last executing test programs: 15.333578669s ago: executing program 1 (id=751): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 13.549266237s ago: executing program 3 (id=756): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 12.107737469s ago: executing program 4 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x1, {0x1, 0x1, 0x4}, 0x1}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, 0x0, 0x4, {0x1, 0xff}, 0xfd}, 0x18, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4c854}, 0x44804) 11.868565361s ago: executing program 3 (id=761): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r3, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xe768, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e24, 0x80, @empty, 0x4}, 0xffffffffffffffff, 0x7ff}}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) 11.822444233s ago: executing program 4 (id=763): accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.100500179s ago: executing program 2 (id=764): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 10.012899393s ago: executing program 2 (id=765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 10.012541203s ago: executing program 4 (id=766): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0}, 0x94) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x3000, 0x0, 0x3) 9.986380434s ago: executing program 3 (id=767): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x7, '\x00\x00@\x00'}, @global=@item_4={0x3, 0x1, 0x5, "05a08000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 9.081354919s ago: executing program 1 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r3, &(0x7f0000001400)=[{&(0x7f0000000200)='\\', 0x1}], 0x1) 8.920385117s ago: executing program 2 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000300)='./bus\x00', 0x1c12c2, 0x1df2a23c5997fa5f) io_uring_setup(0x1f1c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x0) 8.767159645s ago: executing program 0 (id=771): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 8.25258091s ago: executing program 4 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[], &(0x7f00000003c0)=""/178, 0x27, 0xb2, 0x0, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 8.151472685s ago: executing program 1 (id=773): syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f0000000980)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@usefree}, {@utf8}, {@numtail}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@check_strict}, {@utf8no}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) 7.789275613s ago: executing program 0 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000001400)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x6f6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) 7.105939277s ago: executing program 1 (id=775): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x4040) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xffeffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$msr(r4, 0x0, 0x300) read$hidraw(r4, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x46, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x4, 0xc, 0x1}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x6}, @TCA_RATE={0x0, 0x5, {0xf, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) 6.292537598s ago: executing program 0 (id=776): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 5.186202092s ago: executing program 3 (id=777): accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.120569516s ago: executing program 0 (id=778): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 3.790625062s ago: executing program 3 (id=779): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 2.986868472s ago: executing program 0 (id=780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 2.126245404s ago: executing program 2 (id=781): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xd8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) 2.053696208s ago: executing program 4 (id=782): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0}, 0x94) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240), 0x0, 0x3000, 0x0, 0x3) 1.328711704s ago: executing program 0 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd27, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0xc4) 1.238890628s ago: executing program 1 (id=784): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.075766557s ago: executing program 2 (id=785): syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f0000000980)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@usefree}, {@utf8}, {@numtail}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@check_strict}, {@utf8no}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) 616.195719ms ago: executing program 1 (id=786): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) 607.64725ms ago: executing program 3 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x0, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2810, 0x4002, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd3, 0x9}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 244.276818ms ago: executing program 4 (id=788): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 0s ago: executing program 2 (id=789): accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): man_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.912542][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.952535][ T4193] team0: Port device team_slave_0 added [ 51.958803][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.966417][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.992697][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.012007][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.018942][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.029857][ T4193] team0: Port device team_slave_1 added [ 52.037327][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.044551][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.070570][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.112599][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.119566][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.145667][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.171627][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.178739][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.185491][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.193536][ T4182] Cannot create hsr debugfs directory [ 52.212043][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.219523][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.245464][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.265586][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.275842][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.282529][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.290090][ T4192] Cannot create hsr debugfs directory [ 52.364454][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.371371][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.378192][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.386214][ T4183] Cannot create hsr debugfs directory [ 52.395951][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.403622][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.410227][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.417847][ T4193] Cannot create hsr debugfs directory [ 52.482925][ T4184] Bluetooth: hci3: command 0x0409 tx timeout [ 52.489126][ T4184] Bluetooth: hci2: command 0x0409 tx timeout [ 52.492249][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 52.506205][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 52.514172][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 52.654614][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.688798][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.721670][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.731151][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.798942][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.808158][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.818190][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.840024][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.880737][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.903651][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.933721][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.943153][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.984549][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.017615][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.037539][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.060822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.071145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.079665][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.090500][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.103227][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.126674][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.142594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.151519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.160676][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.167901][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.179456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.189144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.197842][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.205020][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.213082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.222909][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.235659][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.257083][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.268445][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.289295][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.296352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.306067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.315689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.324675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.334910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.343913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.352401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.360930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.370008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.378775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.387456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.395760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.404254][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.436807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.455911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.467863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.481151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.490657][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.497745][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.506088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.514814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.523402][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.530532][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.538399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.546600][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.573787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.589461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.635283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.645505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.666755][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.686473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.695240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.703515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.718284][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.730990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.739312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.756535][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.780928][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.793802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.808200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.839657][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.851363][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.866037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.879639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.890440][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.897580][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.905980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.915684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.924394][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.931462][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.939341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.948692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.957617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.966066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.974796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.982945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.990662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.999047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.017230][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.033940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.100535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.110554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.133038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.141593][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.148967][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.157446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.167464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.176559][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.183700][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.191327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.200396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.209433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.220111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.229362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.238510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.247376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.256443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.265006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.274506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.291561][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.323972][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.346087][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.369472][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.381534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.391147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.400215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.409128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.417984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.427979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.437040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.449016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.457610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.466824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.475353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.484155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.491959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.507592][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.520147][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.537905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.547739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.562828][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 