last executing test programs: 6.499042384s ago: executing program 2 (id=320): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4058587a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x0, 0x20}) 6.377679994s ago: executing program 2 (id=322): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x2, 0xf149ac9e49874358, 0xb20, 0x5, 0x1}) 5.956263908s ago: executing program 1 (id=324): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) syz_open_dev$video4linux(&(0x7f0000000480), 0xbaf, 0x208000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f0000000740)='*{.Z;\xd5E\x95,97\xbd~\x99t\b\xf6GB\xe4x\x95h\xed\xfa\x8d\x81ty\xadiN}\xee\n\x1ek\x10\x8d\xb5\xdb\xcf\x80\'E\x10\xf5\xcc\x19\xd9\xeeO\xfc\x88-%\xde\xf1\xf6\xacC\r~E\x03\x1ca8\xd6\xa2\xa6\xe6\xb8\x95\xa5\xe2\x98\xff_\xbd\xd5\x90h\xf5Su\xe8\x8d\\i\x9a\x7f5+\xb5\xeb\v\x8b\x95.\xa3', 0x40, 0xee, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 5.856712676s ago: executing program 1 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.664100362s ago: executing program 1 (id=327): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x2, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x3}}, 0x10, 0x0}, 0x80801) 5.606879547s ago: executing program 3 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x800}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xe8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x400c000}, 0x44815) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r8, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) 5.601454007s ago: executing program 1 (id=329): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f00000003c0)=r1}, 0x20) syz_usbip_server_init(0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20000c6, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x3, 0x1) getdents64(r2, 0x0, 0x0) 4.442048591s ago: executing program 3 (id=331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) listen(0xffffffffffffffff, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x1000005, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.969287329s ago: executing program 3 (id=334): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000005bc0)=""/142, &(0x7f00000005c0)=0x8e) 3.892813805s ago: executing program 3 (id=336): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) read$msr(r0, &(0x7f0000000040)=""/30, 0x1e) lseek(r0, 0x0, 0x4) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0200000000", 0x41d) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000280)={{0x2, 0x5}, 0x100, './file0\x00'}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e00", 0x57}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3.675172653s ago: executing program 2 (id=338): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 3.415456744s ago: executing program 2 (id=340): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000840)='./bus\x00', 0x10042, &(0x7f0000000140)=ANY=[@ANYBLOB='discard=0x00000000000000f4,discard=0x00000000012\x00\x00ff9,errors=continue,nointegrity,iocharset=macroman,discard,uid=', @ANYRES64, @ANYRES8], 0x24, 0x623a, &(0x7f0000002780)="$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") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 3.288139314s ago: executing program 1 (id=342): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=ANY=[], 0xa0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") getdents64(0xffffffffffffffff, 0x0, 0x22) 2.217258491s ago: executing program 3 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$ocfs2(&(0x7f0000000600), &(0x7f0000004780)='./file0\x00', 0x10000, &(0x7f00000006c0)={[{@usrquota}, {@coherency_full}, {@err_ro}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@localalloc}]}, 0x1, 0x4710, &(0x7f0000008f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) openat(0xffffffffffffff9c, &(0x7f0000001a40)='./file1\x00', 0x42, 0x80) 1.713386212s ago: executing program 4 (id=348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.655541836s ago: executing program 0 (id=349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c00000200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1.515988717s ago: executing program 0 (id=350): pipe(&(0x7f0000000080)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/sync_on_suspend', 0xa8042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.433563664s ago: executing program 0 (id=351): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x2018844, &(0x7f0000000340)={[{@usrquota}, {@block_validity}]}, 0x21, 0x4c1, &(0x7f0000001200)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) 1.153727217s ago: executing program 4 (id=352): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.1145032s ago: executing program 2 (id=353): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40106e80, &(0x7f0000000280)) 710.426533ms ago: executing program 4 (id=354): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x1, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x6}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x2c, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x3, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x1, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xf}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 607.936011ms ago: executing program 1 (id=355): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) read$msr(r0, &(0x7f0000000040)=""/30, 0x1e) lseek(r0, 0x0, 0x4) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0200000000", 0x41d) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000280)={{0x2, 0x5}, 0x100, './file0\x00'}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e00", 0x57}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 550.650865ms ago: executing program 0 (id=356): io_setup(0x1000, &(0x7f0000000480)=0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 481.527631ms ago: executing program 4 (id=357): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05eb"], 0x30}, 0x40880) 408.187447ms ago: executing program 3 (id=358): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x107342, 0x140) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x600003, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 349.277472ms ago: executing program 4 (id=359): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) syz_open_dev$video4linux(&(0x7f0000000480), 0xbaf, 0x208000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f0000000740)='*{.Z;\xd5E\x95,97\xbd~\x99t\b\xf6GB\xe4x\x95h\xed\xfa\x8d\x81ty\xadiN}\xee\n\x1ek\x10\x8d\xb5\xdb\xcf\x80\'E\x10\xf5\xcc\x19\xd9\xeeO\xfc\x88-%\xde\xf1\xf6\xacC\r~E\x03\x1ca8\xd6\xa2\xa6\xe6\xb8\x95\xa5\xe2\x98\xff_\xbd\xd5\x90h\xf5Su\xe8\x8d\\i\x9a\x7f5+\xb5\xeb\v\x8b\x95.\xa3', 0x40, 0xee, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 169.703986ms ago: executing program 4 (id=360): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$xdp(0x2c, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r1 = epoll_create1(0x0) unshare(0x2c020400) socket$netlink(0x10, 0x3, 0x8000000004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4000000a}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x101, 0xe06) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x100000, 0x9, 0x0, 0xffffffffffffff80, 0x7fffffff}, 0x0, 0x0) 112.175361ms ago: executing program 2 (id=361): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000900)={0x4800000, [[0x4, 0x7, 0x0, 0x0, 0x9, 0x2, 0x6, 0xa], [0xc, 0x9, 0x81, 0x5, 0x9, 0x10001, 0x7, 0x9], [0xb9, 0xd, 0x3, 0xffffff01, 0x7fffffff, 0xd, 0x2, 0xb]], '\x00', [{0x1, 0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x0, 0x2, 0x1}, {0x8, 0x7a5a, 0x0, 0x0, 0x0, 0x1}, {0x80, 0x40, 0x0, 0x0, 0x0, 0x1}, {0x6e87, 0x8, 0x1, 0x1}, {0xd55, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x100, 0x78, 0x0, 0x1, 0x1}, {0x8, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x9}, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x2}) 110.710671ms ago: executing program 0 (id=362): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) 0s ago: executing program 0 (id=363): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 65.018998][ T4171] cgroup: Unknown subsys name 'net' [ 65.155250][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.733736][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.214072][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.228394][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.362299][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 68.387195][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.448594][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.455983][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.465511][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.474820][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.502126][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.510685][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.520109][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.529594][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.538020][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.547192][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.578521][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.587946][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.597002][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.640319][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.681470][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.702166][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.710295][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.719487][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.730266][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.757057][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.765609][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.775093][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.784868][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.808818][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.819264][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.830498][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.857000][ T4189] team0: Port device team_slave_0 added [ 68.878291][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.886385][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.897618][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.923203][ T4189] team0: Port device team_slave_1 added [ 68.941551][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.950621][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.959506][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.975604][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.990072][ T4183] team0: Port device team_slave_0 added [ 68.999034][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.017175][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.025638][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.034458][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.054115][ T4183] team0: Port device team_slave_1 added [ 69.079002][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.087675][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.130009][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.157774][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.192089][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.200767][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.231873][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.264715][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.276705][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.284618][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.320332][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.338500][ T4182] team0: Port device team_slave_0 added [ 69.365699][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.385061][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.393468][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.423996][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.439005][ T4182] team0: Port device team_slave_1 added [ 69.453548][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.484053][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.491177][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.509213][ T4191] team0: Port device team_slave_0 added [ 69.525887][ T4185] team0: Port device team_slave_0 added [ 69.551326][ T4191] team0: Port device team_slave_1 added [ 69.569699][ T4185] team0: Port device team_slave_1 added [ 69.580004][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.589415][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.622280][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.638844][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.646830][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.675983][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.738598][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.750684][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.762309][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.772224][ T4183] Cannot