last executing test programs: 17.369979929s ago: executing program 4 (id=89): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2) 17.354143949s ago: executing program 4 (id=90): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 17.28930228s ago: executing program 4 (id=91): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x14711, &(0x7f00000003c0)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x222a}}, {@nouid32}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x3, 0x453, &(0x7f0000000c40)="$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") 16.802326639s ago: executing program 4 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16.418015047s ago: executing program 4 (id=96): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$alg(0x26, 0x5, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) 16.101652892s ago: executing program 4 (id=101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) 15.980104564s ago: executing program 32 (id=101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) 6.013827969s ago: executing program 1 (id=200): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) 4.261972921s ago: executing program 1 (id=208): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) 3.505014285s ago: executing program 1 (id=220): inotify_init() r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) unshare(0x20000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_script(r3, 0x0, 0x0) signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r5, 0x0) 2.616177721s ago: executing program 1 (id=227): sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.214851619s ago: executing program 3 (id=232): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x7}}) 2.17249831s ago: executing program 5 (id=233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x93) 2.081988102s ago: executing program 3 (id=234): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYBLOB="aca23c8a5945c42733f53a0e856164601e6b65ba4d6476182c450bb0ccc33bb467d61494aba42ff2576a60a5e214d6dc1e961c81d5d15138fab486257e6943d1f95ae85e41a52f9360ec94bb69dcce6431e10dbd2df27cde8a437c4f5125959bea5f06f5d7ab81158aa0883f919607b3dd091ea02c58985ca311993c415ab9d30891af6ec5ef99b147ff250f", @ANYRES8=r1, @ANYRESDEC, @ANYRES16=r0, @ANYRES8], 0xfd, 0x2a2, &(0x7f0000000700)="$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") r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2.039206022s ago: executing program 5 (id=235): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000280)=""/6) 1.918781994s ago: executing program 5 (id=236): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./bus\x00', 0x800000, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") mkdir(&(0x7f0000000140)='./control\x00', 0x0) 1.840220506s ago: executing program 3 (id=237): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x1, 0x1, 0x0, 0x42}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 1.59089767s ago: executing program 5 (id=238): inotify_init() r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) unshare(0x20000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_script(r3, 0x0, 0x0) signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r5, 0x0) 1.572443231s ago: executing program 3 (id=239): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2) 1.337822625s ago: executing program 3 (id=242): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000000c80)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="0cbd5b5353912a879413ea41a5629122f6276e175b189b44b947b5ed8f34c9675196c7f420a9b4778c892a009b17763f4dbda6a421bf154a20ef7653d70337286d09a41d27fbb619ff647f585a8577dd9c318e307ee0e9c3328c5093134a7c98153b0d68aba22a65e8773fad07b59a0c5437e47d4255e1e8658b9b5a0cf45c27f88d87d58476713ea75cc39cdeb6036614e0b73cfbcd4f9243e2124d8ff5112db88857c7b69007b6ff5355f42dac04033a790725615a827b96542e64ad60984b7626cc74628d2d76b1f32df646d70aa036bc7d42fd", @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="d435d9afbeca2782ae19ed8bd41575ea7d9c9874c548e8a3b6d356a39d4518f41339a72ccd509df9e4d9d79abcc2f6da6768bd4f40d0beffba62fb5009c1e93fd4fe41778354a47dc025c852e30590bfb3cccdb6c83b0fdb27f16f03d72df1eac33d4948589efe30db71a5f7e31a303bf4ed9f3125c0a7aa0008ddaa", @ANYRESDEC], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz0\x00', {0x6, 0x5, 0x4, 0x7ff}, 0x1a, [0x10001, 0x0, 0x6, 0xfffffff7, 0xfffffff7, 0xfffffffc, 0x9, 0xc, 0xfff, 0x6, 0x10, 0x0, 0x7fffffff, 0x7, 0x3ff, 0xffffe682, 0x8, 0x19a, 0x3, 0x3, 0x5, 0x1, 0x6be2, 0x401, 0x80000000, 0x2, 0x5, 0x3, 0x0, 0x3ff, 0x80, 0x1000, 0x7f, 0x5, 0x98, 0x9, 0x4, 0x846, 0x7, 0x71c, 0x10000, 0x0, 0x3, 0x4, 0x2, 0x9, 0x5, 0x8, 0x3, 0x1, 0xc24b, 0x5e, 0x42b, 0xf3fc, 0x9, 0x7fffffff, 0x1ff, 0x0, 0x7, 0xd, 0x7f, 0x4, 0x3, 0xad], [0xfebb, 0x3d2, 0x4, 0x8, 0x80, 0x6, 0x3, 0x800, 0xc805, 0x1, 0xfffffffc, 0xb0, 0x7, 0x6, 0x63, 0x7, 0x1, 0x7ffffffe, 0x1, 0x7, 0x7, 0x9, 0x737e, 0x7, 0x8000, 0x1, 0x1000, 0x8001, 0xb, 0x5, 0x3, 0xfffffffe, 0x4, 0x0, 0x4, 0x7, 0x161c, 0xd, 0x5, 0x3ff, 0xb, 0x5a4, 0x0, 0xa99, 0x5, 0x0, 0x6, 0x8000, 0x800, 0x4, 0x7, 0x1, 0x3, 0x4, 0x10000, 0x4, 0xfffffffb, 0xff, 0x4, 0xa, 0x10, 0x6df, 0xcbf, 0xe278], [0x6, 0x5, 0x5, 0x0, 0x25, 0x2, 0x5, 0x8, 0x6, 0x7fff, 0x17ee, 0x2, 0x200, 0xf1b00000, 0x4, 0x1, 0x9, 0x2, 0x983, 0x8, 0x2, 0x40, 0x3, 0x4, 0xe, 0x3, 0x4, 0x6, 0x9, 0x7ff, 0x4092, 0x4, 0x33e, 0xae1b, 0x4, 0x5, 0x1, 0x3, 0xffffffff, 0xc, 0x0, 0x1b87, 0x1, 0x4, 0xffff0001, 0x7, 0x5, 0x4000, 0x1, 0x6, 0x8001, 0x3, 0xb, 0xcfa6, 0x1000, 0x10001, 0x91d8, 0xfffffff8, 0x6, 0xc, 0x8000, 0x45c, 0xf, 0x6], [0x6, 0x4, 0x3e3ae9e1, 0x7f, 0x3, 0x6, 0x1, 0x9, 0x8893, 0x2, 0x2ca, 0x200, 0x52, 0x9, 0x0, 0xffff, 0x5, 0x3, 0x100000, 0xff, 0x3, 0x1000, 0x2, 0x160, 0x8, 0x0, 0x4, 0xf, 0x2, 0x4, 0x2, 0x0, 0x8, 0x5, 0xd66, 0x7, 0x58f, 0x2, 0x5, 0x0, 0x80000001, 0x9, 0x80000001, 0xffffffff, 0xfffff801, 0x2, 0x94d3, 0x1, 0xfe85, 0x7, 0x3, 0x10001, 0x80, 0x9, 0x80000000, 0x4, 0xe, 0x6, 0x8, 0x10000, 0x0, 0x1, 0x101, 0x40000]}, 0x45c) ftruncate(r0, 0xd5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.273975486s ago: executing program 2 (id=243): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) 1.197983408s ago: executing program 2 (id=245): mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000300)=0x103e, 0x5, 0x6880944ea43d5904) 1.05181539s ago: executing program 2 (id=246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0) 920.933303ms ago: executing program 0 (id=248): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000440)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) 904.766353ms ago: executing program 2 (id=249): setresuid(0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 733.961637ms ago: executing program 0 (id=250): r0 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r0, 0x402c582b, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 733.849906ms ago: executing program 2 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x619, r0}, 0x38) 685.827017ms ago: executing program 0 (id=252): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2) 