last executing test programs: 1m48.078050994s ago: executing program 1 (id=49): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8002, &(0x7f0000000300)={[{@noauto_da_alloc}, {@nodiscard}, {@quota}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x11, 0x558, &(0x7f0000000c00)="$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") r0 = open(0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) r3 = userfaultfd(0x80800) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 1m44.6080265s ago: executing program 1 (id=55): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 1m42.970869931s ago: executing program 1 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/158, 0x9e}, {0x0}], 0x2) 1m42.834925569s ago: executing program 1 (id=61): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x4c8, &(0x7f0000000340)={[{@sbsector={'sbsector', 0x3d, 0x2}}, {@map_acorn}, {@map_normal}, {@utf8}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {}, {@overriderock}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@nojoliet}, {@map_acorn}, {@nocompress}, {@mode={'mode', 0x3d, 0x7}}, {@session={'session', 0x3d, 0x27}}, {@nocompress}, {@map_off}], [{@pcr={'pcr', 0x3d, 0x2b}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}, 0x0, 0x93f, &(0x7f00000009c0)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1085848, 0x0) read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) 1m42.388243487s ago: executing program 1 (id=63): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) 1m40.219627476s ago: executing program 1 (id=66): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000940)={0x330d7556, 0x0, 0x0, 0x2e69a, 0x0, "00120dd608f500001e20000080c90a008000"}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$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") syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x8041, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e751df7b884c0928a1f9880c306fb1614"], 0x24) 1m39.944902291s ago: executing program 32 (id=66): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000940)={0x330d7556, 0x0, 0x0, 0x2e69a, 0x0, "00120dd608f500001e20000080c90a008000"}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$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") syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x8041, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e751df7b884c0928a1f9880c306fb1614"], 0x24) 8.866332118s ago: executing program 3 (id=284): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x38}}, 0xc4c4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) pipe2(&(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x400004}}], 0x1c) 6.025793133s ago: executing program 2 (id=289): capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x3f5d}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 5.874166333s ago: executing program 2 (id=290): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x2}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 5.860250335s ago: executing program 3 (id=292): r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b3, 0x13500}, &(0x7f0000000280), &(0x7f0000001880)) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x4, 0x1e3, &(0x7f0000000340)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wINUxI6u/MLNWeaus6Z9PtpUfy+Gp3oZvHyMDA8P8/hH2FEyHOgsN+kPgBR2aGEij//3+YbghQgdIhDExwdigDE4MmlB3OwMigB2UnMDAxhEHZqQyMDJFQdhYSOx/kppcHoZyclLTMnFQDEGEIIoxAhDG6+942MjKkMDAwcEDdx4gkX1xZlZ2Yk5NahM5ghXoDixSpDBxBB3Mfy1tHJgZbpPADxVdER3MjiA8LGwOk8DNkYGIwhLKNGRgZgqFsCwZ2Bj09PUSQIPlfigVhPjMx/h8MDEFdfGp0BoELsTBYB3uoYmPAssRgcQ9eBiO6CMj1cBGxt7tOY+p6SkuHKdDWy+CCi4GBAUPqEhdlJrNBYx2rGkT5CSpy1ZHKJxak2kC/JLdAv7iySjczNzE9NT01z8jI2MzAxMDA1EgfXBBBSDzlHwe4fOJCMp8Vh1o2RjaGisSSkiLDCgaGkiJDON8IQiKVuMHb8t+A9TCByz8mBg1liBmgpAL2Njt2OxihmAlMg1gazDgdPwpGwSgYBaNgFIyCUTAKRsEoGAWjYBSMglEwCkbBKBgFJAF5BkbwKCh0ouo/DmAUAFYNCAAA//8zrmTZ") llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000a80)=[{r0, 0x1000}], 0x1, 0x6) 4.844867606s ago: executing program 2 (id=293): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000700)="09268a60", 0x4, 0x40040, 0x0, 0x0) 4.665928359s ago: executing program 0 (id=297): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1a0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 4.660535309s ago: executing program 2 (id=298): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') unshare(0x28000600) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 4.65727849s ago: executing program 3 (id=299): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "fafe44", 0x10, 0x21, 0xff, @local, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x4e21, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x4, "564a1a", 0x9, "6294c8"}}}}}}}, 0x0) 4.447326127s ago: executing program 2 (id=303): syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x800, 0xff, 0x100, 0x1, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_setup(0x85f, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) clock_nanosleep(0x3, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000340)) dup3(r4, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x90, &(0x7f0000000380)=ANY=[@ANYBLOB="120101020200009f2505a1a440000102030109027e0001010898cd09d372323c660600100a240600002ceb38180e052400fe770d240f015df1ffffff01ff000108241c00807f41001524120500a317a88b045e4f01a607c0ffcb7e392a07240a0407017f05240102800c241b00000800a107f5000709058103ff030104e809058202d70301"], 0x0) 4.390096354s ago: executing program 3 (id=305): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x400c17a) mremap(&(0x7f00003de000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 3.016228881s ago: executing program 3 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, 0x0, 0x0, 0x185093, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8, 0x0) 2.988057945s ago: executing program 0 (id=307): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x27, &(0x7f0000000140)=""/102, &(0x7f0000000040)=0x66) 1.31279704s ago: executing program 0 (id=308): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x81000) openat(0xffffffffffffff9c, 0x0, 0x141a42, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000800), &(0x7f0000000200), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4054, 0xfd6, 0xd33) 1.31258133s ago: executing program 2 (id=309): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000100)={0x80, 0x0, 0x8000000000000000}) 1.31237209s ago: executing program 3 (id=310): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x2800082, &(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="d8c704ee", @ANYRES16, @ANYBLOB="d1b26fb5ad164b7c395dc458ee772ff7b6a3aaa0be95363ad8f326750e9125985b29acf97c9e5146feae535f464c77fbe5c8311a1ffdc5a37bedab4babbb2b2f96b66f8e4742a5aa80a454cde0c80a7b3e4c72fc1e36bfd54bfdfef7b6e50ac441742f7a04bac32bf99e8c443651cd954d229c8c12d2ebb042ad221506ce102d9e10250effd120812987ef56a8848fa2bdee04d680da383f9efde1f0a9eb011fa7771d22b1eee42b085488f2d8dd93d0e84e28", @ANYBLOB="d3b3c5c9a75e9768c57c65a5a8e24aa09952e061618ec9431dbe389fd92f1b61503f84494d343c8dd56d2acb3c7050f8dddc647eefd35d3608e2379176bdfc11c1cd974fadbdae4bfa968e2b8c5ca3b9accf5615924b19c76a24fcc636a6ca9009da88c6312ec38a90212f29200f3083a98f8b553d74820df007682463c1003e561c7def1bc9a0f68fdd24d90fe7090a0a1499e806a93bce6164faa93867be1a917be443de37eced753214107a0c41bc6a514d7ecf2e35e0ca4b6172b031bfb96cc330b66b3943999bfece0f305b6ac3f91eb5f650f524550a6bab7179621fb0c523307c7048540cdcb13f5610d8d7d1904fdfa2099e", @ANYRES64=0x0], 0x11, 0x6c1, &(0x7f000000abc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x616e9570) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/wireless\x00') pread64(r3, &(0x7f0000000440)=""/4073, 0xfe9, 0x6) 1.222215272s ago: executing program 5 (id=312): execveat(0xffffffffffffffff, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000002c0)='\"\x05\f\x9a\xfd~\xf7\x981sK\x86y\xd2\xd6\xe01`\xbfT\xdeTz\xaa\xc9\x12S^\x88\xbd\xa7\xba\x96([\niGq\xedkI\xba\x9b\xf0\xc9mB\xca\xa3\xac\xeeD\xf3|\xd2q\x8eO\x8c:\x9b\x03#\xdd\x0e\xf5\x18<\xb4G\xeb\xbf\r\x8c\xfdr\x82']}, 0x1000) 1.043686765s ago: executing program 5 (id=314): r0 = syz_open_dev$usbfs(&(0x7f0000002300), 0xe, 0x81) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000002400)={0x5, 0xb, 0x3ff, 0xebe, 0x1, 0x7, &(0x7f0000000000)="9e"}) 850.21131ms ago: executing program 0 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x9, 0x10, 0xf1, 0x100, 0x80, 0x2, 0x80, 0x9, 0x0, 0x9, 0x80000000000, 0xbdb], 0x41000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 840.715301ms ago: executing program 5 (id=318): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 650.239376ms ago: executing program 5 (id=320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "66f63312e14aee3b", "5b12572a6a999e62ba023e5800d999bc", "10815c02", "86f03422fae63311"}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 609.585251ms ago: executing program 4 (id=321): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x10, 0x0, 0x7, 0x200}, 0x11, [0x7, 0x8, 0x0, 0x8, 0x6, 0x7, 0x1, 0xf, 0x1, 0x9173, 0x0, 0x7, 0x9, 0x43b, 0x7fffffff, 0x5, 0xfffffff3, 0x3, 0x8, 0x1, 0x7fffffff, 0xbe0, 0x9, 0x2000a9, 0xfffffff7, 0x57, 0x4, 0xfffeffff, 0x2, 0xc, 0x0, 0x80000001, 0x6, 0x0, 0x3, 0x10, 0x4, 0x8, 0x6, 0x0, 0x1, 0xfffffe2e, 0x80000000, 0xb6, 0x1, 0x0, 0x6, 0xffff98e0, 0x5, 0x9, 0x0, 0x1b, 0x8, 0x3, 0x1000, 0x101, 0x25e, 0x40, 0x2, 0x7, 0x3, 0xffff, 0x7c, 0x7], [0xfffffff9, 0x7fff, 0x4, 0x3, 0x8, 0xb, 0x7, 0x4, 0x100, 0x9633, 0x7, 0x6, 0xb, 0x6, 0x5, 0x5, 0x5, 0xdf2, 0x4, 0x2000000, 0x4, 0x2e7f, 0x200, 0x7f, 0x10001, 0x397e, 0x7, 0x401, 0x8000, 0x6, 0x4dc1, 0x7fffffff, 0x4, 0x7, 0x800, 0x6, 0x9, 0x6, 0x2, 0xd9e8, 0x7fff, 0x8, 0x0, 0x8, 0x101, 0x80000000, 0xc6, 0x6, 0x10001, 0x5, 0x7fffffff, 0x5, 0xf449, 0x6, 0x9, 0x7, 0x9, 0x2, 0x9, 0x6, 0x1, 0x4, 0x1, 0x101], [0x7, 0x7, 0x1, 0x5, 0xffffffff, 0x12, 0xfffffffc, 0x6, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x0, 0x200, 0x0, 0x7, 0x7, 0x2, 0x80000000, 0x6, 0x9, 0x8000, 0x1, 0xe10, 0x22d7, 0x9, 0x5, 0x1e74, 0x3, 0x3, 0x7fff, 0x5, 0x5, 0xfffffffb, 0x1, 0x1, 0x10, 0x9fd9, 0x0, 0x2924, 0x7, 0x2, 0x9, 0x4, 0x0, 0x8, 0x3, 0x40, 0x6da, 0x1, 0x1000, 0x10, 0x8001, 0x8, 0x8001, 0x2, 0x4, 0x7fffffff, 0x3, 0x8, 0x5, 0x211, 0x7], [0x0, 0x2, 0x8c, 0x8, 0x26f, 0x8, 0xfffffff8, 0xca, 0x5e, 0x4, 0x8, 0x200, 0x5, 0x5, 0x0, 0x600000, 0xb09, 0x9, 0xff, 0x10000, 0x3, 0xffffffff, 0xfffffffe, 0x10, 0x9, 0x5fd, 0x8, 0x200, 0x0, 0x6, 0xb, 0xb, 0x7ff, 0x9, 0x4, 0x0, 0x3, 0x7f, 0x0, 0x0, 0x1, 0x8, 0x6cc20712, 0x9, 0x5, 0x1000, 0x3, 0x7, 0x214, 0xb, 0x7, 0xabe5, 0xfffffffa, 0x0, 0x4, 0x200, 0x0, 0xe1, 0x2, 0x5, 0xffffffd9, 0xb, 0xe, 0x3]}, 0x45c) 466.152729ms ago: executing program 4 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42042, 0x85) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="48b800800000000000000f23d80f21f835400000f00f23f866baf80cb80cfee08cef66bafc0cb849ea0000ef66b81c010f00d00f0748b82cdd4e4c965985650f23d00f21f8350000000c0f23f8b9800000c00f3235000100000f30d8c266ba210066b8390266ef440f35656565f30fd6c4", 