_0 removed [ 172.626407][ T4684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.643103][ T4684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.761896][ T4684] bond0 (unregistering): Released all slaves [ 172.992770][ T6284] team0: Port device team_slave_1 added [ 173.051967][ T13] usb 8-1: 0:2 : does not exist [ 173.235999][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.361535][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.650569][ T13] usb 8-1: USB disconnect, device number 3 [ 173.869223][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 173.877465][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.920106][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.927473][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.944754][ T6387] loop6: detected capacity change from 0 to 512 [ 174.307059][ T6389] loop7: detected capacity change from 0 to 512 [ 174.328514][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.694780][ T6284] device hsr_slave_0 entered promiscuous mode [ 174.702148][ T6389] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 174.713784][ T6284] device hsr_slave_1 entered promiscuous mode [ 174.720220][ T6389] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 174.747439][ T6284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.755336][ T6284] Cannot create hsr debugfs directory [ 174.766405][ T6387] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.855686][ T6387] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 174.890270][ T6389] EXT4-fs (loop7): 1 truncate cleaned up [ 174.950519][ T6389] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,nodioread_nolock,init_itable,barrier,nodelalloc,i_version,,errors=continue. Quota mode: none. [ 175.205395][ T4254] Bluetooth: hci2: command 0x0409 tx timeout [ 175.320734][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.380780][ T6407] loop6: detected capacity change from 0 to 4096 [ 175.494682][ T6407] EXT4-fs (loop6): Test dummy encryption mode enabled [ 175.564692][ T6379] chnl_net:caif_netlink_parms(): no params data found [ 175.577085][ T6407] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 175.598609][ T6407] System zones: 0-5 [ 175.664206][ T6407] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 175.865254][ T6284] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 175.937453][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 175.997613][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 176.046471][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 176.083162][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 176.272381][ T6284] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 176.299360][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.306473][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.501107][ T6379] device bridge_slave_0 entered promiscuous mode [ 176.554314][ T6441] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 176.841012][ T6284] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 177.100446][ T6284] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 177.282956][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 177.348379][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.355487][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.673859][ T6450] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 177.720380][ T6379] device bridge_slave_1 entered promiscuous mode [ 178.104830][ T6456] loop4: detected capacity change from 0 to 512 [ 178.115424][ T6457] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 178.317110][ T6464] loop7: detected capacity change from 0 to 128 [ 178.326532][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.371624][ T6456] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 178.404838][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.436580][ T6456] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.483632][ T6464] FAT-fs (loop7): Directory bread(block 414) failed [ 178.523981][ T6464] FAT-fs (loop7): Directory bread(block 415) failed [ 178.562056][ T6464] FAT-fs (loop7): Directory bread(block 416) failed [ 178.607338][ T6464] FAT-fs (loop7): Directory bread(block 417) failed [ 178.626205][ T6464] FAT-fs (loop7): Directory bread(block 418) failed [ 178.627450][ T6379] team0: Port device team_slave_0 added [ 178.663636][ T6464] FAT-fs (loop7): Directory bread(block 419) failed [ 178.673774][ T6464] FAT-fs (loop7): Directory bread(block 420) failed [ 178.681222][ T6379] team0: Port device team_slave_1 added [ 178.731306][ T6464] FAT-fs (loop7): Directory bread(block 421) failed [ 178.821191][ T4485] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 178.858970][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.893665][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.910158][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.985256][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.026900][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.084606][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.106748][ T6284] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.120004][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.132378][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.160378][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.183478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.214707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.217563][ T4485] usb 7-1: config 8 has an invalid interface number: 8 but max is 1 [ 179.244741][ T4485] usb 7-1: config 8 has an invalid interface number: 8 but max is 1 [ 179.246153][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.259927][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.263201][ T4485] usb 7-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 179.288712][ T4485] usb 7-1: config 8 has no interface number 0 [ 179.297383][ T4246] Bluetooth: hci2: command 0x040f tx timeout [ 179.301880][ T4485] usb 7-1: config 8 interface 8 has no altsetting 1 [ 179.323094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.345496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.364717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.430014][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.437217][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.477385][ T4485] usb 7-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 179.504529][ T4485] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.525080][ T4485] usb 7-1: Product: syz [ 179.533945][ T4485] usb 7-1: Manufacturer: syz [ 179.544914][ T4485] usb 7-1: SerialNumber: syz [ 179.610720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.650974][ T6379] device hsr_slave_0 entered promiscuous mode [ 179.668253][ T6379] device hsr_slave_1 entered promiscuous mode [ 179.685474][ T6379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.697385][ T6379] Cannot create hsr debugfs directory [ 179.713584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.730031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.755001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.774368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.848227][ T4485] qmi_wwan: probe of 7-1:8.8 failed with error -22 [ 179.872692][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.882416][ T4485] usb 7-1: USB disconnect, device number 4 [ 179.895825][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.955028][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.980064][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.021376][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.056307][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.082694][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.377950][ T4246] Bluetooth: hci2: command 0x0419 tx timeout [ 181.431507][ T6379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.487354][ T4485] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 181.603799][ T6379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.846025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.853825][ T4485] usb 5-1: config index 0 descriptor too short (expected 51, got 10) [ 181.878289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.885740][ T4485] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 181.911245][ T4485] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 181.923833][ T6379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.971490][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.087349][ T4485] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=ab.07 [ 182.104876][ T6379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.115489][ T4485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.141443][ T4485] usb 5-1: Product: syz [ 182.148905][ T4485] usb 5-1: Manufacturer: syz [ 182.153615][ T4485] usb 5-1: SerialNumber: syz [ 182.161919][ T4485] usb 5-1: config 0 descriptor?? [ 182.417746][ T4485] usb 5-1: USB disconnect, device number 7 [ 182.469780][ T6379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.501521][ T6379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.540664][ T6379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.578083][ T6379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.729135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.753000][ T6555] loop7: detected capacity change from 0 to 512 [ 182.762475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.814833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.830272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.853986][ T6284] device veth0_vlan entered promiscuous mode [ 182.864464][ T6555] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.890464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.900120][ T6555] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 182.958352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.046080][ T6284] device veth1_vlan entered promiscuous mode [ 183.166218][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.239752][ T6284] device veth0_macvtap entered promiscuous mode [ 183.274819][ T6570] loop4: detected capacity change from 0 to 4096 [ 183.319263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.332217][ T6570] EXT4-fs (loop4): Test dummy encryption mode enabled [ 183.356198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.389642][ T6570] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 183.398032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.408307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.429807][ T6570] System zones: 0-5 [ 183.446283][ T6570] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 183.455994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.491335][ T6284] device veth1_macvtap entered promiscuous mode [ 183.501295][ T6578] loop7: detected capacity change from 0 to 512 [ 183.523368][ T6379] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.565610][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.626173][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.631072][ T6578] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 183.636723][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.662268][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.672269][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.682813][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.692786][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.703447][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.715557][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.740405][ T6578] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.775732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.805159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.833845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.854401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.884831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.903095][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.910320][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.925603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.930033][ T6587] loop6: detected capacity change from 0 to 256 [ 