create hsr debugfs directory [ 69.779882][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.788603][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.818908][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.841728][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.849759][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.878131][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.892452][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.901074][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.901137][ T4184] Bluetooth: hci2: command 0x0409 tx timeout [ 69.937654][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.941569][ T4184] Bluetooth: hci3: command 0x0409 tx timeout [ 69.968264][ T4184] Bluetooth: hci4: command 0x0409 tx timeout [ 69.971300][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.980671][ T4184] Bluetooth: hci1: command 0x0409 tx timeout [ 69.985011][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.997830][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.030815][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.082720][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.091025][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.100227][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.109030][ T4182] Cannot create hsr debugfs directory [ 70.194195][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.206497][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.215422][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.226427][ T4185] Cannot create hsr debugfs directory [ 70.243663][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.250765][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.259909][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.268204][ T4191] Cannot create hsr debugfs directory [ 70.523568][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.549194][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.566449][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.578009][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.619444][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.634580][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.648024][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.665898][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.710883][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.751447][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.767185][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.800948][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.857170][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.881371][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.897957][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.919032][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.937021][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.955386][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.974915][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.985598][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.996988][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.010723][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.023559][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.036791][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.049772][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.095586][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.106058][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.122025][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.133107][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.147363][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.157936][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.173506][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.184511][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.201477][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.226909][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.244601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.257579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.275776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.289792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.302255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.314765][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.325662][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.340953][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.361602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.373837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.383120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.398046][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.408603][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.418424][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.426098][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.454408][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.464589][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.475252][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.490339][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.528064][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.545432][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.555661][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.565752][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.573942][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.582455][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.591763][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.602396][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.614095][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.624223][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.633266][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.643127][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.673551][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.685889][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.698180][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.707710][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.722092][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.751939][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.765874][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.786716][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.795898][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.812360][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.826092][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.839451][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.846988][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.855792][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.865831][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.875441][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.882938][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.891312][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.903708][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.903830][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.961409][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.976581][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.986616][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 71.994845][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 72.020931][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.048603][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.057037][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.065633][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 72.072549][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.072692][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.080987][ T4247] Bluetooth: hci1: command 0x041b tx timeout [ 72.102132][ T4247] Bluetooth: hci4: command 0x041b tx timeout [ 72.110596][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.119969][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.130378][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.140774][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.150447][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.159550][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.168612][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.178318][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.189509][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.199606][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.236252][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.255278][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.264657][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.281406][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.290498][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.309754][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.324433][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.337782][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.353567][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.365341][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.380074][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.395921][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.403908][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.419359][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.430923][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.442949][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.453191][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.460812][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.475657][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.485241][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.494957][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.502647][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.524288][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.533143][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.543753][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.556872][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.568146][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.607646][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.618242][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.628527][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.639406][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.646838][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.656244][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.668039][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.677960][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.687048][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.696354][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.707739][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.716721][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.737103][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.748480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.764548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.776207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.795372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.807426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.836612][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.848620][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.871983][ T4183] device veth0_vlan entered promiscuous mode [ 72.886799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.896683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.911780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.923506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.933465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.942844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.951837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.961470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.970746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.980208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.989929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.998785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.007892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.018292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.030013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.041214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.050246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.060323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.082799][ T4189] device veth0_vlan entered promiscuous mode [ 73.106161][ T4183] device veth1_vlan entered promiscuous mode [ 73.131366][ T4189] device veth1_vlan entered promiscuous mode [ 73.155181][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.178051][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.200764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.212658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.227978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.237965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.250104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.326073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.359823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.386729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.405791][ T4189] device veth0_macvtap entered promiscuous mode [ 73.425780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.438306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.450615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.465837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.476391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.493729][ T4189] device veth1_macvtap entered promiscuous mode [ 73.520215][ T4182] device veth0_vlan entered promiscuous mode [ 73.531999][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.545050][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.556571][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.573504][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.594895][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.605406][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.616026][ T4183] device veth0_macvtap entered promiscuous mode [ 73.632209][ T4182] device veth1_vlan entered promiscuous mode [ 73.652964][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.664662][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.680269][ T4183] device veth1_macvtap entered promiscuous mode [ 73.688930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.697952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.708852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.717602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.727510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.737487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.748237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.761126][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.784374][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.795762][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.808045][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.821844][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.837655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.850410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.861450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.880376][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.940573][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.951412][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.964424][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.980076][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.000379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.012164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.027801][ T4182] device veth0_macvtap entered promiscuous mode [ 74.037589][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.052126][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.063418][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 74.066858][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.075246][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 74.115871][ T4182] device veth1_macvtap entered promiscuous mode [ 74.125145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.135556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.144286][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 74.145455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.151446][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 74.166400][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 74.167872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.182258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.191556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.214216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.223377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.254132][ T4191] device veth0_vlan entered promiscuous mode [ 74.270324][ T4191] device veth1_vlan entered promiscuous mode [ 74.294870][ T4185] device veth0_vlan entered promiscuous mode [ 74.316717][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.327553][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.337472][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.350486][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.362412][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.375673][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.388370][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.399363][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.410945][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.421199][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.446904][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.457327][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.468428][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.479201][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.497648][ T4185] device veth1_vlan entered promiscuous mode [ 74.508328][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.523571][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.537096][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.556382][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.573634][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.594360][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.612761][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.631842][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.645009][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.658125][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.675336][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.684703][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.695079][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.709938][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.751598][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.752416][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.773140][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.777606][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.792417][ T4191] device veth0_macvtap entered promiscuous mode [ 74.803548][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.820110][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.830637][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.841596][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.882959][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.895687][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.926040][ T4191] device veth1_macvtap entered promiscuous mode [ 74.967188][ T4185] device veth0_macvtap entered promiscuous mode [ 74.986144][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.988934][ T354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.005553][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.014506][ T354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.018526][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.034854][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.043615][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.102964][ T4185] device veth1_macvtap entered promiscuous mode [ 75.118556][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.133499][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.147994][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.160331][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.175211][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.190498][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.206147][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.239995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.261377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.273998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.285941][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.300987][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.313206][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.326230][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.337887][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.352011][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.367269][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.393850][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.407602][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.424673][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.440418][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.453536][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.464454][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.499602][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.514528][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.531407][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.550720][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.571185][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.592541][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.602747][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.607771][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.647329][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.670574][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.693888][ T354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.704547][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.715010][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.725312][ T354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.734031][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.747776][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.765392][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.811414][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.826514][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.838644][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.852057][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.862886][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.874690][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.894748][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.909318][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.922452][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.943548][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.956452][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.988200][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.016453][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.031102][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.043183][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.055876][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.087601][ T354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.098043][ T354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.124200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.151735][ T2283] Bluetooth: hci3: command 0x0419 tx timeout [ 76.170044][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.180090][ T2283] Bluetooth: hci2: command 0x0419 tx timeout [ 76.188875][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.222812][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 76.237070][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.244993][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 76.271404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.318591][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.335113][ T4306] overlayfs: overlapping lowerdir path [ 76.345950][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.379435][ T354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.441134][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.448818][ T354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.456996][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.502161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.513386][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.552398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.574845][ T4312] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 76.591169][ T4312] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 76.600952][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.619915][ T4312] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 76.634320][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.669005][ T4312] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 76.690664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.885137][ T4322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11'. [ 76.949266][ T4248] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.974848][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 77.160823][ T4184] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.399216][ T4248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.422326][ T4248] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.435124][ T4184] usb 3-1: Using ep0 maxpacket: 16 [ 77.475703][ T4248] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 77.539097][ T4248] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 77.580045][ T4184] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.609219][ T4248] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.658813][ T4184] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 77.679788][ T4184] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 77.703241][ T4184] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.705540][ T4334] loop1: detected capacity change from 0 to 512 [ 77.755083][ T4334] ======================================================= [ 77.755083][ T4334] WARNING: The mand mount option has been deprecated and [ 77.755083][ T4334] and is ignored by this kernel. Remove the mand [ 77.755083][ T4334] option from the mount to silence this warning. [ 77.755083][ T4334] ======================================================= [ 77.813067][ T4336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.852337][ T4184] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.872411][ T4184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.886006][ T4184] usb 3-1: SerialNumber: syz [ 77.894165][ T4248] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.912301][ T4334] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.14: bad orphan inode 15 [ 77.934574][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.960052][ T4334] ext4_test_bit(bit=14, block=5) = 0 [ 77.962164][ T4248] usb 4-1: Product: syz [ 77.968285][ T4334] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 77.971202][ T4248] usb 4-1: Manufacturer: syz [ 78.004645][ T4248] usb 4-1: SerialNumber: syz [ 78.012380][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.039036][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.062364][ T4184] hub 3-1:1.0: bad descriptor, ignoring hub [ 78.082573][ T4334] EXT4-fs error (device loop1): __ext4_new_inode:1076: comm syz.1.14: reserved inode found cleared - inode=1 [ 78.102687][ T4184] hub: probe of 3-1:1.0 failed with error -5 [ 78.112330][ T4314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.161034][ T4248] cdc_mbim 4-1:1.0: skipping garbage [ 78.284707][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.286539][ T4336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.330449][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.412709][ T4336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.493856][ T4314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.576558][ T4345] loop4: detected capacity change from 0 to 32768 [ 78.620072][ T4336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.642865][ T4345] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.17 (4345) [ 78.723412][ T4345] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 78.733785][ T4345] BTRFS info (device loop4): force zlib compression, level 3 [ 78.742724][ T4345] BTRFS info (device loop4): enabling auto defrag [ 78.750001][ T4345] BTRFS info (device loop4): setting nodatasum [ 78.759691][ T4345] BTRFS info (device loop4): force clearing of disk cache [ 78.770035][ T4345] BTRFS info (device loop4): using free space tree [ 78.781946][ T4345] BTRFS info (device loop4): has skinny extents [ 78.866317][ T4345] BTRFS info (device loop4): enabling ssd optimizations [ 78.868826][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.891187][ T4184] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 78.907332][ T4345] BTRFS info (device loop4): clearing free space tree [ 78.916205][ T4345] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.928953][ T4345] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.956662][ T4336] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.982054][ T4345] BTRFS info (device loop4): creating free space tree [ 78.992396][ T4345] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.004683][ T4345] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.027698][ T4336] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.073507][ T4336] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.127093][ T4336] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.168954][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 79.197030][ T26] audit: type=1800 audit(1755913086.093:2): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 79.216846][ T4314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.279538][ T4302] usb 3-1: USB disconnect, device number 2 [ 79.313324][ T4302] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 79.344272][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.450599][ T21] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 79.479418][ T21] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 79.515064][ T21] usb 2-1: config 4 has no interface number 0 [ 79.582165][ T4248] cdc_mbim 4-1:1.0: bind() failure [ 79.653367][ T4248] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 79.709233][ T21] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 79.713452][ T4248] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 79.735309][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.764117][ T4248] usbtest: probe of 4-1:1.1 failed with error -71 [ 79.777956][ T21] usb 2-1: Product: syz [ 79.820384][ T4248] usb 4-1: USB disconnect, device number 2 [ 79.824845][ T21] usb 2-1: Manufacturer: syz [ 79.854789][ T21] usb 2-1: SerialNumber: syz [ 80.023749][ T4382] delete_channel: no stack [ 80.206220][ T4399] loop2: detected capacity change from 0 to 8 [ 80.785912][ T4405] loop3: detected capacity change from 0 to 40427 [ 80.825842][ T4412] loop2: detected capacity change from 0 to 4096 [ 80.903150][ T4405] F2FS-fs (loop3): Unrecognized mount option "checkpoint=d [ 80.903150][ T4405] " or missing value [ 81.173937][ T4421] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.188057][ T4416] loop4: detected capacity change from 0 to 40427 [ 81.279205][ T4416] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 81.540206][ T4424] loop3: detected capacity change from 0 to 40427 [ 81.556456][ T21] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 81.604152][ T4424] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 81.606321][ T21] usb 2-1: No valid video chain found. [ 81.682418][ T4429] tap0: tun_chr_ioctl cmd 1074025675 [ 81.691528][ T4429] tap0: persist enabled [ 81.747478][ T21] usb 2-1: USB disconnect, device number 2 [ 81.806594][ T4429] tap0: tun_chr_ioctl cmd 1074025675 [ 81.815205][ T4429] tap0: persist enabled [ 81.884942][ T4435] loop4: detected capacity change from 0 to 128 [ 82.112065][ T4440] loop3: detected capacity change from 0 to 2048 [ 82.233647][ T4437] tipc: Started in network mode [ 82.371600][ T4444] loop0: detected capacity change from 0 to 128 [ 82.705351][ T4440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.861767][ T4437] tipc: Node identity 7e4fcafb4e06, cluster identity 4711 [ 82.871204][ T4437] tipc: Enabled bearer , priority 0 [ 82.880192][ T4437] device syzkaller0 entered promiscuous mode [ 82.911619][ T4444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.924943][ T4444] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.925674][ T4437] tipc: Resetting bearer [ 82.975640][ T4436] tipc: Resetting bearer [ 83.049982][ T4436] tipc: Disabling bearer [ 83.102338][ T1108] cfg80211: failed to load regulatory.db [ 83.253989][ T4460] capability: warning: `syz.3.35' uses deprecated v2 capabilities in a way that may be insecure [ 83.792929][ T4473] loop1: detected capacity change from 0 to 8 [ 83.929473][ T4473] SQUASHFS error: xz decompression failed, data probably corrupt [ 83.934508][ T4455] loop2: detected capacity change from 0 to 32768 [ 84.001757][ T4473] SQUASHFS error: Failed to read block 0x108: -5 [ 84.037074][ T4473] SQUASHFS error: Unable to read metadata cache entry [106] [ 84.054843][ T4473] SQUASHFS error: Unable to read inode 0x11f [ 84.177923][ T4480] loop0: detected capacity change from 0 to 4096 [ 84.346952][ T4480] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.761547][ T4488] loop4: detected capacity change from 0 to 32768 [ 85.047242][ T4491] loop1: detected capacity change from 0 to 128 [ 85.468704][ C0] sched: RT throttling activated [ 85.579123][ T4491] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.593311][ T4491] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.731206][ T4504] loop2: detected capacity change from 0 to 2048 [ 85.760938][ T4488] XFS (loop4): Mounting V5 Filesystem [ 85.766834][ T4490] syz.1.48 (4490) used greatest stack depth: 17576 bytes left [ 85.901802][ T4506] tipc: Started in network mode [ 85.937609][ T4504] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.973397][ T4506] tipc: Node identity 366c1d683364, cluster identity 4711 [ 86.054255][ T4488] XFS (loop4): Ending clean mount [ 86.126862][ T4506] tipc: Enabled bearer , priority 0 [ 86.188291][ T4182] XFS (loop4): Unmounting Filesystem [ 86.207528][ T4514] device syzkaller0 entered promiscuous mode [ 86.453410][ T4521] loop3: detected capacity change from 0 to 2048 [ 86.505693][ T4505] tipc: Resetting bearer [ 86.612927][ T4505] tipc: Disabling bearer [ 86.672768][ T4521] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.718881][ T4521] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.845294][ T26] audit: type=1800 audit(1755913093.743:3): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.55" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 87.631565][ T4549] loop4: detected capacity change from 0 to 40427 [ 87.641889][ T4543] loop3: detected capacity change from 0 to 4096 [ 87.695328][ T4549] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x1ffff [ 87.713174][ T4549] F2FS-fs (loop4): invalid crc value [ 87.777232][ T4551] loop1: detected capacity change from 0 to 128 [ 87.988108][ T4549] F2FS-fs (loop4) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x15d2/0x67b0 [ 88.000350][ T4549] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 88.128809][ T4551] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.145541][ T4551] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.526448][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 88.637970][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 88.688923][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 88.769501][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 88.794945][ T4559] loop2: detected capacity change from 0 to 24 [ 88.837878][ T4559] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 88.848852][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 88.882636][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 88.901547][ T4559] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 88.930681][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 88.989639][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 89.039095][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 89.116772][ T4543] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 89.186421][ T4565] loop4: detected capacity change from 0 to 2048 [ 89.445377][ T4565] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.490262][ T4571] tipc: Started in network mode [ 89.496222][ T4571] tipc: Node identity 26611c241676, cluster identity 4711 [ 89.568959][ T4571] tipc: Enabled bearer , priority 0 [ 89.584074][ T4248] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.639756][ T4571] device syzkaller0 entered promiscuous mode [ 89.720761][ T4571] tipc: Resetting bearer [ 89.757708][ T4577] loop3: detected capacity change from 0 to 64 [ 89.796346][ T4570] tipc: Resetting bearer [ 89.818152][ T4538] loop0: detected capacity change from 0 to 32768 [ 89.868986][ T4248] usb 2-1: Using ep0 maxpacket: 8 [ 89.887201][ T4570] tipc: Disabling bearer [ 89.999043][ T4248] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 90.413552][ T4581] loop3: detected capacity change from 0 to 32768 [ 90.440578][ T4583] loop4: detected capacity change from 0 to 32768 [ 90.460508][ T4248] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 90.487183][ T4583] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.72 (4583) [ 90.526924][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.605460][ T4248] usb 2-1: Product: syz [ 90.648760][ T4248] usb 2-1: Manufacturer: syz [ 90.673756][ T4248] usb 2-1: SerialNumber: syz [ 90.738030][ T4583] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 90.748358][ T4583] BTRFS info (device loop4): enabling disk space caching [ 90.756127][ T4583] BTRFS info (device loop4): disabling tree log [ 90.762734][ T4583] BTRFS info (device loop4): setting nodatasum [ 90.770072][ T4583] BTRFS info (device loop4): turning off barriers [ 90.778902][ T4583] BTRFS info (device loop4): turning on flush-on-commit [ 90.786615][ T4583] BTRFS info (device loop4): doing ref verification [ 90.793961][ T4583] BTRFS info (device loop4): force clearing of disk cache [ 90.801687][ T4583] BTRFS info (device loop4): enabling ssd optimizations [ 90.809443][ T4583] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 90.812638][ T4248] usb 2-1: config 0 descriptor?? [ 90.827024][ T4583] BTRFS info (device loop4): use lzo compression, level 0 [ 90.834841][ T4583] BTRFS info (device loop4): disk space caching is enabled [ 