0x71}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 390.189029ms ago: executing program 0 (id=323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000580)={@remote, @multicast, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) 390.066719ms ago: executing program 5 (id=324): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in=@local, 0xee24, 0x200, 0x0, 0x3, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x200000004, 0x40000000007, 0x20000a0e2, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0x800, 0xc5e}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 327.354188ms ago: executing program 4 (id=325): execveat(0xffffffffffffffff, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000002c0)='\"\x05\f\x9a\xfd~\xf7\x981sK\x86y\xd2\xd6\xe01`\xbfT\xdeTz\xaa\xc9\x12S^\x88\xbd\xa7\xba\x96([\niGq\xedkI\xba\x9b\xf0\xc9mB\xca\xa3\xac\xeeD\xf3|\xd2q\x8eO\x8c:\x9b\x03#\xdd\x0e\xf5\x18<\xb4G\xeb\xbf\r\x8c\xfdr\x82']}, 0x1000) 292.835652ms ago: executing program 0 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@mb_optimize_scan}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0xd}, {0x0, 0x4, 0x0, 0x2, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x7, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 206.156383ms ago: executing program 5 (id=327): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000040)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRES64, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xc0, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x7f}, 0x80, 0x8000, 0xc4, 0x200}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x400c5) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 189.136545ms ago: executing program 4 (id=328): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket(0x1d, 0xefce9239850759e, 0xe0000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x0, 0x1}, {0x28, 0x2, 0xf7, 0xfffff038}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) stat(0x0, &(0x7f0000000040)) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 122.533323ms ago: executing program 4 (id=329): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) 0s ago: executing program 4 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f1, &(0x7f0000001940)="$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") sched_setscheduler(0x0, 0x2, 0x0) unshare(0x4000400) getsockopt$bt_hci(0xffffffffffffffff, 0x1201, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x9}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 59.284683][ T4171] cgroup: Unknown subsys name 'net' [ 59.388639][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.811489][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.218052][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.276998][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.311672][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.334490][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.361312][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 62.438444][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.445817][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.455125][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.467951][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.475416][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.483968][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.539925][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.572732][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.601252][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.608342][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.616576][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.636869][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.644513][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.652740][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.660849][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.668142][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.676522][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.685109][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.692485][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.700650][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.708006][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.715363][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.723778][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.736404][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.743677][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.752769][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.760333][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.767421][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.775745][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.797956][ T4184] team0: Port device team_slave_0 added [ 62.804300][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.811875][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.819980][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.846746][ T4184] team0: Port device team_slave_1 added [ 62.873089][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.884280][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.908436][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.915525][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.941655][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.956931][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.968652][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.979967][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.989966][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.996937][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.023284][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.036552][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.047826][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.064867][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.100315][ T4186] team0: Port device team_slave_0 added [ 63.113912][ T4186] team0: Port device team_slave_1 added [ 63.146477][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.153741][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.179976][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.202567][ T4191] team0: Port device team_slave_0 added [ 63.211107][ T4185] team0: Port device team_slave_0 added [ 63.218627][ T4183] team0: Port device team_slave_0 added [ 63.240751][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.247749][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.274315][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.287012][ T4185] team0: Port device team_slave_1 added [ 63.294230][ T4191] team0: Port device team_slave_1 added [ 63.308379][ T4183] team0: Port device team_slave_1 added [ 63.342028][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.348769][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.395664][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.402794][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.429266][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.441173][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.448145][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.474477][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.490089][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.496788][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.503716][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.511801][ T4186] Cannot create hsr debugfs directory [ 63.517770][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.525119][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.551342][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.569796][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.576774][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.603194][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.615400][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.622616][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.648716][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.664604][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.671916][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.698091][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.787998][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.795798][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.802946][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.811278][ T4191] Cannot create hsr debugfs directory [ 63.852167][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.859715][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.866552][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.874674][ T4183] Cannot create hsr debugfs directory [ 63.888657][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.895707][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.902524][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.911157][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 63.915503][ T4185] Cannot create hsr debugfs directory [ 63.918740][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 63.924196][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.929355][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 63.940881][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 