last executing test programs: 5m13.534442132s ago: executing program 2 (id=533): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x5333b000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008004) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x348}, 0x0, 0x800, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147042, 0x32) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r4, r4, 0x0, 0x7a680000) 5m11.782264794s ago: executing program 2 (id=538): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0x1000f) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x8000, 0x0, '\x00', {0x0, @reserved}}) 5m9.862135198s ago: executing program 2 (id=540): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x734, &(0x7f0000000580)={[{@nobh}, {@dax_never}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nolazytime}]}, 0xff, 0x487, &(0x7f0000000b80)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000c61) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000"], 0x7c}}, 0x0) 5m7.298125011s ago: executing program 2 (id=547): socket$alg(0x26, 0x5, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0xfffffd88) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) timerfd_create(0x1, 0x0) 5m3.294693242s ago: executing program 2 (id=550): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x112, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x92, 0x80, 0x9d5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m1.058457151s ago: executing program 2 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410e9) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt(r5, 0x4, 0x7, &(0x7f0000000380)="36f893f13d4686a53855554203f5a163378bf9ede2ab306952d592fb2f4281a3966778c49a9be4688ce78b77f28984", 0x2f) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'veth0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0x8}}) sendto$inet6(r5, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) 4m45.732268424s ago: executing program 32 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410e9) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt(r5, 0x4, 0x7, &(0x7f0000000380)="36f893f13d4686a53855554203f5a163378bf9ede2ab306952d592fb2f4281a3966778c49a9be4688ce78b77f28984", 0x2f) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'veth0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0x8}}) sendto$inet6(r5, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) 15.181103288s ago: executing program 0 (id=980): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x800) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x14018, &(0x7f0000000880)=ANY=[@ANYBLOB="0010bbbe8b821e4cf6d79d4d501be8af339fd4bbd17d928c6d063cce0ce162684c47d7ced43a8371c6dd5466f6250eb5e73903a3df58f7df872e05470b03dfd44956cfbf6b2651360ae7880805ab8f419532c02aa5d40d1ed66a2ca647a20a37040700000000000000c701346399b0848c3fac7e886dbfcbcd516f5d261738410cf17d0cea70e5d3c6b7478c07b55e59876f1b7d68782cb16137784d64e37a4327377467b94266cde7f65690b41ccf9c1dca7a081990"], 0x1, 0x6fb, &(0x7f0000000180)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x687, &(0x7f0000000c00)="$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") syz_usb_connect(0x3, 0x2d, &(0x7f00000012c0)={{0x12, 0x1, 0x201, 0x6b, 0x7d, 0x79, 0x20, 0x2040, 0xd8e3, 0x9d9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x78, 0x80, 0x1, [{{0x9, 0x4, 0xfb, 0x9, 0x1, 0x21, 0xd, 0x4c, 0x4, [], [{{0x9, 0x5, 0xf, 0x2, 0x7ef, 0x1, 0x6, 0xff}}]}}]}}]}}, 0x0) link(0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) inotify_init() syz_open_dev$mouse(0x0, 0x8, 0x40) unshare(0xc020400) close(0x3) 12.920286738s ago: executing program 0 (id=993): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x5}, {0x6}]}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) clock_adjtime(0x0, &(0x7f00000006c0)={0x1b, 0xf423f, 0x4100, 0x0, 0x0, 0x2c43}) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x26f, &(0x7f00000003c0)="$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") fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r3 = signalfd(r2, &(0x7f0000000100)={[0x7]}, 0x8) close_range(r0, r3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) 11.878739816s ago: executing program 0 (id=1001): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x2, 0x787, &(0x7f0000001000)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x2, 0x1df, &(0x7f0000000ac0)="$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") syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 11.448348719s ago: executing program 0 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) open(0x0, 0x0, 0x100) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000000)={[{@unhide}, {@utf8}, {@map_acorn}, {@check_strict}, {@hide}, {@hide}, {@session={'session', 0x3d, 0x52}}, {@unhide}, {@dmode={'dmode', 0x3d, 0x1}}, {@sbsector={'sbsector', 0x3d, 0x20}}, {@session={'session', 0x3d, 0x49}}, {@map_off}, {@mode={'mode', 0x3d, 0x86}}], [{@uid_eq}], 0x2c}, 0x1, 0x9ce, &(0x7f0000001740)="$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") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.800203693s ago: executing program 4 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf2501000000100002800c0001800818010003000000040001804a"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008800) 9.486458807s ago: executing program 4 (id=1018): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0xffff, 0x0, 0x7}) 9.120742144s ago: executing program 4 (id=1019): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a18800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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") lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 8.670392018s ago: executing program 4 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x3c, r1, 0x5, 0x1, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac01, 0xfac06]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) 8.50633882s ago: executing program 3 (id=1022): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x200, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000580)=""/8) 8.430998936s ago: executing program 3 (id=1023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xc7, 0x0, 0x1}) 8.360811891s ago: executing program 5 (id=1024): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r0, 0x2}}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) io_uring_setup(0x6d92, &(0x7f0000000100)={0x0, 0x9255, 0x0, 0x0, 0x0, 0x0, r4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 8.070278473s ago: executing program 3 (id=1025): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x9d) io_setup(0x31, &(0x7f0000000200)=0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x244) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 6.818205857s ago: executing program 3 (id=1028): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) 6.728625054s ago: executing program 3 (id=1029): r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x80) write$UHID_INPUT(r0, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x0, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x4}, 0x38) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000280), &(0x7f0000000380)=@sha1={0x1, "9e1bb06c07606ee9c206d3bd29a8281609fa120d"}, 0x15, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x30, r5, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.062269544s ago: executing program 1 (id=1031): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f", @ANYRES64, @ANYRES8=0xffffffffffffffff, @ANYRESHEX], 0x4, 0x305, &(0x7f0000000380)="$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") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000004400)=ANY=[@ANYRES64=r0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES64=r1, @ANYRES16, @ANYBLOB='nls=ascii,gid=', @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYBLOB="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"], 0x1, 0x6ed, &(0x7f0000000dc0)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) accept4$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x80000) r5 = accept4$vsock_stream(r4, 0x0, 0x0, 0x69f1a63e94b9a57e) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.651533655s ago: executing program 1 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(r2, 0x400, 0x0) 5.489862277s ago: executing program 1 (id=1033): socket$alg(0x26, 0x5, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0xfffffd88) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) timerfd_create(0x1, 0x0) 4.140317048s ago: executing program 4 (id=1034): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port0\x00'}) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071000a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x7b9, 0x0) 4.133777039s ago: executing program 5 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) io_setup(0x9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r7) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, 0x0, 0x0) 3.923982655s ago: executing program 1 (id=1036): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) 3.831632362s ago: executing program 0 (id=1037): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4006, &(0x7f0000000b80)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x438, &(0x7f0000001040)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) mmap(&(0x7f00003f9000/0x3000)=nil, 0x3000, 0x2, 0x50, r0, 0x1000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) 2.92058169s ago: executing program 3 (id=1038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.920393481s ago: executing program 4 (id=1039): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a9000171900be008300"], 0x0}, 0x0) 2.915432111s ago: executing program 5 (id=1040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x5fa30ea8c91ad259, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) 2.888306692s ago: executing program 1 (id=1041): r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) syz_emit_ethernet(0x45, &(0x7f0000000000)={@multicast, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x3, 0x0, 0x0, 0x1, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x3, 0x30, 0xfff, 0x64, 0x8, 0x5, 0x1f, 0xe, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, "fba61c50199985"}}}}}, 0x0) 2.654346431s ago: executing program 5 (id=1042): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x89}}}], 0x30}}], 0x1, 0x5efe) 2.606889864s ago: executing program 1 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$eJzs3E9rHGUcB/Bf18TE1PxRa7U96INePA1NDnpRJEgKkgWldoVWEKZmosuOuyGzBLaIsSevvg7x6E0Q30AuvgZvuXjsQRzpbNLUmlbEJuufz+ew84Pn+e7zDLMMPMM8u//6V5/2NqtsMx9G68yZaG1FpNtpNqIVEVHf+XhhPRrXrq+vtttrV1K6vHp1+dWU0sKL33/w2Tcv/TA8+/63C9/NxN7Sh/s/r/y0d37vwv6vVz/pVqlbpf5gmPJ0YzAY5jfKIm10q16W0rtlkVdF6varYvt37ZvlYGtrlPL+xvzc1nZRVSnvj1KvGKXhIA23Ryn/OO/2U5ZlaX4ueKDpP+/S+fp2XdcRdT0dj0dd1/UTMRdn48mYj4X4IiKeiqfjmTgXz8b5eC6ejwtNr9OYPgAAAAAAAAAAAAAAAAAAAPx/PGz//2Is2f8PAAAAAAAAAAAAAAAAAAAAp+C9a9fXV9vttSspzUaUX+50djrj47j91mHHS7EYv0Sz+39sXF9+u712KTWW4la5e5Df3ek81sRWN6MbZRSx3PydwEF+qmk7zC+P8+koH7s7nZmYuze/Eotx7vjxV/6Qv3OcjVdeviefxWL8+FEMooyNZuyj/OfLKb31Tvu+/MWmHwAAAPwXZOmuY9fvWfag9nH+7vr6uOcDb0TE0fOB+9bXU3FxarLnTkQ1utnLy7LYrkY3W4dFL589LMp/cfHapEZvndA3t+KRT3U6/lZ85uBn9E+43IpHWjz0tpFO5ebEiTu66JOeCQAAAAAAAAAAAH/FCb9FOBXHvFn25mROFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5jB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQwUAAP//2C/Elw==") r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x0, 0x0, 0x0, 0x0, 0x2401}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1.941701664s ago: executing program 5 (id=1044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x0, 0x0, 0x0}) 154.197459ms ago: executing program 0 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5400000000020104000000000000000002000000240002801400018008000100e000000108000204ac1e00010c00028005000100000000001800038014000180080001000000000008000200ac141404040001"], 0x54}}, 0x0) 0s ago: executing program 5 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg1\x00', 0x0}) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x0, 0x0, 0x0, 0x0, 0x2401}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_delroute={0x24, 0x19, 0x1, 0x800, 0x0, {0xa, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_OIF={0x8, 0x1e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.963835][ T7511] vivid-007: ================= START STATUS ================= [ 521.971591][ T7511] vivid-007: Generate PTS: true [ 521.976485][ T7511] vivid-007: Generate SCR: true [ 521.981425][ T7511] tpg source WxH: 640x360 (Y'CbCr) [ 521.986554][ T7511] tpg field: 1 [ 521.989970][ T7511] tpg crop: 640x360@0x0 [ 521.994142][ T7511] tpg compose: 640x360@0x0 [ 521.998604][ T7511] tpg colorspace: 8 [ 522.002427][ T7511] tpg transfer function: 0/0 [ 522.007026][ T7511] tpg Y'CbCr encoding: 0/0 [ 522.011487][ T7511] tpg quantization: 0/0 [ 522.015692][ T7511] tpg RGB range: 0/2 [ 522.019630][ T7511] vivid-007: ================== END STATUS ================== [ 522.285299][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.349872][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.407397][ T7184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.498789][ T7184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.525814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.565292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.617477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.649230][ T7518] loop4: detected capacity change from 0 to 4096 [ 522.664376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.698592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.706911][ T7518] NILFS (loop4): invalid segment: Checksum error in segment payload [ 522.722497][ T7520] loop3: detected capacity change from 0 to 4096 [ 522.735166][ T7518] NILFS (loop4): trying rollback from an earlier position [ 522.763449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.848623][ T7520] NILFS (loop3): invalid segment: Checksum error in segment payload [ 522.849230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.856660][ T7520] NILFS (loop3): trying rollback from an earlier position [ 522.884535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.888103][ T7518] NILFS (loop4): recovery complete [ 522.894748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.285268][ T7526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.672159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.793595][ T7520] NILFS (loop3): recovery complete [ 523.808419][ T7530] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.268654][ T26] audit: type=1800 audit(1739478204.813:197): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.635" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 524.506604][ T26] audit: type=1800 audit(1739478204.813:198): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.635" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 524.688272][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.638'. [ 524.733640][ T7543] loop0: detected capacity change from 0 to 4096 [ 524.763070][ T26] audit: type=1800 audit(1739478204.903:199): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 524.784418][ T26] audit: type=1800 audit(1739478205.143:200): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 524.813600][ T7543] NILFS (loop0): invalid segment: Checksum error in segment payload [ 524.875011][ T7543] NILFS (loop0): trying rollback from an earlier position [ 524.931013][ T7543] NILFS (loop0): recovery complete [ 524.972910][ T7551] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.545626][ T7555] netlink: 80 bytes leftover after parsing attributes in process `syz.4.641'. [ 525.570164][ T7554] netlink: 80 bytes leftover after parsing attributes in process `syz.3.640'. [ 525.618545][ T26] audit: type=1800 audit(1739478206.163:201): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.639" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 525.850696][ T26] audit: type=1800 audit(1739478206.183:202): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.639" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 526.358445][ T7567] netlink: 80 bytes leftover after parsing attributes in process `syz.3.642'. [ 527.553569][ T7572] netlink: 80 bytes leftover after parsing attributes in process `syz.1.643'. [ 528.044368][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.080016][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.099690][ T7577] loop3: detected capacity change from 0 to 512 [ 528.141980][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.371024][ T7588] netlink: 80 bytes leftover after parsing attributes in process `syz.1.648'. [ 531.023870][ T7593] vivid-007: ================= START STATUS ================= [ 531.031822][ T7593] vivid-007: Generate PTS: true [ 531.037796][ T7593] vivid-007: Generate SCR: true [ 531.042806][ T7593] tpg source WxH: 640x360 (Y'CbCr) [ 531.048025][ T7593] tpg field: 1 [ 531.051464][ T7593] tpg crop: 640x360@0x0 [ 531.055692][ T7593] tpg compose: 640x360@0x0 [ 531.060233][ T7593] tpg colorspace: 8 [ 531.064117][ T7593] tpg transfer function: 0/0 [ 531.068810][ T7593] tpg Y'CbCr encoding: 0/0 [ 531.073289][ T7593] tpg quantization: 0/0 [ 531.077590][ T7593] tpg RGB range: 0/2 [ 531.081583][ T7593] vivid-007: ================== END STATUS ================== [ 531.642108][ T7601] loop0: detected capacity change from 0 to 256 [ 533.440208][ T7619] dccp_close: ABORT with 28 bytes