655.848038ms ago: executing program 5 (id=253): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000b80)='./bus\x00', 0x3200400, &(0x7f0000000bc0)=ANY=[@ANYRES16=0x0], 0x1, 0xa76, &(0x7f0000000c00)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) 566.68638ms ago: executing program 2 (id=254): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x2080) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0300000000000000000002000000038b959b3a49a5da59ebe8661a0900010073797a300000000008000340000000040900020073797a310000000014000000110001a993dcf12eee7c3a39a0595b87c880910062f0ba59e979b62844c5da67ba216e7963526fcc253dd110f6b768d33f27803f0d7336dbca86f059"], 0x5c}}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) 564.559619ms ago: executing program 0 (id=255): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x1dea0ceb1e14f21d, 0x0, &(0x7f0000000040)) 418.059622ms ago: executing program 0 (id=256): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) 345.011673ms ago: executing program 3 (id=257): unshare(0x2c020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x400}}, './control\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000003c0)={0x15, r0, 0x2}) gettid() r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r3, 0xc0185502, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdir(0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x8000002) 344.826443ms ago: executing program 5 (id=258): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4004) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x38, r4, 0x91b, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 305.235344ms ago: executing program 1 (id=259): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4080, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r3, 0x0, 0x20fffe82) 137.439517ms ago: executing program 0 (id=260): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000100)={0x0, 0x6}, 0x0, 0x0}) 0s ago: executing program 1 (id=261): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'rdma'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuacct'}, {0x2b, 'rlimit'}, {0x2d, 'blkio'}]}, 0x27) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1/../file0', [], 0xa, "b524be350e7611b133a163b4ab1b0400000000"}, 0x27) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b1794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 47.830750][ T4172] cgroup: Unknown subsys name 'net' [ 47.989826][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.183889][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.594871][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 50.609064][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 50.653362][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 50.710647][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 50.762328][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.771432][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.780023][ T4183] device bridge_slave_0 entered promiscuous mode [ 50.792737][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.799877][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.808281][ T4183] device bridge_slave_1 entered promiscuous mode [ 50.866471][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.873613][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.881501][ T4193] device bridge_slave_0 entered promiscuous mode [ 50.888712][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.895922][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.903533][ T4195] device bridge_slave_0 entered promiscuous mode [ 50.915297][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.931960][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 50.949038][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.956178][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.963776][ T4193] device bridge_slave_1 entered promiscuous mode [ 50.970962][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.978089][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.985898][ T4195] device bridge_slave_1 entered promiscuous mode [ 50.993964][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.053082][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.060362][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.068392][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.092243][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.103826][ T4183] team0: Port device team_slave_0 added [ 51.110132][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.117710][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.125855][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.134208][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.149547][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.159598][ T4183] team0: Port device team_slave_1 added [ 51.174059][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.242749][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.254018][ T4193] team0: Port device team_slave_0 added [ 51.261835][ T4193] team0: Port device team_slave_1 added [ 51.275465][ T4195] team0: Port device team_slave_0 added [ 51.281902][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.289122][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.315270][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.328870][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.351870][ T4195] team0: Port device team_slave_1 added [ 51.365494][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.372531][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.398778][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.422651][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.429833][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.438252][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.463636][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.470674][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.496932][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.508271][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.515594][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.523596][ T4187] device bridge_slave_1 entered promiscuous mode [ 51.536916][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.543860][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.570111][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.582247][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.589914][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.616039][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.629440][ T4184] team0: Port device team_slave_0 added [ 51.636985][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.643944][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.670173][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.696522][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.716105][ T4184] team0: Port device team_slave_1 added [ 51.725218][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.777055][ T4183] device hsr_slave_0 