64.221357][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.235863][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.248956][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.264163][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.307360][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.329918][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.340491][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.359625][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.402087][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.415304][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.425049][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.453324][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.550026][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.556886][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.570868][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.581050][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.593169][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.653751][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.665158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.679870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.694720][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.711398][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.723388][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.737256][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.746820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.756876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.766242][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.773484][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.782992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.793861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.805279][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.812390][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.826190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.837745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.846421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.856805][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.882715][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.915031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.933596][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.943037][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.953399][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.962923][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.970128][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.978138][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.987317][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.002930][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.021785][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.031811][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.040511][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.049247][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.058188][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.065351][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.090404][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.103374][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.113175][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.124577][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.133419][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.142422][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.151596][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.161206][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.170444][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.180043][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.198652][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.212190][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.223918][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.232710][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.242874][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.251307][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.260602][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.275531][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.295460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.308430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.323271][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.330410][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.356055][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.375970][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.387522][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.414866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.423630][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.432164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.442265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.451711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.461416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.470774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.479549][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.488371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.498483][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.505617][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.515796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.526972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.536985][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.550225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.566278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.575118][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.582251][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.630254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.645871][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.656250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.673900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.687574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.696548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.705600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.714819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.723791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.733097][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.740225][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.748050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.758373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.774187][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.782503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.792312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.803841][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.839694][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.847206][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.863093][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.875442][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.887768][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.903312][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.916566][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.928808][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.943335][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.967429][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.980506][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.989492][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 65.999465][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 66.007573][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.015866][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 66.022256][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 66.039546][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 66.053827][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.066085][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.078410][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.090350][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.127030][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.143488][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.160014][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.175152][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.183490][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.204461][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.214826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.226071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.248807][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.283869][ T4184] device veth0_vlan entered promiscuous mode [ 66.295750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.322480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.331937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.351592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.365021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.374910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.391648][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.398742][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.413641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.422800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.432243][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.439370][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.447545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.476573][ T4184] device veth1_vlan entered promiscuous mode [ 66.502608][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.516108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.527222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.542028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.556098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.568556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.578587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.591598][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.600336][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.623427][ T4186] device veth0_vlan entered promiscuous mode [ 66.635933][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.644091][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.659356][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.668853][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.683244][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.694120][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.723455][ T4186] device veth1_vlan entered promiscuous mode [ 66.742737][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.751569][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.761135][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.769921][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.778234][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.795315][ T4184] device veth0_macvtap entered promiscuous mode [ 66.815315][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.825268][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.835037][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.844230][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.853256][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.878811][ T4186] device veth0_macvtap entered promiscuous mode [ 66.890953][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.903677][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.914326][ T4184] device veth1_macvtap entered promiscuous mode [ 66.923149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.931638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.941214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.951174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.960313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.969093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.977420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.987753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.022762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.034214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.048325][ T4186] device veth1_macvtap entered promiscuous mode [ 67.067711][ T4183] device veth0_vlan entered promiscuous mode [ 