unread [ 533.464144][ T7629] loop1: detected capacity change from 0 to 4096 [ 533.495584][ T7629] NILFS (loop1): invalid segment: Checksum error in segment payload [ 533.547038][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.556588][ T7629] NILFS (loop1): trying rollback from an earlier position [ 533.569338][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.588621][ T7629] NILFS (loop1): recovery complete [ 533.648181][ T7633] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.695936][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.831860][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.212042][ T7642] vivid-007: ================= START STATUS ================= [ 534.221267][ T7642] vivid-007: Generate PTS: true [ 534.226293][ T7642] vivid-007: Generate SCR: true [ 534.231406][ T7642] tpg source WxH: 640x360 (Y'CbCr) [ 534.236616][ T7642] tpg field: 1 [ 534.240117][ T7642] tpg crop: 640x360@0x0 [ 534.244342][ T7642] tpg compose: 640x360@0x0 [ 534.248908][ T7642] tpg colorspace: 8 [ 534.252779][ T7642] tpg transfer function: 0/0 [ 534.257528][ T7642] tpg Y'CbCr encoding: 0/0 [ 534.262106][ T7642] tpg quantization: 0/0 [ 534.266328][ T7642] tpg RGB range: 0/2 [ 534.270331][ T7642] vivid-007: ================== END STATUS ================== [ 534.964552][ T7184] device veth0_vlan entered promiscuous mode [ 535.180313][ T26] audit: type=1800 audit(1739478215.723:203): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.654" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 535.281147][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.318604][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.552700][ T7655] netlink: 80 bytes leftover after parsing attributes in process `syz.4.657'. [ 536.257493][ T7661] loop1: detected capacity change from 0 to 4096 [ 536.319706][ T7661] NILFS (loop1): invalid segment: Checksum error in segment payload [ 536.358538][ T7184] device veth1_vlan entered promiscuous mode [ 536.387861][ T7661] NILFS (loop1): trying rollback from an earlier position [ 536.430051][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.461297][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.714108][ T7661] NILFS (loop1): recovery complete [ 538.545434][ T7184] device veth0_macvtap entered promiscuous mode [ 538.708872][ T7686] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.768031][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 538.882369][ T7663] dccp_close: ABORT with 28 bytes unread [ 538.899432][ T7184] device veth1_macvtap entered promiscuous mode [ 538.987339][ T26] audit: type=1800 audit(1739478219.523:204): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.658" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 539.323576][ T26] audit: type=1800 audit(1739478219.553:205): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.658" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 541.087258][ T7706] loop1: detected capacity change from 0 to 4096 [ 542.036207][ T7706] NILFS (loop1): invalid segment: Checksum error in segment payload [ 542.077739][ T7706] NILFS (loop1): trying rollback from an earlier position [ 542.146327][ T7706] NILFS (loop1): recovery complete [ 542.211394][ T7713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 542.310012][ T26] audit: type=1800 audit(1739478222.853:206): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.664" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 542.357666][ T4307] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 542.611076][ T26] audit: type=1800 audit(1739478222.873:207): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.664" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 542.712949][ T4307] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 542.805161][ T4307] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 542.815449][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.823809][ T4307] usb 4-1: Product: syz [ 542.828561][ T4307] usb 4-1: Manufacturer: syz [ 542.833277][ T4307] usb 4-1: SerialNumber: syz [ 542.852041][ T4307] usb 4-1: config 0 descriptor?? [ 542.869464][ T4307] powermate: probe of 4-1:0.0 failed with error -22 [ 543.225545][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 543.236210][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 543.245424][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 543.253477][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 543.261508][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 543.269400][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 543.575168][ T7726] netlink: 80 bytes leftover after parsing attributes in process `syz.4.667'. [ 544.186633][ T4307] usb 4-1: USB disconnect, device number 6 [ 544.636194][ T7738] loop1: detected capacity change from 0 to 4096 [ 544.663927][ T7738] NILFS (loop1): invalid segment: Checksum error in segment payload [ 544.692360][ T7738] NILFS (loop1): trying rollback from an earlier position [ 544.851003][ T7738] NILFS (loop1): recovery complete [ 544.895593][ T7747] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 545.042847][ T26] audit: type=1800 audit(1739478225.583:208): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.668" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 545.367909][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 545.466137][ T26] audit: type=1800 audit(1739478225.613:209): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.668" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 545.894139][ T7758] vivid-007: ================= START STATUS ================= [ 545.902105][ T7758] vivid-007: Generate PTS: true [ 545.907123][ T7758] vivid-007: Generate SCR: true [ 545.912215][ T7758] tpg source WxH: 640x360 (Y'CbCr) [ 545.917390][ T7758] tpg field: 1 [ 545.920872][ T7758] tpg crop: 640x360@0x0 [ 545.925092][ T7758] tpg compose: 640x360@0x0 [ 545.929611][ T7758] tpg colorspace: 8 [ 545.933477][ T7758] tpg transfer function: 0/0 [ 545.938183][ T7758] tpg Y'CbCr encoding: 0/0 [ 545.942660][ T7758] tpg quantization: 0/0 [ 545.946913][ T7758] tpg RGB range: 0/2 [ 545.950915][ T7758] vivid-007: ================== END STATUS ================== [ 548.109487][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 548.144185][ T7716] chnl_net:caif_netlink_parms(): no params data found [ 550.764996][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 551.256549][ T7790] loop0: detected capacity change from 0 to 4096 [ 551.353454][ T7790] NILFS (loop0): invalid segment: Checksum error in segment payload [ 551.435340][ T7790] NILFS (loop0): trying rollback from an earlier position [ 551.554653][ T7794] loop4: detected capacity change from 0 to 4096 [ 551.647023][ T7790] NILFS (loop0): recovery complete [ 551.671149][ T7794] NILFS (loop4): invalid segment: Checksum error in segment payload [ 551.671178][ T7794] NILFS (loop4): trying rollback from an earlier position [ 551.797595][ T7804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 551.828439][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.835598][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.000213][ T26] audit: type=1800 audit(1739478232.543:210): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.675" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 552.058046][ T4300] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 552.066917][ T7794] NILFS (loop4): recovery complete [ 552.129711][ T7810] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.276025][ T7716] device bridge_slave_0 entered promiscuous mode [ 552.290157][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 552.335097][ T26] audit: type=1800 audit(1739478232.573:211): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.675" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 552.591253][ T26] audit: type=1800 audit(1739478233.133:212): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 552.612508][ T4300] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 552.679679][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.701471][ T4300] usb 4-1: Product: syz [ 552.711651][ T4300] usb 4-1: Manufacturer: syz [ 552.720881][ T4300] usb 4-1: SerialNumber: syz [ 552.761501][ T4300] usb 4-1: config 0 descriptor?? [ 552.811681][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 552.814056][ T4300] powermate: probe of 4-1:0.0 failed with error -22 [ 552.877903][ T26] audit: type=1800 audit(1739478233.173:213): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 553.511764][ T7824] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 554.319881][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.950421][ T7832] netlink: 80 bytes leftover after parsing attributes in process `syz.4.683'. [ 555.710425][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.858422][ T7716] device bridge_slave_1 entered promiscuous mode [ 556.314939][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.406673][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.595416][ T7843] netlink: 80 bytes leftover after parsing attributes in process `syz.1.686'. [ 558.589923][ T7716] team0: Port device team_slave_0 added [ 558.635654][ T7716] team0: Port device team_slave_1 added [ 558.735946][ T7860] netlink: 80 bytes leftover after parsing attributes in process `syz.4.687'. [ 559.169020][ T7856] loop1: detected capacity change from 0 to 4096 [ 559.504550][ T7856] NILFS (loop1): invalid segment: Checksum error in segment payload [ 559.526215][ T7856] NILFS (loop1): trying rollback from an earlier position [ 560.086046][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.175644][ T7856] NILFS (loop1): recovery complete [ 560.276597][ T7868] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 560.302193][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.616067][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.732004][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.819981][ T26] audit: type=1800 audit(1739478242.363:214): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 561.927718][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.092372][ T4336] usb 4-1: USB disconnect, device number 7 [ 562.106977][ T26] audit: type=1800 audit(1739478242.583:215): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 562.117248][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.564257][ T7891] loop1: detected capacity change from 0 to 4096 [ 563.600213][ T7891] NILFS (loop1): invalid segment: Checksum error in segment payload [ 563.621628][ T7891] NILFS (loop1): trying rollback from an earlier position [ 563.662415][ T7716] device hsr_slave_0 entered promiscuous mode [ 563.714239][ T7716] device hsr_slave_1 entered promiscuous mode [ 564.468159][ T7891] NILFS (loop1): recovery complete [ 564.485063][ T7716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.505610][ T7716] Cannot create hsr debugfs directory [ 564.516713][ T7900] loop0: detected capacity change from 0 to 4096 [ 564.522481][ T7906] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 564.558107][ T7900] NILFS (loop0): invalid segment: Checksum error in segment payload [ 564.609085][ T7900] NILFS (loop0): trying rollback from an earlier position [ 565.695092][ T7900] NILFS (loop0): recovery complete [ 565.736131][ T26] audit: type=1800 audit(1739478246.273:216): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.693" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 565.756530][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.911310][ T7911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.061030][ T26] audit: type=1800 audit(1739478246.313:217): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.693" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 566.169653][ T26] audit: type=1800 audit(1739478246.643:218): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.704" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 566.191615][ T26] audit: type=1800 audit(1739478246.643:219): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.704" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 566.237664][ T5155] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 566.739555][ T5155] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 566.760113][ T5155] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 566.781196][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.791650][ T5155] usb 4-1: Product: syz [ 566.795951][ T5155] usb 4-1: Manufacturer: syz [ 566.845542][ T5155] usb 4-1: SerialNumber: syz [ 568.046861][ T5155] usb 4-1: config 0 descriptor?? [ 568.147774][ T5155] usb 4-1: can't set config #0, error -71 [ 568.179067][ T5155] usb 4-1: USB disconnect, device number 8 [ 569.498599][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.507128][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.717973][ T7091] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 569.990292][ T7091] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 570.125129][ T7930] loop4: detected capacity change from 0 to 4096 [ 570.143798][ T7930] NILFS (loop4): invalid segment: Checksum error in segment payload [ 570.152429][ T7930] NILFS (loop4): trying rollback from an earlier position [ 570.190896][ T7091] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 570.205906][ T7091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.214030][ T7091] usb 1-1: Product: syz [ 570.220662][ T7091] usb 1-1: Manufacturer: syz [ 570.224931][ T7932] loop3: detected capacity change from 0 to 4096 [ 570.225284][ T7091] usb 1-1: SerialNumber: syz [ 570.247423][ T7091] usb 1-1: config 0 descriptor?? [ 570.258010][ T7091] powermate: probe of 1-1:0.0 failed with error -22 [ 570.284885][ T7930] NILFS (loop4): recovery complete [ 570.307434][ T7932] NILFS (loop3): invalid segment: Checksum error in segment payload [ 570.336645][ T7941] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 570.355132][ T46] device hsr_slave_0 left promiscuous mode [ 570.358000][ T7932] NILFS (loop3): trying rollback from an earlier position [ 570.370113][ T46] device hsr_slave_1 left promiscuous mode [ 570.420311][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.435284][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.503883][ T7932] NILFS (loop3): recovery complete [ 570.512539][ T26] audit: type=1800 audit(1739478251.053:220): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.700" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 570.520187][ T7943] loop1: detected capacity change from 0 to 4096 [ 570.561573][ T7945] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 570.589081][ T46] device bridge_slave_1 left promiscuous mode [ 570.685461][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.869208][ T26] audit: type=1800 audit(1739478251.093:221): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.700" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 570.895902][ T7943] NILFS (loop1): invalid segment: Checksum error in segment payload [ 571.007869][ T7943] NILFS (loop1): trying rollback from an earlier position [ 571.063038][ T46] device bridge_slave_0 left promiscuous mode [ 571.133031][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.142168][ T7943] NILFS (loop1): recovery complete [ 571.171479][ T26] audit: type=1800 audit(1739478251.513:222): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.699" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 571.207715][ T7948] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.435636][ T7951] SET target dimension over the limit! [ 572.094357][ T46] device veth1_macvtap left promiscuous mode [ 572.148200][ T4303] usb 1-1: USB disconnect, device number 10 [ 572.166921][ T26] audit: type=1800 audit(1739478252.663:223): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 572.187321][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.190896][ T26] audit: type=1800 audit(1739478253.733:224): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 573.269020][ T46] device veth0_macvtap left promiscuous mode [ 573.290925][ T46] device veth1_vlan left promiscuous mode [ 573.312877][ T46] device veth0_vlan left promiscuous mode [ 576.848868][ T4303] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 576.965505][ T46] team0 (unregistering): Port device team_slave_1 removed [ 577.007449][ T46] team0 (unregistering): Port device team_slave_0 removed [ 577.039596][ T4303] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 577.053574][ T4303] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 577.062752][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.072842][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.075344][ T4303] usb 4-1: Product: syz [ 577.093351][ T4303] usb 4-1: Manufacturer: syz [ 577.098128][ T4303] usb 4-1: SerialNumber: syz [ 577.105332][ T4303] usb 4-1: config 0 descriptor?? [ 577.124370][ T4303] powermate: probe of 4-1:0.0 failed with error -22 [ 577.133639][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.549376][ T46] bond0 (unregistering): Released all slaves [ 579.066784][ T14] usb 4-1: USB disconnect, device number 9 [ 580.518479][ T5155] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 580.726273][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 580.751683][ T5155] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 580.774309][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.801062][ T5155] usb 1-1: Product: syz [ 580.822492][ T8002] loop3: detected capacity change from 0 to 4096 [ 