54.570483][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 54.581937][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 54.589464][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.600221][ T4187] device veth0_vlan entered promiscuous mode [ 54.602551][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 54.609150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.621341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.633795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.642910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.643933][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 54.651501][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.664084][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.677719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.687102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.696207][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.703323][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.711581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.721532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.730499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.738168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.746571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.755069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.763356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.781428][ T4187] device veth1_vlan entered promiscuous mode [ 54.808391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.824049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.845406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.854583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.873009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.892678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.901666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.910865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.919822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.928590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.941374][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.973926][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.981540][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.018677][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.030374][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.040002][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.054343][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.071714][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.080739][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.099115][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.115631][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.135510][ T4187] device veth0_macvtap entered promiscuous mode [ 55.147241][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.155911][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.165561][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.197537][ T4187] device veth1_macvtap entered promiscuous mode [ 55.205329][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.214603][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.223365][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.231046][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.240256][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.249546][ T4182] device veth0_vlan entered promiscuous mode [ 55.280363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.290246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.301659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.310549][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.330529][ T4182] device veth1_vlan entered promiscuous mode [ 55.341216][ T4193] device veth0_vlan entered promiscuous mode [ 55.348526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.358179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.368567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.378219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.388120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.395984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.404517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.416013][ T4192] device veth0_vlan entered promiscuous mode [ 55.429384][ T4192] device veth1_vlan entered promiscuous mode [ 55.450871][ T4193] device veth1_vlan entered promiscuous mode [ 55.460074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.468679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.479229][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.487338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.495674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.507524][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.516583][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.539841][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.548541][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.557621][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.567669][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.591985][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.601110][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.616750][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.631344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.639980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.650255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.659147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.680502][ T4192] device veth0_macvtap entered promiscuous mode [ 55.690247][ T4193] device veth0_macvtap entered promiscuous mode [ 55.703868][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.712962][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.721717][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.732740][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.761194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.770047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.780548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.789566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.798340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.808901][ T4182] device veth0_macvtap entered promiscuous mode [ 55.824788][ T4193] device veth1_macvtap entered promiscuous mode [ 55.841369][ T4182] device veth1_macvtap entered promiscuous mode [ 55.851787][ T4192] device veth1_macvtap entered promiscuous mode [ 55.880346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.890541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.900994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.909120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.918109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.927972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.944820][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.956763][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.969053][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.993495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.001387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.009862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.019824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.031511][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.042322][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.054135][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.065243][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.077322][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.090943][ T4183] device veth0_vlan entered promiscuous mode [ 56.099204][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.109985][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.120718][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.147797][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.157727][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.169100][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.180917][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.189819][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.200888][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.213215][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.220774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.233563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.242580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.251310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.261360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.270243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.284450][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.296644][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.306544][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.317771][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.329350][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.342730][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.358241][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.368372][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.380087][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.390216][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.401060][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.414569][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.424498][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.433417][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.443273][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.452071][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.472553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.481586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.491283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.500278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.514399][ T4183] device veth1_vlan entered promiscuous mode [ 56.527962][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.536969][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.546014][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.555149][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.568911][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.578114][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.587698][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.596445][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.647284][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 56.654231][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 56.658012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.660324][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 56.673385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.723760][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 56.730740][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 56.740659][ T4183] device veth0_macvtap entered promiscuous mode [ 56.774117][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.782090][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.798910][ T4183] device veth1_macvtap entered promiscuous mode [ 56.808813][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.818032][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.826491][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.841392][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.853444][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.885998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.905003][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.922032][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.932648][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.943340][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.953221][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.964419][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.974376][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.984832][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.995870][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.018572][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.032723][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.044873][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.055818][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.062216][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.072133][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.074159][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.091819][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.101921][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.115272][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.127617][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.138386][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.149814][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.175912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.185461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.194533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.212691][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.221831][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.245388][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.260202][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.270166][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287826][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.298847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.322669][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.330510][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.359966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.370745][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.399927][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.440151][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.481437][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.509455][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.531879][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.644350][ T4266] loop2: detected capacity change from 0 to 32768 [ 57.662849][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.688206][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.694025][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.758965][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.798912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.837342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.871730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 57.891137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 57.930131][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.112448][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.379436][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.422902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.729848][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 58.747607][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 58.766751][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 59.638382][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 59.658405][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 59.735913][ T4292] autofs4:pid:4292:autofs_fill_super: called with bogus options [ 59.802155][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.812195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.822170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.831307][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.840410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.849391][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.858351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.417531][ T4305] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 61.417531][ T4305] program syz.4.10 not setting count and/or reply_len properly [ 62.276151][ T26] audit: type=1326 audit(1774295315.224:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.306296][ T26] audit: type=1326 audit(1774295315.254:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.318922][ T4310] loop2: detected capacity change from 0 to 64 [ 62.364205][ T26] audit: type=1326 audit(1774295315.294:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.457120][ T26] audit: type=1326 audit(1774295315.294:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.518646][ T4310] hfs: unable to parse mount options [ 62.533216][ T26] audit: type=1326 audit(1774295315.294:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.555418][ T26] audit: type=1326 audit(1774295315.294:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.579236][ T26] audit: type=1326 audit(1774295315.294:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.603181][ T26] audit: type=1326 audit(1774295315.294:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.606416][ T4310] overlayfs: failed to set xattr on upper [ 62.625606][ T26] audit: type=1326 audit(1774295315.294:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.625653][ T26] audit: type=1326 audit(1774295315.294:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 62.922373][ T4310] overlayfs: ...falling back to index=off,metacopy=off. [ 63.124258][ T4317] loop1: detected capacity change from 0 to 1024 [ 66.242015][ T4335] hfsplus: b-tree write err: -5, ino 25 [ 66.261075][ T4335] hfsplus: b-tree write err: -5, ino 4 [ 66.268094][ T4335] hfsplus: b-tree write err: -5, ino 2 [ 66.732219][ T4339] loop2: detected capacity change from 0 to 4096 [ 66.756212][ T4350] loop4: detected capacity change from 0 to 8 [ 66.813538][ T4350] SQUASHFS error: xz decompression failed, data probably corrupt [ 66.821731][ T4350] SQUASHFS error: Failed to read block 0x108: -5 [ 66.828239][ T4350] SQUASHFS error: Unable to read metadata cache entry [106] [ 66.835697][ T4350] SQUASHFS error: Unable to read inode 0x11f [ 66.976560][ T4349] loop3: detected capacity change from 0 to 64 [ 68.902896][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 68.902910][ T26] audit: type=1326 audit(1774295321.854:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 69.333160][ T4360] loop4: detected capacity change from 0 to 32768 [ 69.402110][ C1] sched: RT throttling activated [ 69.488931][ T4365] loop1: detected capacity change from 0 to 8 [ 69.519384][ T26] audit: type=1326 audit(1774295321.854:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 69.654513][ T4360] XFS (loop4): Mounting V5 Filesystem [ 69.667580][ T26] audit: type=1326 audit(1774295322.074:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 69.690184][ T26] audit: type=1326 audit(1774295322.074:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 70.045677][ T26] audit: type=1326 audit(1774295322.074:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 70.403652][ T26] audit: type=1326 audit(1774295322.164:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 70.592591][ T26] audit: type=1326 audit(1774295322.164:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 70.637431][ T26] audit: type=1326 audit(1774295322.164:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x7ffc0000 [ 71.651655][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.763046][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.796962][ T4360] XFS (loop4): Ending clean mount [ 71.821831][ T4360] XFS (loop4): Quotacheck needed: Please wait. [ 72.479858][ T4360] XFS (loop4): Quotacheck: Done. [ 72.505301][ T4187] XFS (loop4): Unmounting Filesystem [ 72.616605][ T4392] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 73.070533][ T4399] loop2: detected capacity change from 0 to 512 [ 73.152974][ T4399] ======================================================= [ 73.152974][ T4399] WARNING: The mand mount option has been deprecated and [ 73.152974][ T4399] and is ignored by this kernel. Remove the mand [ 73.152974][ T4399] option from the mount to silence this warning. [ 73.152974][ T4399] ======================================================= [ 73.263549][ T4399] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 73.309277][ T4408] loop3: detected capacity change from 0 to 16 [ 74.434704][ T4408] erofs: (device loop3): mounted with root inode @ nid 36. [ 74.863205][ T4419] loop2: detected capacity change from 0 to 128 [ 74.926451][ T4423] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 74.926451][ T4423] program syz.3.42 not setting count and/or reply_len properly [ 75.603385][ T4419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.652818][ T4427] netlink: 'syz.0.44': attribute type 12 has an invalid length. [ 75.807825][ T26] audit: type=1800 audit(129.998:33): pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 76.483386][ T1324] cfg80211: failed to load regulatory.db [ 76.895338][ T26] audit: type=1804 audit(131.088:34): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.43" name="/newroot/7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=13 res=1 errno=0 [ 78.709947][ T4448] loop3: detected capacity change from 0 to 32768 [ 78.849064][ T4448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.48 (4448) [ 78.982844][ T4448] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 78.991685][ T4448] BTRFS info (device loop3): using free space tree [ 78.998207][ T4448] BTRFS info (device loop3): has skinny extents [ 79.018687][ T4454] loop2: detected capacity change from 0 to 256 [ 79.147258][ T26] audit: type=1800 audit(133.338:35): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.50" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 80.163483][ T4481] Zero length message leads to an empty skb [ 80.250278][ T4448] BTRFS info (device loop3): enabling ssd optimizations [ 80.630807][ T26] audit: type=1800 audit(134.818:36): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.48" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 81.231634][ T4501] loop4: detected capacity change from 0 to 64 [ 81.629098][ T4501] hfs: request for non-existent node 131072 in B*Tree [ 81.675839][ T4509] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 81.675839][ T4509] program syz.0.58 not setting count and/or reply_len properly [ 81.716135][ T4501] hfs: request for non-existent node 131072 in B*Tree [ 82.784190][ T4519] device syzkaller0 entered promiscuous mode [ 83.112542][ T4518] overlayfs: failed to get inode (-116) [ 83.119299][ T4518] overlayfs: failed to get inode (-116) [ 84.229942][ T4534] loop4: detected capacity change from 0 to 32768 [ 84.255687][ T4534] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.64 (4534) [ 84.307377][ T4534] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 84.316099][ T4534] BTRFS info (device loop4): using free space tree [ 84.322812][ T4534] BTRFS info (device loop4): has skinny extents [ 84.360461][ T4541] loop1: detected capacity change from 0 to 8 [ 84.660007][ T4541] SQUASHFS error: xz decompression failed, data probably corrupt [ 84.671729][ T4541] SQUASHFS error: Failed to read block 0x108: -5 [ 84.683140][ T4541] SQUASHFS error: Unable to read metadata cache entry [106] [ 84.699922][ T4541] SQUASHFS error: Unable to read inode 0x11f [ 84.780498][ T4534] BTRFS info (device loop4): enabling ssd optimizations [ 85.045714][ T4227] Process accounting resumed [ 85.663842][ T4568] loop1: detected capacity change from 0 to 32768 [ 85.801275][ T4568] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.68 (4568) [ 87.641828][ T4568] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 87.650536][ T4568] BTRFS info (device loop1): using free space tree [ 87.657112][ T4568] BTRFS info (device loop1): has skinny extents [ 87.900033][ T4440] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (4440) [ 87.984271][ T4595] device syzkaller0 entered promiscuous mode [ 89.012930][ T4620] loop3: detected capacity change from 0 to 1024 [ 89.024453][ T4568] BTRFS error (device loop1): open_ctree failed: -12 [ 90.266108][ T4620] EXT4-fs (loop3): Ignoring removed orlov option [ 90.453481][ T4620] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 91.003957][ T4636] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 91.018754][ T4636] overlayfs: overlapping lowerdir path [ 92.239237][ T4658] loop0: detected capacity change from 0 to 1024 [ 92.292541][ T4658] EXT4-fs (loop0): error: journal path ./file0 is not a block device [ 92.411440][ T4661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.999007][ T4662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.89'. [ 93.251394][ T4668] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 93.251394][ T4668] program syz.4.90 not setting count and/or reply_len properly [ 93.762527][ T4672] loop1: detected capacity change from 0 to 32768 [ 93.804884][ T4672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.91 (4672) [ 93.821325][ T4672] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 93.831042][ T4672] BTRFS info (device loop1): using free space tree [ 93.837637][ T4672] BTRFS info (device loop1): has skinny extents [ 93.905084][ T4681] loop3: detected capacity change from 0 to 16 [ 93.965806][ T4681] erofs: (device loop3): mounted with root inode @ nid 36. [ 93.996844][ T4681] attempt to access beyond end of device [ 93.996844][ T4681] loop3: rw=524288, want=1072, limit=16 [ 94.030340][ T4200] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 94.350813][ T4681] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 94.360144][ T4681] attempt to access beyond end of device [ 94.360144][ T4681] loop3: rw=524288, want=56, limit=16 [ 94.374331][ T4681] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 94.405850][ T26] audit: type=1800 audit(148.588:37): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.93" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 94.644139][ T4681] syz.3.93 (4681) used greatest stack depth: 19984 bytes left [ 96.269747][ T4686] overlayfs: failed to get inode (-116) [ 96.332277][ T4672] BTRFS info (device loop1): enabling ssd optimizations [ 96.357155][ T4686] overlayfs: failed to get inode (-116) [ 96.373457][ T26] audit: type=1800 audit(150.568:38): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.91" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 98.527942][ T4730] loop4: detected capacity change from 0 to 1024 [ 98.951086][ T4730] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 99.301777][ T4745] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 99.301777][ T4745] program syz.3.106 not setting count and/or reply_len properly [ 99.638991][ T4747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.404099][ T4751] overlayfs: failed to get inode (-116) [ 100.414986][ T4751] overlayfs: failed to get inode (-116) [ 101.727132][ T4778] loop2: detected capacity change from 0 to 1024 [ 101.780053][ T4778] EXT4-fs (loop2): error: journal path ./file0 is not a block device [ 101.883385][ T4780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.042831][ T4804] overlayfs: failed to get inode (-116) [ 104.104535][ T4804] overlayfs: failed to get inode (-116) [ 104.250436][ T4809] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 104.250436][ T4809] program syz.3.129 not setting count and/or reply_len properly [ 104.337911][ T4812] loop4: detected