183.935407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.959470][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.966648][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.975116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.986647][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.997758][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.011763][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.032375][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.042804][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.053581][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.064282][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.075059][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.087939][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.114582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.149488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.162535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.171920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.201502][ T6284] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.252326][ T6284] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.267388][ T6284] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.281942][ T6591] loop7: detected capacity change from 0 to 512 [ 184.286582][ T6589] loop6: detected capacity change from 0 to 2048 [ 184.288327][ T6284] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.326078][ T4684] device hsr_slave_0 left promiscuous mode [ 184.336936][ T4684] device hsr_slave_1 left promiscuous mode [ 184.345100][ T4684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.353973][ T6589] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.362373][ T4684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.384527][ T6589] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.388650][ T4684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.403191][ T4684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.411401][ T4684] device bridge_slave_1 left promiscuous mode [ 184.418681][ T4684] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.440286][ T4684] device bridge_slave_0 left promiscuous mode [ 184.449629][ T4684] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.457781][ T6591] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.483092][ T4684] device veth1_macvtap left promiscuous mode [ 184.489363][ T4684] device veth0_macvtap left promiscuous mode [ 184.495567][ T4684] device veth1_vlan left promiscuous mode [ 184.501987][ T4684] device veth0_vlan left promiscuous mode [ 184.502174][ T6591] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.798850][ T4684] team0 (unregistering): Port device team_slave_1 removed [ 185.836713][ T4684] team0 (unregistering): Port device team_slave_0 removed [ 185.853955][ T4684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.889940][ T4684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.030737][ T4684] bond0 (unregistering): Released all slaves [ 186.097504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.125329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.157351][ T23] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 186.173620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.187726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.196517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.236892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.256276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.299767][ T6379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.375975][ T6379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.489559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.506643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.588775][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 186.672528][ T6615] loop4: detected capacity change from 0 to 1024 [ 186.707495][ T23] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.714601][ T23] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 186.745002][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.780953][ T23] usb 8-1: config 0 descriptor?? [ 186.808952][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.817134][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.833448][ T6615] EXT4-fs (loop4): Ignoring removed nobh option [ 186.862005][ T6615] EXT4-fs (loop4): Ignoring removed bh option [ 186.891894][ T6615] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.921581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.962239][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.013149][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.051642][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.078155][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.093133][ T6615] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 187.139159][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.188975][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.414546][ T23] hid (null): unknown global tag 0x36 [ 187.437546][ T23] hid (null): invalid report_count -1324407732 [ 187.442684][ T6615] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.583: Allocating blocks 385-513 which overlap fs metadata [ 188.192997][ T23] usb 8-1: USB disconnect, device number 4 [ 188.259567][ T6614] EXT4-fs (loop4): pa ffff8880746377e0: logic 16, phys. 129, len 24 [ 188.268365][ T6614] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 188.315432][ T6637] loop8: detected capacity change from 0 to 128 [ 188.435003][ T6637] attempt to access beyond end of device [ 188.435003][ T6637] loop8: rw=2049, want=234, limit=128 [ 188.594709][ T6650] attempt to access beyond end of device [ 188.594709][ T6650] loop8: rw=2049, want=705, limit=128 [ 188.715770][ T6637] attempt to access beyond end of device [ 188.715770][ T6637] loop8: rw=524288, want=497, limit=128 [ 188.840504][ T6655] loop6: detected capacity change from 0 to 4096 [ 188.842201][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.860036][ T6650] attempt to access beyond end of device [ 188.860036][ T6650] loop8: rw=0, want=242, limit=128 [ 188.897028][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.919421][ T6637] attempt to access beyond end of device [ 188.919421][ T6637] loop8: rw=0, want=242, limit=128 [ 188.923903][ T6664] loop7: detected capacity change from 0 to 256 [ 188.954113][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.970044][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.982420][ T6637] Buffer I/O error on dev loop8, logical block 241, async page read [ 189.023606][ T6655] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 189.032106][ T6637] attempt to access beyond end of device [ 189.032106][ T6637] loop8: rw=0, want=243, limit=128 [ 189.043093][ T6655] EXT4-fs (loop6): Test dummy encryption mode enabled [ 189.048978][ T6379] device veth0_vlan entered promiscuous mode [ 189.058284][ T6664] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 189.089174][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.091654][ T6655] EXT4-fs (loop6): Unrecognized mount option "obj_user='&" or missing value [ 189.115671][ T6637] Buffer I/O error on dev loop8, logical block 242, async page read [ 189.126467][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.149018][ T6637] attempt to access beyond end of device [ 189.149018][ T6637] loop8: rw=0, want=244, limit=128 [ 189.206223][ T6379] device veth1_vlan entered promiscuous mode [ 189.212572][ T6637] Buffer I/O error on dev loop8, logical block 243, async page read [ 189.247248][ T6637] attempt to access beyond end of device [ 189.247248][ T6637] loop8: rw=0, want=245, limit=128 [ 189.293876][ T6637] Buffer I/O error on dev loop8, logical block 244, async page read [ 189.367904][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.385608][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.414503][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.427643][ T6637] attempt to access beyond end of device [ 189.427643][ T6637] loop8: rw=0, want=246, limit=128 [ 189.491131][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.507109][ T6379] device veth0_macvtap entered promiscuous mode [ 189.519521][ T6637] Buffer I/O error on dev loop8, logical block 245, async page read [ 189.532622][ T6637] attempt to access beyond end of device [ 189.532622][ T6637] loop8: rw=0, want=247, limit=128 [ 189.543559][ T6637] Buffer I/O error on dev loop8, logical block 246, async page read [ 189.551840][ T6637] Buffer I/O error on dev loop8, logical block 247, async page read [ 189.556027][ T6379] device veth1_macvtap entered promiscuous mode [ 189.560476][ T6637] Buffer I/O error on dev loop8, logical block 248, async page read [ 189.652003][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.708975][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.749100][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.792408][ T6682] loop4: detected capacity change from 0 to 512 [ 189.804126][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.825911][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.845570][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.865806][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.886668][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.913759][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.937993][ T6682] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 189.959710][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.979506][ T6682] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 189.991972][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.031404][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.053362][ T6682] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 190.090588][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.131087][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.155407][ T6682] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 190.190870][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.201340][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.212223][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.222833][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.225850][ T6682] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 190.236939][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.251452][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.262616][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.274368][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.284806][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.294897][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.314347][ T6379] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.327097][ T6379] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.335815][ T6682] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.336703][ T6379] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.362588][ T6379] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.381752][ T6682] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.594: bg 0: block 34: padding at end of block bitmap is not set [ 190.448505][ T6682] Quota error (device loop4): write_blk: dquota write failed [ 190.477407][ T6682] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 190.514961][ T6682] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.594: Failed to acquire dquot type 1 [ 190.575365][ T6697] loop7: detected capacity change from 0 to 512 [ 190.596710][ T4889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.619014][ T6682] EXT4-fs (loop4): 1 truncate cleaned up [ 190.628021][ T4889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.644614][ T6682] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 190.676983][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.690951][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.692632][ T6697] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.731348][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.777654][ T6697] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 190.807828][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.012706][ T6701] loop8: detected capacity change from 0 to 2048 [ 191.159418][ T6704] loop5: detected capacity change from 0 to 128 [ 191.180376][ T6715] loop4: detected capacity change from 0 to 256 [ 191.203571][ T6701] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.217764][ T4246] Bluetooth: hci3: command 0x0406 tx timeout [ 191.283947][ T6701] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.368340][ T6701] EXT4-fs (loop8): shut down requested (2) [ 191.411218][ T6715] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.508777][ T6715] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.150212][ T6738] loop7: detected capacity change from 0 to 2048 [ 193.273023][ T26] audit: type=1800 audit(1761149243.159:7): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.607" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 193.293371][ T6744] loop5: detected capacity