entered promiscuous mode [ 51.783705][ T4183] device hsr_slave_1 entered promiscuous mode [ 51.807360][ T4195] device hsr_slave_0 entered promiscuous mode [ 51.814103][ T4195] device hsr_slave_1 entered promiscuous mode [ 51.820842][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.828859][ T4195] Cannot create hsr debugfs directory [ 51.840339][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.847762][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.873711][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.886794][ T4187] team0: Port device team_slave_0 added [ 51.893017][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.900067][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.926120][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.948532][ T4193] device hsr_slave_0 entered promiscuous mode [ 51.955511][ T4193] device hsr_slave_1 entered promiscuous mode [ 51.961937][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.969611][ T4193] Cannot create hsr debugfs directory [ 51.977052][ T4187] team0: Port device team_slave_1 added [ 52.023614][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.030665][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.056786][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.091158][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.098270][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.125032][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.186002][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.192613][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.199861][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.207462][ T4184] Cannot create hsr debugfs directory [ 52.245228][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 52.246056][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 52.251962][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 52.267291][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.274076][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.280671][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.288747][ T4187] Cannot create hsr debugfs directory [ 52.334705][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 52.341002][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 52.492219][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.503010][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.512026][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.521115][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.580077][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.598303][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.610310][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.621463][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.651304][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.678474][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.690322][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.700349][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.711255][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.725900][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.793593][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.803520][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.813665][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.821654][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.835170][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.844024][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.851224][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.862410][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.871443][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.880002][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.887102][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.894815][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.903775][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.912373][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.920881][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.930011][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.938997][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.947509][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.956350][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.964561][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.972827][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.986141][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.994165][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.003561][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.012647][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.023459][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.058027][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.084110][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.107945][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.130234][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.138285][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.147677][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.162349][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.177866][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.193715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.204165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.213682][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.220810][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.240327][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.262457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.271207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.280050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.288952][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.296043][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.304233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.334311][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.349874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.358626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.369785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.378469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.388595][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.396726][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.430528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.439598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.448937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.458397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.487981][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.497791][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.513689][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.529116][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.545522][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.560309][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.569681][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