580.846226][ T5155] usb 1-1: Manufacturer: syz [ 580.865385][ T5155] usb 1-1: SerialNumber: syz [ 580.894669][ T5155] usb 1-1: config 0 descriptor?? [ 580.899016][ T8002] NILFS (loop3): invalid segment: Checksum error in segment payload [ 580.970165][ T8002] NILFS (loop3): trying rollback from an earlier position [ 581.020635][ T8002] NILFS (loop3): recovery complete [ 581.067063][ T8009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 581.192457][ T26] audit: type=1800 audit(1739478261.733:225): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.713" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 581.504218][ T26] audit: type=1800 audit(1739478261.763:226): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.713" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 581.699868][ T7716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 581.770365][ T7716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 581.834516][ T7716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 581.890593][ T7716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 582.577928][ T7091] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 582.792729][ T7091] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 582.910701][ T7091] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 583.037404][ T7091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.077715][ T7091] usb 4-1: Product: syz [ 583.092534][ T7091] usb 4-1: Manufacturer: syz [ 583.104160][ T7091] usb 4-1: SerialNumber: syz [ 583.117437][ T8022] SET target dimension over the limit! [ 583.123629][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.165914][ T7091] usb 4-1: config 0 descriptor?? [ 583.212345][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 583.255321][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.290612][ T7091] powermate: probe of 4-1:0.0 failed with error -22 [ 583.351136][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.459126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.523515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.621615][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.629100][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.781425][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.817108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.865612][ T8026] SET target dimension over the limit! [ 583.868480][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.935702][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.943125][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.011696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 584.121991][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 584.169810][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 584.314552][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 584.429702][ T7716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.468453][ T7716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.598804][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.275723][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.433338][ T4336] usb 4-1: USB disconnect, device number 10 [ 585.467474][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.531630][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.555702][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.572161][ T5155] usb 1-1: can't set config #0, error -71 [ 585.601890][ T5155] usb 1-1: USB disconnect, device number 11 [ 585.616848][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.642584][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.698876][ T8037] loop3: detected capacity change from 0 to 4096 [ 585.733055][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.756347][ T8037] NILFS (loop3): invalid segment: Checksum error in segment payload [ 585.974242][ T8045] netlink: 80 bytes leftover after parsing attributes in process `syz.0.720'. [ 586.028308][ T8037] NILFS (loop3): trying rollback from an earlier position [ 586.559439][ T8037] NILFS (loop3): recovery complete [ 586.743856][ T8055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.337906][ T8064] fuse: Bad value for 'fd' [ 589.332972][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.343501][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 589.380768][ T8059] loop0: detected capacity change from 0 to 4096 [ 590.629460][ T8059] NILFS (loop0): invalid segment: Checksum error in segment payload [ 590.777949][ T8059] NILFS (loop0): trying rollback from an earlier position [ 590.871325][ T8082] vivid-007: ================= START STATUS ================= [ 590.879107][ T8082] vivid-007: Generate PTS: true [ 590.884148][ T8082] vivid-007: Generate SCR: true [ 590.889263][ T8082] tpg source WxH: 640x360 (Y'CbCr) [ 590.894439][ T8082] tpg field: 1 [ 590.897935][ T8082] tpg crop: 640x360@0x0 [ 590.902153][ T8082] tpg compose: 640x360@0x0 [ 590.906634][ T8082] tpg colorspace: 8 [ 590.910669][ T8082] tpg transfer function: 0/0 [ 590.915320][ T8082] tpg Y'CbCr encoding: 0/0 [ 590.919852][ T8082] tpg quantization: 0/0 [ 590.924090][ T8082] tpg RGB range: 0/2 [ 590.928085][ T8082] vivid-007: ================== END STATUS ================== [ 591.396530][ T8059] NILFS (loop0): recovery complete [ 591.408433][ T8059] NILFS (loop0): error -4 creating segctord thread [ 591.536410][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.612452][ T8088] loop1: detected capacity change from 0 to 4096 [ 591.671651][ T8091] loop3: detected capacity change from 0 to 4096 [ 591.727942][ T8088] NILFS (loop1): invalid segment: Checksum error in segment payload [ 591.744633][ T8091] NILFS (loop3): invalid segment: Checksum error in segment payload [ 591.757868][ T8088] NILFS (loop1): trying rollback from an earlier position [ 591.776744][ T8091] NILFS (loop3): trying rollback from an earlier position [ 591.807819][ T8097] SET target dimension over the limit! [ 591.881620][ T8088] NILFS (loop1): recovery complete [ 591.922434][ T8099] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.967128][ T8091] NILFS (loop3): recovery complete [ 592.027727][ T8101] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 592.094566][ T8103] SET target dimension over the limit! [ 592.391405][ T26] audit: type=1800 audit(1739478272.933:227): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.727" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 592.892252][ T26] audit: type=1800 audit(1739478272.953:228): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.727" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 592.925146][ T26] audit: type=1800 audit(1739478273.463:229): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.726" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 593.438932][ T26] audit: type=1800 audit(1739478273.463:230): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.726" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 595.193069][ T8126] loop4: detected capacity change from 0 to 4096 [ 596.757860][ T8140] fuse: Bad value for 'fd' [ 597.395660][ T8134] vivid-007: ================= START STATUS ================= [ 597.403566][ T8134] vivid-007: Generate PTS: true [ 597.409197][ T8134] vivid-007: Generate SCR: true [ 597.414415][ T8134] tpg source WxH: 640x360 (Y'CbCr) [ 597.419788][ T8134] tpg field: 1 [ 597.423379][ T8134] tpg crop: 640x360@0x0 [ 597.427841][ T8134] tpg compose: 640x360@0x0 [ 597.432476][ T8134] tpg colorspace: 8 [ 597.436496][ T8134] tpg transfer function: 0/0 [ 597.441352][ T8134] tpg Y'CbCr encoding: 0/0 [ 597.446014][ T8134] tpg quantization: 0/0 [ 597.450432][ T8134] tpg RGB range: 0/2 [ 597.454558][ T8134] vivid-007: ================== END STATUS ================== [ 597.534790][ T8126] NILFS (loop4): invalid segment: Checksum error in segment payload [ 597.588364][ T8126] NILFS (loop4): trying rollback from an earlier position [ 597.854860][ T8126] NILFS (loop4): recovery complete [ 597.935678][ T8156] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 600.020552][ T8161] vivid-007: ================= START STATUS ================= [ 600.028303][ T8161] vivid-007: Generate PTS: true [ 600.033213][ T8161] vivid-007: Generate SCR: true [ 600.038178][ T8161] tpg source WxH: 640x360 (Y'CbCr) [ 600.043313][ T8161] tpg field: 1 [ 600.046706][ T8161] tpg crop: 640x360@0x0 [ 600.050927][ T8161] tpg compose: 640x360@0x0 [ 600.055371][ T8161] tpg colorspace: 8 [ 600.059234][ T8161] tpg transfer function: 0/0 [ 600.063847][ T8161] tpg Y'CbCr encoding: 0/0 [ 600.068330][ T8161] tpg quantization: 0/0 [ 600.072550][ T8161] tpg RGB range: 0/2 [ 600.076553][ T8161] vivid-007: ================== END STATUS ================== [ 601.196455][ T8180] netlink: 80 bytes leftover after parsing attributes in process `syz.3.739'. [ 601.689466][ T8182] vivid-007: ================= START STATUS ================= [ 601.697489][ T8182] vivid-007: Generate PTS: true [ 601.702494][ T8182] vivid-007: Generate SCR: true [ 601.707406][ T8182] tpg source WxH: 640x360 (Y'CbCr) [ 601.712677][ T8182] tpg field: 1 [ 601.716240][ T8182] tpg crop: 640x360@0x0 [ 601.720595][ T8182] tpg compose: 640x360@0x0 [ 601.773602][ T8182] tpg colorspace: 8 [ 601.777669][ T8182] tpg transfer function: 0/0 [ 601.782429][ T8182] tpg Y'CbCr encoding: 0/0 [ 601.786911][ T8182] tpg quantization: 0/0 [ 601.791284][ T8182] tpg RGB range: 0/2 [ 601.795840][ T8182] vivid-007: ================== END STATUS ================== [ 602.503256][ T8185] SET target dimension over the limit! [ 602.786180][ T8191] netlink: 80 bytes leftover after parsing attributes in process `syz.1.741'. [ 605.567698][ T8203] vivid-007: ================= START STATUS ================= [ 605.575392][ T8203] vivid-007: Generate PTS: true [ 605.580359][ T8203] vivid-007: Generate SCR: true [ 605.585250][ T8203] tpg source WxH: 640x360 (Y'CbCr) [ 605.590460][ T8203] tpg field: 1 [ 605.593847][ T8203] tpg crop: 640x360@0x0 [ 605.598052][ T8203] tpg compose: 640x360@0x0 [ 605.602484][ T8203] tpg colorspace: 8 [ 605.606303][ T8203] tpg transfer function: 0/0 [ 605.610952][ T8203] tpg Y'CbCr encoding: 0/0 [ 605.615492][ T8203] tpg quantization: 0/0 [ 605.619695][ T8203] tpg RGB range: 0/2 [ 605.623603][ T8203] vivid-007: ================== END STATUS ================== [ 607.291930][ T8216] fuse: Bad value for 'fd' [ 608.074053][ T8213] vivid-007: ================= START STATUS ================= [ 608.081792][ T8213] vivid-007: Generate PTS: true [ 608.086777][ T8213] vivid-007: Generate SCR: true [ 608.091694][ T8213] tpg source WxH: 640x360 (Y'CbCr) [ 608.096846][ T8213] tpg field: 1 [ 608.100258][ T8213] tpg crop: 640x360@0x0 [ 608.104437][ T8213] tpg compose: 640x360@0x0 [ 608.108902][ T8213] tpg colorspace: 8 [ 608.112724][ T8213] tpg transfer function: 0/0 [ 608.117329][ T8213] tpg Y'CbCr encoding: 0/0 [ 608.121785][ T8213] tpg quantization: 0/0 [ 608.125988][ T8213] tpg RGB range: 0/2 [ 608.129926][ T8213] vivid-007: ================== END STATUS ================== [ 610.966731][ T8234] vivid-007: ================= START STATUS ================= [ 610.974565][ T8234] vivid-007: Generate PTS: true [ 610.979664][ T8234] vivid-007: Generate SCR: true [ 610.984705][ T8234] tpg source WxH: 640x360 (Y'CbCr) [ 610.989914][ T8234] tpg field: 1 [ 610.993327][ T8234] tpg crop: 640x360@0x0 [ 610.997602][ T8234] tpg compose: 640x360@0x0 [ 611.002091][ T8234] tpg colorspace: 8 [ 611.005959][ T8234] tpg transfer function: 0/0 [ 611.010840][ T8234] tpg Y'CbCr encoding: 0/0 [ 611.015412][ T8234] tpg quantization: 0/0 [ 611.019897][ T8234] tpg RGB range: 0/2 [ 611.023859][ T8234] vivid-007: ================== END STATUS ================== [ 612.593469][ T8248] netlink: 80 bytes leftover after parsing attributes in process `syz.4.751'. [ 612.871693][ T8251] vivid-007: ================= START STATUS ================= [ 612.879482][ T8251] vivid-007: Generate PTS: true [ 612.884589][ T8251] vivid-007: Generate SCR: true [ 612.889692][ T8251] tpg source WxH: 640x360 (Y'CbCr) [ 612.894875][ T8251] tpg field: 1 [ 612.898360][ T8251] tpg crop: 640x360@0x0 [ 612.902615][ T8251] tpg compose: 640x360@0x0 [ 612.907102][ T8251] tpg colorspace: 8 [ 612.911015][ T8251] tpg transfer function: 0/0 [ 612.915668][ T8251] tpg Y'CbCr encoding: 0/0 [ 612.920202][ T8251] tpg quantization: 0/0 [ 612.924447][ T8251] tpg RGB range: 0/2 [ 612.928446][ T8251] vivid-007: ================== END STATUS ================== [ 612.959289][ T4336] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 613.439380][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 613.493053][ T4336] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 613.607960][ T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.616138][ T4336] usb 4-1: Product: syz [ 613.650949][ T4336] usb 4-1: Manufacturer: syz [ 613.655742][ T4336] usb 4-1: SerialNumber: syz [ 613.706589][ T4336] usb 4-1: config 0 descriptor?? [ 613.730237][ T4336] powermate: probe of 4-1:0.0 failed with error -22 [ 613.803331][ T8254] loop0: detected capacity change from 0 to 4096 [ 613.848285][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 613.858114][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 613.866807][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 613.884477][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 613.885919][ T8254] NILFS (loop0): invalid segment: Checksum error in segment payload [ 613.905386][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 614.341773][ T4255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 614.759909][ T8254] NILFS (loop0): trying rollback from an earlier position [ 614.853752][ T8254] NILFS (loop0): recovery complete [ 614.929608][ T8270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.018950][ T26] audit: type=1800 audit(1739478295.563:231): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.752" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 615.134596][ T26] audit: type=1800 audit(1739478295.583:232): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.752" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 617.038160][ T4255] Bluetooth: hci3: command 0x0409 tx timeout [ 617.048072][ T4300] usb 4-1: USB disconnect, device number 11 [ 617.106233][ T8281] SET target dimension over the limit! [ 619.136302][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 619.226155][ T8301] fuse: Bad value for 'fd' [ 619.996790][ T8294] loop1: detected capacity change from 0 to 4096 [ 620.043463][ T8302] vivid-007: ================= START STATUS ================= [ 620.067695][ T8302] vivid-007: Generate PTS: true [ 620.093103][ T8302] vivid-007: Generate SCR: true [ 620.123504][ T8294] NILFS (loop1): invalid segment: Checksum error in segment payload [ 620.160609][ T8302] tpg source WxH: 640x360 (Y'CbCr) [ 620.165793][ T8302] tpg field: 1 [ 620.172181][ T8302] tpg crop: 640x360@0x0 [ 620.176569][ T8302] tpg compose: 640x360@0x0 [ 620.183481][ T8302] tpg colorspace: 8 [ 620.187339][ T8302] tpg transfer function: 0/0 [ 620.190097][ T8294] NILFS (loop1): trying rollback from an earlier position [ 620.217618][ T8302] tpg Y'CbCr encoding: 0/0 [ 620.222095][ T8302] tpg quantization: 0/0 [ 620.226287][ T8302] tpg RGB range: 0/2 [ 620.248868][ T8294] NILFS (loop1): recovery complete [ 620.285280][ T8315] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 620.316722][ T8260] chnl_net:caif_netlink_parms(): no params data found [ 620.330015][ T8302] vivid-007: ================== END STATUS ================== [ 621.020680][ T26] audit: type=1800 audit(1739478301.553:233): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.761" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 621.395401][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 621.742974][ T26] audit: type=1800 audit(1739478302.023:234): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.761" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 622.117153][ T8328] netlink: 80 bytes leftover after parsing attributes in process `syz.4.764'. [ 623.459537][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 623.949742][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.973950][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.995877][ T8260] device bridge_slave_0 entered promiscuous mode [ 624.026422][ T8347] loop4: detected capacity change from 0 to 4096 [ 624.041950][ T8347] NILFS (loop4): invalid segment: Checksum error in segment payload [ 624.059461][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.074000][ T8347] NILFS (loop4): trying rollback from an earlier position [ 624.081817][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.109026][ T8260] device bridge_slave_1 entered promiscuous mode [ 624.153395][ T8347] NILFS (loop4): recovery complete [ 624.391229][ T8354] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 625.774471][ T8364] vivid-007: ================= START STATUS ================= [ 625.782264][ T8364] vivid-007: Generate PTS: true [ 625.787280][ T8364] vivid-007: Generate SCR: true [ 625.792319][ T8364] tpg source WxH: 640x360 (Y'CbCr) [ 625.797554][ T8364] tpg field: 1 [ 625.800988][ T8364] tpg crop: 640x360@0x0 [ 625.805205][ T8364] tpg compose: 640x360@0x0 [ 625.809722][ T8364] tpg colorspace: 8 [ 625.813596][ T8364] tpg transfer function: 0/0 [ 625.818286][ T8364] tpg Y'CbCr encoding: 0/0 [ 625.822767][ T8364] tpg quantization: 0/0 [ 625.827015][ T8364] tpg RGB range: 0/2 [ 625.831006][ T8364] vivid-007: ================== END