67.075734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.084590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.095657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.107921][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.120330][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.133359][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.145477][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.160273][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.169625][ T4191] device veth0_vlan entered promiscuous mode [ 67.185953][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.198047][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.211494][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.230378][ T4183] device veth1_vlan entered promiscuous mode [ 67.237194][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.249601][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.258378][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.268065][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.278019][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.290405][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.297738][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.311953][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.327721][ T4191] device veth1_vlan entered promiscuous mode [ 67.340545][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.352145][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.364366][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.382385][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.391759][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.401248][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.411305][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.435177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.444702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.453520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.464277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.473630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.486419][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.495339][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.504376][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.514320][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.549675][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.557178][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.575770][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.637509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.646694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.663977][ T4191] device veth0_macvtap entered promiscuous mode [ 67.682905][ T4191] device veth1_macvtap entered promiscuous mode [ 67.697212][ T4183] device veth0_macvtap entered promiscuous mode [ 67.721448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.729667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.737754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.749006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.766586][ T4183] device veth1_macvtap entered promiscuous mode [ 67.772154][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.781310][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.817204][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.827975][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.840878][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.851812][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.864307][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.872068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.880987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.890166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.898002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.907060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.917453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.926647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.964557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.978188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.987143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.995330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.009732][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.020755][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.031699][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.042465][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.052419][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.063147][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.073639][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 68.079838][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 68.087538][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.095201][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 68.101643][ T4185] device veth0_vlan entered promiscuous mode [ 68.113647][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.127145][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 68.133353][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.143374][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 68.143501][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.160534][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.172267][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.185379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.195319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.204361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.213572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.223207][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.236855][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.246965][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.257693][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.267760][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.278479][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.291229][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.302355][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.311676][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.344309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.353497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.362702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.376441][ T4185] device veth1_vlan entered promiscuous mode [ 68.387983][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.397971][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.407125][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.416105][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434922][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.444480][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.454091][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.464211][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.480831][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.488832][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.523196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.526002][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.539363][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.544339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.561348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.569570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.663861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.684169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.698725][ T4185] device veth0_macvtap entered promiscuous mode [ 68.727412][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.740280][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.754389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.773172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.788388][ T4185] device veth1_macvtap entered promiscuous mode [ 68.804769][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.827696][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.858610][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.885663][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.894142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.930861][ T4294] loop1: detected capacity change from 0 to 1024 [ 68.941005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.949741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.978522][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.013398][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.025119][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.037975][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.052655][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.065180][ T4294] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.081824][ T4294] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.092393][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.102520][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.114418][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.150473][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.175014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.211573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.259971][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.296683][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.344285][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.377758][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.399682][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.443502][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.459987][ T4304] loop3: detected capacity change from 0 to 4096 [ 69.494998][ T4304] ======================================================= [ 69.494998][ T4304] WARNING: The mand mount option has been deprecated and [ 69.494998][ T4304] and is ignored by this kernel. Remove the mand [ 69.494998][ T4304] option from the mount to silence this warning. [ 69.494998][ T4304] ======================================================= [ 69.540768][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.576294][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.616640][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.658699][ T4307] loop0: detected capacity change from 0 to 40427 [ 69.676425][ T4304] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 69.692054][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.706910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.722883][ T4307] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 69.729445][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.730986][ T4307] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 69.756968][ T4307] F2FS-fs (loop0): invalid crc value [ 69.758059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.793432][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.816976][ T4307] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.855352][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.869264][ T4304] ntfs3: loop3: Failed to load $Extend. [ 69.893167][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.914249][ T4307] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 69.921669][ T4307] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.969558][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.050979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.149853][ T4188] Bluetooth: hci0: command 0x0419 tx timeout [ 70.156015][ T4188] Bluetooth: hci4: command 0x0419 tx timeout [ 70.193570][ T4188] Bluetooth: hci2: command 0x0419 tx timeout [ 70.225541][ T4188] Bluetooth: hci1: command 0x0419 tx timeout [ 70.250056][ T3575] Bluetooth: hci3: command 0x0419 tx timeout [ 70.356865][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.375281][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.418307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.431333][ T4183] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 70.431389][ T4183] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 70.441343][ T4183] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 70.453572][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.470512][ T4183] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 70.470535][ T4183] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 70.486745][ T4183] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 70.502485][ T4183] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 70.506955][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.589760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.765531][ T4326] tipc: Started in network mode [ 70.784399][ T4326] tipc: Node identity 86d83133cbd3, cluster identity 4711 [ 70.832742][ T4326] tipc: Enabled bearer , priority 0 [ 70.869634][ T4326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10'. [ 70.901667][ T4326] tipc: Resetting bearer [ 71.035259][ T4328] loop2: detected capacity change from 0 to 32768 [ 71.046333][ T4325] tipc: Disabling bearer [ 71.203209][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.209842][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.226799][ T4331] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 71.256797][ T4331] team0: Device hsr0 is up. Set it down before adding it as a team port [ 71.317680][ T4333] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12'. [ 71.675173][ T4345] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.707593][ T4346] loop1: detected capacity change from 0 to 256 [ 71.856394][ T4346] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0xb66ac9fc, utbl_chksum : 0xe619d30d) [ 72.184536][ T4328] syz.2.3 (4328) used greatest stack depth: 20976 bytes left [ 72.292633][ T4356] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 72.321398][ T4356] netlink: 168 bytes leftover after parsing attributes in process `syz.0.22'. [ 72.519204][ T4356] syz.0.22 (4356) used greatest stack depth: 20432 bytes left [ 72.614003][ T4337] loop3: detected capacity change from 0 to 40427 [ 72.681424][ T4337] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 72.719389][ T4337] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 72.768991][ T4337] F2FS-fs (loop3): invalid crc value [ 72.865649][ T4337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.994984][ T4388] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 73.036980][ T4337] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 73.049045][ T4337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.071661][ T4388] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 73.098631][ T4390] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 73.146080][ T4393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.34'. [ 73.159201][ T4392] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 73.173861][ T4373] attempt to access beyond end of device [ 73.173861][ T4373] loop3: rw=2049, want=45104, limit=40427 [ 73.372394][ T4401] tipc: Started in network mode [ 73.412509][ T4401] tipc: Node identity be17090806f9, cluster identity 4711 [ 73.443480][ T4401] tipc: Enabled bearer , priority 0 [ 73.481373][ T4401] netlink: 44 bytes leftover after parsing attributes in process `syz.4.38'. [ 73.609270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.643203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.652851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.668905][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.677888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.686850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.695783][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.704720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.712055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.713725][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.209258][ T2237] tipc: Node number set to 3102607624 [ 75.221706][ T4401] tipc: Resetting bearer [ 75.257255][ T4400] tipc: Disabling bearer [ 75.356351][ T4421] device syzkaller0 entered promiscuous mode [ 75.386957][ T4423] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 75.691536][ T4432] loop1: detected capacity change from 0 to 512 [ 77.099177][ T4247] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.151743][ T4439] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37'. [ 77.191153][ T4432] EXT4-fs (loop1): Ignoring removed orlov option [ 77.199603][ T4439] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 77.278273][ T4432] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nodiscard,quota,orlov,barrier=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 77.416866][ T4432] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.834255][ T3575] Bluetooth: hci4: command 0x0405 tx timeout [ 78.954945][ T4449] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.43'. [ 78.969350][ T4247] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 78.977265][ T4247] usb 1-1: can't read configurations, error -71 [ 79.802520][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 80.851492][ T4462] loop0: detected capacity change from 0 to 1024 [ 80.971615][ T4462] EXT4-fs (loop0): Ignoring removed orlov option [ 80.980555][ T4467] loop1: detected capacity change from 0 to 2364 [ 81.033461][ T4462] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 81.219168][ T3575] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.905082][ T4474] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 82.944509][ T3575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.976066][ T3575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.007118][ T3575] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.039217][ T3575] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.078771][ T3575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.113812][ T3575] usb 5-1: config 0 descriptor?? [ 83.486020][ T4479] loop2: detected capacity change from 0 to 8192 [ 83.549673][ T4479] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.624939][ T3575] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 83.651618][ T3575] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 83.734504][ T3575] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 83.918686][ T4313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.969896][ T4247] usb 5-1: USB disconnect, device number 2 [ 84.149480][ T4482] fido_id[4482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 84.167480][ T4313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.669274][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.685170][ T4313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.805154][ T4500] device sit0 entered promiscuous mode [ 85.869758][ T4500] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 85.899059][ T4500] netlink: 1 bytes leftover after parsing attributes in process `syz.4.74'. [ 85.947461][ T4313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.428181][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.453531][ T7] cfg80211: failed to load regulatory.db [ 87.508970][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.518759][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.617988][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.652980][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.682559][ T4502] loop0: detected capacity change from 0 to 512 [ 87.721828][ T23] usb 3-1: config 0 descriptor?? [ 88.271248][ T4514] xt_hashlimit: size too large, truncated to 1048576 [ 88.278394][ T4514] xt_hashlimit: max too large, truncated to 1048576 [ 89.185817][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 89.226152][ T23] usb 3-1: can't set config #0, error -71 [ 89.290459][ T23] usb 3-1: USB disconnect, device number 2 [ 89.399998][ T4495] chnl_net:caif_netlink_parms(): no params data found [ 89.809787][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.816906][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.882298][ T4495] device bridge_slave_0 entered promiscuous mode [ 91.293729][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 91.402401][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.420316][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.468230][ T4495] device bridge_slave_1 entered promiscuous mode [ 93.577484][ T4543] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 94.385715][ T4188] Bluetooth: hci0: command 0x040f tx timeout [ 94.504467][ T4495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.535664][ T4495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.092583][ T4495] team0: Port device team_slave_0 added [ 96.139167][ T4495] team0: Port device team_slave_1 added [ 96.235860][ T4495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.265571][ T4495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.358965][ T4495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.421643][ T4495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.428641][ T4495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.469290][ T4188] Bluetooth: hci0: command 0x0419 tx timeout [ 96.526850][ T4495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.663729][ T4495] device hsr_slave_0 entered promiscuous mode [ 96.690005][ T4495] device hsr_slave_1 entered promiscuous mode [ 96.719194][ T4495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.726792][ T4495] Cannot create hsr debugfs directory [ 96.950478][ T4558] netlink: 156 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.244964][ T4566] loop3: detected capacity change from 0 to 1024 [ 97.423986][ T4313] device hsr_slave_0 left promiscuous mode [ 97.443451][ T4313] device hsr_slave_1 left promiscuous mode [ 97.467060][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.500440][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.538357][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.568660][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.576064][ T9] hfsplus: b-tree write err: -5, ino 4 [ 97.627802][ T4313] device bridge_slave_1 left promiscuous mode [ 97.656320][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.667314][ T4584] loop2: detected capacity change from 0 to 512 [ 97.676411][ T4291] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.756703][ T4313] device bridge_slave_0 left promiscuous mode [ 