90.842393][ T4583] BTRFS info (device loop4): has skinny extents [ 90.942855][ T4591] loop2: detected capacity change from 0 to 128 [ 91.713515][ T4248] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 91.713587][ T4591] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.756311][ T4591] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.839091][ T4248] usb 2-1: setting power ON [ 91.846086][ T4248] dvb-usb: bulk message failed: -22 (2/0) [ 92.116178][ T4583] BTRFS info (device loop4): clearing free space tree [ 92.124386][ T4583] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.136322][ T4583] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.233801][ T26] audit: type=1800 audit(1755913099.113:4): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.72" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 92.262489][ T4248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.359268][ T4248] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 92.398817][ T4248] usb 2-1: media controller created [ 92.459068][ T4248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.610925][ T4248] usb 2-1: selecting invalid altsetting 6 [ 92.618660][ T4248] usb 2-1: digital interface selection failed (-22) [ 92.691537][ T4628] mmap: syz.2.83 (4628) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 92.728323][ T4625] loop1: detected capacity change from 0 to 512 [ 92.770019][ T4248] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 92.859264][ T4248] usb 2-1: setting power OFF [ 92.865949][ T4248] dvb-usb: bulk message failed: -22 (2/0) [ 93.001476][ T4625] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.81: bad orphan inode 15 [ 93.116848][ T4625] ext4_test_bit(bit=14, block=5) = 0 [ 93.169527][ T4635] tipc: Started in network mode [ 93.205479][ T4628] loop2: detected capacity change from 0 to 40427 [ 93.205686][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 93.215035][ T4248] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 93.267738][ T4248] (NULL device *): no alternate interface [ 93.274607][ T4635] tipc: Node identity fe723ade7d92, cluster identity 4711 [ 93.313177][ T4635] tipc: Enabled bearer , priority 0 [ 93.330402][ T4628] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 93.343031][ T4628] F2FS-fs (loop2): Encrypt feature is off [ 93.352896][ T4625] EXT4-fs error (device loop1): __ext4_new_inode:1076: comm syz.1.81: reserved inode found cleared - inode=1 [ 93.476792][ T4635] tipc: Resetting bearer [ 93.547525][ T4248] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 93.559200][ T4638] device syzkaller0 entered promiscuous mode [ 93.563701][ T4643] loop4: detected capacity change from 0 to 2048 [ 93.619420][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 93.639030][ T4248] usb 2-1: USB disconnect, device number 3 [ 93.742006][ T4632] tipc: Resetting bearer [ 93.797516][ T4632] tipc: Disabling bearer [ 93.797885][ T4643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.914890][ T4600] loop0: detected capacity change from 0 to 40427 [ 94.129932][ T4600] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 94.179168][ T4600] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.243371][ T4660] loop1: detected capacity change from 0 to 128 [ 94.661996][ T4660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.676013][ T4660] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.006877][ T4600] F2FS-fs (loop0): invalid crc value [ 95.049158][ T4600] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 95.623139][ T4668] loop1: detected capacity change from 0 to 8192 [ 95.631390][ T4684] netlink: 'syz.0.99': attribute type 2 has an invalid length. [ 95.730438][ T4650] loop2: detected capacity change from 0 to 32768 [ 95.744894][ T4668] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.766297][ T4689] tipc: Started in network mode [ 95.773029][ T4689] tipc: Node identity 7ad0ae81ea47, cluster identity 4711 [ 95.817395][ T26] audit: type=1800 audit(1755913102.713:5): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 95.820147][ T4689] tipc: Enabled bearer , priority 0 [ 95.849326][ T26] audit: type=1800 audit(1755913102.713:6): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 95.886400][ T4693] device syzkaller0 entered promiscuous mode [ 96.005706][ T4689] tipc: Resetting bearer [ 96.102698][ T4696] loop1: detected capacity change from 0 to 2048 [ 96.122496][ T4688] tipc: Resetting bearer [ 96.216150][ T4698] loop0: detected capacity change from 0 to 128 [ 96.232238][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.835578][ T4696] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.965551][ T4248] tipc: Node number set to 2425859713 [ 96.969202][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 96.972147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 97.006287][ T4688] tipc: Disabling bearer [ 97.017290][ T4698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.031833][ T4698] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.257329][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 97.408723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 97.422793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 97.433502][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.444379][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.454261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.464246][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.473870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.483500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 97.597503][ T4704] loop4: detected capacity change from 0 to 32768 [ 97.649669][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.668561][ T1111] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 97.691804][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.703951][ T4704] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.713599][ T4704] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.734192][ T1111] usb 4-1: config 0 descriptor?? [ 97.752049][ T4704] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 97.752049][ T4704] inode = 1 19 [ 97.752049][ T4704] function = gfs2_check_internal_file_size, file = fs/gfs2/inode.h, line = 87 [ 97.780137][ T4704] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 97.791741][ T4704] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 97.804753][ T4704] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 97.817061][ T4704] gfs2: fsid=syz:syz.s: File system withdrawn [ 97.826932][ T4704] CPU: 1 PID: 4704 Comm: syz.4.107 Not tainted 5.15.189-syzkaller #0 [ 97.841931][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.856849][ T4704] Call Trace: [ 97.862918][ T4704] [ 97.867090][ T4704] dump_stack_lvl+0x168/0x230 [ 97.875241][ T4704] ? kobject_uevent_env+0x371/0x890 [ 97.883191][ T4704] ? show_regs_print_info+0x20/0x20 [ 97.890518][ T4704] ? load_image+0x3b0/0x3b0 [ 97.896208][ T4704] ? kobject_uevent_env+0x371/0x890 [ 97.901521][ T4704] gfs2_withdraw+0x111b/0x1460 [ 97.907957][ T4704] ? gfs2_lm+0x220/0x220 [ 97.914135][ T4704] ? _raw_spin_unlock+0x24/0x40 [ 97.920870][ T4704] ? gfs2_glock_nq+0xcb0/0x1550 [ 97.926632][ T4704] ? gfs2_consist_inode_i+0xc0/0xe0 [ 97.934653][ T4704] gfs2_jdesc_check+0x137/0x290 [ 97.940372][ T4704] ? check_journal_clean+0x121/0x300 [ 97.946949][ T4704] check_journal_clean+0x151/0x300 [ 97.952554][ T4704] ? gfs2_trans_remove_revoke+0x370/0x370 [ 97.959623][ T4704] ? check_journal_clean+0x10d/0x300 [ 97.966552][ T4704] ? __rwlock_init+0x140/0x140 [ 97.973039][ T4704] ? do_raw_spin_unlock+0x11d/0x230 [ 97.979114][ T4704] ? _raw_spin_unlock+0x24/0x40 [ 97.987543][ T4704] ? gfs2_jdesc_find+0xa7/0xc0 [ 97.993956][ T4704] init_journal+0x179c/0x2220 [ 97.999593][ T4704] ? end_bio_io_page+0x100/0x100 [ 98.005198][ T4704] ? vsnprintf+0x1905/0x1a00 [ 98.011752][ T4704] ? snprintf+0xd7/0x120 [ 98.016298][ T4704] ? init_journal+0x710/0x2220 [ 98.021253][ T4704] ? vscnprintf+0x80/0x80 [ 98.026333][ T4704] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 98.031987][ T4704] init_inodes+0xdb/0x320 [ 98.036883][ T4704] gfs2_fill_super+0x1701/0x1f50 [ 98.043198][ T4704] ? gfs2_reconfigure+0xcd0/0xcd0 [ 98.049418][ T4704] ? gfs2_glock_nq_num+0x82/0x1b0 [ 98.055402][ T4704] ? preempt_count_add+0x8d/0x190 [ 98.063218][ T4704] ? sb_set_blocksize+0xa5/0xe0 [ 98.070347][ T4704] get_tree_bdev+0x3f1/0x610 [ 98.076635][ T4704] ? gfs2_reconfigure+0xcd0/0xcd0 [ 98.085313][ T4704] gfs2_get_tree+0x4d/0x1e0 [ 98.094992][ T4704] vfs_get_tree+0x88/0x270 [ 98.103523][ T4704] do_new_mount+0x24a/0xa40 [ 98.110055][ T4704] __se_sys_mount+0x2d6/0x3c0 [ 98.115708][ T4704] ? __x64_sys_mount+0xc0/0xc0 [ 98.121196][ T4704] ? lockdep_hardirqs_on+0x94/0x140 [ 98.128219][ T4704] ? __x64_sys_mount+0x1c/0xc0 [ 98.134226][ T4704] do_syscall_64+0x4c/0xa0 [ 98.139890][ T4704] ? clear_bhb_loop+0x30/0x80 [ 98.145071][ T4704] ? clear_bhb_loop+0x30/0x80 [ 98.150190][ T4704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.159030][ T4704] RIP: 0033:0x7f1f7762138a [ 98.164295][ T4704] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.190340][ T4704] RSP: 002b:00007f1f75886e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.204012][ T4704] RAX: ffffffffffffffda RBX: 00007f1f75886ef0 RCX: 00007f1f7762138a [ 98.218293][ T4704] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f1f75886eb0 [ 98.228778][ T4704] RBP: 0000200000000400 R08: 00007f1f75886ef0 R09: 0000000000200001 [ 98.237927][ T4704] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 98.251107][ T4704] R13: 00007f1f75886eb0 R14: 0000000000012608 R15: 0000200000000440 [ 98.265210][ T4704] [ 98.272178][ T4704] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 98.359376][ T1111] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 98.422908][ T4708] loop1: detected capacity change from 0 to 512 [ 98.493353][ T4708] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 98.512730][ T4708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 98.525852][ T4708] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.535649][ T4708] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #13: comm syz.1.108: iget: bad i_size value: 12154761577498 [ 98.572738][ T4708] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.108: couldn't read orphan inode 13 (err -117) [ 98.611228][ T3546] bcm5974 4-1:0.0: could not read from device [ 98.652372][ T4708] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 98.729075][ T1111] bcm5974 4-1:0.0: could not read from device [ 98.803602][ T4708] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.108: dx entry: limit 65535 != root limit 120 [ 98.820716][ T3546] bcm5974 4-1:0.0: could not read from device [ 98.855950][ T1111] input: failed to attach handler mousedev to device input5, error: -5 [ 98.898928][ T4708] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.108: Corrupt directory, running e2fsck is recommended [ 98.899070][ T1111] usb 4-1: USB disconnect, device number 3 [ 98.915747][ T3546] bcm5974 4-1:0.0: could not read from device [ 98.955185][ T4720] loop4: detected capacity change from 0 to 1764 [ 98.982467][ T3546] bcm5974 4-1:0.0: could not read from device [ 99.005190][ T4722] loop2: detected capacity change from 0 to 512 [ 99.126659][ T4722] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.197833][ T4722] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.233058][ T26] audit: type=1326 audit(1755913106.133:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4725 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160c68be9 code=0x7ffc0000 [ 99.352595][ T4722] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.559383][ T4722] EXT4-fs (loop2): 1 truncate cleaned up [ 99.568662][ T4722] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,max_dir_size_kb=0x0000000000000003,quota,,errors=continue. Quota mode: writeback. [ 99.607421][ T26] audit: type=1326 audit(1755913106.193:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4725 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fd160c68be9 code=0x7ffc0000 [ 99.727513][ T4736] loop1: detected capacity change from 0 to 128 [ 99.979821][ T4736] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.991800][ T4736] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.294042][ T4735] tipc: Enabled bearer , priority 0 [ 100.402112][ T4739] device syzkaller0 entered promiscuous mode [ 100.433719][ T26] audit: type=1326 audit(1755913106.193:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4725 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160c68be9 code=0x7ffc0000 [ 100.499075][ T4728] loop4: detected capacity change from 0 to 32768 [ 100.507411][ T26] audit: type=1326 audit(1755913106.193:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4725 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd160c68be9 code=0x7ffc0000 [ 100.508146][ T4740] loop0: detected capacity change from 0 to 2048 [ 100.543792][ T4735] tipc: Resetting bearer [ 100.565126][ T4733] tipc: Resetting bearer [ 100.595854][ T4733] tipc: Disabling bearer [ 100.651652][ T4740] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.735123][ T4255] hid-generic 0003:04BD:0003.0001: item fetching failed at offset 2/5 [ 100.746323][ T4255] hid-generic: probe of 0003:04BD:0003.0001 failed with error -22 [ 100.889098][ T4750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 101.042077][ T4753] loop3: detected capacity change from 0 to 2048 [ 101.185268][ T4759] loop0: detected capacity change from 0 to 16 [ 101.294659][ T4759] erofs: (device loop0): mounted with root inode @ nid 36. [ 101.677523][ T4769] tipc: Enabled bearer , priority 0 [ 101.772900][ T4774] loop2: detected capacity change from 0 to 128 [ 101.990933][ T4769] device syzkaller0 entered promiscuous mode [ 102.448315][ T4766] tipc: Resetting bearer [ 102.534228][ T4774] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.547269][ T4774] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.597514][ T4766] tipc: Disabling bearer [ 102.632186][ T4768] binder: 4767:4768 unknown command 1074553619 [ 102.658811][ T4768] binder: 4767:4768 ioctl c0306201 200000000540 returned -22 [ 102.768271][ T4787] loop1: detected capacity change from 0 to 2048 [ 102.919324][ T4787] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.937321][ T4794] loop3: detected capacity change from 0 to 1024 [ 102.998059][ T4801] loop2: detected capacity change from 0 to 64 [ 102.998398][ T4798] fuse: root generation should be zero [ 103.147574][ T4794] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.199996][ T4794] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.242933][ T26] audit: type=1800 audit(1755913110.143:11): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 103.246670][ T4806] loop4: detected capacity change from 0 to 512 [ 103.264999][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.280660][ T4794] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.140: lblock 0 mapped to illegal pblock 0 (length 6) [ 103.319797][ T4794] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.140: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 103.372396][ T4806] EXT4-fs (loop4): inline encryption not supported [ 103.378080][ T4809] syz.2.143 uses obsolete (PF_INET,SOCK_PACKET) [ 103.413797][ T4792] loop0: detected capacity change from 0 to 32768 [ 103.686572][ T4806] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,inlinecrypt,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 103.718904][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.802048][ T4813] loop3: detected capacity change from 0 to 4096 [ 103.811315][ T4806] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.882500][ T4813] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 104.106220][ T4822] tipc: Enabled bearer , priority 0 [ 104.168111][ T4822] device syzkaller0 entered promiscuous mode [ 104.332154][ T4828] loop1: detected capacity change from 0 to 4096 [ 104.840542][ T4832] loop4: detected capacity change from 0 to 40427 [ 105.005377][ T4834] loop2: detected capacity change from 0 to 128 [ 105.524387][ T1108] tipc: Node number set to 84417896 [ 105.529715][ T4828] ntfs3: Unknown parameter 'windows_names' [ 105.532721][ T4820] tipc: Resetting bearer [ 105.555434][ T4832] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x1ffff [ 105.607180][ T4820] tipc: Disabling bearer [ 105.626301][ T4834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.638230][ T4834] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.646071][ T4842] loop3: detected capacity change from 0 to 2048 [ 105.804076][ T4832] loop4: detected capacity change from 0 to 256 [ 105.823066][ T4842] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.061289][ T4847] loop0: detected capacity change from 0 to 32768 [ 106.196998][ T4832] FAT-fs (loop4): Directory bread(block 64) failed [ 106.207258][ T4832] FAT-fs (loop4): Directory bread(block 65) failed [ 106.217447][ T4832] FAT-fs (loop4): Directory bread(block 66) failed [ 106.227676][ T4832] FAT-fs (loop4): Directory bread(block 67) failed [ 106.232046][ T4852] loop1: detected capacity change from 0 to 256 [ 106.236696][ T4832] FAT-fs (loop4): Directory bread(block 68) failed [ 106.253255][ T4832] FAT-fs (loop4): Directory bread(block 69) failed [ 106.262041][ T4832] FAT-fs (loop4): Directory bread(block 70) failed [ 106.269248][ T4832] FAT-fs (loop4): Directory bread(block 71) failed [ 106.280499][ T4832] FAT-fs (loop4): Directory bread(block 72) failed [ 106.288862][ T4832] FAT-fs (loop4): Directory bread(block 73) failed [ 106.346003][ T4847] XFS (loop0): Mounting V5 Filesystem [ 106.446919][ T4847] XFS (loop0): Ending clean mount [ 106.461026][ T4847] XFS (loop0): Quotacheck needed: Please wait. [ 106.479567][ T4852] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.580851][ T4864] loop2: detected capacity change from 0 to 128 [ 106.592911][ T4852] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.671771][ T4847] XFS (loop0): Quotacheck: Done. [ 106.862363][ T4183] XFS (loop0): Unmounting Filesystem [ 107.056650][ T4869] loop3: detected capacity change from 0 to 4096 [ 107.163239][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 107.214095][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 107.249721][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 107.306365][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 107.368322][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 107.427538][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 107.444214][ T4873] loop2: detected capacity change from 0 to 32768 [ 107.461657][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 107.470745][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 107.479039][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 107.487675][ T4869] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 107.516291][ T4873] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.527553][ T4873] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.536232][ T4380] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.582823][ T4873] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 107.639213][ T4873] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 107.954041][ T4866] loop4: detected capacity change from 0 to 32768 [ 107.960223][ T4879] tipc: Enabled bearer , priority 0 [ 108.004887][ T4879] device syzkaller0 entered promiscuous mode [ 108.078181][ T4878] tipc: Resetting bearer [ 108.160036][ T4878] tipc: Disabling bearer [ 108.189214][ T4380] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 108.225813][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.252995][ T4380] usb 2-1: Product: syz [ 108.259230][ T4380] usb 2-1: Manufacturer: syz [ 108.285937][ T4380] usb 2-1: SerialNumber: syz [ 108.708879][ T4889] loop2: detected capacity change from 0 to 128 [ 109.117128][ T4889] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.135441][ T4889] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.410670][ T4380] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 109.428370][ T4380] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 109.465391][ T4380] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 109.520535][ T4380] lan78xx: probe of 2-1:1.0 failed with error -32 [ 109.548844][ T4893] loop2: detected capacity change from 0 to 2048 [ 109.671634][ T4893] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.706691][ T4904] binder: 4903:4904 unknown command 0 [ 109.717392][ T4904] binder: 4903:4904 ioctl c0306201 200000000080 returned -22 [ 110.005591][ T4920] tipc: Enabled bearer , priority 0 [ 110.028065][ T4920] device syzkaller0 entered promiscuous mode [ 110.042828][ T4917] tipc: Resetting bearer [ 110.088304][ T4917] tipc: Disabling bearer [ 110.494441][ T4380] usb 2-1: USB disconnect, device number 4 [ 110.671273][ T4938] loop3: detected capacity change from 0 to 128 [ 110.952070][ T4938] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.965578][ T4938] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.438604][ T4199] Bluetooth: Unexpected continuation frame (len 10) [ 111.532747][ T4927] loop4: detected capacity change from 0 to 32768 [ 111.597250][ T4948] overlayfs: missing 'lowerdir' [ 111.805945][ T4958] tipc: Enabled bearer , priority 0 [ 111.852534][ T4958] device syzkaller0 entered promiscuous mode [ 111.923764][ T4957] tipc: Resetting bearer [ 112.044993][ T4957] tipc: Disabling bearer [ 112.060032][ T4964] loop1: detected capacity change from 0 to 2048 [ 112.087876][ T4965] device bridge0 entered promiscuous mode [ 112.109443][ T4965] device vlan2 entered promiscuous mode [ 112.181723][ T4964] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.516308][ T4971] loop2: detected capacity change from 0 to 32768 [ 112.757304][ T4981] loop4: detected capacity change from 0 to 128 [ 112.937363][ T4981] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.951782][ T4981] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.082958][ T4971] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 113.386917][ T4380] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.536807][ T4990] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 113.563652][ T4990] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.203'. [ 113.613053][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 113.819487][ T4380] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.838878][ T4380] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.845172][ T4999] loop2: detected capacity change from 0 to 512 [ 113.864979][ T4380] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.887840][ T4380] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.998461][ T5004] tipc: Enabled bearer , priority 0 [ 114.047793][ T5004] device syzkaller0 entered promiscuous mode [ 114.106113][ T5003] tipc: Resetting bearer [ 114.120354][ T4380] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.135821][ T4380] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.136737][ T4999] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodelalloc,data_err=ignore,,errors=continue. Quota mode: none. [ 114.147616][ T4380] usb 4-1: Product: syz [ 114.175493][ T4380] usb 4-1: Manufacturer: syz [ 114.242140][ T5003] tipc: Disabling bearer [ 114.250397][ T4380] cdc_wdm 4-1:1.0: skipping garbage [ 114.258938][ T4380] cdc_wdm 4-1:1.0: skipping garbage [ 114.283551][ T4380] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 114.292117][ T4380] cdc_wdm 4-1:1.0: Unknown control protocol [ 114.307244][ T4999] overlayfs: failed to resolve './bus': -2 [ 114.516202][ T4380] usb 4-1: USB disconnect, device number 4 [ 114.631941][ T5020] loop0: detected capacity change from 0 to 2048 [ 114.713558][ T4996] loop4: detected capacity change from 0 to 32768 [ 115.321153][ T5024] loop1: detected capacity change from 0 to 128 [ 115.992579][ T5020] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.040651][ T5023] loop2: detected capacity change from 0 to 40427 [ 116.108186][ T5023] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 116.169254][ T5024] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.183083][ T5024] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.288813][ T4380] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.799143][ T4380] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.812503][ T5048] tipc: Enabled bearer , priority 0 [ 116.829293][ T5054] loop4: detected capacity change from 0 to 8 [ 116.854765][ T5048] device syzkaller0 entered promiscuous mode [ 116.857049][ T4380] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.883887][ T5045] tipc: Resetting bearer [ 116.915425][ T4380] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.998743][ T4380] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.017892][ T5045] tipc: Disabling bearer [ 117.062026][ T5049] loop1: detected capacity change from 0 to 4096 [ 117.079141][ T4380] usb 4-1: string descriptor 0 read error: -71 [ 117.087192][ T4380] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.132977][ T4380] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.177688][ T5058] loop3: detected capacity change from 0 to 2048 [ 117.217796][ T4380] usb 4-1: can't set config #1, error -71 [ 117.306019][ T4380] usb 4-1: USB disconnect, device number 5 [ 117.378393][ T5058] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.789912][ T5068] loop1: detected capacity change from 0 to 32768 [ 118.056543][ T5072] loop4: detected capacity change from 0 to 128 [ 118.265650][ T5086] loop2: detected capacity change from 0 to 164 [ 118.417374][ T5068] XFS (loop1): Mounting V5 Filesystem [ 118.439932][ T5072] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.454466][ T5060] loop0: detected capacity change from 0 to 32768 [ 118.466414][ T5072] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.541784][ T5068] XFS (loop1): Ending clean mount [ 118.550895][ T5068] XFS (loop1): Quotacheck needed: Please wait. [ 118.772993][ T5068] XFS (loop1): Quotacheck: Done. [ 118.790498][ T26] audit: type=1800 audit(1755913125.693:12): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.230" name="bus" dev="loop1" ino=6154 res=0 errno=0 [ 118.913648][ T4185] XFS (loop1): Unmounting Filesystem [ 119.053641][ T5098] loop4: detected capacity change from 0 to 1024 [ 119.095599][ T5100] tipc: Enabled bearer , priority 0 [ 119.174265][ T5098] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,jqfmt=vfsold,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 119.183059][ T5100] tipc: Resetting bearer [ 119.255579][ T5099] tipc: Disabling bearer [ 119.554277][ T5110] loop2: detected capacity change from 0 to 2048 [ 119.581253][ T5112] loop4: detected capacity change from 0 to 128 [ 119.670075][ T5112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 119.689040][ T5112] System zones: 1-3, 19-19, 35-36 [ 119.696041][ T5112] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 119.709772][ T5116] loop3: detected capacity change from 0 to 512 [ 119.745828][ T5112] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.847266][ T5110] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.859674][ T5112] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 2164540478 (only 1 groups) [ 119.934886][ T5116] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 119.963092][ T5116] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.310837][ T5135] loop0: detected capacity change from 0 to 128 [ 120.626203][ T5135] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.639202][ T5135] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.193017][ T5145] tipc: Enabled bearer , priority 0 [ 121.264343][ T5145] tipc: Resetting bearer [ 121.364267][ T5141] loop3: detected capacity change from 0 to 40427 [ 121.380346][ T5144] tipc: Disabling bearer [ 121.427232][ T5141] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 121.436513][ T5141] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.447924][ T5141] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 121.460221][ T5141] F2FS-fs (loop3): invalid crc value [ 121.477810][ T5141] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.547761][ T5141] F2FS-fs (loop3): Start checkpoint disabled! [ 121.594171][ T5141] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.604744][ T5141] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 121.726553][ T5157] netlink: 104 bytes leftover after parsing attributes in process `syz.0.252'. [ 121.738454][ T5160] loop1: detected capacity change from 0 to 2048 [ 121.899304][ T5162] loop4: detected capacity change from 0 to 256 [ 121.912994][ T5160] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 121.944116][ T5169] loop0: detected capacity change from 0 to 2048 [ 121.959464][ T5162] exfat: Deprecated parameter 'utf8' [ 121.971575][ T5162] exfat: Deprecated parameter 'namecase' [ 122.019055][ T5160] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.257: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 122.076708][ T5162] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 122.096910][ T5169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.113493][ T5160] EXT4-fs (loop1): Remounting filesystem read-only [ 122.619989][ T5159] loop2: detected capacity change from 0 to 32768 [ 122.659315][ T4226] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.018020][ T5188] loop3: detected capacity change from 0 to 128 [ 123.068851][ T4226] usb 2-1: Using ep0 maxpacket: 8 [ 123.759056][ T4226] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 123.787968][ T5188] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.800522][ T5188] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.951712][ T4226] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 124.014477][ T5196] tipc: Enabled bearer , priority 0 [ 124.065808][ T4226] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 124.077085][ T4226] usb 2-1: Product: syz [ 124.082328][ T4226] usb 2-1: Manufacturer: syz [ 124.083741][ T5196] tipc: Resetting bearer [ 124.087832][ T4226] usb 2-1: SerialNumber: syz [ 124.110095][ T4226] usb 2-1: config 0 descriptor?? [ 124.133616][ T5194] tipc: Disabling bearer [ 124.176254][ T5199] loop3: detected capacity change from 0 to 512 [ 124.205384][ T5197] loop2: detected capacity change from 0 to 4096 [ 124.334857][ T5200] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.371094][ T4226] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 124.417151][ T26] audit: type=1800 audit(1755913131.313:13): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.267" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 124.893179][ T5207] loop0: detected capacity change from 0 to 40427 [ 124.908508][ T5214] loop4: detected capacity change from 0 to 2048 [ 124.942098][ T5207] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 125.043206][ T5221] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.151248][ T5214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.229317][ T5219] loop2: detected capacity change from 0 to 32768 [ 125.434040][ T5229] tipc: Enabled bearer , priority 0 [ 125.459801][ T5229] device syzkaller0 entered promiscuous mode [ 125.492185][ T5229] tipc: Resetting bearer [ 125.514162][ T5227] tipc: Resetting bearer [ 125.600015][ T5227] tipc: Disabling bearer [ 125.892263][ T5232] loop2: detected capacity change from 0 to 128 [ 126.050101][ T4226] gspca_sunplus: reg_r err -71 [ 126.055740][ T4226] sunplus: probe of 2-1:0.0 failed with error -71 [ 126.130255][ T5232] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.144460][ T5232] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.409169][ T4226] usb 2-1: USB disconnect, device number 5 [ 126.686310][ T5240] loop2: detected capacity change from 0 to 512 [ 126.798829][ T5240] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 126.851325][ T5246] loop4: detected capacity change from 0 to 1024 [ 126.859187][ T5240] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.934909][ T5240] EXT4-fs (loop2): 1 truncate cleaned up [ 127.035049][ T5225] loop0: detected capacity change from 0 to 32768 [ 127.043121][ T5240] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 127.200782][ T5246] EXT4-fs (loop4): Ignoring removed bh option [ 127.201430][ T5252] loop3: detected capacity change from 0 to 32768 [ 127.235124][ T5246] EXT4-fs (loop4): inline encryption not supported [ 127.319160][ T5246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e018, mo2=0001] [ 127.353231][ T5246] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.286: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 127.353574][ T5246] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.286: couldn't read orphan inode 11 (err -117) [ 127.353752][ T5246] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 127.504627][ T5261] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 127.601180][ T5263] device syzkaller0 entered promiscuous mode [ 127.996831][ T5272] loop4: detected capacity change from 0 to 128 [ 128.249759][ T5272] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.263717][ T5272] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.708434][ T5280] Zero length message leads to an empty skb [ 128.900726][ T5285] loop0: detected capacity change from 0 to 2048 [ 129.068330][ T5285] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.246951][ T5299] loop3: detected capacity change from 0 to 736 [ 129.365823][ T5301] loop4: detected capacity change from 0 to 128 [ 129.665138][ T5303] loop1: detected capacity change from 0 to 32768 [ 129.718904][ T5283] loop2: detected capacity change from 0 to 32768 [ 129.771835][ T5303] (syz.1.306,5303,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.790357][ T5303] (syz.1.306,5303,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.870992][ T5306] loop3: detected capacity change from 0 to 32768 [ 129.882355][ T5303] JBD2: Ignoring recovery information on journal [ 129.924188][ T5301] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 130.002833][ T5301] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.025467][ T5306] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 130.048723][ T5303] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.094713][ T5303] (syz.1.306,5303,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 130.430289][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 130.672160][ T5320] loop0: detected capacity change from 0 to 128 [ 131.215293][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 131.373386][ T5320] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.389600][ T5320] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.444558][ T5323] device syzkaller0 entered promiscuous mode [ 131.477819][ T5329] loop1: detected capacity change from 0 to 1024 [ 131.670262][ T5329] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 131.755927][ T5329] EXT4-fs error (device loop1): ext4_get_journal_inode:5158: inode #32: comm syz.1.314: iget: special inode unallocated [ 131.893485][ T5339] loop3: detected capacity change from 0 to 2048 [ 131.935196][ T5329] EXT4-fs (loop1): no journal found [ 131.998483][ T5329] EXT4-fs (loop1): can't get journal size [ 132.037225][ T5329] EXT4-fs (loop1): filesystem is read-only [ 132.078987][ T5329] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 132.094160][ T5339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.291675][ T4380] hid-generic 0003:04BD:0003.0002: item fetching failed at offset 2/5 [ 132.325852][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.350237][ T4380] hid-generic: probe of 0003:04BD:0003.0002 failed with error -22 [ 132.408918][ T4184] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.739659][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.765926][ T5343] loop0: detected capacity change from 0 to 32768 [ 132.800398][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.841597][ T4184] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 132.874130][ T1108] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 132.888727][ T4184] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.914762][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.923723][ T4184] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.951224][ T4184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.994650][ T1108] usb 5-1: config 0 descriptor?? [ 133.004051][ T4184] usb 3-1: config 0 descriptor?? [ 133.072915][ T5365] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 133.076304][ T4184] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 133.080928][ T5365] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 133.091853][ T5367] loop1: detected capacity change from 0 to 512 [ 133.234980][ T5370] loop3: detected capacity change from 0 to 128 [ 133.351570][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.375035][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.540078][ T5370] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.553716][ T5370] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.956576][ T5365] vhci_hcd vhci_hcd.0: Device attached [ 134.062367][ T1108] usbhid 5-1:0.0: can't add hid device: -71 [ 134.088864][ T1108] usbhid: probe of 5-1:0.0 failed with error -71 [ 134.111786][ T5367] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.139902][ T1108] usb 5-1: USB disconnect, device number 2 [ 134.162111][ T5376] device syzkaller0 entered promiscuous mode [ 134.198910][ T4637] vhci_hcd: vhci_device speed not set [ 134.262827][ T5367] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.329: invalid indirect mapped block 4294967295 (level 0) [ 134.298961][ T4637] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 134.358305][ T5367] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.329: invalid indirect mapped block 4294967295 (level 1) [ 134.388469][ T5367] EXT4-fs (loop1): 1 orphan inode deleted [ 134.397904][ T5367] EXT4-fs (loop1): 1 truncate cleaned up [ 134.410210][ T5367] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.542866][ T5366] vhci_hcd: connection reset by peer [ 134.579387][ T4556] vhci_hcd: stop threads [ 134.605330][ T4556] vhci_hcd: release socket [ 134.622573][ T4556] vhci_hcd: disconnect device [ 134.681238][ T5389] loop3: detected capacity change from 0 to 2048 [ 134.698607][ T1108] usb 3-1: USB disconnect, device number 3 [ 134.742761][ T5394] loop2: detected capacity change from 0 to 512 [ 134.777257][ T5389] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.798639][ T5400] loop4: detected capacity change from 0 to 128 [ 134.817519][ T5394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.338: bg 0: block 248: padding at end of block bitmap is not set [ 134.855135][ T5394] Quota error (device loop2): write_blk: dquota write failed [ 134.867900][ T5394] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 134.886419][ T5394] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.338: Failed to acquire dquot type 1 [ 134.911070][ T5394] EXT4-fs (loop2): 1 truncate cleaned up [ 134.919112][ T5394] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.923383][ T5400] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.959006][ T5394] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.019112][ T5400] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.256091][ T5400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.339: bg 0: bad block bitmap checksum [ 135.513782][ T5408] loop0: detected capacity change from 0 to 128 [ 135.793406][ T5408] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.805364][ T5408] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.686859][ T5417] loop3: detected capacity change from 0 to 32768 [ 136.778933][ T5417] (syz.3.344,5417,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.824507][ T5417] (syz.3.344,5417,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.910341][ T5417] JBD2: Ignoring recovery information on journal [ 136.930352][ T5406] loop2: detected capacity change from 0 to 32768 [ 136.977810][ T5417] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.019142][ T5417] (syz.3.344,5417,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 137.110319][ T5434] loop0: detected capacity change from 0 to 512 [ 137.165873][ T5417] (syz.3.344,5417,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 137.188414][ T5417] (syz.3.344,5417,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 137.202427][ T5417] (syz.3.344,5417,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 137.216697][ T5417] (syz.3.344,5417,0):ocfs2_quota_read:201 ERROR: status = -5 [ 137.226163][ T5417] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 137.238549][ T5417] (syz.3.344,5417,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 137.315001][ T5435] (syz.3.344,5435,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 137.377685][ T5435] (syz.3.344,5435,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 137.511538][ T5434] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,block_validity,,errors=continue. Quota mode: writeback. [ 137.540152][ T5435] (syz.3.344,5435,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 137.560126][ T5435] (syz.3.344,5435,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 137.575603][ T5435] (syz.3.344,5435,1):ocfs2_quota_read:201 ERROR: status = -5 [ 137.584286][ T5435] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 137.596629][ T5435] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 137.615197][ T5435] (syz.3.344,5435,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 137.630218][ T5434] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.740194][ T5434] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #12: comm syz.0.351: corrupted xattr block 6 [ 137.760586][ T5435] (syz.3.344,5435,1):ocfs2_mknod:314 ERROR: status = -5 [ 137.800971][ T5435] (syz.3.344,5435,1):ocfs2_mknod:502 ERROR: status = -5 [ 137.869182][ T5435] (syz.3.344,5435,1):ocfs2_create:676 ERROR: status = -5 [ 137.884954][ T5447] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.908407][ T5446] loop2: detected capacity change from 0 to 4096 [ 137.932881][ T5444] loop1: detected capacity change from 0 to 2048 [ 138.052350][ T5444] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.060569][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 138.114068][ T5455] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.409233][ T4199] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 138.409492][ T4199] ================================================================== [ 138.429242][ T4199] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 138.438817][ T4199] Read of size 1 at addr ffff888078b45c01 by task kworker/u5:7/4199 [ 138.450416][ T4199] [ 138.453331][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:7 Not tainted 5.15.189-syzkaller #0 [ 138.462733][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.474327][ T4199] Workqueue: hci1 hci_rx_work [ 138.479397][ T4199] Call Trace: [ 138.482797][ T4199] [ 138.486011][ T4199] dump_stack_lvl+0x168/0x230 [ 138.491348][ T4199] ? show_regs_print_info+0x20/0x20 [ 138.496938][ T4199] ? load_image+0x3b0/0x3b0 [ 138.501885][ T4199] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 138.507824][ T4199] print_address_description+0x60/0x2d0 [ 138.515014][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 138.521470][ T4199] kasan_report+0xdf/0x130 [ 138.526636][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 138.533560][ T4199] hci_le_meta_evt+0x12db/0x3b80 [ 138.539587][ T4199] ? hci_event_packet+0x1f0/0x12f0 [ 138.546198][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 138.553117][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 138.559320][ T4199] ? mark_lock+0x94/0x320 [ 138.565379][ T4199] ? mutex_unlock+0x10/0x10 [ 138.570300][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 138.578441][ T4199] ? lock_chain_count+0x20/0x20 [ 138.583518][ T4199] ? __rwlock_init+0x140/0x140 [ 138.589021][ T4199] hci_event_packet+0xe05/0x12f0 [ 138.594737][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 138.601220][ T4199] ? rcu_lock_release+0x20/0x20 [ 138.606295][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 138.613302][ T4199] hci_rx_work+0x255/0xa10 [ 138.618816][ T4199] process_one_work+0x863/0x1000 [ 138.624566][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 138.631522][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 138.636918][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 138.643097][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 138.648920][ T4199] ? wq_worker_running+0x97/0x170 [ 138.654542][ T4199] worker_thread+0xaa8/0x12a0 [ 138.659539][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 138.666947][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 138.673094][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 138.680535][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.688082][ T4199] kthread+0x436/0x520 [ 138.692632][ T4199] ? rcu_lock_release+0x20/0x20 [ 138.698884][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 138.705274][ T4199] ret_from_fork+0x1f/0x30 [ 138.710066][ T4199] [ 138.713514][ T4199] [ 138.716415][ T4199] Allocated by task 5462: [ 138.721698][ T4199] __kasan_kmalloc+0xb5/0xf0 [ 138.727844][ T4199] __alloc_skb+0x22c/0x750 [ 138.734094][ T4199] vhci_write+0xbc/0x450 [ 138.740475][ T4199] vfs_write+0x712/0xd00 [ 138.746510][ T4199] ksys_write+0x14d/0x250 [ 138.752620][ T4199] do_syscall_64+0x4c/0xa0 [ 138.757731][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.765620][ T4199] [ 138.769900][ T4199] Last potentially related work creation: [ 138.777177][ T4199] kasan_save_stack+0x35/0x60 [ 138.782973][ T4199] kasan_record_aux_stack+0xb8/0x100 [ 138.789792][ T4199] kvfree_call_rcu+0x10a/0x7c0 [ 138.797890][ T4199] neigh_remove_one+0x4e8/0x5f0 [ 138.804072][ T4199] ___neigh_create+0x468/0x2250 [ 138.810164][ T4199] ip6_finish_output2+0xa01/0x1500 [ 138.817034][ T4199] ndisc_send_skb+0xbea/0x14a0 [ 138.823353][ T4199] addrconf_rs_timer+0x2b8/0x600 [ 138.829828][ T4199] call_timer_fn+0x16c/0x530 [ 138.834629][ T4199] __run_timers+0x525/0x7c0 [ 138.839964][ T4199] run_timer_softirq+0x63/0xf0 [ 138.845729][ T4199] handle_softirqs+0x328/0x820 [ 138.853917][ T4199] __irq_exit_rcu+0x12f/0x220 [ 138.859921][ T4199] irq_exit_rcu+0x5/0x20 [ 138.865629][ T4199] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 138.872452][ T4199] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.883131][ T4199] [ 138.887049][ T4199] The buggy address belongs to the object at ffff888078b45800 [ 138.887049][ T4199] which belongs to the cache kmalloc-1k of size 1024 [ 138.913736][ T4199] The buggy address is located 1 bytes to the right of [ 138.913736][ T4199] 1024-byte region [ffff888078b45800, ffff888078b45c00) [ 138.951705][ T4199] The buggy address belongs to the page: [ 138.961899][ T4199] page:ffffea0001e2d000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78b40 [ 138.980295][ T4199] head:ffffea0001e2d000 order:3 compound_mapcount:0 compound_pincount:0 [ 138.991652][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 139.002057][ T4199] raw: 00fff00000010200 0000000000000000 0000000f00000001 ffff888016841dc0 [ 139.015652][ T4199] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 139.030562][ T4199] page dumped because: kasan: bad access detected [ 139.039387][ T4199] page_owner tracks the page as allocated [ 139.049052][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3550, ts 72001636377, free_ts 71956068348 [ 139.072142][ T4199] get_page_from_freelist+0x1b77/0x1c60 [ 139.078980][ T4199] __alloc_pages+0x1e1/0x470 [ 139.084649][ T4199] new_slab+0xc0/0x4b0 [ 139.090367][ T4199] ___slab_alloc+0x81e/0xdf0 [ 139.096362][ T4199] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 139.103206][ T4199] syslog_print+0xd6/0x840 [ 139.110356][ T4199] do_syslog+0x7f2/0x8f0 [ 139.116714][ T4199] __x64_sys_syslog+0x78/0x90 [ 139.122639][ T4199] do_syscall_64+0x4c/0xa0 [ 139.128710][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.136931][ T4199] page last free stack trace: [ 139.143000][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 139.149661][ T4199] free_unref_page+0x94/0x280 [ 139.155227][ T4199] __unfreeze_partials+0x1a5/0x200 [ 139.160949][ T4199] put_cpu_partial+0x12d/0x190 [ 139.166392][ T4199] qlist_free_all+0x35/0x90 [ 139.171057][ T4199] kasan_quarantine_reduce+0x150/0x160 [ 139.177509][ T4199] __kasan_slab_alloc+0x2f/0xd0 [ 139.182449][ T4199] slab_post_alloc_hook+0x4c/0x380 [ 139.188880][ T4199] kmem_cache_alloc_node+0x12d/0x2d0 [ 139.195010][ T4199] __alloc_skb+0xf4/0x750 [ 139.200034][ T4199] mld_newpack+0x12a/0xb90 [ 139.205201][ T4199] add_grhead+0x5a/0x240 [ 139.209944][ T4199] add_grec+0x1341/0x15d0 [ 139.214560][ T4199] mld_ifc_work+0x6e7/0xb40 [ 139.219156][ T4199] process_one_work+0x863/0x1000 [ 139.224492][ T4199] worker_thread+0xaa8/0x12a0 [ 139.229909][ T4199] [ 139.232597][ T4199] Memory state around the buggy address: [ 139.238654][ T4199] ffff888078b45b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.248726][ T4199] ffff888078b45b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.257831][ T4199] >ffff888078b45c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.266782][ T4199] ^ [ 139.271468][ T4199] ffff888078b45c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.280229][ T4199] ffff888078b45d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.288992][ T4199] ================================================================== [ 139.298501][ T4199] Disabling lock debugging due to kernel taint [ 139.327326][ T5468] 9pnet: Insufficient options for proto=fd [ 139.327642][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.355777][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:7 Tainted: G B 5.15.189-syzkaller #0 [ 139.367218][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.380743][ T4199] Workqueue: hci1 hci_rx_work [ 139.386384][ T4199] Call Trace: [ 139.390212][ T4199] [ 139.393790][ T4199] dump_stack_lvl+0x168/0x230 [ 139.398665][ T4199] ? show_regs_print_info+0x20/0x20 [ 139.404655][ T4199] ? load_image+0x3b0/0x3b0 [ 139.410060][ T4199] panic+0x2c9/0x7f0 [ 139.414338][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 139.420743][ T4199] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 139.428179][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 139.433881][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 139.441729][ T4199] check_panic_on_warn+0x80/0xa0 [ 139.449871][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 139.457744][ T4199] end_report+0x6d/0xf0 [ 139.463290][ T4199] kasan_report+0x102/0x130 [ 139.471061][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 139.478550][ T4199] hci_le_meta_evt+0x12db/0x3b80 [ 139.483798][ T4199] ? hci_event_packet+0x1f0/0x12f0 [ 139.489783][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 139.498526][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 139.506546][ T4199] ? mark_lock+0x94/0x320 [ 139.511920][ T4199] ? mutex_unlock+0x10/0x10 [ 139.518532][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 139.525984][ T4199] ? lock_chain_count+0x20/0x20 [ 139.531999][ T4199] ? __rwlock_init+0x140/0x140 [ 139.539171][ T4199] hci_event_packet+0xe05/0x12f0 [ 139.545861][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 139.553120][ T4199] ? rcu_lock_release+0x20/0x20 [ 139.559550][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 139.567166][ T4199] hci_rx_work+0x255/0xa10 [ 139.572811][ T4199] process_one_work+0x863/0x1000 [ 139.580457][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 139.589623][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 139.597313][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 139.606782][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 139.625997][ T4199] ? wq_worker_running+0x97/0x170 [ 139.635922][ T4199] worker_thread+0xaa8/0x12a0 [ 139.647146][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 139.658275][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 139.667809][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 139.676477][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 139.687070][ T4199] kthread+0x436/0x520 [ 139.693419][ T4199] ? rcu_lock_release+0x20/0x20 [ 139.701650][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 139.710880][ T4199] ret_from_fork+0x1f/0x30 [ 139.717708][ T4199] [ 139.722423][ T4199] Kernel Offset: disabled [ 139.727500][ T4199] Rebooting in 86400 seconds..