change from 0 to 512 [ 193.315150][ T6743] loop8: detected capacity change from 0 to 512 [ 193.441456][ T6744] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.471985][ T6743] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.487717][ T6744] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 193.571515][ T6743] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.888729][ T6284] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 5: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 193.964809][ T6752] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.217875][ T6284] EXT4-fs error (device loop8): ext4_empty_dir:3145: inode #11: block 5: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 194.328250][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335387][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.794096][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 194.862248][ T6284] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 5: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 194.897024][ T6756] loop7: detected capacity change from 0 to 256 [ 194.948553][ T6284] EXT4-fs error (device loop8): ext4_empty_dir:3145: inode #11: block 5: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 195.003656][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 195.037590][ T6284] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 5: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 195.092764][ T6756] FAT-fs (loop7): Directory bread(block 64) failed [ 195.142899][ T6756] FAT-fs (loop7): Directory bread(block 65) failed [ 195.190924][ T6756] FAT-fs (loop7): Directory bread(block 66) failed [ 195.212428][ T6284] EXT4-fs error (device loop8): ext4_empty_dir:3145: inode #11: block 5: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 195.232894][ T6756] FAT-fs (loop7): Directory bread(block 67) failed [ 195.265140][ T6756] FAT-fs (loop7): Directory bread(block 68) failed [ 195.282586][ T6756] FAT-fs (loop7): Directory bread(block 69) failed [ 195.293722][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 195.311575][ T6756] FAT-fs (loop7): Directory bread(block 70) failed [ 195.319666][ T6768] netlink: 76 bytes leftover after parsing attributes in process `syz.6.618'. [ 195.329492][ T6284] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 5: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 195.351406][ T6756] FAT-fs (loop7): Directory bread(block 71) failed [ 195.358365][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.618'. [ 195.368277][ T6756] FAT-fs (loop7): Directory bread(block 72) failed [ 195.376089][ T6756] FAT-fs (loop7): Directory bread(block 73) failed [ 195.394642][ T6284] EXT4-fs error (device loop8): ext4_empty_dir:3145: inode #11: block 5: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 195.514089][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 195.541083][ T6284] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 5: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 195.616877][ T6284] EXT4-fs error (device loop8): ext4_empty_dir:3145: inode #11: block 5: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4022984917, rec_len=48405, size=1024 fake=0 [ 195.718254][ T6776] loop7: detected capacity change from 0 to 512 [ 195.746987][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 195.800120][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 195.818074][ T6776] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.901935][ T6774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 195.924918][ T6776] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.967395][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 195.999794][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 196.066299][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 196.127086][ T6284] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 196.444016][ T6795] netlink: 'syz.7.625': attribute type 2 has an invalid length. [ 196.472225][ T6795] netlink: 'syz.7.625': attribute type 1 has an invalid length. [ 196.978514][ T6802] loop7: detected capacity change from 0 to 128 [ 197.366776][ T154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.649423][ T154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.805044][ T154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.010087][ T154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.300598][ T6821] loop5: detected capacity change from 0 to 1024 [ 201.364660][ T6867] loop4: detected capacity change from 0 to 512 [ 201.520292][ T6867] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.831795][ T6916] loop7: detected capacity change from 0 to 1024 [ 203.889799][ T6916] hfsplus: unable to parse mount options [ 210.822934][ T7040] chnl_net:caif_netlink_parms(): no params data found [ 211.014934][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.039817][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.072827][ T7040] device bridge_slave_0 entered promiscuous mode [ 211.094551][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.126041][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.151731][ T7040] device bridge_slave_1 entered promiscuous mode [ 211.241249][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.285933][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.391234][ T7040] team0: Port device team_slave_0 added [ 211.432913][ T7040] team0: Port device team_slave_1 added [ 211.527071][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.564424][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.652009][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.685650][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.717361][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.792829][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.060931][ T7040] device hsr_slave_0 entered promiscuous mode [ 212.094954][ T7040] device hsr_slave_1 entered promiscuous mode [ 212.116298][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.144167][ T7040] Cannot create hsr debugfs directory [ 212.417593][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 213.031578][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 213.424280][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.447371][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.456258][ T7085] device bridge_slave_0 entered promiscuous mode [ 213.476363][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.485034][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.502672][ T7085] device bridge_slave_1 entered promiscuous mode [ 213.563611][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.585641][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.651297][ T7085] team0: Port device team_slave_0 added [ 213.668190][ T7085] team0: Port device team_slave_1 added [ 213.716314][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.732506][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.769815][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.793756][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.805834][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.841448][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.922658][ T7085] device hsr_slave_0 entered promiscuous mode [ 213.933722][ T7085] device hsr_slave_1 entered promiscuous mode [ 213.946529][ T7085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.963066][ T7085] Cannot create hsr debugfs directory [ 214.497425][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 214.748349][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 214.852507][ T7116] chnl_net:caif_netlink_parms(): no params data found [ 214.985734][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.003656][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.016758][ T7116] device bridge_slave_0 entered promiscuous mode [ 215.036438][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.053152][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.065834][ T7116] device bridge_slave_1 entered promiscuous mode [ 215.150544][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.175171][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.243615][ T7116] team0: Port device team_slave_0 added [ 215.261927][ T7116] team0: Port device team_slave_1 added [ 215.321970][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.335912][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.372555][ T7116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.396370][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.413858][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.448667][ T7116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.530492][ T7116] device hsr_slave_0 entered promiscuous mode [ 215.544884][ T7116] device hsr_slave_1 entered promiscuous mode [ 215.554349][ T7116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.572474][ T7116] Cannot create hsr debugfs directory [ 216.577387][ T23] Bluetooth: hci6: command 0x0409 tx timeout [ 216.593492][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 216.817513][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 217.430933][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 217.574812][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.608338][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.616765][ T7132] device bridge_slave_0 entered promiscuous mode [ 217.660645][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.686809][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.727500][ T7132] device bridge_slave_1 entered promiscuous mode [ 217.816041][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.860412][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.989197][ T7132] team0: Port device team_slave_0 added [ 218.015627][ T7132] team0: Port device team_slave_1 added [ 218.121405][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.155223][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.259072][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.288977][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.295969][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.407075][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.552960][ T7132] device hsr_slave_0 entered promiscuous mode [ 218.582251][ T7132] device hsr_slave_1 entered promiscuous mode [ 218.599034][ T7132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.606652][ T7132] Cannot create hsr debugfs directory [ 218.657486][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 218.667603][ T4226] Bluetooth: hci6: command 0x041b tx timeout [ 218.897424][ T4226] Bluetooth: hci5: command 0x040f tx timeout [ 219.139627][ T4226] Bluetooth: hci7: command 0x0409 tx timeout [ 220.737291][ T4485] Bluetooth: hci6: command 0x040f tx timeout [ 220.762762][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 220.977384][ T4226] Bluetooth: hci5: command 0x0419 tx timeout [ 221.009957][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.039208][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.068115][ T7183] device bridge_slave_0 entered promiscuous mode [ 221.088925][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.118410][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.148074][ T7183] device bridge_slave_1 entered promiscuous mode [ 221.217351][ T4485] Bluetooth: hci7: command 0x041b tx timeout [ 221.249893][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.280481][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.410016][ T7183] team0: Port device team_slave_0 added [ 221.439264][ T7183] team0: Port device team_slave_1 added [ 221.531394][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.558224][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.640836][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.689422][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.696421][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.810745][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.964187][ T7183] device hsr_slave_0 entered promiscuous mode [ 221.998503][ T7183] device hsr_slave_1 entered promiscuous mode [ 222.019748][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.037281][ T7183] Cannot create hsr debugfs directory [ 222.337671][ T4226] Bluetooth: hci8: command 0x0409 tx timeout [ 222.817736][ T4226] Bluetooth: hci6: command 0x0419 tx timeout [ 223.297506][ T4226] Bluetooth: hci7: command 0x040f tx timeout [ 224.417885][ T4485] Bluetooth: hci8: command 0x041b tx timeout [ 225.377438][ T4485] Bluetooth: hci7: command 0x0419 tx timeout [ 226.497536][ T4485] Bluetooth: hci8: command 