capacity change from 0 to 8 [ 104.410194][ T4812] SQUASHFS error: xz decompression failed, data probably corrupt [ 104.418082][ T4812] SQUASHFS error: Failed to read block 0x108: -5 [ 104.424584][ T4812] SQUASHFS error: Unable to read metadata cache entry [106] [ 104.431868][ T4812] SQUASHFS error: Unable to read inode 0x11f [ 105.068042][ T4823] loop3: detected capacity change from 0 to 1024 [ 105.311233][ T4823] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 105.414356][ T4827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.491580][ T4846] overlayfs: failed to get inode (-116) [ 108.564338][ T4849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'. [ 108.566587][ T4846] overlayfs: failed to get inode (-116) [ 109.046079][ T4851] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 109.046079][ T4851] program syz.3.144 not setting count and/or reply_len properly [ 109.446316][ T4861] loop0: detected capacity change from 0 to 8 [ 109.542233][ T4861] SQUASHFS error: xz decompression failed, data probably corrupt [ 109.550144][ T4861] SQUASHFS error: Failed to read block 0x108: -5 [ 109.556632][ T4861] SQUASHFS error: Unable to read metadata cache entry [106] [ 109.564064][ T4861] SQUASHFS error: Unable to read inode 0x11f [ 110.297767][ T4863] loop2: detected capacity change from 0 to 32768 [ 110.360163][ T4863] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.147 (4863) [ 110.487891][ T4863] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 110.496892][ T4863] BTRFS info (device loop2): turning on sync discard [ 110.504045][ T4863] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.513839][ T4863] BTRFS info (device loop2): use zstd compression, level 3 [ 110.521952][ T4863] BTRFS info (device loop2): turning on async discard [ 110.529242][ T4863] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 110.539956][ T4863] BTRFS info (device loop2): trying to use backup root at mount time [ 110.548279][ T4863] BTRFS info (device loop2): enabling auto defrag [ 110.554881][ T4863] BTRFS info (device loop2): using free space tree [ 110.561525][ T4863] BTRFS info (device loop2): has skinny extents [ 111.005025][ T4336] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 111.051429][ T4863] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 111.070292][ T4334] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 111.103596][ T4863] BTRFS warning (device loop2): couldn't read tree root [ 111.112651][ T4863] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 111.122856][ T4863] BTRFS warning (device loop2): couldn't read tree root [ 111.161621][ T4863] BTRFS info (device loop2): enabling ssd optimizations [ 111.169366][ T4863] BTRFS info (device loop2): clearing free space tree [ 111.176817][ T4863] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.186833][ T4863] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.219646][ T4863] BTRFS info (device loop2): creating free space tree [ 111.228857][ T4863] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.239541][ T4863] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.448692][ T4876] loop1: detected capacity change from 0 to 32768 [ 111.527820][ T4876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.149 (4876) [ 111.672239][ T4876] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 111.681883][ T4876] BTRFS info (device loop1): using free space tree [ 111.742403][ T4876] BTRFS info (device loop1): has skinny extents [ 111.971664][ T4876] BTRFS info (device loop1): enabling ssd optimizations [ 112.038837][ T26] audit: type=1800 audit(166.228:39): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 113.955924][ T4945] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 113.955924][ T4945] program syz.3.158 not setting count and/or reply_len properly [ 113.980770][ T4942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.156'. [ 114.357087][ T4950] loop1: detected capacity change from 0 to 2048 [ 114.682155][ T4959] loop3: detected capacity change from 0 to 8 [ 114.704594][ T4950] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.758086][ T4959] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.766088][ T4959] SQUASHFS error: Failed to read block 0x108: -5 [ 114.772580][ T4959] SQUASHFS error: Unable to read metadata cache entry [106] [ 114.779940][ T4959] SQUASHFS error: Unable to read inode 0x11f [ 115.815811][ T4963] loop3: detected capacity change from 0 to 1024 [ 115.854899][ T4963] EXT4-fs (loop3): Ignoring removed bh option [ 115.871264][ T4963] EXT4-fs (loop3): Ignoring removed oldalloc option [ 115.887583][ T4963] EXT4-fs (loop3): Ignoring removed nobh option [ 115.932191][ T4963] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.991985][ T4963] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 116.591797][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.749190][ T4963] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3885: comm syz.3.163: Allocating blocks 497-513 which overlap fs metadata [ 116.962373][ T13] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 117.895818][ T4963] EXT4-fs (loop3): pa ffff88807563be00: logic 256, phys. 401, len 7 [ 117.904339][ T4963] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 119.023642][ T13] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 119.034001][ T13] usb 5-1: config 0 has no interface number 0 [ 119.072214][ T13] usb 5-1: string descriptor 0 read error: -71 [ 119.078749][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 119.088257][ T4968] loop2: detected capacity change from 0 to 32768 [ 119.094750][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.114892][ T13] usb 5-1: config 0 descriptor?? [ 119.133119][ T13] usb 5-1: can't set config #0, error -71 [ 119.172315][ T13] usb 5-1: USB disconnect, device number 2 [ 119.213257][ T4982] loop0: detected capacity change from 0 to 1024 [ 119.235711][ T4968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.164 (4968) [ 119.302336][ T4982] EXT4-fs (loop0): error: journal path ./file0 is not a block device [ 119.761899][ T4985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.215852][ T4968] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 120.242555][ T4968] BTRFS info (device loop2): using free space tree [ 120.308230][ T4991] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 120.308230][ T4991] program syz.4.171 not setting count and/or reply_len properly [ 120.393405][ T4968] BTRFS info (device loop2): has skinny extents [ 120.645095][ T4968] BTRFS error (device loop2): open_ctree failed: -12 [ 120.924747][ T5014] fuse: Bad value for 'fd' [ 121.071734][ T26] audit: type=1326 audit(175.248:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3039134799 code=0x7ffc0000 [ 121.467261][ T5010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 121.549424][ T26] audit: type=1326 audit(175.258:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3039134799 code=0x7ffc0000 [ 121.585624][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4263) [ 121.781188][ T5019] loop4: detected capacity change from 0 to 16 [ 122.156058][ T5019] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.183447][ T5019] attempt to access beyond end of device [ 122.183447][ T5019] loop4: rw=524288, want=1072, limit=16 [ 122.212507][ T4199] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 122.267266][ T5019] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 122.276829][ T5019] attempt to access beyond end of device [ 122.276829][ T5019] loop4: rw=524288, want=56, limit=16 [ 122.296646][ T5019] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 122.362792][ T26] audit: type=1800 audit(176.508:42): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.174" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 122.868932][ T5026] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.940304][ T5032] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 123.439241][ T5038] overlayfs: failed to resolve './file0': -2 [ 125.949467][ T5056] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.949467][ T5056] program syz.2.184 not setting count and/or reply_len properly [ 126.182654][ T5052] overlayfs: failed to get inode (-116) [ 126.188432][ T5052] overlayfs: failed to get inode (-116) [ 126.575396][ T5066] loop1: detected capacity change from 0 to 16 [ 128.183514][ T5066] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.196066][ T5065] attempt to access beyond end of device [ 128.196066][ T5065] loop1: rw=524288, want=1072, limit=16 [ 128.210260][ T4199] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 128.238568][ T5065] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 128.247801][ T5065] attempt to access beyond end of device [ 128.247801][ T5065] loop1: rw=524288, want=56, limit=16 [ 128.258929][ T5065] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 128.278784][ T26] audit: type=1800 audit(182.468:43): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.186" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 128.385959][ T5064] fuse: Bad value for 'fd' [ 128.532962][ T5070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.188'. [ 129.989326][ T5090] loop1: detected capacity change from 0 to 16 [ 130.062403][ T5090] erofs: (device loop1): mounted with root inode @ nid 36. [ 130.071871][ T5090] attempt to access beyond end of device [ 130.071871][ T5090] loop1: rw=524288, want=1072, limit=16 [ 130.145041][ T4199] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 130.176369][ T5090] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 130.186640][ T5090] attempt to access beyond end of device [ 130.186640][ T5090] loop1: rw=524288, want=56, limit=16 [ 130.190632][ T5076] loop4: detected capacity change from 0 to 32768 [ 130.199267][ T5090] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 130.224727][ T26] audit: type=1800 audit(184.418:44): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 130.942421][ T5076] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 131.017539][ T5076] BTRFS info (device loop4): using free space tree [ 131.064739][ T5076] BTRFS info (device loop4): has skinny extents [ 132.440898][ T5110] loop3: detected capacity change from 0 to 8 [ 132.805218][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811647][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.448011][ T5110] SQUASHFS error: xz decompression failed, data probably corrupt [ 133.456213][ T5110] SQUASHFS error: Failed to read block 0x108: -5 [ 133.463039][ T5110] SQUASHFS error: Unable to read metadata cache entry [106] [ 133.470441][ T5110] SQUASHFS error: Unable to read inode 0x11f [ 133.982318][ T5076] BTRFS error (device loop4): open_ctree failed: -12 [ 134.103659][ T5121] loop1: detected capacity change from 0 to 2048 [ 134.238912][ T5121] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.274115][ T5121] NILFS (loop1): mounting unchecked fs [ 134.370707][ T4263] udevd[4263]: incorrect nilfs2 checksum on /dev/loop1 [ 134.546794][ T5121] NILFS (loop1): recovery complete [ 134.760330][ T5131] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 134.760330][ T5131] program syz.0.202 not setting count and/or reply_len properly [ 134.973653][ T5132] fuse: Bad value for 'fd' [ 134.982269][ T5128] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.400917][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.201'. [ 135.865541][ T5144] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.945216][ T5151] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 135.945216][ T5151] program syz.2.198 not setting count and/or reply_len properly [ 139.230200][ T5176] binder: BINDER_SET_CONTEXT_MGR already set [ 139.272006][ T5176] binder: 5175:5176 ioctl 4018620d 200000000040 returned -16 [ 139.310234][ T5176] binder: 5175:5176 ioctl c0306201 200000000240 returned -11 [ 139.533292][ T5180] loop0: detected capacity change from 0 to 8 [ 139.613723][ T5180] SQUASHFS error: xz decompression failed, data probably corrupt [ 139.621731][ T5180] SQUASHFS error: Failed to read block 0x108: -5 [ 139.628280][ T5180] SQUASHFS error: Unable to read metadata cache entry [106] [ 139.635731][ T5180] SQUASHFS error: Unable to read inode 0x11f [ 140.524406][ T5171] loop1: detected capacity change from 0 to 32768 [ 140.625163][ T5171] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.211 (5171) [ 140.695067][ T5171] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 140.749393][ T5171] BTRFS info (device loop1): using free space tree [ 140.767393][ T5171] BTRFS info (device loop1): has skinny extents [ 140.942369][ T4402] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.974026][ T4402] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.986200][ T4402] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.996306][ T4402] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.010590][ T5171] BTRFS error (device loop1): open_ctree failed: -12 [ 142.037644][ T4402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.259378][ T5186] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.529356][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4440) [ 142.617089][ T4402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.676868][ T4402] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.039682][ T5225] fido_id[5225]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.340404][ T5231] loop2: detected capacity change from 0 to 1024 [ 143.374427][ T5231] EXT4-fs (loop2): error: journal path ./file0 is not a block device [ 145.868884][ T4910] usb 4-1: USB disconnect, device number 2 [ 146.405131][ T5258] loop4: detected capacity change from 0 to 32768 [ 146.408546][ T5265] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 146.408546][ T5265] program syz.0.230 not setting count and/or reply_len properly [ 146.541448][ T5269] binder_alloc: 5268: binder_alloc_buf, no vma [ 146.554859][ T5258] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 146.586358][ T5258] BTRFS info (device loop4): using free space tree [ 146.605821][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.620140][ T5258] BTRFS info (device loop4): has skinny extents [ 146.635964][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.965803][ T5281] fido_id[5281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.646964][ T5310] overlayfs: failed to resolve './file0': -2 [ 149.271876][ T5316] device