.583588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.591451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.599714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.607958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.619581][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.629441][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.638229][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.645332][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.655628][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.681179][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.692893][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.704902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.717972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.728979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.737858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.746834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.757005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.768321][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.775426][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.789605][ T4183] device veth0_vlan entered promiscuous mode [ 53.802127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.811965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.824253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.837879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.847482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.856414][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.863443][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.872328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.880426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.888575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.898561][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.907335][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.915911][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.922952][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.932343][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.941134][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.949594][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.956673][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.970470][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.981582][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.990622][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.997707][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.006815][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.019526][ T4183] device veth1_vlan entered promiscuous mode [ 54.048505][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.057085][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.067239][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.077334][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.086689][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.095402][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.103849][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.117628][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.125742][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.133200][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.153818][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.164735][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.189349][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.201933][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.214605][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.227635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.236493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.246308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.263172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.272000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.280884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.289487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.298927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.307513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.317301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.325507][ T4223] Bluetooth: hci0: command 0x041b tx timeout [ 54.331826][ T4223] Bluetooth: hci1: command 0x041b tx timeout [ 54.332632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.338451][ T4223] Bluetooth: hci2: command 0x041b tx timeout [ 54.353043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.361703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.370397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.378850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.387986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.396737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.405428][ T4223] Bluetooth: hci3: command 0x041b tx timeout [ 54.406074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.411450][ T4223] Bluetooth: hci4: command 0x041b tx timeout [ 54.426746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.437816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.445699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.453270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.482596][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.517841][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.531440][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.559654][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.572930][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.581757][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.590301][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.598855][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.610645][ T4183] device veth0_macvtap entered promiscuous mode [ 54.633388][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.642556][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.666096][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.687979][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.702208][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.710054][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.728038][ T4183] device veth1_macvtap entered promiscuous mode [ 54.741822][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.760521][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.770635][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.792135][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.816743][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.845407][ T4195] device veth0_vlan entered promiscuous mode [ 54.856413][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.867768][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.876179][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.883889][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.906266][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.919808][ T4195] device veth1_vlan entered promiscuous