STATUS ================== [ 626.552686][ T26] audit: type=1800 audit(1739478307.093:235): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.767" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 626.781734][ T26] audit: type=1800 audit(1739478307.113:236): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.767" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 627.038760][ T8370] SET target dimension over the limit! [ 628.421885][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.949561][ T8382] fuse: Bad value for 'fd' [ 634.097910][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.104563][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.252801][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.636447][ T8260] team0: Port device team_slave_0 added [ 634.677109][ T8260] team0: Port device team_slave_1 added [ 634.717981][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.773'. [ 634.930230][ T8398] loop1: detected capacity change from 0 to 4096 [ 635.647015][ T8398] NILFS (loop1): invalid segment: Checksum error in segment payload [ 635.657845][ T8398] NILFS (loop1): trying rollback from an earlier position [ 635.699251][ T8398] NILFS (loop1): recovery complete [ 635.720088][ T8406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 635.875615][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.933398][ T26] audit: type=1800 audit(1739478316.473:237): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.776" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 635.973364][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.192957][ T26] audit: type=1800 audit(1739478316.503:238): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.776" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 636.319925][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.366109][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.373673][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.399778][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.516505][ T8260] device hsr_slave_0 entered promiscuous mode [ 636.530010][ T8260] device hsr_slave_1 entered promiscuous mode [ 636.536883][ T8260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.552128][ T8260] Cannot create hsr debugfs directory [ 636.615271][ T8410] loop3: detected capacity change from 0 to 4096 [ 636.677245][ T8411] loop4: detected capacity change from 0 to 4096 [ 636.704635][ T8410] NILFS (loop3): invalid segment: Checksum error in segment payload [ 636.727971][ T8410] NILFS (loop3): trying rollback from an earlier position [ 636.757024][ T8411] NILFS (loop4): invalid segment: Checksum error in segment payload [ 636.780440][ T5207] device hsr_slave_0 left promiscuous mode [ 636.786637][ T8411] NILFS (loop4): trying rollback from an earlier position [ 636.799069][ T5207] device hsr_slave_1 left promiscuous mode [ 636.817976][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.838121][ T8410] NILFS (loop3): recovery complete [ 636.845464][ T8411] NILFS (loop4): recovery complete [ 636.852699][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.859760][ T8420] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 636.871159][ T8421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 636.925461][ T5207] device bridge_slave_1 left promiscuous mode [ 636.964937][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.319512][ T26] audit: type=1800 audit(1739478317.863:239): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.777" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 637.346475][ T26] audit: type=1800 audit(1739478317.873:240): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.777" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 637.395097][ T8417] loop1: detected capacity change from 0 to 4096 [ 637.416150][ T26] audit: type=1800 audit(1739478317.953:241): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.778" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 637.508987][ T8417] NILFS (loop1): invalid segment: Checksum error in segment payload [ 637.519479][ T8417] NILFS (loop1): trying rollback from an earlier position [ 637.571550][ T5207] device bridge_slave_0 left promiscuous mode [ 637.636573][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.650765][ T8417] NILFS (loop1): recovery complete [ 637.683394][ T8429] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 638.185268][ T26] audit: type=1800 audit(1739478318.723:242): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.779" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 638.207837][ T26] audit: type=1800 audit(1739478318.753:243): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.779" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 639.142194][ T8447] vivid-007: ================= START STATUS ================= [ 639.150001][ T8447] vivid-007: Generate PTS: true [ 639.155024][ T8447] vivid-007: Generate SCR: true [ 639.160088][ T8447] tpg source WxH: 640x360 (Y'CbCr) [ 639.165272][ T8447] tpg field: 1 [ 639.168753][ T8447] tpg crop: 640x360@0x0 [ 639.173007][ T8447] tpg compose: 640x360@0x0 [ 639.177631][ T8447] tpg colorspace: 8 [ 639.181477][ T8447] tpg transfer function: 0/0 [ 639.186142][ T8447] tpg Y'CbCr encoding: 0/0 [ 639.190669][ T8447] tpg quantization: 0/0 [ 639.194920][ T8447] tpg RGB range: 0/2 [ 639.198919][ T8447] vivid-007: ================== END STATUS ================== [ 639.936592][ T8456] SET target dimension over the limit! [ 639.968986][ T8456] loop1: detected capacity change from 0 to 256 [ 640.539774][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 640.655093][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 640.825584][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.921912][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.436413][ T8470] fuse: Bad value for 'fd' [ 643.223731][ T5207] bond0 (unregistering): Released all slaves [ 643.259815][ T8473] loop0: detected capacity change from 0 to 4096 [ 643.276067][ T8473] NILFS (loop0): invalid segment: Checksum error in segment payload [ 643.284674][ T8473] NILFS (loop0): trying rollback from an earlier position [ 643.305512][ T8473] NILFS (loop0): recovery complete [ 643.324786][ T8474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 645.619116][ T8498] vivid-007: ================= START STATUS ================= [ 645.627205][ T8498] vivid-007: Generate PTS: true [ 645.632284][ T8498] vivid-007: Generate SCR: true [ 645.637264][ T8498] tpg source WxH: 640x360 (Y'CbCr) [ 645.642548][ T8498] tpg field: 1 [ 645.645992][ T8498] tpg crop: 640x360@0x0 [ 645.650267][ T8498] tpg compose: 640x360@0x0 [ 645.654783][ T8498] tpg colorspace: 8 [ 645.658726][ T8498] tpg transfer function: 0/0 [ 645.663419][ T8498] tpg Y'CbCr encoding: 0/0 [ 645.667973][ T8498] tpg quantization: 0/0 [ 645.672248][ T8498] tpg RGB range: 0/2 [ 645.676279][ T8498] vivid-007: ================== END STATUS ================== [ 645.708610][ T8499] vivid-007: ================= START STATUS ================= [ 645.716537][ T8499] vivid-007: Generate PTS: true [ 645.721716][ T8499] vivid-007: Generate SCR: true [ 645.727639][ T8499] tpg source WxH: 640x360 (Y'CbCr) [ 645.732975][ T8499] tpg field: 1 [ 645.736508][ T8499] tpg crop: 640x360@0x0 [ 645.740874][ T8499] tpg compose: 640x360@0x0 [ 645.745464][ T8499] tpg colorspace: 8 [ 645.749476][ T8499] tpg transfer function: 0/0 [ 645.754240][ T8499] tpg Y'CbCr encoding: 0/0 [ 645.758873][ T8499] tpg quantization: 0/0 [ 645.763207][ T8499] tpg RGB range: 0/2 [ 645.767231][ T8499] vivid-007: ================== END STATUS ================== [ 646.128336][ T26] audit: type=1800 audit(1739478326.673:244): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.785" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 646.150510][ T26] audit: type=1800 audit(1739478326.693:245): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.785" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 646.207151][ T8501] SET target dimension over the limit! [ 647.153844][ T8505] loop1: detected capacity change from 0 to 4096 [ 647.185366][ T8507] loop4: detected capacity change from 0 to 256 [ 647.241279][ T8505] NILFS (loop1): invalid segment: Checksum error in segment payload [ 647.266087][ T8505] NILFS (loop1): trying rollback from an earlier position [ 647.384750][ T8505] NILFS (loop1): recovery complete [ 647.442610][ T8512] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 647.580382][ T26] audit: type=1800 audit(1739478328.123:246): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.790" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 647.800410][ T26] audit: type=1800 audit(1739478328.143:247): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.790" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 648.184860][ T8260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.287059][ T8260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.308657][ T8260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.361972][ T8260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 648.995549][ T8530] fuse: Bad value for 'fd' [ 649.765595][ T8541] SET target dimension over the limit! [ 649.812969][ T8541] loop0: detected capacity change from 0 to 256 [ 650.718911][ T8546] vivid-007: ================= START STATUS ================= [ 650.726647][ T8546] vivid-007: Generate PTS: true [ 650.731865][ T8546] vivid-007: Generate SCR: true [ 650.736837][ T8546] tpg source WxH: 640x360 (Y'CbCr) [ 650.743143][ T8546] tpg field: 1 [ 650.746591][ T8546] tpg crop: 640x360@0x0 [ 650.751054][ T8546] tpg compose: 640x360@0x0 [ 650.755594][ T8546] tpg colorspace: 8 [ 650.759616][ T8546] tpg transfer function: 0/0 [ 650.764300][ T8546] tpg Y'CbCr encoding: 0/0 [ 650.768925][ T8546] tpg quantization: 0/0 [ 650.773181][ T8546] tpg RGB range: 0/2 [ 650.777154][ T8546] vivid-007: ================== END STATUS ================== [ 650.843034][ T8553] vivid-007: ================= START STATUS ================= [ 650.851954][ T8553] vivid-007: Generate PTS: true [ 650.856937][ T8553] vivid-007: Generate SCR: true [ 650.862075][ T8553] tpg source WxH: 640x360 (Y'CbCr) [ 650.867281][ T8553] tpg field: 1 [ 650.870910][ T8553] tpg crop: 640x360@0x0 [ 650.875148][ T8553] tpg compose: 640x360@0x0 [ 650.879802][ T8553] tpg colorspace: 8 [ 650.883700][ T8553] tpg transfer function: 0/0 [ 650.889610][ T8553] tpg Y'CbCr encoding: 0/0 [ 650.894222][ T8553] tpg quantization: 0/0 [ 650.898606][ T8553] tpg RGB range: 0/2 [ 650.902573][ T8553] vivid-007: ================== END STATUS ================== [ 651.558027][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.768025][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.215415][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.264531][ T8260] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.300885][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.313150][ T8569] vivid-007: ================= START STATUS ================= [ 652.321053][ T8569] vivid-007: Generate PTS: true [ 652.325960][ T8569] vivid-007: Generate SCR: true [ 652.330975][ T8569] tpg source WxH: 640x360 (Y'CbCr) [ 652.336121][ T8569] tpg field: 1 [ 652.339587][ T8569] tpg crop: 640x360@0x0 [ 652.343767][ T8569] tpg compose: 640x360@0x0 [ 652.344402][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.348246][ T8569] tpg colorspace: 8 [ 652.348282][ T8569] tpg transfer function: 0/0 [ 652.348294][ T8569] tpg Y'CbCr encoding: 0/0 [ 652.348305][ T8569] tpg quantization: 0/0 [ 652.348315][ T8569] tpg RGB range: 0/2 [ 652.348327][ T8569] vivid-007: ================== END STATUS ================== [ 652.358572][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.392351][ T7366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.514904][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.591416][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.626711][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.653190][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.660390][ T7366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.668295][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.679931][ T8575] SET target dimension over the limit! [ 652.700645][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.824674][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.922902][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.989105][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.012782][ T8579] loop3: detected capacity change from 0 to 256 [ 653.032841][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.121095][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 653.213857][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 653.221426][ T8574] loop0: detected capacity change from 0 to 4096 [ 653.292719][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.314141][ T8574] NILFS (loop0): invalid segment: Checksum error in segment payload [ 653.374259][ T8574] NILFS (loop0): trying rollback from an earlier position [ 653.375331][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 653.451261][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 653.452137][ T8574] NILFS (loop0): recovery complete [ 653.472039][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 653.489462][ T8581] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.565191][ T26] audit: type=1800 audit(1739478334.103:248): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.801" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 653.618538][ T8583] loop3: detected capacity change from 0 to 4096 [ 654.701889][ T26] audit: type=1800 audit(1739478334.133:249): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.801" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 654.723639][ T8583] NILFS (loop3): invalid segment: Checksum error in segment payload [ 654.748054][ T8583] NILFS (loop3): trying rollback from an earlier position [ 654.833621][ T8583] NILFS (loop3): recovery complete [ 654.874018][ T8591] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 655.016798][ T26] audit: type=1800 audit(1739478335.553:250): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.805" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 655.314913][ T26] audit: type=1800 audit(1739478335.583:251): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.805" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 656.369482][ T8597] fuse: Bad value for 'fd' [ 656.638455][ T8590] loop1: detected capacity change from 0 to 4096 [ 656.792375][ T8590] NILFS (loop1): invalid segment: Checksum error in segment payload [ 656.837641][ T8590] NILFS (loop1): trying rollback from an earlier position [ 656.939708][ T8590] NILFS (loop1): recovery complete [ 657.051960][ T8600] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 657.131758][ T26] audit: type=1800 audit(1739478337.673:252): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.806" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 657.228516][ T26] audit: type=1800 audit(1739478337.703:253): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.806" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 657.408506][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.432783][ T8602] SET target dimension over the limit! [ 657.443822][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.511277][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.512294][ T8602] loop0: detected capacity change from 0 to 256 [ 658.244364][ T8614] vivid-007: ================= START STATUS ================= [ 658.252199][ T8614] vivid-007: Generate PTS: true [ 658.257238][ T8614] vivid-007: Generate SCR: true [ 658.262228][ T8614] tpg source WxH: 640x360 (Y'CbCr) [ 658.267417][ T8614] tpg field: 1 [ 658.270940][ T8614] tpg crop: 640x360@0x0 [ 658.275144][ T8614] tpg compose: 640x360@0x0 [ 658.279743][ T8614] tpg colorspace: 8 [ 658.283623][ T8614] tpg transfer function: 0/0 [ 658.288356][ T8614] tpg Y'CbCr encoding: 0/0 [ 658.292824][ T8614] tpg quantization: 0/0 [ 658.297073][ T8614] tpg RGB range: 0/2 [ 658.301186][ T8614] vivid-007: ================== END STATUS ================== [ 661.388658][ T8632] vivid-007: ================= START STATUS ================= [ 661.397059][ T8632] vivid-007: Generate PTS: true [ 661.402332][ T8632] vivid-007: Generate SCR: true [ 661.407369][ T8632] tpg source WxH: 640x360 (Y'CbCr) [ 661.412600][ T8632] tpg field: 1 [ 661.416018][ T8632] tpg crop: 640x360@0x0 [ 661.420297][ T8632] tpg compose: 640x360@0x0 [ 661.424792][ T8632] tpg colorspace: 8 [ 661.428710][ T8632] tpg transfer function: 0/0 [ 661.433372][ T8632] tpg Y'CbCr encoding: 0/0 [ 661.437891][ T8632] tpg quantization: 0/0 [ 661.442152][ T8632] tpg RGB range: 0/2 [ 661.446123][ T8632] vivid-007: ================== END STATUS ================== [ 661.480695][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 661.899451][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 661.956574][ T7] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 662.100891][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.181434][ T7] usb 2-1: Product: syz [ 662.192733][ T8648] SET target dimension over the limit! [ 662.199850][ T7] usb 2-1: Manufacturer: syz [ 662.204485][ T7] usb 2-1: SerialNumber: syz [ 662.268256][ T7] usb 2-1: config 0 descriptor?? [ 662.335750][ T7] powermate: probe of 2-1:0.0 failed with error -22 [ 662.393931][ T8646] loop3: detected capacity change from 0 to 