syzkaller0 entered promiscuous mode [ 149.420641][ T5258] BTRFS error (device loop4): open_ctree failed: -22 [ 149.429865][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4263) [ 152.302165][ T5350] binder_alloc: 5349: binder_alloc_buf, no vma [ 152.384059][ T4910] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.413672][ T4910] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.865873][ T5366] overlayfs: failed to resolve './file1': -2 [ 153.374776][ T5369] fido_id[5369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.454547][ T5372] device syzkaller0 entered promiscuous mode [ 153.636432][ T5356] loop1: detected capacity change from 0 to 32768 [ 153.691522][ T5356] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 153.722601][ T5356] BTRFS info (device loop1): using free space tree [ 153.902652][ T5356] BTRFS info (device loop1): has skinny extents [ 155.830218][ T5418] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 155.830218][ T5418] program syz.0.264 not setting count and/or reply_len properly [ 155.847799][ T5356] BTRFS error (device loop1): open_ctree failed: -12 [ 155.910284][ T5420] binder: 5419:5420 ioctl c0306201 200000000240 returned -11 [ 156.943025][ T5431] overlayfs: failed to resolve './file1': -2 [ 157.031624][ T4302] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 157.236082][ T4302] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.394300][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.410101][ T5438] fido_id[5438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.508407][ T5456] device syzkaller0 entered promiscuous mode [ 160.045337][ T5464] overlayfs: failed to get inode (-116) [ 160.050998][ T5464] overlayfs: failed to get inode (-116) [ 161.845752][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 162.760013][ T5478] ODEBUG: Out of memory. ODEBUG disabled [ 164.582833][ T5501] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 164.582833][ T5501] program syz.1.284 not setting count and/or reply_len properly [ 166.192943][ T5512] loop2: detected capacity change from 0 to 1024 [ 166.256582][ T5512] EXT4-fs (loop2): error: journal path ./file0 is not a block device [ 167.141789][ T5521] netlink: 'syz.2.294': attribute type 12 has an invalid length. [ 167.608522][ T5531] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 167.608522][ T5531] program syz.1.295 not setting count and/or reply_len properly [ 167.661834][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 168.939912][ T5540] overlayfs: failed to get inode (-116) [ 168.945810][ T5540] overlayfs: failed to get inode (-116) [ 168.954186][ T5542] loop4: detected capacity change from 0 to 16 [ 169.016453][ T5542] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.025915][ T5542] attempt to access beyond end of device [ 169.025915][ T5542] loop4: rw=524288, want=1072, limit=16 [ 169.037617][ T4199] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 169.062223][ T5542] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 169.071298][ T5542] attempt to access beyond end of device [ 169.071298][ T5542] loop4: rw=524288, want=56, limit=16 [ 169.082514][ T5542] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 169.103569][ T26] audit: type=1800 audit(223.298:45): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.299" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 171.090379][ T5566] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 171.090379][ T5566] program syz.4.306 not setting count and/or reply_len properly [ 172.801198][ T5573] loop1: detected capacity change from 0 to 1024 [ 172.865375][ T5573] EXT4-fs (loop1): error: journal path ./file0 is not a block device [ 173.112233][ T5578] loop0: detected capacity change from 0 to 16 [ 173.202331][ T5578] erofs: (device loop0): mounted with root inode @ nid 36. [ 173.211341][ T5578] attempt to access beyond end of device [ 173.211341][ T5578] loop0: rw=524288, want=1072, limit=16 [ 173.375713][ T4199] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 173.541416][ T5578] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 173.550640][ T5578] attempt to access beyond end of device [ 173.550640][ T5578] loop0: rw=524288, want=56, limit=16 [ 173.562321][ T5578] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 173.588178][ T26] audit: type=1800 audit(227.768:46): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.311" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 174.971335][ T5595] loop1: detected capacity change from 0 to 16 [ 175.037601][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 175.152727][ T5595] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.164753][ T5595] attempt to access beyond end of device [ 175.164753][ T5595] loop1: rw=524288, want=1072, limit=16 [ 175.176760][ T4200] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 175.214872][ T5595] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 175.224626][ T5595] attempt to access beyond end of device [ 175.224626][ T5595] loop1: rw=524288, want=56, limit=16 [ 175.238151][ T5595] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 175.289948][ T26] audit: type=1800 audit(229.448:47): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.314" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 175.922168][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 175.922238][ T5319] Bluetooth: hci3: command 0x0406 tx timeout [ 175.930853][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 175.935811][ T5319] Bluetooth: hci1: command 0x0406 tx timeout [ 176.513123][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 176.611529][ T5613] loop4: detected capacity change from 0 to 764 [ 177.398565][ T5610] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 177.398565][ T5610] program syz.1.319 not setting count and/or reply_len properly [ 177.641227][ T5625] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 177.641227][ T5625] program syz.3.324 not setting count and/or reply_len properly [ 180.562751][ T5646] overlayfs: failed to get inode (-116) [ 180.570367][ T5646] overlayfs: failed to get inode (-116) [ 181.035506][ T5651] fuse: Bad value for 'fd' [ 181.800947][ T5662] autofs4:pid:5662:autofs_fill_super: called with bogus options [ 184.415952][ T5668] loop1: detected capacity change from 0 to 32768 [ 184.967757][ T5679] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 184.967757][ T5679] program syz.2.340 not setting count and/or reply_len properly [ 185.501964][ T5668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.336 (5668) [ 185.700085][ T5668] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 185.708941][ T5668] BTRFS info (device loop1): using free space tree [ 185.715681][ T5668] BTRFS info (device loop1): has skinny extents [ 186.795565][ T5708] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 187.420044][ T5705] loop4: detected capacity change from 0 to 131072 [ 187.550867][ T5705] F2FS-fs (loop4): invalid crc value [ 187.601647][ T5705] F2FS-fs (loop4): Found nat_bits in checkpoint [ 187.736597][ T5705] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 187.760374][ T5705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 188.667937][ T5668] BTRFS error (device loop1): open_ctree failed: -12 [ 188.682931][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4263) [ 188.697745][ T5731] loop0: detected capacity change from 0 to 16 [ 188.746474][ T5731] erofs: (device loop0): mounted with root inode @ nid 36. [ 188.757252][ T5731] attempt to access beyond end of device [ 188.757252][ T5731] loop0: rw=524288, want=1072, limit=16 [ 188.771975][ T4200] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 188.789192][ T5731] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 188.798339][ T5731] attempt to access beyond end of device [ 188.798339][ T5731] loop0: rw=524288, want=56, limit=16 [ 188.815193][ T5731] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 188.835723][ T26] audit: type=1800 audit(243.028:48): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.347" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 190.439534][ T5749] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 190.439534][ T5749] program syz.1.353 not setting count and/or reply_len properly [ 191.694767][ T5319] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 193.313562][ T5774] loop0: detected capacity change from 0 to 32768 [ 193.550874][ T5778] loop3: detected capacity change from 0 to 8 [ 193.578717][ T5774] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 193.587504][ T5774] BTRFS info (device loop0): using free space tree [ 193.594113][ T5774] BTRFS info (device loop0): has skinny extents [ 193.626633][ T5778] SQUASHFS error: xz decompression failed, data probably corrupt [ 193.634583][ T5778] SQUASHFS error: Failed to read block 0x108: -5 [ 193.640898][ T5778] SQUASHFS error: Unable to read metadata cache entry [106] [ 193.648313][ T5778] SQUASHFS error: Unable to read inode 0x11f [ 193.830315][ T5774] BTRFS info (device loop0): enabling ssd optimizations [ 193.910205][ T26] audit: type=1800 audit(248.038:49): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.359" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 193.930244][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.338124][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.356522][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.923247][ T5809] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 194.923247][ T5809] program syz.3.366 not setting count and/or reply_len properly [ 196.050837][ T4439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4439) [ 196.269744][ T5822] loop4: detected capacity change from 0 to 64 [ 196.454620][ T5822] attempt to access beyond end of device [ 196.454620][ T5822] loop4: rw=0, want=1026, limit=64 [ 196.526736][ T5822] Buffer I/O error on dev loop4, logical block 512, async page read [ 196.535074][ T5822] attempt to access beyond end of device [ 196.535074][ T5822] loop4: rw=0, want=113154, limit=64 [ 196.546366][ T5822] Buffer I/O error on dev loop4, logical block 56576, async page read [ 196.927417][ T5830] binder_alloc: 5829: binder_alloc_buf, no vma [ 196.934360][ T5830] binder: 5829:5830 ioctl c0306201 200000000240 returned -11 [ 198.710769][ T5844] loop0: detected capacity change from 0 to 32768 [ 198.962429][ T5844] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 198.971143][ T5844] BTRFS info (device loop0): using free space tree [ 198.977776][ T5844] BTRFS info (device loop0): has skinny extents [ 199.363793][ T5825] loop3: detected capacity change from 0 to 32768 [ 200.049333][ T5878] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 200.049333][ T5878] program syz.3.381 not setting count and/or reply_len properly [ 200.222112][ T5844] BTRFS info (device loop0): enabling ssd optimizations [ 200.457612][ T26] audit: type=1800 audit(254.648:50): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.377" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 200.544087][ T5885] loop2: detected capacity change from 0 to 8 [ 200.628091][ T5885] SQUASHFS error: xz decompression failed, data probably corrupt [ 200.636118][ T5885] SQUASHFS error: Failed to read block 0x108: -5 [ 200.642534][ T5885] SQUASHFS error: Unable to read metadata cache entry [106] [ 200.649812][ T5885] SQUASHFS error: Unable to read inode 0x11f [ 203.994926][ T5914] netlink: 'syz.1.392': attribute type 33 has an invalid length. [ 204.024093][ T5914] netlink: 164 bytes leftover after parsing attributes in process `syz.1.392'. [ 204.900778][ T5923] overlayfs: failed to get inode (-116) [ 204.914771][ T5923] overlayfs: failed to get inode (-116) [ 205.200553][ T5928] loop1: detected capacity change from 0 to 8 [ 205.287065][ T5928] SQUASHFS error: xz decompression failed, data probably corrupt [ 205.295239][ T5928] SQUASHFS error: Failed to read block 0x108: -5 [ 205.301674][ T5928] SQUASHFS error: Unable to read metadata cache entry [106] [ 205.309290][ T5928] SQUASHFS error: Unable to read inode 0x11f [ 207.477054][ T5925] loop0: detected capacity change from 0 to 32768 [ 207.614229][ T5925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.395 (5925) [ 208.050935][ T5925] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 208.081891][ T5925] BTRFS info (device loop0): using free space tree [ 208.128710][ T5925] BTRFS info (device loop0): has skinny extents [ 208.329537][ T5963] loop4: detected capacity change from 0 to 1024 [ 208.354065][ T5963] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 208.466915][ T5965] netlink: 'syz.3.402': attribute type 12 has an invalid length. [ 208.518173][ T5925] BTRFS error (device loop0): open_ctree failed: -12 [ 208.565067][ T5935] loop2: detected capacity change from 0 to 32768 [ 208.611369][ T5935] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.398 (5935) [ 208.720868][ T5966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.179644][ T5935] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 209.232577][ T5935] BTRFS info (device loop2): force clearing of disk cache [ 209.293360][ T5935] BTRFS info (device loop2): enabling auto defrag [ 209.355238][ T5935] BTRFS info (device loop2): use zlib compression, level 3 [ 209.391417][ T5974] loop0: detected capacity change from 0 to 64 [ 209.430326][ T5935] BTRFS info (device loop2): max_inline at 2 [ 209.452846][ T5935] BTRFS info (device loop2): turning on sync discard [ 209.471569][ T5935] BTRFS info (device loop2): disabling auto defrag [ 209.487180][ T5935] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 209.509864][ T5935] BTRFS info (device loop2): use zstd compression, level 3 [ 209.556379][ T5935] BTRFS info (device loop2): using free space tree [ 209.616283][ T5935] BTRFS info (device loop2): has skinny extents [ 209.766074][ T5935] BTRFS error (device loop2): open_ctree failed: -12 [ 209.807193][ T5970] loop4: detected capacity change from 0 to 2048 [ 210.018378][ T5970] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.167171][ T4738] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 210.415435][ T4738] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.598132][ T6001] fido_id[6001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.916051][ T6015] fuse: Bad value for 'fd' [ 216.087709][ T6019] loop0: detected capacity change from 0 to 32768 [ 216.313382][ T6019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.413 (6019) [ 216.359325][ T6019] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 216.404646][ T6019] BTRFS info (device loop0): using free space tree [ 216.430973][ T6019] BTRFS info (device loop0): has skinny extents [ 216.557964][ T6040] device syzkaller0 entered promiscuous mode [ 216.584408][ T6019] BTRFS error (device loop0): open_ctree failed: -12 [ 218.861956][ T6074] fuse: Bad value for 'fd' [ 220.019002][ T21] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 220.055722][ T6092] loop0: detected capacity change from 0 to 16 [ 220.058769][ T21] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.939615][ T6092] erofs: (device loop0): mounted with root inode @ nid 36. [ 220.966632][ T6100] loop3: detected capacity change from 0 to 16 [ 220.994188][ T6092] attempt to access beyond end of device [ 220.994188][ T6092] loop0: rw=524288, want=1072, limit=16 [ 221.009205][ T6100] erofs: (device loop3): mounted with root inode @ nid 36. [ 221.018342][ T6100] attempt to access beyond end of device [ 221.018342][ T6100] loop3: rw=524288, want=1072, limit=16 [ 221.030391][ T4200] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 221.053298][ T6100] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 221.062530][ T6100] attempt to access beyond end of device [ 221.062530][ T6100] loop3: rw=524288, want=56, limit=16 [ 221.075376][ T6100] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 221.096688][ T26] audit: type=1800 audit(275.288:51): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.430" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 221.160674][ T6101] fido_id[6101]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.170717][ T4200] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 221.345263][ T6092] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 221.432297][ T6092] attempt to access beyond end of device [ 221.432297][ T6092] loop0: rw=524288, want=56, limit=16 [ 221.530025][ T6092] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 221.631794][ T26] audit: type=1800 audit(275.818:52): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.425" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 222.528291][ T6103] loop3: detected capacity change from 0 to 32768 [ 222.718251][ T6103] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.431 (6103) [ 223.107442][ T6103] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 223.157568][ T6103] BTRFS info (device loop3): using free space tree [ 223.188542][ T6103] BTRFS info (device loop3): has skinny extents [ 224.099853][ T6131] overlayfs: failed to get inode (-116) [ 224.105835][ T6131] overlayfs: failed to get inode (-116) [ 224.736864][ T6103] BTRFS error (device loop3): open_ctree failed: -12 [ 224.737184][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4263) [ 227.343226][ T6184] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 227.343226][ T6184] program syz.4.445 not setting count and/or reply_len properly [ 227.555374][ T6187] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 227.555374][ T6187] program syz.3.448 not setting count and/or reply_len properly [ 227.708163][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 230.846707][ T6198] overlayfs: failed to get inode (-116) [ 230.852464][ T6198] overlayfs: failed to get inode (-116) [ 231.239131][ T4584] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 231.249596][ T4584] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.456386][ T6206] fido_id[6206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.301433][ T6243] overlayfs: failed to get inode (-116) [ 234.307163][ T6243] overlayfs: failed to get inode (-116) [ 234.820445][ T4727] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 234.849996][ T4727] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 235.506496][ T6259] fido_id[6259]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.444454][ T6266] loop2: detected capacity change from 0 to 32768 [ 236.508132][ T6266] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 236.517207][ T6266] BTRFS info (device loop2): using free space tree [ 236.525235][ T6266] BTRFS info (device loop2): has skinny extents [ 236.728322][ T6266] BTRFS info (device loop2): enabling ssd optimizations [ 236.788788][ T26] audit: type=1800 audit(290.978:53): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.470" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 238.815079][ T6309] overlayfs: failed to get inode (-116) [ 238.847535][ T6309] overlayfs: failed to get inode (-116) [ 240.006490][ T5320] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 240.653073][ T5320] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.955789][ T6344] fido_id[6344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 244.968561][ T6366] overlayfs: failed to get inode (-116) [ 244.975451][ T6366] overlayfs: failed to get inode (-116) [ 246.245220][ T4728] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 246.276858][ T4728] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.416745][ T6392] fido_id[6392]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 250.501344][ T6423] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 250.823030][ T4230] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 250.839494][ T4230] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.901560][ T6434] fido_id[6434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.530075][ T6467] loop1: detected capacity change from 0 to 8 [ 255.655069][ T6467] SQUASHFS error: xz decompression failed, data probably corrupt [ 255.663091][ T6467] SQUASHFS error: Failed to read block 0x108: -5 [ 255.669489][ T6467] SQUASHFS error: Unable to read metadata cache entry [106] [ 255.676978][ T6467] SQUASHFS error: Unable to read inode 0x11f [ 255.687412][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693894][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.170543][ T1324] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 257.197583][ T1324] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.502433][ T6481] fido_id[6481]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.093777][ T6533] fuse: Bad value for 'fd' [ 267.729190][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 271.189048][ T6568] fuse: Bad value for 'fd' [ 276.049725][ T6605] autofs4:pid:6605:autofs_fill_super: called with bogus options [ 280.783602][ T6644] loop1: detected capacity change from 0 to 16 [ 280.823067][ T6644] erofs: (device loop1): mounted with root inode @ nid 36. [ 280.864840][ T6644] attempt to access beyond end of device [ 280.864840][ T6644] loop1: rw=524288, want=1072, limit=16 [ 280.910800][ T4200] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 280.952524][ T6644] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 280.961579][ T6644] attempt to access beyond end of device [ 280.961579][ T6644] loop1: rw=524288, want=56, limit=16 [ 281.043299][ T6644] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 281.106173][ T4335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.161265][ T26] audit: type=1800 audit(335.348:54): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.574" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 281.236618][ T4335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.417840][ T4335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.701144][ T4335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.842518][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 284.882312][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 285.922089][ T4728] Bluetooth: hci4: command 0x041b tx timeout [ 287.548545][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.573046][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.593290][ T6653] device bridge_slave_0 entered promiscuous mode [ 288.515368][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.541598][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.588807][ T4728] Bluetooth: hci4: command 0x040f tx timeout [ 288.620512][ T6653] device bridge_slave_1 entered promiscuous mode [ 288.691062][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.847041][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.758152][ T6741] loop4: detected capacity change from 0 to 256 [ 289.764296][ T6653] team0: Port device team_slave_0 added [ 289.787890][ T6653] team0: Port device team_slave_1 added [ 290.132180][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.163677][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.018429][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.043533][ T4727] Bluetooth: hci4: command 0x0419 tx timeout [ 291.203437][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.210415][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.631752][ T6758] overlayfs: failed to resolve './file1': -2 [ 292.117671][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.663243][ T6653] device hsr_slave_0 entered promiscuous mode [ 292.689141][ T6653] device hsr_slave_1 entered promiscuous mode [ 292.902544][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.911352][ T6653] Cannot create hsr debugfs directory [ 292.963963][ T6775] lo speed is unknown, defaulting to 1000 [ 292.970126][ T6775] lo speed is unknown, defaulting to 1000 [ 292.978725][ T6775] lo speed is unknown, defaulting to 1000 [ 292.989178][ T6775] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 293.002241][ T6775] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 293.041986][ T6775] lo speed is unknown, defaulting to 1000 [ 293.051261][ T6775] lo speed is unknown, defaulting to 1000 [ 293.058938][ T6775] lo speed is unknown, defaulting to 1000 [ 293.065728][ T6775] lo speed is unknown, defaulting to 1000 [ 293.110517][ T6775] lo speed is unknown, defaulting to 1000 [ 293.117873][ T6775] lo speed is unknown, defaulting to 1000 [ 293.524489][ T4335] device hsr_slave_0 left promiscuous mode [ 293.637557][ T4335] device hsr_slave_1 left promiscuous mode [ 293.727894][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.747670][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.845445][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.870204][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.888571][ T4335] device bridge_slave_1 left promiscuous mode [ 293.896712][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.929824][ T4335] device bridge_slave_0 left promiscuous mode [ 293.938893][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.979203][ T4335] device veth1_macvtap left promiscuous mode [ 294.002497][ T4335] device veth0_macvtap left promiscuous mode [ 294.008634][ T4335] device veth1_vlan left promiscuous mode [ 294.040713][ T4335] device veth0_vlan left promiscuous mode [ 294.272135][ T4728] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 294.311952][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 294.330876][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 294.346999][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.377446][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.512198][ T4728] usb 5-1: Using ep0 maxpacket: 8 [ 294.518668][ T4335] bond0 (unregistering): Released all slaves [ 295.382240][ T4728] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 295.390550][ T4728] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.406317][ T4728] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.419757][ T4728] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.445970][ T4728] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.467658][ T6807] loop1: detected capacity change from 0 to 1024 [ 295.475327][ T4728] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.490999][ T4728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.824700][ T4728] usb 5-1: usb_control_msg returned -32 [ 295.849285][ T4728] usbtmc 5-1:16.0: can't read capabilities [ 296.551346][ T5320] usb 5-1: USB disconnect, device number 4 [ 297.515106][ T6653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.564959][ T6653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.619781][ T6653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.687211][ T6653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.937203][ T6817] loop3: detected capacity change from 0 to 32768 [ 298.049445][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.110631][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.136795][ T6817] JBD2: Ignoring recovery information on journal [ 298.145152][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.247291][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.261962][ T6817] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 298.366360][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.395890][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.422218][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.429356][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.485066][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.152391][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.290291][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.297668][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.306193][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.315854][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.359950][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.392563][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.458306][ T6863] loop1: detected capacity change from 0 to 16 [ 299.477141][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.407539][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.416875][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.432825][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.455845][ T6863] erofs: (device loop1): mounted with root inode @ nid 36. [ 300.465180][ T6863] attempt to access beyond end of device [ 300.465180][ T6863] loop1: rw=524288, want=1072, limit=16 [ 300.594558][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 300.664778][ T4200] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 300.759357][ T6863] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 300.769169][ T6863] attempt to access beyond end of device [ 300.769169][ T6863] loop1: rw=524288, want=56, limit=16 [ 300.780583][ T6863] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 300.818013][ T26] audit: type=1800 audit(354.988:55): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.618" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 300.851348][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.939827][ T6653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.987557][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.999246][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.008775][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.024085][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.784981][ T6877] loop0: detected capacity change from 0 to 1024 [ 302.453040][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.471160][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.508337][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.577358][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.598910][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.673085][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.711969][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.743295][ T6653] device veth0_vlan entered promiscuous mode [ 302.761675][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.781592][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.867706][ T6653] device veth1_vlan entered promiscuous mode [ 302.956355][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.992858][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.072854][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.138598][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.616579][ T6653] device veth0_macvtap entered promiscuous mode [ 303.630214][ T6653] device veth1_macvtap entered promiscuous mode [ 303.657755][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.712060][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.736671][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.749861][ T6919] netlink: 224 bytes leftover after parsing attributes in process `syz.3.630'. [ 303.772797][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.792067][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.810085][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.831715][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.867401][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.910578][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.948933][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.971585][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.008180][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.054022][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.098526][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.142160][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.187526][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.245411][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.297412][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.341817][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.370226][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.401828][ T6653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.429467][ T6653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.468061][ T6653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.508462][ T6653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.123642][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.133832][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.533319][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.570420][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.602679][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.645950][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.696540][ T6950] loop1: detected capacity change from 0 to 16 [ 305.793592][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.887567][ T6950] erofs: (device loop1): mounted with root inode @ nid 36. [ 305.902556][ T6950] attempt to access beyond end of device [ 305.902556][ T6950] loop1: rw=524288, want=1072, limit=16 [ 305.923715][ T4200] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 305.983390][ T6950] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 305.992967][ T6950] attempt to access beyond end of device [ 305.992967][ T6950] loop1: rw=524288, want=56, limit=16 [ 306.004974][ T6950] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 306.097357][ T26] audit: type=1800 audit(360.218:56): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.635" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 306.478184][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.619082][ T7006] loop4: detected capacity change from 0 to 1024 [ 312.287198][ T6328] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 312.562638][ T6328] usb 1-1: Using ep0 maxpacket: 8 [ 313.445072][ T6328] usb 1-1: unable to get BOS descriptor or descriptor too short [ 313.552273][ T6328] usb 1-1: config 36 has an invalid interface number: 220 but max is 0 [ 313.570888][ T6328] usb 1-1: config 36 has no interface number 0 [ 313.579169][ T6328] usb 1-1: config 36 interface 220 has no altsetting 0 [ 314.193335][ T6328] usb 1-1: string descriptor 0 read error: -71 [ 314.222190][ T6328] usb 1-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ad.68 [ 314.260708][ T6328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.741427][ T6328] usb 1-1: can't set config #36, error -71 [ 315.117407][ T6328] usb 1-1: USB disconnect, device number 2 [ 315.606168][ T7080] syz.0.660 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 316.944315][ T7086] loop0: detected capacity change from 0 to 256 [ 317.099766][ T7091] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 317.130831][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.144079][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.366269][ T7086] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 317.383752][ T7094] loop1: detected capacity change from 0 to 16 [ 317.459061][ T7094] erofs: (device loop1): mounted with root inode @ nid 36. [ 317.668042][ T7094] attempt to access beyond end of device [ 317.668042][ T7094] loop1: rw=524288, want=1072, limit=16 [ 317.715763][ T4200] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 318.072299][ T26] audit: type=1800 audit(372.238:57): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.664" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 318.185707][ T7094] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 318.205193][ T7094] attempt to access beyond end of device [ 318.205193][ T7094] loop1: rw=524288, want=56, limit=16 [ 318.508144][ T7094] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 318.731322][ T7103] loop2: detected capacity change from 0 to 40427 [ 318.756554][ T7100] loop0: detected capacity change from 0 to 256 [ 318.775346][ T7103] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 318.783155][ T7103] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 318.793348][ T7103] F2FS-fs (loop2): invalid crc value [ 318.802322][ T26] audit: type=1800 audit(372.998:58): pid=7094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.665" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 318.848162][ T7103] F2FS-fs (loop2): Found nat_bits in checkpoint [ 318.967750][ T7103] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 318.975018][ T7103] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 319.337139][ T7100] FAT-fs (loop0): Directory bread(block 64) failed [ 319.525190][ T7100] FAT-fs (loop0): Directory bread(block 65) failed [ 319.538145][ T7100] FAT-fs (loop0): Directory bread(block 66) failed [ 319.551820][ T7100] FAT-fs (loop0): Directory bread(block 67) failed [ 319.576714][ T7100] FAT-fs (loop0): Directory bread(block 68) failed [ 320.482668][ T7100] FAT-fs (loop0): Directory bread(block 69) failed [ 320.489761][ T7100] FAT-fs (loop0): Directory bread(block 70) failed [ 320.496716][ T7100] FAT-fs (loop0): Directory bread(block 71) failed [ 320.551091][ T7100] FAT-fs (loop0): Directory bread(block 72) failed [ 320.612234][ T7100] FAT-fs (loop0): Directory bread(block 73) failed [ 322.194229][ T7134] loop4: detected capacity change from 0 to 1024 [ 322.377224][ T7136] loop2: detected capacity change from 0 to 16 [ 322.493600][ T7140] autofs4:pid:7140:autofs_fill_super: called with bogus options [ 323.304558][ T7136] erofs: (device loop2): mounted with root inode @ nid 36. [ 323.319820][ T7135] attempt to access beyond end of device [ 323.319820][ T7135] loop2: rw=524288, want=1072, limit=16 [ 323.336286][ T4200] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 323.360073][ T7135] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 323.369215][ T7135] attempt to access beyond end of device [ 323.369215][ T7135] loop2: rw=524288, want=56, limit=16 [ 323.380349][ T7135] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 323.400603][ T26] audit: type=1800 audit(377.588:59): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.674" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 324.861491][ T7160] device syzkaller0 entered promiscuous mode [ 326.486072][ T7176] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 326.486072][ T7176] program syz.2.684 not setting count and/or reply_len properly [ 326.650436][ T7181] loop4: detected capacity change from 0 to 1024 [ 326.707276][ T7181] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 326.747105][ T7181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.684559][ T7191] loop1: detected capacity change from 0 to 131072 [ 328.946866][ T7199] loop4: detected capacity change from 0 to 16 [ 328.972737][ T7191] F2FS-fs (loop1): invalid crc value [ 329.008438][ T7191] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.053055][ T7199] erofs: (device loop4): mounted with root inode @ nid 36. [ 329.062362][ T7199] attempt to access beyond end of device [ 329.062362][ T7199] loop4: rw=524288, want=1072, limit=16 [ 329.102206][ T4200] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 329.126749][ T7199] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 329.136296][ T7199] attempt to access beyond end of device [ 329.136296][ T7199] loop4: rw=524288, want=56, limit=16 [ 329.149230][ T7199] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 329.188004][ T26] audit: type=1800 audit(383.358:60): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.690" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 329.209209][ T7191] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 331.006601][ T7219] loop2: detected capacity change from 0 to 1024 [ 336.396981][ T5730] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 336.405839][ T7250] loop2: detected capacity change from 0 to 16 [ 336.468154][ T7250] erofs: (device loop2): mounted with root inode @ nid 36. [ 336.477397][ T7250] attempt to access beyond end of device [ 336.477397][ T7250] loop2: rw=524288, want=1072, limit=16 [ 336.492391][ T4200] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 336.520635][ T7250] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 336.530008][ T7250] attempt to access beyond end of device [ 336.530008][ T7250] loop2: rw=524288, want=56, limit=16 [ 336.541148][ T7250] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 336.602237][ T26] audit: type=1800 audit(390.748:61): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.706" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 336.962200][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 337.183910][ T7256] loop1: detected capacity change from 0 to 40427 [ 337.243571][ T5730] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 337.268703][ T7256] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 337.276546][ T7256] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 337.286323][ T7256] F2FS-fs (loop1): invalid crc value [ 337.292824][ T5730] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 337.301439][ T5730] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 337.336683][ T7256] F2FS-fs (loop1): Found nat_bits in checkpoint [ 337.381408][ T5730] usb 4-1: config 1 has no interface number 0 [ 337.388411][ T7256] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 337.395613][ T7256] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 337.582806][ T5730] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.593826][ T5730] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 338.989648][ T5730] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 338.998853][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.023473][ T26] audit: type=1800 audit(392.408:62): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.707" name="file1" dev="loop1" ino=11 res=0 errno=0 [ 339.115563][ T5730] usb 4-1: can't set config #1, error -71 [ 339.147893][ T5730] usb 4-1: USB disconnect, device number 4 [ 341.777940][ T7287] loop1: detected capacity change from 0 to 1024 [ 342.493212][ T7294] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 342.493212][ T7294] program syz.2.709 not setting count and/or reply_len properly [ 344.427716][ T7314] loop3: detected capacity change from 0 to 256 [ 344.560947][ T7318] loop4: detected capacity change from 0 to 16 [ 344.702120][ T5730] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 344.788346][ T7318] erofs: (device loop4): mounted with root inode @ nid 36. [ 345.374599][ T7318] attempt to access beyond end of device [ 345.374599][ T7318] loop4: rw=524288, want=1072, limit=16 [ 345.514487][ T4200] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 345.545485][ T7318] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 345.572344][ T7318] attempt to access beyond end of device [ 345.572344][ T7318] loop4: rw=524288, want=56, limit=16 [ 345.589851][ T7318] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 345.611752][ T26] audit: type=1800 audit(399.798:63): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.720" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 345.752309][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 345.791903][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.359882][ T5730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 346.387435][ T5730] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 346.396609][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.425934][ T5730] usb 1-1: config 0 descriptor?? [ 348.292992][ T5730] usbhid 1-1:0.0: can't add hid device: -71 [ 348.299004][ T5730] usbhid: probe of 1-1:0.0 failed with error -71 [ 348.340271][ T5730] usb 1-1: USB disconnect, device number 3 [ 348.380021][ T7338] loop1: detected capacity change from 0 to 1024 [ 350.245249][ T7351] loop0: detected capacity change from 0 to 16 [ 350.357548][ T7351] erofs: (device loop0): mounted with root inode @ nid 36. [ 350.374872][ T7351] attempt to access beyond end of device [ 350.374872][ T7351] loop0: rw=524288, want=1072, limit=16 [ 350.393343][ T4200] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 350.437016][ T7351] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 350.446885][ T7351] attempt to access beyond end of device [ 350.446885][ T7351] loop0: rw=524288, want=56, limit=16 [ 350.458679][ T7351] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 350.582408][ T26] audit: type=1800 audit(404.668:64): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.729" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 351.045159][ T7355] loop3: detected capacity change from 0 to 256 [ 355.020906][ T7383] loop1: detected capacity change from 0 to 256 [ 355.310963][ T7394] loop4: detected capacity change from 0 to 1024 [ 355.656017][ T7402] loop2: detected capacity change from 0 to 512 [ 356.228825][ T7402] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.743: inode has both inline data and extents flags [ 356.281854][ T7410] loop1: detected capacity change from 0 to 128 [ 356.292579][ T7402] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.743: couldn't read orphan inode 15 (err -117) [ 356.462750][ T7402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.598865][ T26] audit: type=1326 audit(410.788:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bb538799 code=0x0 [ 358.055232][ T7421] loop4: detected capacity change from 0 to 256 [ 360.066961][ T7435] loop3: detected capacity change from 0 to 32768 [ 360.156905][ T7435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.753 (7435) [ 360.267838][ T7435] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 360.276755][ T7435] BTRFS info (device loop3): using free space tree [ 360.283315][ T7435] BTRFS info (device loop3): has skinny extents [ 361.532220][ T7435] BTRFS info (device loop3): enabling ssd optimizations [ 361.547255][ T26] audit: type=1800 audit(415.738:66): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.753" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 361.741747][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4440) [ 361.829517][ T7469] loop4: detected capacity change from 0 to 256 [ 361.982578][ T7434] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 361.982578][ T7434] program syz.1.751 not setting count and/or reply_len properly [ 363.250564][ T7488] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 365.493148][ T7512] loop4: detected capacity change from 0 to 32768 [ 366.268423][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 366.802776][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.936000][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.026401][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.066288][ T7531] loop1: detected capacity change from 0 to 256 [ 367.102550][ T21] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.141813][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.375973][ T21] usb 4-1: config 0 descriptor?? [ 368.227493][ T21] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 368.322933][ T7547] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.529763][ T7547] overlayfs: failed to look up (tracing) for ino (-66) [ 368.725539][ T21] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 368.851450][ T5730] usb 4-1: USB disconnect, device number 5 [ 368.877074][ T7550] netlink: 'syz.1.775': attribute type 12 has an invalid length. [ 368.926097][ T7549] fido_id[7549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 370.249155][ T7562] loop0: detected capacity change from 0 to 16 [ 371.987952][ T7562] erofs: (device loop0): mounted with root inode @ nid 36. [ 371.999964][ T7561] attempt to access beyond end of device [ 371.999964][ T7561] loop0: rw=524288, want=1072, limit=16 [ 372.012286][ T4200] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 372.029204][ T7561] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 372.038224][ T7561] attempt to access beyond end of device [ 372.038224][ T7561] loop0: rw=524288, want=56, limit=16 [ 372.049651][ T7561] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 372.068835][ T26] audit: type=1800 audit(426.258:67): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.778" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 373.783755][ T7576] binder: BINDER_SET_CONTEXT_MGR already set [ 373.832315][ T7576] binder: 7574:7576 ioctl 4018620d 200000000040 returned -16 [ 373.996085][ T7576] binder: 7574:7576 ioctl c0306201 200000000240 returned -11 [ 374.191743][ T7588] loop2: detected capacity change from 0 to 256 [ 374.317368][ T7580] loop4: detected capacity change from 0 to 32768 [ 375.468595][ T7606] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 375.478379][ T7606] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 7606, name: syz.3.787 [ 375.487307][ T7606] 1 lock held by syz.3.787/7606: [ 375.492225][ T7606] #0: ffffffff8c3443b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 375.501974][ T7606] irq event stamp: 6242 [ 375.506133][ T7606] hardirqs last enabled at (6241): [] asm_sysvec_call_function_single+0x16/0x20 [ 375.516797][ T7606] hardirqs last disabled at (6242): [] _raw_spin_lock_irq+0x86/0xf0 [ 375.526336][ T7606] softirqs last enabled at (6084): [] ip_setsockopt+0x58a/0x3130 [ 375.535827][ T7606] softirqs last disabled at (6082): [] release_sock+0x2b/0x1b0 [ 375.544934][ T7606] Preemption disabled at: [ 375.544943][ T7606] [<0000000000000000>] 0x0 [ 375.553657][ T7606] CPU: 0 PID: 7606 Comm: syz.3.787 Not tainted syzkaller #0 [ 375.560921][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.570966][ T7606] Call Trace: [ 375.574239][ T7606] [ 375.577184][ T7606] dump_stack_lvl+0x188/0x250 [ 375.581849][ T7606] ? ip_setsockopt+0x58a/0x3130 [ 375.586682][ T7606] ? show_regs_print_info+0x20/0x20 [ 375.591867][ T7606] ? load_image+0x400/0x400 [ 375.596354][ T7606] ___might_sleep+0x493/0x610 [ 375.601013][ T7606] ? __might_sleep+0xf0/0xf0 [ 375.605591][ T7606] down_read+0x20/0x2e0 [ 375.609728][ T7606] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 375.615000][ T7606] ? kernfs_find_ns+0x510/0x510 [ 375.619918][ T7606] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 375.626054][ T7606] cgroup_get_from_path+0x5f/0x2f0 [ 375.631147][ T7606] cgroup_mt_check_v1+0x1ae/0x2c0 [ 375.636158][ T7606] xt_check_match+0x425/0xaf0 [ 375.640872][ T7606] ? xt_check_proc_name+0x240/0x240 [ 375.646061][ T7606] ? xt_find_match+0xc6/0x210 [ 375.650721][ T7606] ? xt_find_match+0x1e1/0x210 [ 375.655467][ T7606] translate_table+0x1551/0x20e0 [ 375.660393][ T7606] ? ipt_register_table+0x800/0x800 [ 375.665569][ T7606] ? __might_fault+0xb7/0x110 [ 375.670226][ T7606] ? __lock_acquire+0x7d10/0x7d10 [ 375.675237][ T7606] ? _copy_from_user+0x111/0x170 [ 375.680158][ T7606] do_ipt_set_ctl+0x964/0xd80 [ 375.684914][ T7606] ? nf_setsockopt+0x218/0x280 [ 375.689664][ T7606] ? ipt_unregister_table_exit+0x220/0x220 [ 375.695463][ T7606] ? __lock_acquire+0x7d10/0x7d10 [ 375.700473][ T7606] ? __mutex_lock_common+0x465/0x2400 [ 375.705853][ T7606] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 375.711483][ T7606] ? mutex_unlock+0x10/0x10 [ 375.715978][ T7606] ? __local_bh_enable_ip+0x136/0x1c0 [ 375.721336][ T7606] ? lockdep_hardirqs_on+0x94/0x140 [ 375.726519][ T7606] ? __local_bh_enable_ip+0x136/0x1c0 [ 375.731877][ T7606] nf_setsockopt+0x25f/0x280 [ 375.736454][ T7606] ip_setsockopt+0x207d/0x3130 [ 375.741207][ T7606] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 375.746580][ T7606] ? __might_sleep+0xf0/0xf0 [ 375.751164][ T7606] ? rcu_lock_release+0x9/0x20 [ 375.755915][ T7606] tcp_setsockopt+0x240/0x1e90 [ 375.760668][ T7606] ? aa_sk_perm+0x7dc/0x910 [ 375.765155][ T7606] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 375.770525][ T7606] ? aa_af_perm+0x340/0x340 [ 375.775021][ T7606] ? __fget_files+0x40f/0x480 [ 375.779701][ T7606] ? aa_sock_opt_perm+0x74/0x100 [ 375.784627][ T7606] ? sock_common_setsockopt+0x32/0xb0 [ 375.789988][ T7606] ? sock_common_recvmsg+0x1c0/0x1c0 [ 375.795255][ T7606] __sys_setsockopt+0x2bf/0x3d0 [ 375.800102][ T7606] __x64_sys_setsockopt+0xb1/0xc0 [ 375.805122][ T7606] do_syscall_64+0x4c/0xa0 [ 375.809534][ T7606] ? clear_bhb_loop+0x30/0x80 [ 375.814201][ T7606] ? clear_bhb_loop+0x30/0x80 [ 375.818862][ T7606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.824743][ T7606] RIP: 0033:0x7f1e5c6df799 [ 375.829140][ T7606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.848828][ T7606] RSP: 002b:00007f1e5a918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.857268][ T7606] RAX: ffffffffffffffda RBX: 00007f1e5c959090 RCX: 00007f1e5c6df799 [ 375.865223][ T7606] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 375.873180][ T7606] RBP: 00007f1e5c775c99 R08: 00000000000022f8 R09: 0000000000000000 [ 375.881137][ T7606] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 375.889094][ T7606] R13: 00007f1e5c959128 R14: 00007f1e5c959090 R15: 00007ffd0386c978 [ 375.897076][ T7606] [ 375.900205][ T7606] [ 375.902516][ T7606] ============================= [ 375.907340][ T7606] [ BUG: Invalid wait context ] [ 375.912163][ T7606] syzkaller #0 Tainted: G W [ 375.917943][ T7606] ----------------------------- [ 375.922769][ T7606] syz.3.787/7606 is trying to lock: [ 375.928045][ T7606] ffffffff8c44fa10 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 375.937518][ T7606] other info that might help us debug this: [ 375.944183][ T7606] context-{4:4} [ 375.947617][ T7606] 1 lock held by syz.3.787/7606: [ 375.952555][ T7606] #0: ffffffff8c3443b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 375.962274][ T7606] stack backtrace: [ 375.965968][ T7606] CPU: 0 PID: 7606 Comm: syz.3.787 Tainted: G W syzkaller #0 [ 375.974620][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.984663][ T7606] Call Trace: [ 375.987933][ T7606] [ 375.990848][ T7606] dump_stack_lvl+0x188/0x250 [ 375.995509][ T7606] ? show_regs_print_info+0x20/0x20 [ 376.000685][ T7606] ? load_image+0x400/0x400 [ 376.005166][ T7606] __lock_acquire+0x1bf8/0x7d10 [ 376.010004][ T7606] ? verify_lock_unused+0x140/0x140 [ 376.015188][ T7606] ? __printk_cpu_unlock+0x5f/0x70 [ 376.020273][ T7606] ? dump_stack_lvl+0x1fd/0x250 [ 376.025196][ T7606] ? ip_setsockopt+0x58a/0x3130 [ 376.030043][ T7606] ? show_regs_print_info+0x20/0x20 [ 376.035239][ T7606] ? load_image+0x400/0x400 [ 376.039746][ T7606] lock_acquire+0x19e/0x400 [ 376.044237][ T7606] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 376.049703][ T7606] ? __might_sleep+0xf0/0xf0 [ 376.054287][ T7606] ? read_lock_is_recursive+0x10/0x10 [ 376.059653][ T7606] down_read+0x44/0x2e0 [ 376.063798][ T7606] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 376.069254][ T7606] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 376.074556][ T7606] ? kernfs_find_ns+0x510/0x510 [ 376.079397][ T7606] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 376.085709][ T7606] cgroup_get_from_path+0x5f/0x2f0 [ 376.090805][ T7606] cgroup_mt_check_v1+0x1ae/0x2c0 [ 376.095814][ T7606] xt_check_match+0x425/0xaf0 [ 376.100482][ T7606] ? xt_check_proc_name+0x240/0x240 [ 376.105749][ T7606] ? xt_find_match+0xc6/0x210 [ 376.110410][ T7606] ? xt_find_match+0x1e1/0x210 [ 376.115157][ T7606] translate_table+0x1551/0x20e0 [ 376.120075][ T7606] ? ipt_register_table+0x800/0x800 [ 376.125251][ T7606] ? __might_fault+0xb7/0x110 [ 376.129907][ T7606] ? __lock_acquire+0x7d10/0x7d10 [ 376.134914][ T7606] ? _copy_from_user+0x111/0x170 [ 376.139829][ T7606] do_ipt_set_ctl+0x964/0xd80 [ 376.144490][ T7606] ? nf_setsockopt+0x218/0x280 [ 376.149243][ T7606] ? ipt_unregister_table_exit+0x220/0x220 [ 376.155038][ T7606] ? __lock_acquire+0x7d10/0x7d10 [ 376.160148][ T7606] ? __mutex_lock_common+0x465/0x2400 [ 376.165509][ T7606] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 376.171126][ T7606] ? mutex_unlock+0x10/0x10 [ 376.175612][ T7606] ? __local_bh_enable_ip+0x136/0x1c0 [ 376.180982][ T7606] ? lockdep_hardirqs_on+0x94/0x140 [ 376.186166][ T7606] ? __local_bh_enable_ip+0x136/0x1c0 [ 376.191861][ T7606] nf_setsockopt+0x25f/0x280 [ 376.196455][ T7606] ip_setsockopt+0x207d/0x3130 [ 376.201208][ T7606] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 376.206575][ T7606] ? __might_sleep+0xf0/0xf0 [ 376.211146][ T7606] ? rcu_lock_release+0x9/0x20 [ 376.215891][ T7606] tcp_setsockopt+0x240/0x1e90 [ 376.220722][ T7606] ? aa_sk_perm+0x7dc/0x910 [ 376.225207][ T7606] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 376.230817][ T7606] ? aa_af_perm+0x340/0x340 [ 376.235295][ T7606] ? __fget_files+0x40f/0x480 [ 376.239949][ T7606] ? aa_sock_opt_perm+0x74/0x100 [ 376.244873][ T7606] ? sock_common_setsockopt+0x32/0xb0 [ 376.250223][ T7606] ? sock_common_recvmsg+0x1c0/0x1c0 [ 376.255489][ T7606] __sys_setsockopt+0x2bf/0x3d0 [ 376.260324][ T7606] __x64_sys_setsockopt+0xb1/0xc0 [ 376.265369][ T7606] do_syscall_64+0x4c/0xa0 [ 376.269769][ T7606] ? clear_bhb_loop+0x30/0x80 [ 376.274425][ T7606] ? clear_bhb_loop+0x30/0x80 [ 376.279165][ T7606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.285044][ T7606] RIP: 0033:0x7f1e5c6df799 [ 376.289441][ T7606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.309025][ T7606] RSP: 002b:00007f1e5a918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.317416][ T7606] RAX: ffffffffffffffda RBX: 00007f1e5c959090 RCX: 00007f1e5c6df799 [ 376.325629][ T7606] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 376.333589][ T7606] RBP: 00007f1e5c775c99 R08: 00000000000022f8 R09: 0000000000000000 [ 376.341808][ T7606] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 376.349761][ T7606] R13: 00007f1e5c959128 R14: 00007f1e5c959090 R15: 00007ffd0386c978 [ 376.357720][ T7606] [ 376.361446][ T7606] xt_cgroup: invalid path, errno=-2 [ 377.337204][ T7599] PM: hibernation: Basic memory bitmaps created [ 377.351111][ T7599] PM: hibernation: Basic memory bitmaps freed [ 378.573743][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.580048][ T1421] ieee802154 phy1 wpan1: encryption failed: -22