mode [ 54.927965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.941512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.950335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.964711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.973404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.989770][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.008973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.020832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.037003][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.046728][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.055729][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.064536][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.100851][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.114310][ T4193] device veth0_vlan entered promiscuous mode [ 55.125954][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.134326][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.142052][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.149813][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.158171][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.167278][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.175286][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.226283][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.235812][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.244336][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.253329][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.280791][ T4193] device veth1_vlan entered promiscuous mode [ 55.288791][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.298375][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.307172][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.317841][ T4195] device veth0_macvtap entered promiscuous mode [ 55.345434][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.353754][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.360530][ T4195] device veth1_macvtap entered promiscuous mode [ 55.369720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.380166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.388766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.397020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.405267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.413927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.422373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.430745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.439086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.447527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.455843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.463539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.471770][ T4184] device veth0_vlan entered promiscuous mode [ 55.486714][ T4187] device veth0_vlan entered promiscuous mode [ 55.518974][ T4184] device veth1_vlan entered promiscuous mode [ 55.531000][ T4193] device veth0_macvtap entered promiscuous mode [ 55.543283][ T4187] device veth1_vlan entered promiscuous mode [ 55.555475][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.566305][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.577978][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.587518][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.589718][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.603843][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.611776][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.615435][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.627732][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.636250][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.646165][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.655087][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.662847][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.687786][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.700305][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.711443][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.721928][ T4193] device veth1_macvtap entered promiscuous mode [ 55.741457][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.751056][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.768247][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.786467][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.795403][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.808624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.817570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.832534][ T4184] device veth0_macvtap entered promiscuous mode [ 55.848233][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.870145][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.881008][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.894184][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.915759][ T4187] device veth0_macvtap entered promiscuous mode [ 55.931669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.940307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.954647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.963247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.979384][ T4184] device veth1_macvtap entered promiscuous mode [ 56.000533][ T4187] device veth1_macvtap entered promiscuous mode [ 56.008869][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.020864][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.031214][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.047598][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.062034][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.076637][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.088347][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.100150][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.114789][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.130059][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.146852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.159838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.168884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.178650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.187912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.197446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.215940][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.226868][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.237697][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.249733][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.259724][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.270644][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.281882][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.301331][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.313661][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.327487][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.338899][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.348771][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.359191][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.369173][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.380298][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.393343][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.402592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.404863][ T4246] Bluetooth: hci2: command 0x040f tx timeout [ 56.415834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.417334][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 56.430415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.431162][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 56.439652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.455908][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.467009][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.476891][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.487718][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.495353][ T4223] Bluetooth: hci4: command 0x040f tx timeout [ 56.497757][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.503521][ T4223] Bluetooth: hci3: command 0x040f tx timeout [ 56.514013][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.515322][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.551753][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.560760][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.570393][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.579258][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.591356][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.602485][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.612522][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.623187][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.633239][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.643893][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.655754][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.666493][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.677745][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.685336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.694045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.709060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.719104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.742932][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.753041][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.762325][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.771670][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.809784][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.828285][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.837418][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.846386][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.866920][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.875681][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.904308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.957159][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.967490][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.018832][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.057518][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.066495][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.078242][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.096450][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.105293][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.123017][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.144240][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.160828][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.163753][ T1507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.196089][ T306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.201806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.204026][ T306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.221104][ T1507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.231055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.240379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.257512][ T306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.269021][ T306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.279241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.354500][ T26] audit: type=1326 audit(1758167022.205:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.395652][ T26] audit: type=1326 audit(1758167022.215:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.449807][ T4306] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 57.486847][ T26] audit: type=1326 audit(1758167022.215:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.583875][ T26] audit: type=1326 audit(1758167022.215:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.638065][ T4312] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.686223][ T4312] overlayfs: failed to set xattr on upper [ 57.691988][ T4312] overlayfs: ...falling back to index=off,metacopy=off. [ 57.699827][ T26] audit: type=1326 audit(1758167022.215:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.779157][ T4319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8'. [ 57.799495][ T4312] overlayfs: conflicting lowerdir path [ 57.804304][ T26] audit: type=1326 audit(1758167022.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.827798][ T4239] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.839586][ T26] audit: type=1326 audit(1758167022.215:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.903588][ T26] audit: type=1326 audit(1758167022.215:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.943284][ T26] audit: type=1326 audit(1758167022.215:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 57.946154][ T4321] loop3: detected capacity change from 0 to 2048 [ 57.983923][ T26] audit: type=1326 audit(1758167022.215:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4297 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0356bafba9 code=0x7ffc0000 [ 58.027641][ T4323] sd 0:0:1:0: PR command failed: 2 [ 58.033328][ T4323] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 58.042824][ T4323] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 58.089528][ T4321] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.094583][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 58.234668][ T4239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.274196][ T4239] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 58.301012][ T4239] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 58.353485][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.378885][ T4336] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.419124][ T4239] usb 2-1: config 0 descriptor?? [ 58.435533][ T4340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 58.485086][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 58.495145][ T4223] Bluetooth: hci1: command 0x0419 tx timeout [ 58.530422][ T4223] Bluetooth: hci2: command 0x0419 tx timeout [ 58.566365][ T4239] Bluetooth: hci4: command 0x0419 tx timeout [ 58.580299][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 58.694616][ T4223] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.765136][ T4286] usb 2-1: USB disconnect, device number 2 [ 58.844698][ T4328] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.875046][ T4174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.064540][ T4223] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.084679][ T4328] usb 4-1: Using ep0 maxpacket: 16 [ 59.126227][ T4174] usb 3-1: Using ep0 maxpacket: 16 [ 59.205540][ T4328] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 59.213771][ T4328] usb 4-1: config 0 has no interface number 0 [ 59.220642][ T4328] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.231619][ T4328] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 59.241677][ T4223] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 59.250940][ T4174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.261729][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.269940][ T4174] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 59.280949][ T4223] usb 5-1: Product: syz [ 59.286361][ T4223] usb 5-1: Manufacturer: syz [ 59.291054][ T4223] usb 5-1: SerialNumber: syz [ 59.312673][ T4223] usb 5-1: config 0 descriptor?? [ 59.337102][ T4353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 59.358648][ T4223] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 59.378550][ T4353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 59.379122][ T4355] overlayfs: failed to resolve './file0': -2 [ 59.389801][ T4328] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 59.408495][ T4223] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 59.416778][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 59.429068][ T4223] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 59.443787][ T4328] usb 4-1: Product: syz [ 59.453193][ T4174] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.466684][ T4223] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 59.479982][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.488344][ T4328] usb 4-1: SerialNumber: syz [ 59.500584][ T4328] usb 4-1: config 0 descriptor?? [ 59.512755][ T4223] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 59.524869][ T4174] usb 3-1: Product: syz [ 59.529134][ T4174] usb 3-1: Manufacturer: syz [ 59.533731][ T4174] usb 3-1: SerialNumber: syz [ 59.543847][ T4223] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 59.563117][ T4223] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 59.574276][ T4223] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 59.586706][ T4328] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 59.601572][ T4357] loop0: detected capacity change from 0 to 512 [ 59.611305][ T4328] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 59.623254][ T4223] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 59.661756][ T4223] usb 5-1: USB disconnect, device number 2 [ 59.693132][ T4357] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 59.727650][ T4223] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 59.762540][ T4223] keyspan 5-1:0.0: device disconnected [ 59.797026][ T21] usb 4-1: USB disconnect, device number 2 [ 59.804608][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 59.811997][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 59.848339][ T21] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 60.224109][ T4378] netlink: 52 bytes leftover after parsing attributes in process `syz.4.29'. [ 60.396584][ T4380] sd 0:0:1:0: PR command failed: 2 [ 60.401929][ T4380] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 60.409644][ T4380] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 60.466681][ T4383] netlink: 52 bytes leftover after parsing attributes in process `syz.3.41'. [ 60.480713][ T4174] usb 3-1: USB disconnect, device number 2 [ 60.628810][ T4390] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.641615][ T4390] overlayfs: failed to set xattr on upper [ 60.650427][ T4390] overlayfs: ...falling back to index=off,metacopy=off. [ 60.926295][ T4396] overlayfs: failed to resolve './file0': -2 [ 61.027490][ T4400] loop1: detected capacity change from 0 to 16 [ 61.100794][ T4400] erofs: (device loop1): mounted with root inode @ nid 36. [ 61.214513][ T4328] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 61.284238][ T4407] loop2: detected capacity change from 0 to 2048 [ 61.372197][ T4407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.464626][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 61.542067][ T4415] loop4: detected capacity change from 0 to 512 [ 61.584788][ T4328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.615077][ T4328] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.640621][ T4328] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 61.663863][ T4415] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.682688][ T4415] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 61.722663][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.746827][ T4415] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 61.821917][ T4328] usb 4-1: config 0 descriptor?? [ 61.837568][ T4415] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.43: attempt to clear invalid blocks 2 len 1 [ 61.861520][ T4415] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.43: invalid indirect mapped block 1819239214 (level 0) [ 61.928533][ T4415] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.43: invalid indirect mapped block 1819239214 (level 1) [ 61.991015][ T4415] EXT4-fs (loop4): 1 truncate cleaned up [ 62.003594][ T4415] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,i_version,bsddf,bsdgroups,usrjquota=..,errors=continue. Quota mode: writeback. [ 62.033478][ T4433] netlink: 'syz.0.48': attribute type 3 has an invalid length. [ 62.119944][ T4415] EXT4-fs (loop4): shut down requested (2) [ 62.189133][ T4239] usb 4-1: USB disconnect, device number 3 [ 62.348590][ T4442] overlayfs: failed to resolve './file0': -2 [ 62.481283][ T4448] loop0: detected capacity change from 0 to 512 [ 62.528790][ T4448] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.549957][ T4448] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.573990][ T4448] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.589601][ T4448] EXT4-fs (loop0): 1 truncate cleaned up [ 62.596001][ T4448] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,errors=continue,lazytime,quota,,errors=continue. Quota mode: writeback. [ 62.764488][ T4174] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.772833][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 62.772846][ T26] audit: type=1400 audit(1758167027.625:53): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="&//" pid=4457 comm="syz.3.61" [ 62.784647][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 62.843978][ T4462] tipc: Can't bind to reserved service type 1 [ 62.852563][ T4460] loop2: detected