4096 [ 662.488165][ T8646] NILFS (loop3): invalid segment: Checksum error in segment payload [ 662.496340][ T8646] NILFS (loop3): trying rollback from an earlier position [ 662.874554][ T8660] fuse: Bad value for 'fd' [ 663.240888][ T8646] NILFS (loop3): recovery complete [ 663.607560][ T8662] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 663.645938][ T128] usb 2-1: USB disconnect, device number 9 [ 663.746095][ T26] audit: type=1800 audit(1739478344.283:254): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 664.084278][ T26] audit: type=1800 audit(1739478344.313:255): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 664.444056][ T8671] loop1: detected capacity change from 0 to 4096 [ 664.518720][ T8671] NILFS (loop1): invalid segment: Checksum error in segment payload [ 664.558319][ T8679] netlink: 80 bytes leftover after parsing attributes in process `syz.0.820'. [ 664.563052][ T8671] NILFS (loop1): trying rollback from an earlier position [ 664.705224][ T8671] NILFS (loop1): recovery complete [ 664.755686][ T8685] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.805453][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.815522][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.829017][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.837152][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.841463][ T8681] loop3: detected capacity change from 0 to 4096 [ 664.858605][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 664.867281][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 664.942853][ T26] audit: type=1800 audit(1739478345.483:256): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.819" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 665.067908][ T8681] NILFS (loop3): invalid segment: Checksum error in segment payload [ 665.207706][ T8681] NILFS (loop3): trying rollback from an earlier position [ 665.252184][ T26] audit: type=1800 audit(1739478345.483:257): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.819" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 665.274842][ T8681] NILFS (loop3): recovery complete [ 665.337950][ T8688] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 665.486037][ T26] audit: type=1800 audit(1739478346.023:258): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.821" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 665.780246][ T26] audit: type=1800 audit(1739478346.063:259): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.821" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 666.858171][ T8705] vivid-007: ================= START STATUS ================= [ 666.865951][ T8705] vivid-007: Generate PTS: true [ 666.870940][ T8705] vivid-007: Generate SCR: true [ 666.875843][ T8705] tpg source WxH: 640x360 (Y'CbCr) [ 666.881056][ T8705] tpg field: 1 [ 666.884460][ T8705] tpg crop: 640x360@0x0 [ 666.888973][ T8705] tpg compose: 640x360@0x0 [ 666.893419][ T8705] tpg colorspace: 8 [ 666.897246][ T8705] tpg transfer function: 0/0 [ 666.901919][ T8705] tpg Y'CbCr encoding: 0/0 [ 666.901984][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 666.906334][ T8705] tpg quantization: 0/0 [ 666.906347][ T8705] tpg RGB range: 0/2 [ 666.906359][ T8705] vivid-007: ================== END STATUS ================== [ 667.322770][ T8683] chnl_net:caif_netlink_parms(): no params data found [ 668.023483][ T8727] SET target dimension over the limit! [ 668.967652][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 669.006670][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.018021][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.063576][ T8730] loop4: detected capacity change from 0 to 4096 [ 669.087797][ T8683] device bridge_slave_0 entered promiscuous mode [ 669.116306][ T8739] netlink: 80 bytes leftover after parsing attributes in process `syz.0.827'. [ 669.283209][ T8730] NILFS (loop4): invalid segment: Checksum error in segment payload [ 669.389737][ T8748] fuse: Bad value for 'fd' [ 669.668955][ T8730] NILFS (loop4): trying rollback from an earlier position [ 670.096941][ T8730] NILFS (loop4): recovery complete [ 670.159540][ T8752] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.182919][ T8751] loop1: detected capacity change from 0 to 4096 [ 670.273749][ T26] audit: type=1800 audit(1739478350.813:260): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.828" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 670.311993][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.374534][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.617842][ T26] audit: type=1800 audit(1739478350.843:261): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.828" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 670.640383][ T8683] device bridge_slave_1 entered promiscuous mode [ 670.720690][ T8751] NILFS (loop1): invalid segment: Checksum error in segment payload [ 670.744705][ T8751] NILFS (loop1): trying rollback from an earlier position [ 670.772713][ T8751] NILFS (loop1): recovery complete [ 670.793342][ T8757] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 671.047854][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 671.442842][ T26] audit: type=1800 audit(1739478351.983:262): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.830" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 671.670525][ T26] audit: type=1800 audit(1739478352.013:263): pid=8762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.830" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 671.830078][ T8764] SET target dimension over the limit! [ 672.355139][ T8683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.452635][ T8683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.521070][ T8767] loop3: detected capacity change from 0 to 4096 [ 672.798183][ T8767] NILFS (loop3): invalid segment: Checksum error in segment payload [ 673.203614][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 673.259165][ T8767] NILFS (loop3): trying rollback from an earlier position [ 673.299692][ T8767] NILFS (loop3): recovery complete [ 673.331058][ T8779] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 673.353144][ T8683] team0: Port device team_slave_0 added [ 673.611139][ T26] audit: type=1800 audit(1739478354.153:264): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.833" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 673.838233][ T8683] team0: Port device team_slave_1 added [ 673.931994][ T26] audit: type=1800 audit(1739478354.183:265): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.833" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 674.117666][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 674.185252][ T8783] loop4: detected capacity change from 0 to 4096 [ 674.268515][ T8783] NILFS (loop4): invalid segment: Checksum error in segment payload [ 674.276577][ T8783] NILFS (loop4): trying rollback from an earlier position [ 674.296042][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.324067][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.350879][ T8783] NILFS (loop4): recovery complete [ 674.368449][ T8792] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 674.431129][ T8683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.495044][ T26] audit: type=1800 audit(1739478355.033:266): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.836" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 674.585628][ T8794] SET target dimension over the limit! [ 674.776021][ T26] audit: type=1800 audit(1739478355.063:267): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.836" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 674.813458][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.850443][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.916345][ T8683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.947338][ T4304] device hsr_slave_0 left promiscuous mode [ 674.978947][ T4304] device hsr_slave_1 left promiscuous mode [ 674.986087][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.993980][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.002221][ T4304] device bridge_slave_1 left promiscuous mode [ 675.008580][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.021258][ T4304] device bridge_slave_0 left promiscuous mode [ 675.027638][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.495480][ T8807] loop4: detected capacity change from 0 to 4096 [ 675.580404][ T8810] fuse: Bad value for 'fd' [ 676.237282][ T8807] NILFS (loop4): invalid segment: Checksum error in segment payload [ 676.267336][ T8807] NILFS (loop4): trying rollback from an earlier position [ 676.369299][ T8807] NILFS (loop4): recovery complete [ 676.426975][ T8814] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.407339][ T8824] vivid-007: ================= START STATUS ================= [ 677.415299][ T8824] vivid-007: Generate PTS: true [ 677.420403][ T8824] vivid-007: Generate SCR: true [ 677.425398][ T8824] tpg source WxH: 640x360 (Y'CbCr) [ 677.430627][ T8824] tpg field: 1 [ 677.434083][ T8824] tpg crop: 640x360@0x0 [ 677.438422][ T8824] tpg compose: 640x360@0x0 [ 677.442941][ T8824] tpg colorspace: 8 [ 677.446821][ T8824] tpg transfer function: 0/0 [ 677.451582][ T8824] tpg Y'CbCr encoding: 0/0 [ 677.456109][ T8824] tpg quantization: 0/0 [ 677.460412][ T8824] tpg RGB range: 0/2 [ 677.464399][ T8824] vivid-007: ================== END STATUS ================== [ 677.836216][ T26] audit: type=1800 audit(1739478358.373:268): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 677.922122][ T8834] SET target dimension over the limit! [ 677.966007][ T8834] loop1: detected capacity change from 0 to 256 [ 677.983159][ T26] audit: type=1800 audit(1739478358.433:269): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 678.135839][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 678.705564][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 679.234269][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.429983][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.995197][ T4304] bond0 (unregistering): Released all slaves [ 681.480335][ T8872] SET target dimension over the limit! [ 682.441076][ T8683] device hsr_slave_0 entered promiscuous mode [ 682.507348][ T8683] device hsr_slave_1 entered promiscuous mode [ 682.528101][ T8683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.535749][ T8683] Cannot create hsr debugfs directory [ 682.677426][ T8880] loop0: detected capacity change from 0 to 4096 [ 682.755234][ T8880] NILFS (loop0): invalid segment: Checksum error in segment payload [ 682.797866][ T8880] NILFS (loop0): trying rollback from an earlier position [ 682.827639][ T8880] NILFS (loop0): recovery complete [ 682.860244][ T8882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 682.982920][ T26] audit: type=1800 audit(1739478363.523:270): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.853" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 683.231264][ T26] audit: type=1800 audit(1739478363.553:271): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.853" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 684.077054][ T8683] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 684.090852][ T8683] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 684.105631][ T8683] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 684.122720][ T8683] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 684.218663][ T8683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.236230][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.249295][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.266176][ T8683] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.284644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.295715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.309573][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.316717][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.326344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 684.350538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 684.360262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 684.371469][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.378656][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.400012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.409154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 684.418597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 684.438488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 684.447355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 684.465082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 684.476696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 684.495174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 684.506707][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 684.529003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 684.543464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.553439][ T8683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 684.828433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 684.835951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.855428][ T8683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.211018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 685.226472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.259845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 685.274654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.287425][ T8683] device veth0_vlan entered promiscuous mode [ 685.304532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.314434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.333410][ T8683] device veth1_vlan entered promiscuous mode [ 685.388331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 685.397309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 685.412868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.424643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.440128][ T8683] device veth0_macvtap entered promiscuous mode [ 685.470314][ T8683] device veth1_macvtap entered promiscuous mode [ 685.496654][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.512183][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.523845][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.535048][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.545685][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.556481][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.567209][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.579457][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.592047][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.602569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 685.621324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 685.629988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 685.639538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 685.654863][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.666575][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.683791][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.704438][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.714795][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.731279][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.741578][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.752541][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.764566][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.776550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 685.786942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 685.804974][ T8683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.815948][ T8683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.825154][ T8683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.834626][ T8683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.923236][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.948096][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.956623][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.960577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 685.975191][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.989739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.428492][ T8992] SET target dimension over the limit! [ 695.673420][ T8997] loop0: detected capacity change from 0 to 256 [ 696.680357][ T9000] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 696.973911][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.981504][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.355701][ T9011] vivid-007: ================= START STATUS ================= [ 697.363524][ T9011] vivid-007: Generate PTS: true [ 697.368604][ T9011] vivid-007: Generate SCR: true [ 697.373513][ T9011] tpg source WxH: 640x360 (Y'CbCr) [ 697.378732][ T9011] tpg field: 1 [ 697.382125][ T9011] tpg crop: 640x360@0x0 [ 697.386311][ T9011] tpg compose: 640x360@0x0 [ 697.390843][ T9011] tpg colorspace: 8 [ 697.394668][ T9011] tpg transfer function: 0/0 [ 697.399369][ T9011] tpg Y'CbCr encoding: 0/0 [ 697.403816][ T9011] tpg quantization: 0/0 [ 697.408075][ T9011] tpg RGB range: 0/2 [ 697.411990][ T9011] vivid-007: ================== END STATUS ================== [ 697.946571][ T9021] SET target dimension over the limit! [ 697.981390][ T9024] SET target dimension over the limit! [ 697.996638][ T9021] loop3: detected capacity change from 0 to 256 [ 700.417762][ T5155] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 