97.783771][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.909142][ T4313] device veth1_macvtap left promiscuous mode [ 97.919133][ T4291] usb 5-1: Using ep0 maxpacket: 32 [ 97.957777][ T4313] device veth0_macvtap left promiscuous mode [ 97.958241][ T4594] loop3: detected capacity change from 0 to 1024 [ 97.972031][ T4313] device veth1_vlan left promiscuous mode [ 97.978276][ T4313] device veth0_vlan left promiscuous mode [ 98.039261][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.064895][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.084484][ T4584] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.272976][ T4584] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.795328][ T4584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.868190][ T4291] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 98.877349][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.905279][ T4291] usb 5-1: config 0 descriptor?? [ 98.933354][ T4584] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.92: bad orphan inode 131083 [ 99.052105][ T4584] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 100.729374][ T4291] usbhid 5-1:0.0: can't add hid device: -71 [ 100.735684][ T4291] usbhid: probe of 5-1:0.0 failed with error -71 [ 100.775321][ T4291] usb 5-1: USB disconnect, device number 3 [ 103.430726][ T4313] team0 (unregistering): Port device team_slave_1 removed [ 104.910446][ T4313] team0 (unregistering): Port device team_slave_0 removed [ 105.003007][ T4647] loop0: detected capacity change from 0 to 8 [ 105.017792][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.058764][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.887422][ T4313] bond0 (unregistering): Released all slaves [ 106.037845][ T4495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.085659][ T4495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.120639][ T4495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.161684][ T4495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.252542][ T4660] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.106' sets config #0 [ 106.383442][ T4667] loop2: detected capacity change from 0 to 512 [ 106.403457][ T4665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'. [ 106.465456][ T4670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'. [ 106.566238][ T4667] EXT4-fs error (device loop2): ext4_fill_super:4841: inode #2: comm syz.2.114: inode has both inline data and extents flags [ 106.588170][ T4667] EXT4-fs (loop2): get root inode failed [ 106.593949][ T4667] EXT4-fs (loop2): mount failed [ 106.714827][ T4495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.883435][ T4285] Bluetooth: hci2: command 0x0401 tx timeout [ 107.988720][ T4495] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.006661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.028056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.068976][ T2237] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 108.102091][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.127454][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.136884][ T4650] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.139441][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.144173][ T4650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.188510][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.198780][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.217569][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.231176][ T4650] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.238468][ T4650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.254294][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.265796][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.301361][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.325062][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.336926][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.350510][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.395864][ T4495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.419048][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 108.434899][ T4495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.467111][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.477262][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.502880][ T2237] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.516127][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.534555][ T2237] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.543899][ T1108] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 108.550083][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.552686][ T4188] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.560473][ T2237] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 108.588413][ T1108] usb 4-1: config 0 has no interface number 0 [ 108.592615][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.602349][ T1108] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.643278][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.650269][ T1108] usb 4-1: config 0 interface 85 has no altsetting 0 [ 108.804784][ T2237] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.828623][ T2237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.830153][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 108.848931][ T4188] usb 3-1: Using ep0 maxpacket: 32 [ 108.868208][ T2237] usb 5-1: Product: syz [ 108.877263][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.887125][ T2237] usb 5-1: Manufacturer: syz [ 108.902328][ T2237] usb 5-1: SerialNumber: syz [ 108.917897][ T1108] usb 4-1: Product: syz [ 108.928018][ T1108] usb 4-1: Manufacturer: syz [ 108.947259][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.955029][ T1108] usb 4-1: SerialNumber: syz [ 108.970144][ T4188] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 108.985350][ T1108] usb 4-1: config 0 descriptor?? [ 108.990828][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.006891][ T4495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.014175][ T4188] usb 3-1: config 0 has no interface number 0 [ 109.309087][ T4188] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 109.318181][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.351439][ T2237] usb 5-1: 0:2 : does not exist [ 110.038367][ T2237] usb 5-1: USB disconnect, device number 4 [ 110.080915][ T1108] appletouch 4-1:0.85: Failed to request geyser raw mode [ 110.088119][ T1108] appletouch: probe of 4-1:0.85 failed with error -5 [ 110.094910][ T4188] usb 3-1: Product: syz [ 110.099165][ T4188] usb 3-1: Manufacturer: syz [ 110.103780][ T4188] usb 3-1: SerialNumber: syz [ 110.121979][ T4188] usb 3-1: config 0 descriptor?? [ 110.152451][ T1108] usb 4-1: USB disconnect, device number 2 [ 110.214114][ T4188] smsc95xx v2.0.0 [ 110.889606][ T4188] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 111.118959][ T4188] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.296694][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.315006][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.351001][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.364685][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.391506][ T4495] device veth0_vlan entered promiscuous mode [ 111.413954][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.454551][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.500656][ T4188] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 111.513046][ T4188] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 111.523263][ T4188] usb 3-1: USB disconnect, device number 3 [ 113.761310][ T4495] device veth1_vlan entered promiscuous mode [ 113.926021][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.957403][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.026310][ T4495] device veth0_macvtap entered promiscuous mode [ 114.051913][ T4495] device veth1_macvtap entered promiscuous mode [ 114.122799][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.155929][ T4753] loop2: detected capacity change from 0 to 128 [ 114.182761][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.195403][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 114.213404][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.234895][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.249213][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.267103][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.281282][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.297670][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.310128][ T4495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.324427][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.341171][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.358335][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.378101][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.394449][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.410678][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.421154][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.432067][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.440887][ T4753] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.442782][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.469231][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.479938][ T4495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.491427][ T4495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.501650][ T4753] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.507464][ T4495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.544955][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.549171][ T1108] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 114.562006][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.582791][ T4495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.599568][ T4495] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.618611][ T4495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.640328][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.650611][ T4495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.667623][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.900088][ T21] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 114.909585][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.917605][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.929884][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.938920][ T4753] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 114.949271][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.960396][ T21] usb 1-1: Product: syz [ 114.966098][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.980418][ T21] usb 1-1: Manufacturer: syz [ 114.988927][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.992690][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.998714][ T1108] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 114.998741][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.025443][ T21] usb 1-1: SerialNumber: syz [ 115.035986][ T21] usb 1-1: config 0 descriptor?? [ 115.046545][ T1108] usb 5-1: config 0 descriptor?? [ 115.092633][ T21] hub 1-1:0.0: bad descriptor, ignoring hub [ 115.106332][ T21] hub: probe of 1-1:0.0 failed with error -5 [ 115.126076][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.196213][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.432953][ T4770] loop2: detected capacity change from 0 to 2048 [ 115.489921][ T4247] usb 1-1: USB disconnect, device number 4 [ 115.534817][ T4770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.560967][ T1108] hid-rmi 0003:1532:011D.0002: item fetching failed at offset 0/2 [ 115.587925][ T1108] hid-rmi 0003:1532:011D.0002: parse failed [ 115.618621][ T1108] hid-rmi: probe of 0003:1532:011D.0002 failed with error -22 [ 115.762369][ T23] usb 5-1: USB disconnect, device number 5 [ 115.945858][ T4782] loop5: detected capacity change from 0 to 512 [ 116.045188][ T4788] syz.3.124 uses obsolete (PF_INET,SOCK_PACKET) [ 116.123270][ T4782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.192809][ T4782] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.132: bad orphan inode 11 [ 116.263389][ T4782] ext4_test_bit(bit=10, block=4) = 0 [ 116.268745][ T4782] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x00000000000001ff,barrier=0x0000000000000005,init_itable,,errors=continue. Quota mode: none. [ 116.940080][ T4812] loop2: detected capacity change from 0 to 128 [ 117.070687][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 117.091015][ T4812] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.252631][ T4821] loop5: detected capacity change from 0 to 1024 [ 117.632560][ T4821] EXT4-fs (loop5): Ignoring removed nobh option [ 117.740491][ T4821] EXT4-fs (loop5): Ignoring removed bh option [ 117.926181][ T4821] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000002,inode_readahead_blks=0x0000000001000000,grpjquota=,quota,data_err=ignore,quota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 119.041015][ T4850] loop5: detected capacity change from 0 to 8 [ 119.108713][ T4855] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.503415][ T4856] input: syz1 as /devices/virtual/input/input8 [ 119.522819][ T4860] loop4: detected capacity change from 0 to 1024 [ 119.596171][ T4860] EXT4-fs (loop4): inline encryption not supported [ 120.797128][ T4885] loop3: detected capacity change from 0 to 2048 [ 122.330080][ T4885] UDF-fs: bad mount option "partition=00000000000000003987" or missing value [ 122.500157][ T4900] netlink: 'syz.3.159': attribute type 2 has an invalid length. [ 122.528965][ T4900] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 122.536790][ T4900] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 124.128499][ T4900] netlink: 'syz.3.159': attribute type 2 has an invalid length. [ 124.169106][ T4900] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 124.304978][ T4914] loop2: detected capacity change from 0 to 512 [ 124.538956][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.542137][ T4914] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.160: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 124.692666][ T4914] EXT4-fs error (device loop2): ext4_quota_enable:6420: comm syz.2.160: Bad quota inode: 3, type: 0 [ 124.754917][ T4914] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 124.882323][ T4914] EXT4-fs (loop2): mount failed [ 124.959998][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 124.989050][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 125.038986][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.069816][ T13] usb 1-1: config 0 descriptor?? [ 125.489054][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 125.496151][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 125.553751][ T13] usb 1-1: USB disconnect, device number 5 [ 125.621103][ T4949] loop5: detected capacity change from 0 to 128 [ 125.640653][ T4951] loop3: detected capacity change from 0 to 164 [ 125.872833][ T4949] attempt to access beyond end of device [ 125.872833][ T4949] loop5: rw=2049, want=173, limit=128 [ 126.009054][ T4188] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.149053][ T4963] tipc: Started in network mode [ 126.193266][ T4953] loop2: detected capacity change from 0 to 8192 [ 126.194855][ T4963] tipc: Node identity caf56b62696d, cluster identity 4711 [ 126.264151][ T4963] tipc: Enabled bearer , priority 0 [ 126.299968][ T4966] device syzkaller0 entered promiscuous mode [ 126.309421][ T4188] usb 4-1: Using ep0 maxpacket: 32 [ 126.376320][ T4963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.174'. [ 127.821791][ T1108] tipc: Node number set to 2744675170 [ 127.839150][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.850335][ T4966] tipc: Resetting bearer [ 127.912297][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.922785][ T4962] tipc: Resetting bearer [ 127.960892][ T4188] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.972153][ T4962] tipc: Disabling bearer [ 128.007810][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.059612][ T4188] usb 4-1: config 0 descriptor?? [ 128.130579][ T4188] hub 4-1:0.0: USB hub found [ 128.187624][ T4975] tipc: Started in network mode [ 128.219158][ T4975] tipc: Node identity 72a35183e011, cluster identity 4711 [ 128.261781][ T4975] tipc: Enabled bearer , priority 0 [ 128.354655][ T4188] hub 4-1:0.0: 1 port detected [ 128.374631][ T4982] device syzkaller0 entered promiscuous mode [ 128.440354][ T4973] tipc: Resetting bearer [ 128.608219][ T4989] loop0: detected capacity change from 0 to 256 [ 128.614760][ T4188] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 128.630996][ T4973] tipc: Disabling bearer [ 128.636792][ T4188] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 128.736456][ T4989] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 128.800410][ T4188] usbhid 4-1:0.0: can't add hid device: -71 [ 128.806468][ T4188] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.189944][ T4188] usb 4-1: USB disconnect, device number 3 [ 130.425706][ T5005] loop0: detected capacity change from 0 to 256 [ 130.489735][ T5005] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.578909][ T5005] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 130.635966][ T5005] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 131.432680][ T5014] xt_hashlimit: size too large, truncated to 1048576 [ 131.439425][ T5014] xt_hashlimit: max too large, truncated to 1048576 [ 131.864920][ T5030] loop3: detected capacity change from 0 to 1024 [ 131.903348][ T5036] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 131.903348][ T5036] The task syz.0.187 (5036) triggered the difference, watch for misbehavior. [ 132.031828][ T5030] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.136014][ T5037] loop2: detected capacity change from 0 to 8 [ 132.159512][ T5038] loop5: detected capacity change from 0 to 512 [ 132.298340][ T5038] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.447240][ T5035] SQUASHFS error: Unable to read directory block [631:72] [ 132.470698][ T5038] EXT4-fs (loop5): orphan cleanup on readonly fs [ 132.557341][ T5038] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.191: Allocating blocks 41-42 which overlap fs metadata [ 132.627562][ T5038] Quota error (device loop5): write_blk: dquota write failed [ 132.639728][ T5038] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 132.650178][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657124][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.666790][ T5038] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.191: Failed to acquire dquot type 0 [ 132.681308][ T5038] EXT4-fs (loop5): 1 truncate cleaned up [ 132.703613][ T5038] EXT4-fs (loop5): pa ffff888074730540: logic 1, phys. 41, len 23 [ 132.711810][ T5038] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 22, pa_free 23 [ 132.826729][ T5038] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 132.937952][ T5062] loop0: detected capacity change from 0 to 256 [ 132.999441][ T5062] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 133.127452][ T26] audit: type=1800 audit(1768713400.532:2): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 136.569998][ T5084] xt_hashlimit: size too large, truncated to 1048576 [ 136.576845][ T5084] xt_hashlimit: max too large, truncated to 1048576 [ 138.007079][ T5097] loop4: detected capacity change from 0 to 2048 [ 138.200412][ T5097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.978956][ T4322] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.856632][ T5131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 141.559027][ T4322] usb 6-1: Using ep0 maxpacket: 16 [ 141.603202][ T3575] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.709004][ T4322] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 141.757861][ T4322] usb 6-1: config 1 has no interface number 0 [ 141.827779][ T4322] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 141.866454][ T4322] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 141.903864][ T4322] usb 6-1: config 1 interface 105 has no altsetting 0 [ 142.049140][ T3575] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.109145][ T4322] usb 6-1: string descriptor 0 read error: -71 [ 142.115884][ T4322] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 142.125626][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.152343][ T3575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.159824][ T4322] usb 6-1: can't set config #1, error -71 [ 142.169158][ T4322] usb 6-1: USB disconnect, device number 2 [ 143.033706][ T3575] usb 1-1: config 0 descriptor?? [ 143.578975][ T5148] xt_hashlimit: size too large, truncated to 1048576 [ 143.585833][ T5148] xt_hashlimit: max too large, truncated to 1048576 [ 144.499057][ T3575] usb 1-1: can't set config #0, error -71 [ 144.514386][ T3575] usb 1-1: USB disconnect, device number 6 [ 145.990504][ T5159] loop2: detected capacity change from 0 to 8 [ 146.154699][ T5159] SQUASHFS error: Unable to read directory block [631:72] [ 146.898951][ T3575] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.171685][ T3575] usb 3-1: Using ep0 maxpacket: 32 [ 147.313491][ T3575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.870589][ T5184] loop3: detected capacity change from 0 to 8 [ 147.898910][ T3575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.954245][ T3575] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 147.984616][ T3575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.033466][ T3575] usb 3-1: config 0 descriptor?? [ 148.253468][ T5191] process 'syz.4.221' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 149.534756][ T5192] SQUASHFS error: Failed to read block 0x1ec: -5 [ 149.749688][ T3575] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 149.899883][ T5192] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 149.907382][ T26] audit: type=1800 audit(1768713417.312:3): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.211" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 