0x040f tx timeout [ 228.577411][ T23] Bluetooth: hci8: command 0x0419 tx timeout [ 237.297521][ T4225] Bluetooth: hci4: command 0x0406 tx timeout [ 265.497484][ T3562] udevd[3562]: worker [5611] /devices/virtual/block/loop7 is taking a long time [ 270.980156][ T7536] chnl_net:caif_netlink_parms(): no params data found [ 271.119587][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.137270][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.157388][ T7536] device bridge_slave_0 entered promiscuous mode [ 271.170394][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.189698][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.208461][ T7536] device bridge_slave_1 entered promiscuous mode [ 271.275354][ T7536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.303606][ T7536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.376384][ T7536] team0: Port device team_slave_0 added [ 271.399658][ T7536] team0: Port device team_slave_1 added [ 271.461162][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.477255][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.522438][ T7536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.549587][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.556574][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.595017][ T7536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.684343][ T7536] device hsr_slave_0 entered promiscuous mode [ 271.699706][ T7536] device hsr_slave_1 entered promiscuous mode [ 271.717597][ T7536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.725217][ T7536] Cannot create hsr debugfs directory [ 272.737493][ T4225] Bluetooth: hci9: command 0x0409 tx timeout [ 272.982163][ T7544] chnl_net:caif_netlink_parms(): no params data found [ 273.120796][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.137410][ T4247] Bluetooth: hci0: command 0x0406 tx timeout [ 273.143672][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.162267][ T7544] device bridge_slave_0 entered promiscuous mode [ 273.180084][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.197329][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.217441][ T7544] device bridge_slave_1 entered promiscuous mode [ 273.287560][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.318083][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.401873][ T7544] team0: Port device team_slave_0 added [ 273.427078][ T7544] team0: Port device team_slave_1 added [ 273.491282][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.507363][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.550777][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.577552][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.584558][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.635755][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.725501][ T7544] device hsr_slave_0 entered promiscuous mode [ 273.746808][ T7544] device hsr_slave_1 entered promiscuous mode [ 273.768468][ T7544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.787232][ T7544] Cannot create hsr debugfs directory [ 274.737350][ T4225] Bluetooth: hci10: command 0x0409 tx timeout [ 274.817700][ T4225] Bluetooth: hci9: command 0x041b tx timeout [ 274.992291][ T7552] chnl_net:caif_netlink_parms(): no params data found [ 275.137969][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.145440][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.169702][ T7552] device bridge_slave_0 entered promiscuous mode [ 275.188808][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.208153][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.227432][ T7552] device bridge_slave_1 entered promiscuous mode [ 275.291370][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.319431][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.399714][ T7552] team0: Port device team_slave_0 added [ 275.415991][ T7552] team0: Port device team_slave_1 added [ 275.471302][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.497395][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.543525][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.569642][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.576801][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.624093][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.715971][ T7552] device hsr_slave_0 entered promiscuous mode [ 275.738885][ T7552] device hsr_slave_1 entered promiscuous mode [ 275.747714][ T7552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.755318][ T7552] Cannot create hsr debugfs directory [ 276.737415][ T4225] Bluetooth: hci11: command 0x0409 tx timeout [ 276.817865][ T4225] Bluetooth: hci10: command 0x041b tx timeout [ 276.897622][ T4225] Bluetooth: hci9: command 0x040f tx timeout [ 278.022717][ T7560] chnl_net:caif_netlink_parms(): no params data found [ 278.158537][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.178264][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.197386][ T7560] device bridge_slave_0 entered promiscuous mode [ 278.208908][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.227270][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.247459][ T7560] device bridge_slave_1 entered promiscuous mode [ 278.324601][ T7560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.354654][ T7560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.438448][ T7560] team0: Port device team_slave_0 added [ 278.448741][ T7560] team0: Port device team_slave_1 added [ 278.521476][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.537335][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.595980][ T7560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.619621][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.626629][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.675453][ T7560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.765993][ T7560] device hsr_slave_0 entered promiscuous mode [ 278.788937][ T7560] device hsr_slave_1 entered promiscuous mode [ 278.797714][ T7560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.805325][ T7560] Cannot create hsr debugfs directory [ 278.817531][ T4225] Bluetooth: hci11: command 0x041b tx timeout [ 278.897594][ T4225] Bluetooth: hci10: command 0x040f tx timeout [ 278.977616][ T4225] Bluetooth: hci9: command 0x0419 tx timeout [ 