700.828099][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 700.893497][ T5155] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 700.900765][ T9053] loop4: detected capacity change from 0 to 4096 [ 700.924823][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.960294][ T5155] usb 1-1: Product: syz [ 700.984273][ T9053] NILFS (loop4): invalid segment: Checksum error in segment payload [ 701.007120][ T5155] usb 1-1: Manufacturer: syz [ 701.024376][ T5155] usb 1-1: SerialNumber: syz [ 701.036419][ T9053] NILFS (loop4): trying rollback from an earlier position [ 701.076403][ T5155] usb 1-1: config 0 descriptor?? [ 701.114618][ T9053] NILFS (loop4): recovery complete [ 701.155450][ T5155] powermate: probe of 1-1:0.0 failed with error -22 [ 701.163604][ T9057] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 701.191262][ T9056] vivid-007: ================= START STATUS ================= [ 701.199108][ T9056] vivid-007: Generate PTS: true [ 701.204017][ T9056] vivid-007: Generate SCR: true [ 701.209019][ T9056] tpg source WxH: 640x360 (Y'CbCr) [ 701.214182][ T9056] tpg field: 1 [ 701.217614][ T9056] tpg crop: 640x360@0x0 [ 701.221796][ T9056] tpg compose: 640x360@0x0 [ 701.226648][ T9056] tpg colorspace: 8 [ 701.230549][ T9056] tpg transfer function: 0/0 [ 701.235161][ T9056] tpg Y'CbCr encoding: 0/0 [ 701.239655][ T9056] tpg quantization: 0/0 [ 701.243830][ T9056] tpg RGB range: 0/2 [ 701.247819][ T9056] vivid-007: ================== END STATUS ================== [ 701.256786][ T4307] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 702.269214][ T26] audit: type=1800 audit(1739478382.813:272): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 702.279463][ T4307] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 702.544279][ T26] audit: type=1800 audit(1739478382.843:273): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 702.704846][ T4307] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 702.806519][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.830848][ T4307] usb 4-1: Product: syz [ 702.835096][ T4307] usb 4-1: Manufacturer: syz [ 702.841853][ T4307] usb 4-1: SerialNumber: syz [ 703.062499][ T7091] usb 1-1: USB disconnect, device number 12 [ 703.071645][ T4307] usb 4-1: config 0 descriptor?? [ 703.366972][ T9072] vivid-007: ================= START STATUS ================= [ 703.375078][ T9072] vivid-007: Generate PTS: true [ 703.380788][ T9072] vivid-007: Generate SCR: true [ 703.386018][ T9072] tpg source WxH: 640x360 (Y'CbCr) [ 703.391342][ T9072] tpg field: 1 [ 703.394898][ T9072] tpg crop: 640x360@0x0 [ 703.399249][ T9072] tpg compose: 640x360@0x0 [ 703.403878][ T9072] tpg colorspace: 8 [ 703.407882][ T9072] tpg transfer function: 0/0 [ 703.412610][ T9072] tpg Y'CbCr encoding: 0/0 [ 703.417184][ T9072] tpg quantization: 0/0 [ 703.421539][ T9072] tpg RGB range: 0/2 [ 703.425614][ T9072] vivid-007: ================== END STATUS ================== [ 703.841900][ T4307] powermate: probe of 4-1:0.0 failed with error -22 [ 704.148418][ T9079] loop0: detected capacity change from 0 to 4096 [ 704.152277][ T9087] SET target dimension over the limit! [ 704.196553][ T9079] NILFS (loop0): invalid segment: Checksum error in segment payload [ 704.204936][ T4307] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 704.228492][ T9079] NILFS (loop0): trying rollback from an earlier position [ 704.423991][ T4307] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 704.501051][ T4307] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 704.557372][ T9079] NILFS (loop0): recovery complete [ 704.600549][ T9092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 704.637828][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.646124][ T4307] usb 2-1: Product: syz [ 704.651813][ T4307] usb 2-1: Manufacturer: syz [ 704.656682][ T4307] usb 2-1: SerialNumber: syz [ 704.685791][ T4307] usb 2-1: config 0 descriptor?? [ 704.722896][ T4307] powermate: probe of 2-1:0.0 failed with error -22 [ 704.862958][ T125] usb 4-1: USB disconnect, device number 12 [ 705.905989][ T26] audit: type=1800 audit(1739478386.443:274): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.873" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 705.926519][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.157645][ T128] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 706.382720][ T26] audit: type=1800 audit(1739478386.473:275): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.873" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 706.700499][ T9110] vivid-007: ================= START STATUS ================= [ 706.708227][ T9110] vivid-007: Generate PTS: true [ 706.713140][ T9110] vivid-007: Generate SCR: true [ 706.718097][ T9110] tpg source WxH: 640x360 (Y'CbCr) [ 706.723237][ T9110] tpg field: 1 [ 706.726645][ T9110] tpg crop: 640x360@0x0 [ 706.730905][ T9110] tpg compose: 640x360@0x0 [ 706.735357][ T9110] tpg colorspace: 8 [ 706.739249][ T9110] tpg transfer function: 0/0 [ 706.743868][ T9110] tpg Y'CbCr encoding: 0/0 [ 706.748359][ T9110] tpg quantization: 0/0 [ 706.752535][ T9110] tpg RGB range: 0/2 [ 706.756559][ T9110] vivid-007: ================== END STATUS ================== [ 706.844934][ T128] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 706.873985][ T125] usb 2-1: USB disconnect, device number 10 [ 706.936510][ T128] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 706.996787][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.252173][ T128] usb 4-1: Product: syz [ 707.256397][ T128] usb 4-1: Manufacturer: syz [ 707.261772][ T128] usb 4-1: SerialNumber: syz [ 707.300169][ T9123] netlink: 80 bytes leftover after parsing attributes in process `syz.5.880'. [ 707.646642][ T9124] vivid-007: ================= START STATUS ================= [ 707.654601][ T9124] vivid-007: Generate PTS: true [ 707.659804][ T9124] vivid-007: Generate SCR: true [ 707.664897][ T9124] tpg source WxH: 640x360 (Y'CbCr) [ 707.670257][ T9124] tpg field: 1 [ 707.673774][ T9124] tpg crop: 640x360@0x0 [ 707.679963][ T9124] tpg compose: 640x360@0x0 [ 707.684607][ T9124] tpg colorspace: 8 [ 707.688595][ T9124] tpg transfer function: 0/0 [ 707.693412][ T9124] tpg Y'CbCr encoding: 0/0 [ 707.698112][ T9124] tpg quantization: 0/0 [ 707.702532][ T9124] tpg RGB range: 0/2 [ 707.706721][ T9124] vivid-007: ================== END STATUS ================== [ 707.779219][ T128] usb 4-1: config 0 descriptor?? [ 708.429296][ T128] powermate: probe of 4-1:0.0 failed with error -22 [ 709.606574][ T4336] usb 4-1: USB disconnect, device number 13 [ 713.372678][ T9162] vivid-007: ================= START STATUS ================= [ 713.380465][ T9162] vivid-007: Generate PTS: true [ 713.385476][ T9162] vivid-007: Generate SCR: true [ 713.390539][ T9162] tpg source WxH: 640x360 (Y'CbCr) [ 713.395720][ T9162] tpg field: 1 [ 713.399179][ T9162] tpg crop: 640x360@0x0 [ 713.403400][ T9162] tpg compose: 640x360@0x0 [ 713.407917][ T9162] tpg colorspace: 8 [ 713.411791][ T9162] tpg transfer function: 0/0 [ 713.416442][ T9162] tpg Y'CbCr encoding: 0/0 [ 713.420952][ T9162] tpg quantization: 0/0 [ 713.425200][ T9162] tpg RGB range: 0/2 [ 713.429195][ T9162] vivid-007: ================== END STATUS ================== [ 714.151858][ T9166] SET target dimension over the limit! [ 715.693521][ T9175] vivid-007: ================= START STATUS ================= [ 715.701302][ T9175] vivid-007: Generate PTS: true [ 715.706337][ T9175] vivid-007: Generate SCR: true [ 715.711384][ T9175] tpg source WxH: 640x360 (Y'CbCr) [ 715.716556][ T9175] tpg field: 1 [ 715.720028][ T9175] tpg crop: 640x360@0x0 [ 715.724246][ T9175] tpg compose: 640x360@0x0 [ 715.728758][ T9175] tpg colorspace: 8 [ 715.732620][ T9175] tpg transfer function: 0/0 [ 715.737263][ T9175] tpg Y'CbCr encoding: 0/0 [ 715.741776][ T9175] tpg quantization: 0/0 [ 715.746023][ T9175] tpg RGB range: 0/2 [ 715.750015][ T9175] vivid-007: ================== END STATUS ================== [ 716.889707][ T9177] loop4: detected capacity change from 0 to 4096 [ 716.982001][ T9182] SET target dimension over the limit! [ 717.358562][ T9182] loop5: detected capacity change from 0 to 256 [ 717.385239][ T9177] NILFS (loop4): invalid segment: Checksum error in segment payload [ 717.417586][ T9177] NILFS (loop4): trying rollback from an earlier position [ 717.517610][ T9177] NILFS (loop4): recovery complete [ 717.558969][ T9177] NILFS (loop4): error -4 creating segctord thread [ 718.204858][ T9198] loop5: detected capacity change from 0 to 4096 [ 718.228842][ T9190] loop0: detected capacity change from 0 to 4096 [ 718.238641][ T9198] NILFS (loop5): invalid segment: Checksum error in segment payload [ 718.262931][ T9198] NILFS (loop5): trying rollback from an earlier position [ 718.513037][ T9198] NILFS (loop5): recovery complete [ 718.521177][ T9190] NILFS (loop0): invalid segment: Checksum error in segment payload [ 718.577838][ T9190] NILFS (loop0): trying rollback from an earlier position [ 718.583596][ T9200] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.895295][ T26] audit: type=1800 audit(1739478399.433:276): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.897" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 719.035606][ T26] audit: type=1800 audit(1739478399.453:277): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.897" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 719.064135][ T9190] NILFS (loop0): recovery complete [ 719.123138][ T9206] loop4: detected capacity change from 0 to 256 [ 719.142653][ T9208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 719.294113][ T26] audit: type=1800 audit(1739478399.833:278): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.895" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 719.668925][ T26] audit: type=1800 audit(1739478399.863:279): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.895" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 720.009797][ T9216] vivid-007: ================= START STATUS ================= [ 720.017629][ T9216] vivid-007: Generate PTS: true [ 720.022637][ T9216] vivid-007: Generate SCR: true [ 720.027727][ T9216] tpg source WxH: 640x360 (Y'CbCr) [ 720.032905][ T9216] tpg field: 1 [ 720.036315][ T9216] tpg crop: 640x360@0x0 [ 720.040613][ T9216] tpg compose: 640x360@0x0 [ 720.045096][ T9216] tpg colorspace: 8 [ 720.049028][ T9216] tpg transfer function: 0/0 [ 720.053680][ T9216] tpg Y'CbCr encoding: 0/0 [ 720.058190][ T9216] tpg quantization: 0/0 [ 720.062441][ T9216] tpg RGB range: 0/2 [ 720.066673][ T9216] vivid-007: ================== END STATUS ================== [ 725.921376][ T9244] SET target dimension over the limit! [ 725.958918][ T9244] loop4: detected capacity change from 0 to 256 [ 727.027221][ T9260] netlink: 80 bytes leftover after parsing attributes in process `syz.3.908'. [ 727.707090][ T9266] loop5: detected capacity change from 0 to 4096 [ 727.777981][ T9266] NILFS (loop5): invalid segment: Checksum error in segment payload [ 727.796369][ T9266] NILFS (loop5): trying rollback from an earlier position [ 727.807656][ T9268] loop0: detected capacity change from 0 to 4096 [ 727.871079][ T9266] NILFS (loop5): recovery complete [ 727.902111][ T9268] NILFS (loop0): invalid segment: Checksum error in segment payload [ 727.931289][ T9274] loop4: detected capacity change from 0 to 256 [ 727.950437][ T9268] NILFS (loop0): trying rollback from an earlier position [ 728.124397][ T9276] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 730.448034][ T26] audit: type=1800 audit(1739478410.983:280): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 730.479610][ T9268] NILFS (loop0): recovery complete [ 730.505390][ T9268] NILFS (loop0): error -4 creating segctord thread [ 730.637675][ T26] audit: type=1800 audit(1739478410.993:281): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 730.912501][ T9290] loop1: detected capacity change from 0 to 4096 [ 734.063697][ T9290] NILFS (loop1): invalid segment: Checksum error in segment payload [ 734.140157][ T9290] NILFS (loop1): trying rollback from an earlier position [ 734.217729][ T9290] NILFS (loop1): recovery complete [ 734.378958][ T9290] NILFS (loop1): error -4 creating segctord thread [ 735.475986][ T9316] loop4: detected capacity change from 0 to 4096 [ 735.716616][ T9316] NILFS (loop4): invalid segment: Checksum error in segment payload [ 735.785842][ T9316] NILFS (loop4): trying rollback from an earlier position [ 736.111619][ T9316] NILFS (loop4): recovery complete [ 738.469674][ T9336] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 738.745170][ T9342] loop1: detected capacity change from 0 to 4096 [ 738.840102][ T9342] NILFS (loop1): invalid segment: Checksum error in segment payload [ 739.269723][ T9342] NILFS (loop1): trying rollback from an earlier position [ 739.606241][ T9342] NILFS (loop1): recovery complete [ 739.682362][ T9349] loop4: detected capacity change from 0 to 256 [ 739.754216][ T9350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.953440][ T26] audit: type=1800 audit(1739478420.493:282): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.925" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 740.233837][ T26] audit: type=1800 audit(1739478420.523:283): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.925" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 740.374431][ T9354] loop3: detected capacity change from 0 to 4096 [ 740.433023][ T9354] NILFS (loop3): invalid segment: Checksum error in segment payload [ 740.449548][ T9353] loop0: detected capacity change from 0 to 4096 [ 740.466619][ T9354] NILFS (loop3): trying rollback from an earlier position [ 740.491551][ T9354] NILFS (loop3): recovery complete [ 740.559945][ T9353] NILFS (loop0): invalid segment: Checksum error in segment payload [ 740.597398][ T9353] NILFS (loop0): trying rollback from an earlier position [ 740.641334][ T9357] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 741.607881][ T9353] NILFS (loop0): recovery complete [ 741.902923][ T26] audit: type=1800 audit(1739478422.443:284): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.928" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 742.027391][ T9365] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 742.033723][ T9367] loop1: detected capacity change from 0 to 2048 [ 742.048405][ T9367] ======================================================= [ 742.048405][ T9367] WARNING: The mand mount option has been deprecated and [ 742.048405][ T9367] and is ignored by this kernel. Remove the mand [ 742.048405][ T9367] option from the mount to silence this warning. [ 742.048405][ T9367] ======================================================= [ 742.367872][ T9367] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 742.369881][ T9371] loop5: detected capacity change from 0 to 1024 [ 742.385855][ T9371] EXT4-fs: Ignoring removed mblk_io_submit option [ 742.392889][ T26] audit: type=1800 audit(1739478422.513:285): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.928" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 742.392932][ T26] audit: type=1800 audit(1739478422.683:286): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.927" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 742.392967][ T26] audit: type=1800 audit(1739478422.693:287): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.927" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 742.456456][ T9371] EXT4-fs: Ignoring removed bh option [ 742.465863][ T9371] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 742.551625][ T9367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 742.736199][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 742.776162][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 742.894936][ T9379] loop5: detected capacity change from 0 to 256 [ 743.021215][ T9387] loop3: detected capacity change from 0 to 256 [ 743.040988][ T9386] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 743.056045][ T9387] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 743.075384][ T9386] exFAT-fs (loop1): unable to read boot sector [ 743.093622][ T9386] exFAT-fs (loop1): failed to read boot sector [ 743.118608][ T9379] FAT-fs (loop5): Directory bread(block 64) failed [ 743.120438][ T9386] exFAT-fs (loop1): failed to recognize exfat type [ 743.125575][ T9379] FAT-fs (loop5): Directory bread(block 65) failed [ 743.161786][ T9387] syz.3.939: attempt to access beyond end of device [ 743.161786][ T9387] loop3: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 743.198561][ T9379] FAT-fs (loop5): Directory bread(block 66) failed [ 743.226824][ T9379] FAT-fs (loop5): Directory bread(block 67) failed [ 743.237984][ T9387] syz.3.939: attempt to access beyond end of device [ 743.237984][ T9387] loop3: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 743.252713][ T9379] FAT-fs (loop5): Directory bread(block 68) failed [ 743.259855][ T26] audit: type=1800 audit(1739478423.803:288): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.939" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 743.259905][ T9379] FAT-fs (loop5): Directory bread(block 69) failed [ 743.307732][ T9379] FAT-fs (loop5): Directory bread(block 70) failed [ 743.325871][ T9379] FAT-fs (loop5): Directory bread(block 71) failed [ 743.352675][ T9379] FAT-fs (loop5): Directory bread(block 72) failed [ 743.361728][ T9379] FAT-fs (loop5): Directory