150.011347][ T4322] usb 3-1: USB disconnect, device number 4 [ 150.709467][ T5211] xt_hashlimit: size too large, truncated to 1048576 [ 150.716492][ T5211] xt_hashlimit: max too large, truncated to 1048576 [ 155.125248][ T5233] ODEBUG: Out of memory. ODEBUG disabled [ 156.031956][ T5249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.243976][ T5275] loop5: detected capacity change from 0 to 512 [ 159.599447][ T5275] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 159.657097][ T5278] loop3: detected capacity change from 0 to 512 [ 159.705960][ T5275] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.921461][ T5278] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.238: inode #1: comm syz.3.238: iget: illegal inode # [ 159.966029][ T5278] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.238: error while reading EA inode 1 err=-117 [ 160.025556][ T5278] EXT4-fs (loop3): 1 orphan inode deleted [ 160.046508][ T5278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.124362][ T4247] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.302208][ T4247] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.312090][ T4247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.323299][ T4247] usb 4-1: config 0 descriptor?? [ 163.370141][ T4247] cp210x 4-1:0.0: cp210x converter detected [ 164.939251][ T4247] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 165.040290][ T4247] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 165.078907][ T4247] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 165.119325][ T4247] usb 4-1: cp210x converter now attached to ttyUSB0 [ 165.158449][ T4247] usb 4-1: USB disconnect, device number 4 [ 165.217921][ T4247] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 165.261428][ T4247] cp210x 4-1:0.0: device disconnected [ 165.817444][ T3575] Bluetooth: hci4: command 0x0406 tx timeout [ 166.813309][ T4322] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 166.888405][ T5366] loop2: detected capacity change from 0 to 1024 [ 167.111564][ T26] audit: type=1800 audit(1768713434.522:4): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.256" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 167.309708][ T5377] loop3: detected capacity change from 0 to 1024 [ 167.410294][ T4322] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.438897][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.452534][ T5383] loop2: detected capacity change from 0 to 128 [ 167.457418][ T4322] usb 6-1: Product: syz [ 167.479539][ T5377] hfsplus: unable to parse mount options [ 167.495958][ T4322] usb 6-1: Manufacturer: syz [ 167.528904][ T4322] usb 6-1: SerialNumber: syz [ 169.127196][ T4322] cdc_ncm 6-1:1.0: bind() failure [ 169.135032][ T4322] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 169.148585][ T4322] cdc_ncm 6-1:1.1: bind() failure [ 169.160113][ T4322] usb 6-1: USB disconnect, device number 3 [ 169.205631][ T5398] loop0: detected capacity change from 0 to 2364 [ 171.916058][ T5422] loop2: detected capacity change from 0 to 1024 [ 173.352067][ T5430] tipc: Enabled bearer , priority 0 [ 173.379102][ T5422] EXT4-fs (loop2): Unrecognized mount option "nojournal" or missing value [ 173.427274][ T5434] Zero length message leads to an empty skb [ 173.468462][ T5434] tipc: Resetting bearer [ 173.537990][ T5428] tipc: Disabling bearer [ 173.705544][ T5439] loop3: detected capacity change from 0 to 512 [ 173.770952][ T5439] EXT4-fs (loop3): Ignoring removed bh option [ 173.875035][ T5439] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 173.962683][ T5439] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.179299][ T5449] fuse: Bad value for 'fd' [ 174.395771][ T5453] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 176.441373][ T5470] loop2: detected capacity change from 0 to 1024 [ 176.979166][ T5470] EXT4-fs (loop2): Ignoring removed orlov option [ 177.052774][ T5470] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 177.238920][ T4247] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.538888][ T4247] usb 1-1: Using ep0 maxpacket: 8 [ 177.669089][ T4247] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 177.687625][ T4247] usb 1-1: config 179 has no interface number 0 [ 177.713014][ T4247] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 177.750131][ T4247] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 177.782358][ T4247] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.830609][ T4247] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 177.871747][ T4247] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.927666][ T5503] loop3: detected capacity change from 0 to 16 [ 178.070565][ T4247] usb 1-1: config 179 interface 65 has no altsetting 0 [ 178.140561][ T4247] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 178.225000][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.818584][ T5503] erofs: (device loop3): mounted with root inode @ nid 36. [ 178.839331][ T4247] usb 1-1: can't set config #179, error -71 [ 178.878650][ T4247] usb 1-1: USB disconnect, device number 7 [ 179.090624][ T5518] loop0: detected capacity change from 0 to 1024 [ 179.218977][ T5518] EXT4-fs (loop0): Ignoring removed orlov option [ 179.498862][ T5535] Bluetooth: hci0: unsupported parameter 256 [ 179.505414][ T5535] Bluetooth: hci0: invalid len left 3, exp >= 100 [ 180.457718][ T5537] loop5: detected capacity change from 0 to 512 [ 180.476945][ T5518] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 180.594190][ T5537] EXT4-fs (loop5): 1 truncate cleaned up [ 180.608952][ T5537] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 180.635216][ T5518] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.297: unexpected EA_INODE flag [ 180.745734][ T4238] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 182.265739][ T4238] usb 3-1: device descriptor read/64, error -71 [ 182.456435][ T5548] loop0: detected capacity change from 0 to 2048 [ 182.574206][ T5548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.540082][ T5586] loop5: detected capacity change from 0 to 1024 [ 183.612974][ T5584] loop0: detected capacity change from 0 to 512 [ 183.652024][ T5586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.857553][ T146] ------------[ cut here ]------------ [ 183.863551][ T146] WARNING: CPU: 1 PID: 146 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 183.873399][ T146] Modules linked in: [ 183.877340][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 183.885311][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.895952][ T146] Workqueue: hci4 hci_conn_timeout [ 183.899972][ T5584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.901469][ T146] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 183.919132][ T146] Code: 89 8d e8 e4 69 e4 f8 48 8b 35 95 ac af 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 33 74 f8 e8 b1 65 9f f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 183.939284][ T146] RSP: 0018:ffffc900015cfc08 EFLAGS: 00010293 [ 183.945786][ T146] RAX: ffffffff88d9aa9f RBX: ffff88801ada8138 RCX: ffff888017b0bb80 [ 183.954152][ T146] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 183.962800][ T146] RBP: 00000000ffffffff R08: ffff88801ada8013 R09: 1ffff110035b5002 [ 183.984783][ T146] R10: dffffc0000000000 R11: ffffed10035b5003 R12: dffffc0000000000 [ 183.993675][ T146] R13: dffffc0000000000 R14: ffff88801ada8000 R15: ffff88801ada8010 [ 184.002565][ T146] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 184.011854][ T146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.018708][ T146] CR2: 000000110c3da808 CR3: 000000005f659000 CR4: 00000000003526e0 [ 184.028834][ T146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.037063][ T146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.045437][ T146] Call Trace: [ 184.048927][ T146] [ 184.053557][ T146] process_one_work+0x85f/0x1010 [ 184.059094][ T146] ? worker_detach_from_pool+0x240/0x240 [ 184.065014][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 184.070655][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.075952][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.081878][ T146] ? wq_worker_running+0x97/0x170 [ 184.087185][ T146] worker_thread+0xaa6/0x1290 [ 184.092384][ T146] kthread+0x436/0x520 [ 184.096739][ T146] ? rcu_lock_release+0x20/0x20 [ 184.102459][ T146] ? kthread_blkcg+0xd0/0xd0 [ 184.107331][ T146] ret_from_fork+0x1f/0x30 [ 184.112191][ T146] [ 184.115572][ T146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.122892][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 184.130397][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.140999][ T146] Workqueue: hci4 hci_conn_timeout [ 184.146146][ T146] Call Trace: [ 184.149452][ T146] [ 184.152405][ T146] dump_stack_lvl+0x188/0x250 [ 184.157115][ T146] ? show_regs_print_info+0x20/0x20 [ 184.162332][ T146] ? load_image+0x400/0x400 [ 184.166887][ T146] panic+0x2e5/0x810 [ 184.170822][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 184.175370][ T146] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 184.181034][ T146] ? __warn+0x230/0x2b0 [ 184.185216][ T146] ? hci_conn_timeout+0x24f/0x450 [ 184.190264][ T146] __warn+0x248/0x2b0 [ 184.194276][ T146] ? hci_conn_timeout+0x24f/0x450 [ 184.199323][ T146] report_bug+0x1b7/0x2e0 [ 184.203685][ T146] handle_bug+0x3a/0x70 [ 184.207865][ T146] exc_invalid_op+0x16/0x40 [ 184.212395][ T146] asm_exc_invalid_op+0x16/0x20 [ 184.217264][ T146] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 184.222923][ T146] Code: 89 8d e8 e4 69 e4 f8 48 8b 35 95 ac af 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 33 74 f8 e8 b1 65 9f f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 184.242544][ T146] RSP: 0018:ffffc900015cfc08 EFLAGS: 00010293 [ 184.248631][ T146] RAX: ffffffff88d9aa9f RBX: ffff88801ada8138 RCX: ffff888017b0bb80 [ 184.256624][ T146] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.264629][ T146] RBP: 00000000ffffffff R08: ffff88801ada8013 R09: 1ffff110035b5002 [ 184.272620][ T146] R10: dffffc0000000000 R11: ffffed10035b5003 R12: dffffc0000000000 [ 184.280613][ T146] R13: dffffc0000000000 R14: ffff88801ada8000 R15: ffff88801ada8010 [ 184.288615][ T146] ? hci_conn_timeout+0x24f/0x450 [ 184.293687][ T146] ? hci_conn_timeout+0x24f/0x450 [ 184.298848][ T146] process_one_work+0x85f/0x1010 [ 184.303842][ T146] ? worker_detach_from_pool+0x240/0x240 [ 184.309515][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 184.314835][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.319890][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.325551][ T146] ? wq_worker_running+0x97/0x170 [ 184.330613][ T146] worker_thread+0xaa6/0x1290 [ 184.335354][ T146] kthread+0x436/0x520 [ 184.339453][ T146] ? rcu_lock_release+0x20/0x20 [ 184.344343][ T146] ? kthread_blkcg+0xd0/0xd0 [ 184.348967][ T146] ret_from_fork+0x1f/0x30 [ 184.353433][ T146] [ 184.356821][ T146] Kernel Offset: disabled [ 184.361399][ T146] Rebooting in 86400 seconds..