279.777434][ T4225] Bluetooth: hci12: command 0x0409 tx timeout [ 280.897768][ T4247] Bluetooth: hci11: command 0x040f tx timeout [ 280.977496][ T4247] Bluetooth: hci10: command 0x0419 tx timeout [ 281.050487][ T7574] chnl_net:caif_netlink_parms(): no params data found [ 281.210660][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.231110][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.250002][ T7574] device bridge_slave_0 entered promiscuous mode [ 281.298837][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.327835][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.347459][ T7574] device bridge_slave_1 entered promiscuous mode [ 281.418816][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.441010][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.519574][ T7574] team0: Port device team_slave_0 added [ 281.539695][ T7574] team0: Port device team_slave_1 added [ 281.607493][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.614520][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.715746][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.740447][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.757381][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.817468][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.857639][ T4225] Bluetooth: hci12: command 0x041b tx timeout [ 281.933645][ T7574] device hsr_slave_0 entered promiscuous mode [ 281.949590][ T7574] device hsr_slave_1 entered promiscuous mode [ 281.966834][ T7574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.987304][ T7574] Cannot create hsr debugfs directory [ 282.737541][ T4225] Bluetooth: hci13: command 0x0409 tx timeout [ 282.977620][ T4225] Bluetooth: hci11: command 0x0419 tx timeout [ 283.937514][ T4247] Bluetooth: hci12: command 0x040f tx timeout [ 284.817729][ T4247] Bluetooth: hci13: command 0x041b tx timeout [ 286.017499][ T4247] Bluetooth: hci12: command 0x0419 tx timeout [ 286.897536][ T4247] Bluetooth: hci13: command 0x040f tx timeout [ 288.977715][ T4247] Bluetooth: hci13: command 0x0419 tx timeout [ 303.087120][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 303.093790][ C0] rcu: 0-....: (10500 ticks this GP) idle=e4f/1/0x4000000000000000 softirq=17630/17630 fqs=5209 [ 303.105768][ C0] (t=10502 jiffies g=21705 q=20587) [ 303.111097][ C0] NMI backtrace for cpu 0 [ 303.115463][ C0] CPU: 0 PID: 6797 Comm: syz.6.624 Not tainted syzkaller #0 [ 303.122770][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.132840][ C0] Call Trace: [ 303.136118][ C0] [ 303.138994][ C0] dump_stack_lvl+0x168/0x230 [ 303.143693][ C0] ? show_regs_print_info+0x20/0x20 [ 303.148921][ C0] ? load_image+0x3b0/0x3b0 [ 303.153432][ C0] ? vprintk_emit+0x150/0x150 [ 303.158114][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 303.163055][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 303.169207][ C0] ? vprintk_emit+0xf9/0x150 [ 303.173846][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 303.179218][ C0] ? _raw_spin_lock+0x40/0x40 [ 303.183895][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 303.189965][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 303.195969][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 303.201192][ C0] print_cpu_stall+0x31d/0x5f0 [ 303.205956][ C0] rcu_sched_clock_irq+0x6d8/0x1110 [ 303.211161][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 303.216016][ C0] ? account_process_tick+0x227/0x3a0 [ 303.221393][ C0] update_process_times+0x193/0x200 [ 303.226594][ C0] tick_sched_timer+0x37d/0x560 [ 303.231447][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 303.236655][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 303.242426][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 303.247713][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 303.253800][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 303.258788][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 303.264793][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 303.270480][ C0] [ 303.273430][ C0] [ 303.276367][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 303.282360][ C0] RIP: 0010:__local_bh_enable_ip+0x132/0x1b0 [ 303.288348][ C0] Code: 8a e8 92 eb 60 08 65 66 8b 05 8a 25 bb 7e 66 85 c0 75 54 bf 01 00 00 00 e8 ab fe 08 00 e8 e6 74 35 00 fb 65 8b 05 36 fc b9 7e <85> c0 75 05 e8 e5 06 b8 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 303.307965][ C0] RSP: 0018:ffffc900039a7aa0 EFLAGS: 00000286 [ 303.314032][ C0] RAX: 0000000080000000 RBX: 0000000000000200 RCX: fb07d8a15233ac00 [ 303.322019][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: ffffffff8a59a880 [ 303.330070][ C0] RBP: ffffc900039a7b30 R08: dffffc0000000000 R09: ffffed1027fd4481 [ 303.338049][ C0] R10: ffffed1027fd4481 R11: 1ffff11027fd4480 R12: ffffffff812bdd75 [ 303.346027][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000734f54 [ 303.354004][ C0] ? local_bh_enable+0x5/0x20 [ 303.358703][ C0] ? _local_bh_enable+0xa0/0xa0 [ 303.363553][ C0] ? rcu_is_watching+0x11/0xa0 [ 303.368330][ C0] fpu__restore_sig+0x785/0xf50 [ 303.373216][ C0] ? copy_fpstate_to_sigframe+0xb90/0xb90 [ 303.378973][ C0] ? __might_fault+0xb3/0x110 [ 303.383658][ C0] ? _copy_from_user+0x111/0x170 [ 303.388620][ C0] __ia32_sys_rt_sigreturn+0x649/0x790 [ 303.394119][ C0] ? load_gs_index+0x120/0x120 [ 303.398900][ C0] ? lock_chain_count+0x20/0x20 [ 303.403752][ C0] ? vtime_user_exit+0x2dc/0x400 [ 303.408719][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 303.413927][ C0] do_syscall_64+0x4c/0xa0 [ 303.418344][ C0] ? clear_bhb_loop+0x30/0x80 [ 303.423016][ C0] ? clear_bhb_loop+0x30/0x80 [ 303.427692][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.433584][ C0] RIP: 0033:0x7f9dc92f9fc7 [ 303.438002][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 303.457618][ C0] RSP: 002b:00007f9dc75610e8 EFLAGS: 00000246 [ 303.463699][ C0] RAX: 00000000000000ca RBX: 00007f9dc9550fa8 RCX: 00007f9dc92f9fc9 [ 303.471673][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9dc9550fa8 [ 303.479680][ C0] RBP: 00007f9dc9550fa0 R08: 0000000000000000 R09: 0000000000000000 [ 303.487654][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.495623][ C0] R13: 00007f9dc9551038 R14: 00007ffcd126d8c0 R15: 00007ffcd126d9a8 [ 303.503613][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)