bread(block 73) failed [ 743.425248][ T9395] loop1: detected capacity change from 0 to 256 [ 743.501852][ T9395] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 743.572819][ T26] audit: type=1800 audit(1739478424.113:289): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.937" name="file1" dev="loop5" ino=1048623 res=0 errno=0 [ 743.608178][ T9379] syz.5.937: attempt to access beyond end of device [ 743.608178][ T9379] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 743.853839][ T9408] loop1: detected capacity change from 0 to 512 [ 744.176503][ T9415] loop4: detected capacity change from 0 to 1024 [ 744.318171][ T9415] hfsplus: failed to load root directory [ 744.501183][ T9408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 744.737706][ T9408] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.867624][ T9408] capability: warning: `syz.1.947' uses deprecated v2 capabilities in a way that may be insecure [ 744.946976][ T9422] loop3: detected capacity change from 0 to 1024 [ 744.961174][ T9421] loop5: detected capacity change from 0 to 2048 [ 745.009494][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 745.059232][ T9421] loop5: p1 p2 < > p3 p4 < p5 > [ 745.087784][ T9421] loop5: partition table partially beyond EOD, truncated [ 745.095043][ T9421] loop5: p1 start 234883329 is beyond EOD, truncated [ 745.152703][ T9421] loop5: p2 start 4294902784 is beyond EOD, truncated [ 745.169096][ T9426] loop0: detected capacity change from 0 to 2048 [ 745.189030][ T9421] loop5: p3 start 4278191616 is beyond EOD, truncated [ 745.231222][ T9429] loop4: detected capacity change from 0 to 512 [ 745.260461][ T9426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.274407][ T9429] EXT4-fs: Ignoring removed mblk_io_submit option [ 745.277185][ T9421] loop5: p5 start 234883329 is beyond EOD, truncated [ 745.312644][ T9429] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 745.365403][ T9032] udevd[9032]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 745.378155][ T3622] loop5: p1 p2 < > p3 p4 < p5 > [ 745.383161][ T3622] loop5: partition table partially beyond EOD, truncated [ 745.394992][ T26] audit: type=1804 audit(1739478425.933:290): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.954" name="/newroot/188/file1/bus" dev="loop0" ino=1367 res=1 errno=0 [ 745.424720][ T9429] Quota error (device loop4): do_check_range: Getting dqdh_next_free 15 out of range 0-5 [ 745.436443][ T3622] loop5: p1 start 234883329 is beyond EOD, truncated [ 745.441596][ T9429] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 745.449853][ T3622] loop5: p2 start 4294902784 is beyond EOD, truncated [ 745.487628][ T9429] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.956: Failed to acquire dquot type 1 [ 745.498990][ T3622] loop5: p3 start 4278191616 is beyond EOD, truncated [ 745.512968][ T3622] loop5: p5 start 234883329 is beyond EOD, truncated [ 745.522448][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 745.570677][ T9429] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 745.657049][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 745.673820][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents [ 745.703870][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 745.710295][ T9440] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 745.739263][ T9429] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #12: comm syz.4.956: mark_inode_dirty error [ 745.770503][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 745.804905][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents [ 745.820406][ T9443] loop3: detected capacity change from 0 to 512 [ 745.850825][ T9443] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 745.864106][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 745.870915][ T9429] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.956: mark_inode_dirty error [ 745.883060][ T9443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 745.905881][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 745.919002][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents [ 745.935860][ T9443] EXT4-fs (loop3): 1 truncate cleaned up [ 745.967690][ T9443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 745.970592][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 745.995776][ T9429] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 746.017567][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 746.025059][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents [ 746.119917][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 746.130549][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 746.137108][ T9429] EXT4-fs error (device loop4): ext4_truncate:4311: inode #12: comm syz.4.956: mark_inode_dirty error [ 746.149731][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 746.248598][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 746.255268][ T9429] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 746.292378][ T9429] EXT4-fs (loop4): Remounting filesystem read-only [ 746.312965][ T9429] EXT4-fs (loop4): 1 truncate cleaned up [ 746.329185][ T9429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 746.598523][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 747.730946][ T9488] netlink: 156 bytes leftover after parsing attributes in process `syz.3.974'. [ 747.750383][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 747.895707][ T9494] loop4: detected capacity change from 0 to 8 [ 748.233375][ T128] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 748.513811][ T128] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 748.548465][ T128] usb 5-1: config 0 has no interface number 0 [ 748.583250][ T128] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 748.702728][ T128] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 748.818951][ T128] usb 5-1: config 0 interface 255 has no altsetting 0 [ 748.934885][ T128] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 748.950262][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.000831][ T128] usb 5-1: config 0 descriptor?? [ 749.077833][ T125] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 749.235413][ T128] usb 5-1: string descriptor 0 read error: -71 [ 749.259059][ T128] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 749.269245][ T125] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 749.292335][ T125] usb 1-1: config 0 interface 0 has no altsetting 0 [ 749.320220][ T125] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 749.334250][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.343050][ T125] usb 1-1: Product: syz [ 749.356000][ T125] usb 1-1: Manufacturer: syz [ 749.361444][ T125] usb 1-1: SerialNumber: syz [ 749.364214][ T128] usb 5-1: USB disconnect, device number 10 [ 749.384059][ T125] usb 1-1: config 0 descriptor?? [ 749.416963][ T125] usb 1-1: selecting invalid altsetting 0 [ 749.504702][ T9524] loop5: detected capacity change from 0 to 1024 [ 749.586316][ T9526] loop3: detected capacity change from 0 to 1024 [ 749.650256][ T9526] hfsplus: xattr searching failed [ 749.653871][ T9504] loop0: detected capacity change from 0 to 1024 [ 749.747784][ T4336] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 749.771560][ T9504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.811189][ T9504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.840109][ T128] usb 1-1: USB disconnect, device number 13 [ 749.967012][ T9530] loop4: detected capacity change from 0 to 2048 [ 749.971056][ T4336] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 750.000816][ T9530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.002254][ T4336] usb 2-1: config 0 has no interface number 0 [ 750.015940][ T4336] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 750.043611][ T4336] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 750.086380][ T4336] usb 2-1: config 0 interface 255 has no altsetting 0 [ 750.094011][ T4336] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 750.110533][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.124232][ T4336] usb 2-1: config 0 descriptor?? [ 750.143903][ T4336] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 750.357809][ T4300] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 750.369761][ T4336] usb 2-1: USB disconnect, device number 11 [ 750.411787][ T9543] loop5: detected capacity change from 0 to 512 [ 750.419808][ T9543] EXT4-fs: Ignoring removed orlov option [ 750.426807][ T9543] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 750.566855][ T26] audit: type=1326 audit(1739478431.103:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7978cde9 code=0x0 [ 750.594859][ T4300] usb 4-1: Using ep0 maxpacket: 32 [ 750.607411][ T4300] usb 4-1: unable to get BOS descriptor or descriptor too short [ 750.632440][ T4300] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 750.657007][ T4300] usb 4-1: config 1 has no interface number 1 [ 750.682154][ T9548] loop0: detected capacity change from 0 to 128 [ 750.692502][ T4300] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 750.721363][ T4300] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.743269][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.751992][ T4300] usb 4-1: Product: syz [ 750.756204][ T4300] usb 4-1: Manufacturer: syz [ 750.768442][ T4300] usb 4-1: SerialNumber: syz [ 750.773518][ T9005] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 750.975400][ T9554] loop4: detected capacity change from 0 to 128 [ 751.007338][ T4300] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 751.059586][ T4300] usb 4-1: USB disconnect, device number 14 [ 751.074297][ T9554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 751.107190][ T9554] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 751.157877][ T9556] loop5: detected capacity change from 0 to 8192 [ 751.177277][ T9554] syz.4.997 (pid 9554) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 751.213933][ T9556] loop5: p1 < > p3 < p5 > p4 [ 751.222728][ T9556] loop5: partition table partially beyond EOD, truncated [ 751.231701][ T9556] loop5: p1 start 4294967040 is beyond EOD, truncated [ 751.302013][ T9005] udevd[9005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.645134][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 751.664671][ T9566] loop0: detected capacity change from 0 to 2048 [ 751.696718][ T9570] loop5: detected capacity change from 0 to 512 [ 751.728681][ T9566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 751.743018][ T9570] EXT4-fs: Ignoring removed oldalloc option [ 751.841943][ T9570] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 751.884602][ T9570] EXT4-fs (loop5): Remounting filesystem read-only [ 751.898312][ T9570] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.999: Parent and EA inode have the same ino 15 [ 751.933564][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 752.140991][ T9570] EXT4-fs (loop5): Remounting filesystem read-only [ 752.166784][ T9570] EXT4-fs (loop5): 1 orphan inode deleted [ 752.172618][ T9570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 753.236234][ T8683] EXT4-fs (loop5): unmounting filesystem. [ 753.335576][ T9595] loop4: detected capacity change from 0 to 1024 [ 753.361045][ T9600] loop5: detected capacity change from 0 to 256 [ 753.362851][ T9601] syzkaller0: create flow: hash 1930306674 index 1 [ 753.394964][ T26] audit: type=1800 audit(1739478433.991:292): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1011" name="file1" dev="loop5" ino=1048624 res=0 errno=0 [ 753.424279][ T9600] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 753.457500][ T4300] syzkaller0: tun_net_xmit 76 [ 753.462837][ T4300] syzkaller0: tun_net_xmit 48 [ 753.493148][ T6526] syzkaller0: tun_net_xmit 76 [ 753.520127][ T9604] loop0: detected capacity change from 0 to 1764 [ 753.718800][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 753.829828][ T128] syzkaller0: tun_net_xmit 76 [ 753.883282][ T9614] loop4: detected capacity change from 0 to 512 [ 753.916293][ T125] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 753.917005][ T9614] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 753.953996][ T128] syzkaller0: tun_net_xmit 76 [ 753.998941][ T9614] EXT4-fs (loop4): 1 truncate cleaned up [ 753.998975][ T9614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 754.015045][ T9592] syzkaller0: delete flow: hash 1930306674 index 1 [ 754.070390][ T4336] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 754.111222][ T125] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 754.111253][ T125] usb 6-1: config 0 has no interface number 0 [ 754.111284][ T125] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 754.111311][ T125] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 754.111337][ T125] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 754.111360][ T125] usb 6-1: config 0 interface 11 has no altsetting 0 [ 754.111389][ T125] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 754.111414][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.115426][ T125] usb 6-1: config 0 descriptor?? [ 754.116137][ T9607] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 754.131249][ T125] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 754.225312][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 754.236052][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 754.243891][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 754.252894][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 754.260691][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 754.269721][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 754.282294][ T125] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 754.282321][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 754.293978][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 754.304582][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 754.312395][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 754.320329][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 754.335906][ T4336] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 754.349270][ T4336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.377985][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 754.388927][ T4336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 754.402112][ T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 754.405171][ T9621] loop4: detected capacity change from 0 to 1024 [ 754.411986][ T4336] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 754.425951][ T125] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 754.445466][ T125] usb 6-1: USB disconnect, device number 2 [ 754.456359][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.505777][ T125] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 754.514946][ T9621] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 754.527194][ T4336] usb 2-1: config 0 descriptor?? [ 754.543288][ T9621] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 754.562796][ T125] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 754.598058][ T125] keyspan 6-1:0.11: device disconnected [ 754.960271][ T4336] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 754.973775][ T4336] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 755.002174][ T4336] holtek_kbd 0003:04D9:A055.0001: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 755.329420][ T128] usb 2-1: USB disconnect, device number 12 [ 755.340140][ T9635] loop3: detected capacity change from 0 to 256 [ 755.358834][ T9635] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 755.809622][ T9635] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 758.234212][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.240820][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.456705][ T9672] loop0: detected capacity change from 0 to 512 [ 760.487472][ T9672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 760.541630][ T9672] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 760.561846][ T9672] EXT4-fs (loop0): 1 truncate cleaned up [ 760.571947][ T9682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.575597][ T9672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 760.616913][ T26] audit: type=1800 audit(1739478441.384:293): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 760.736008][ T4336] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 763.252733][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 764.262421][ T4336] usb 5-1: Using ep0 maxpacket: 16 [ 868.945344][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 868.952006][ C0] rcu: 0-...!: (1 GPs behind) idle=7024/1/0x4000000000000000 softirq=32782/32783 fqs=49 [ 868.963035][ C0] (t=10500 jiffies g=39525 q=321 ncpus=2) [ 868.968872][ C0] rcu: rcu_preempt kthread starved for 10397 jiffies! g39525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 868.980131][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 868.990130][ C0] rcu: RCU grace-period kthread stack dump: [ 868.996034][ C0] task:rcu_preempt state:R running task stack:26616 pid:16 ppid:2 flags:0x00004000 [ 869.006979][ C0] Call Trace: [ 869.010283][ C0] [ 869.013241][ C0] __schedule+0x143f/0x4570 [ 869.017795][ C0] ? _raw_spin_unlock+0x40/0x40 [ 869.022694][ C0] ? __mod_timer+0x956/0xee0 [ 869.027322][ C0] ? release_firmware_map_entry+0x186/0x186 [ 869.033247][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 869.038664][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 869.044591][ C0] ? _raw_spin_unlock+0x40/0x40 [ 869.049479][ C0] schedule+0xbf/0x180 [ 869.053663][ C0] schedule_timeout+0x1b9/0x300 [ 869.058546][ C0] ? console_conditional_schedule+0x40/0x40 [ 869.064477][ C0] ? update_process_times+0x1b0/0x1b0 [ 869.069882][ C0] ? prepare_to_swait_event+0x329/0x350 [ 869.075486][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 869.080372][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 869.086557][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 869.091785][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 869.096575][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 869.102512][ C0] ? finish_swait+0xcf/0x1e0 [ 869.107145][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 869.111792][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 869.116927][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 869.122858][ C0] ? __kthread_parkme+0x168/0x1c0 [ 869.127924][ C0] kthread+0x28d/0x320 [ 869.132037][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 869.137176][ C0] ? kthread_blkcg+0xd0/0xd0 [ 869.141789][ C0] ret_from_fork+0x1f/0x30 [ 869.146254][ C0] [ 869.149290][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 869.155640][ C0] Sending NMI from CPU 0 to CPUs 1: [ 869.160873][ C1] NMI backtrace for cpu 1 [ 869.160891][ C1] CPU: 1 PID: 9689 Comm: syz.1.1043 Not tainted 6.1.128-syzkaller #0 [ 869.160908][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 869.160918][ C1] RIP: 0010:pid_task+0x57/0x140 [ 869.160943][ C1] Code: 25 2f 00 4a 8d 5c f3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 9c b8 86 00 48 8b 2b 74 64 57 09 89 c3 31 ff 89 c6 e8 f9 28 2f 00 85 db 74 24 e8 b0 [ 869.160957][ C1] RSP: 0018:ffffc900001e0c00 EFLAGS: 00000046 [ 869.160972][ C1] RAX: 1ffff1100491d322 RBX: ffff8880248e9910 RCX: dffffc0000000000 [ 869.160985][ C1] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000005 [ 869.160995][ C1] RBP: ffff8880304fa3f8 R08: ffffffff815b76c2 R09: fffffbfff224a04d [ 869.161008][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 869.161020][ C1] R13: 1ffff9200003c18c R14: 0000000000000001 R15: 0000000000000001 [ 869.161030][ C1] FS: 00007f5de40d86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 869.161045][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 869.161056][ C1] CR2: 000040000006b000 CR3: 000000005ce6f000 CR4: 00000000003506e0 [ 869.161071][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 869.161081][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 869.161091][ C1] Call Trace: [ 869.161111][ C1] [ 869.161117][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 869.161140][ C1] ? read_lock_is_recursive+0x10/0x10 [ 869.161172][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 869.161189][ C1] ? nmi_handle+0x25/0x440 [ 869.161222][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 869.161238][ C1] ? nmi_handle+0x12e/0x440 [ 869.161262][ C1] ? nmi_handle+0x25/0x440 [ 869.161288][ C1] ? pid_task+0x57/0x140 [ 869.161307][ C1] ? default_do_nmi+0x62/0x150 [ 869.161325][ C1] ? exc_nmi+0xa8/0x100 [ 869.161341][ C1] ? end_repeat_nmi+0x16/0x31 [ 869.161366][ C1] ? pid_task+0x22/0x140 [ 869.161387][ C1] ? pid_task+0x57/0x140 [ 869.161408][ C1] ? pid_task+0x57/0x140 [ 869.161429][ C1] ? pid_task+0x57/0x140 [ 869.161449][ C1] [ 869.161453][ C1] [ 869.161459][ C1] send_sigqueue+0x1c5/0x720 [ 869.161484][ C1] ? send_sigqueue+0x107/0x720 [ 869.161509][ C1] ? sigqueue_free+0x1e0/0x1e0 [ 869.161535][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 869.161561][ C1] posix_timer_fn+0x186/0x390 [ 869.161582][ C1] ? common_timer_wait_running+0x10/0x10 [ 869.161602][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 869.161632][ C1] ? hrtimer_interrupt+0x980/0x980 [ 869.161653][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 869.161680][ C1] hrtimer_interrupt+0x392/0x980 [ 869.161712][ C1] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 869.161738][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 869.161759][ C1] [ 869.161763][ C1] [ 869.161769][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 869.161786][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 869.161810][ C1] Code: a1 95 f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 87 ad f6 48 89 df e8 86 c5 ae f6 e8 11 1d d4 f6 fb bf 01 00 00 00 76 4f a1 f6 65 8b 05 17 2f 45 75 85 c0 74 02 5b c3 e8 c4 52 43 [ 869.161823][ C1] RSP: 0018:ffffc9000c967b30 EFLAGS: 00000286 [ 869.161837][ C1] RAX: a65fe3a1ae80d900 RBX: ffff88802f89b780 RCX: ffffffff97357103 [ 869.161849][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: 0000000000000001 [ 869.161861][ C1] RBP: ffffc9000c967c70 R08: dffffc0000000000 R09: ffffed1005f136f1 [ 869.161874][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11005f13783 [ 869.161885][ C1] R13: 000000001c000004 R14: 0000000000000021 R15: ffff88802f89bc18 [ 869.161905][ C1] get_signal+0x154b/0x17d0 [ 869.161938][ C1] ? ptrace_notify+0x370/0x370 [ 869.161966][ C1] arch_do_signal_or_restart+0xb0/0x1a10 [ 869.161987][ C1] ? __might_fault+0xa1/0x110 [ 869.162009][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 869.162037][ C1] ? do_sigaltstack+0x3f3/0x610 [ 869.162058][ C1] ? get_sigframe_size+0x10/0x10 [ 869.162076][ C1] ? restore_altstack+0x107/0x150 [ 869.162095][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 869.162129][ C1] ? exit_to_user_mode_loop+0x39/0x100 [ 869.162147][ C1] exit_to_user_mode_loop+0x6a/0x100 [ 869.162163][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 869.162181][ C1] syscall_exit_to_user_mode+0x60/0x270 [ 869.162203][ C1] do_syscall_64+0x47/0xb0 [ 869.162218][ C1] ? clear_bhb_loop+0x45/0xa0 [ 869.162234][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.162261][ C1] RIP: 0033:0x7f5de318cde7 [ 869.162279][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 869.162292][ C1] RSP: 002b:00007f5de40d8038 EFLAGS: 00000246 [ 869.162305][ C1] RAX: 0000000000000113 RBX: 00007f5de33a5fa0 RCX: 00007f5de318cde9 [ 869.162316][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 869.162325][ C1] RBP: 00007f5de320e2a0 R08: 0000000008000f28 R09: 0000000000000000 [ 869.162336][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.162346][ C1] R13: 0000000000000000 R14: 00007f5de33a5fa0 R15: 00007ffed140d938 [ 869.162371][ C1] [ 869.162866][ C0] CPU: 0 PID: 9696 Comm: syz.5.1046 Not tainted 6.1.128-syzkaller #0 [ 869.687904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 869.697986][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 869.703313][ C0] Code: 2b 00 74 08 4c 89 f7 e8 ff 8b 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 869.722948][ C0] RSP: 0018:ffffc9000ca077e0 EFLAGS: 00000206 [ 869.729045][ C0] RAX: 0000000000000001 RBX: 1ffff92001940f08 RCX: ffffffff816b5eb2 [ 869.737045][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5e6980 [ 869.745039][ C0] RBP: ffffc9000ca07938 R08: dffffc0000000000 R09: fffffbfff224a053 [ 869.753038][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001940f04 [ 869.761031][ C0] R13: dffffc0000000000 R14: ffffc9000ca07840 R15: 0000000000000246 [ 869.769037][ C0] FS: 00007f3b4390c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 869.778007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 869.784627][ C0] CR2: 000000110c389432 CR3: 000000002a1b4000 CR4: 00000000003506f0 [ 869.792631][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 869.800631][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 869.808623][ C0] Call Trace: [ 869.811927][ C0] [ 869.814793][ C0] ? rcu_dump_cpu_stacks+0x296/0x4f0 [ 869.820119][ C0] ? print_cpu_stall+0x346/0x5f0 [ 869.825089][ C0] ? rcu_sched_clock_irq+0x997/0x1200 [ 869.830508][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 869.835384][ C0] ? hrtimer_run_queues+0x163/0x450 [ 869.840613][ C0] ? acct_account_cputime+0xdd/0x270 [ 869.845929][ C0] ? update_process_times+0x147/0x1b0 [ 869.851331][ C0] ? tick_sched_timer+0x386/0x550 [ 869.856382][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 869.861953][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 869.867369][ C0] ? hrtimer_interrupt+0x980/0x980 [ 869.872512][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 869.878622][ C0] ? hrtimer_interrupt+0x392/0x980 [ 869.883787][ C0] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 869.889979][ C0] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 869.895818][ C0] [ 869.898766][ C0] [ 869.901717][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 869.907909][ C0] ? validate_chain+0x112/0x5950 [ 869.912875][ C0] ? lock_acquire+0x26f/0x5a0 [ 869.917597][ C0] ? read_lock_is_recursive+0x10/0x10 [ 869.923007][ C0] ? __might_sleep+0xb0/0xb0 [ 869.927617][ C0] ? __local_bh_enable_ip+0x164/0x1f0 [ 869.933031][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 869.938268][ C0] ? __local_bh_enable_ip+0x164/0x1f0 [ 869.943678][ C0] ? __bpf_trace_softirq+0x10/0x10 [ 869.948825][ C0] ? copy_fpstate_to_sigframe+0x21f/0xda0 [ 869.954572][ C0] ? _local_bh_enable+0xa0/0xa0 [ 869.959464][ C0] ? __might_fault+0xa1/0x110 [ 869.964170][ C0] __might_fault+0xbd/0x110 [ 869.968706][ C0] ? __might_fault+0xa1/0x110 [ 869.973416][ C0] copy_fpstate_to_sigframe+0xb16/0xda0 [ 869.979009][ C0] ? fpregs_set+0x740/0x740 [ 869.983544][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 869.988778][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 869.994970][ C0] ? _raw_spin_unlock_irq+0x25/0x40 [ 870.000202][ C0] ? fpu__alloc_mathframe+0xa6/0x120 [ 870.005525][ C0] get_sigframe+0x378/0x4b0 [ 870.010068][ C0] ? restore_sigcontext+0x700/0x700 [ 870.015300][ C0] ? ptrace_notify+0x370/0x370 [ 870.020108][ C0] arch_do_signal_or_restart+0x4ef/0x1a10 [ 870.025856][ C0] ? __might_fault+0xa1/0x110 [ 870.030652][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 870.035722][ C0] ? do_sigaltstack+0x3f3/0x610 [ 870.040610][ C0] ? get_sigframe_size+0x10/0x10 [ 870.045574][ C0] ? restore_altstack+0x107/0x150 [ 870.050635][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 870.056665][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 870.062151][ C0] exit_to_user_mode_loop+0x6a/0x100 [ 870.067463][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 870.073037][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 870.078618][ C0] do_syscall_64+0x47/0xb0 [ 870.083059][ C0] ? clear_bhb_loop+0x45/0xa0 [ 870.087764][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.093690][ C0] RIP: 0033:0x7f3b42b8cde7 [ 870.098132][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 870.117773][ C0] RSP: 002b:00007f3b4390c0e8 EFLAGS: 00000246 [ 870.123865][ C0] RAX: 00000000000000ca RBX: 00007f3b42da5fa8 RCX: 00007f3b42b8cde9 [ 870.131860][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b42da5fa8 [ 870.139851][ C0] RBP: 00007f3b42da5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 870.147844][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b42da5fac [ 870.155835][ C0] R13: 0000000000000000 R14: 00007fff25be1bf0 R15: 00007fff25be1cd8 [ 870.163843][ C0] [ 870.202602][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.208979][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.258739][ T4336] usb 5-1: device descriptor read/all, error -71 [ 870.462976][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1047'. [ 870.581651][ T9711] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 870.591808][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. SYZFAIL: failed to send rpc fd=3 want=13400 sent=0 n=-1 (errno 32: Broken pipe) [ 871.728108][ T4252] syz-executor (4252) used greatest stack depth: 20152 bytes left [ 872.492201][ T4304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.572637][ T4304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.646815][ T4304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.710239][ T4304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.838121][ T4304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.906178][ T4304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.989334][ T4304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.073432][ T4304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.246007][ T4304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.336726][ T4304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.392605][ T4304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.499424][ T4304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.733050][ T4304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.804285][ T4304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.866469][ T4304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.942371][ T4304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.130031][ T4304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.196959][ T4304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.264572][ T4304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.348387][ T4304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.648468][ T4304] device hsr_slave_0 left promiscuous mode [ 877.655052][ T4304] device hsr_slave_1 left promiscuous mode [ 877.661859][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.669712][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.677767][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.685188][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.692922][ T4304] device bridge_slave_1 left promiscuous mode [ 877.699418][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.708158][ T4304] device bridge_slave_0 left promiscuous mode [ 877.714377][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.730783][ T4304] device hsr_slave_0 left promiscuous mode [ 877.737503][ T4304] device hsr_slave_1 left promiscuous mode [ 877.743897][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.751484][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.759307][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.766817][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.774440][ T4304] device bridge_slave_1 left promiscuous mode [ 877.781726][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.790008][ T4304] device bridge_slave_0 left promiscuous mode [ 877.796418][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.807742][ T4304] device hsr_slave_0 left promiscuous mode [ 877.814067][ T4304] device hsr_slave_1 left promiscuous mode [ 877.820956][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.828653][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.844156][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.851889][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.859719][ T4304] device bridge_slave_1 left promiscuous mode [ 877.866016][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.874082][ T4304] device bridge_slave_0 left promiscuous mode [ 877.880425][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.891645][ T4304] device hsr_slave_0 left promiscuous mode [ 877.898195][ T4304] device hsr_slave_1 left promiscuous mode [ 877.904529][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.912074][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.920150][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.927846][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.935595][ T4304] device bridge_slave_1 left promiscuous mode [ 877.941847][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.950604][ T4304] device bridge_slave_0 left promiscuous mode [ 877.957213][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.968881][ T4304] device hsr_slave_0 left promiscuous mode [ 877.975179][ T4304] device hsr_slave_1 left promiscuous mode [ 877.981997][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.989495][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.997962][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.005530][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.013220][ T4304] device bridge_slave_1 left promiscuous mode [ 878.019516][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.028054][ T4304] device bridge_slave_0 left promiscuous mode [ 878.034258][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.112738][ T4304] device veth1_macvtap left promiscuous mode [ 878.118884][ T4304] device veth0_macvtap left promiscuous mode [ 878.124991][ T4304] device veth1_vlan left promiscuous mode [ 878.131137][ T4304] device veth0_vlan left promiscuous mode [ 878.138920][ T4304] device veth1_macvtap left promiscuous mode [ 878.144958][ T4304] device veth0_macvtap left promiscuous mode [ 878.151139][ T4304] device veth1_vlan left promiscuous mode [ 878.157096][ T4304] device veth0_vlan left promiscuous mode [ 878.165553][ T4304] device veth1_macvtap left promiscuous mode [ 878.172501][ T4304] device veth0_macvtap left promiscuous mode [ 878.180143][ T4304] device veth1_vlan left promiscuous mode [ 878.187353][ T4304] device veth0_vlan left promiscuous mode [ 878.194426][ T4304] device veth1_macvtap left promiscuous mode [ 878.200768][ T4304] device veth0_macvtap left promiscuous mode [ 878.206943][ T4304] device veth1_vlan left promiscuous mode [ 878.212742][ T4304] device veth0_vlan left promiscuous mode [ 878.223747][ T4304] device veth1_macvtap left promiscuous mode [ 878.229870][ T4304] device veth0_macvtap left promiscuous mode [ 878.236412][ T4304] device veth1_vlan left promiscuous mode [ 878.242264][ T4304] device veth0_vlan left promiscuous mode