capacity change from 0 to 7 [ 62.875377][ T4460] Dev loop2: unable to read RDB block 7 [ 62.908825][ T4460] loop2: unable to read partition table [ 62.915720][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880609d0000: rx timeout, send abort [ 62.920925][ T4460] loop2: partition table beyond EOD, truncated [ 62.926244][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880609d0000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.930575][ T4460] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.979117][ T3561] Dev loop2: unable to read RDB block 7 [ 62.991760][ T3561] loop2: unable to read partition table [ 62.997886][ T3561] loop2: partition table beyond EOD, truncated [ 63.035602][ T4468] overlayfs: failed to resolve './file0': -2 [ 63.039438][ T4174] usb 5-1: Using ep0 maxpacket: 8 [ 63.118796][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 63.194843][ T4239] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 63.244762][ T21] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 63.254345][ T21] usb 2-1: config 0 has no interface number 0 [ 63.262543][ T21] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 63.292280][ T21] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 63.313391][ T21] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 63.334617][ T4174] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 63.343679][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.354790][ T21] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 63.368909][ T21] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.382662][ T4174] usb 5-1: Product: syz [ 63.392295][ T4174] usb 5-1: Manufacturer: syz [ 63.397146][ T4174] usb 5-1: SerialNumber: syz [ 63.403659][ T4174] usb 5-1: config 0 descriptor?? [ 63.414230][ T4482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.421833][ T4482] IPv6: NLM_F_CREATE should be set when creating new route [ 63.474580][ T4239] usb 4-1: Using ep0 maxpacket: 8 [ 63.476423][ T4174] gspca_main: sq930x-2.14.0 probing 2770:930c [ 63.595430][ T21] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 63.614475][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.619956][ T4239] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 63.622578][ T21] usb 2-1: Product: syz [ 63.640869][ T4239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.647509][ T21] usb 2-1: Manufacturer: syz [ 63.660133][ T21] usb 2-1: SerialNumber: syz [ 63.664997][ T4239] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.665020][ T4239] usb 4-1: config 0 has no interface number 0 [ 63.687787][ T21] usb 2-1: config 0 descriptor?? [ 63.692926][ T4223] Bluetooth: hci4: command 0x0409 tx timeout [ 63.704860][ T4452] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 63.712940][ T4328] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.727659][ T4452] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 63.746313][ T21] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 63.824585][ T4239] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 63.834024][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.848494][ T4239] usb 4-1: Product: syz [ 63.852732][ T4239] usb 4-1: Manufacturer: syz [ 63.861290][ T4239] usb 4-1: SerialNumber: syz [ 63.872935][ T4239] usb 4-1: config 0 descriptor?? [ 63.914520][ T4174] gspca_sq930x: ucbus_write failed -71 [ 63.921515][ T4239] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 63.964467][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 64.084684][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.095999][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.105803][ T4328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 64.118755][ T4328] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 64.128455][ T4239] usb 4-1: USB disconnect, device number 4 [ 64.137448][ T2421] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 64.148721][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.156849][ T4174] gspca_sq930x: Sensor ov9630 not yet treated [ 64.162972][ T4174] sq930x: probe of 5-1:0.0 failed with error -22 [ 64.176202][ T2421] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 64.193208][ T4328] usb 3-1: config 0 descriptor?? [ 64.201554][ T4174] usb 5-1: USB disconnect, device number 3 [ 64.217790][ T4177] udevd[4177]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory [ 64.232414][ T4177] udevd[4177]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 64.433476][ T4496] overlayfs: failed to resolve './file1': -2 [ 64.458541][ T4478] loop2: detected capacity change from 0 to 1024 [ 64.475958][ T1324] usb 2-1: USB disconnect, device number 3 [ 64.588726][ T4504] loop4: detected capacity change from 0 to 512 [ 64.697195][ T4504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.734244][ T4504] EXT4-fs (loop4): 1 truncate cleaned up [ 64.758774][ T4504] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,noquota,inode_readahead_blks=0x0000000008000000,debug_want_extra_isize=0x0000000000000040,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 64.816505][ T4328] logitech 0003:046D:C293.0001: nested delimiters [ 64.822959][ T4328] logitech 0003:046D:C293.0001: item 0 4 2 10 parsing failed [ 64.846102][ T4328] logitech 0003:046D:C293.0001: parse failed [ 64.846458][ T4504] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.82: corrupted in-inode xattr [ 64.854736][ T4328] logitech: probe of 0003:046D:C293.0001 failed with error -22 [ 64.864629][ T4224] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.949652][ T4504] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1760: inode #15: comm syz.4.82: unable to update i_inline_off [ 64.977833][ T4504] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz.4.82: corrupted in-inode xattr [ 65.013232][ T4504] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.82: corrupted in-inode xattr [ 65.027707][ T4225] usb 3-1: USB disconnect, device number 3 [ 65.069415][ T1324] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 65.184490][ T4224] usb 1-1: Using ep0 maxpacket: 8 [ 65.238170][ T4522] overlayfs: failed to resolve './file1': -2 [ 65.314890][ T4224] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 65.371033][ T4526] loop4: detected capacity change from 0 to 512 [ 65.410170][ T4526] EXT4-fs (loop4): inline encryption not supported [ 65.426108][ T4526] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 65.447095][ T1324] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 65.455783][ T1324] usb 2-1: config 0 has no interface number 0 [ 65.507205][ T4224] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 65.517092][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.525314][ T4224] usb 1-1: Product: syz [ 65.529577][ T4224] usb 1-1: Manufacturer: syz [ 65.535889][ T4526] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.563018][ T4224] usb 1-1: SerialNumber: syz [ 65.568096][ T4526] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.583988][ T4427] hfsplus: b-tree write err: -5, ino 4 [ 65.590855][ T4224] usb 1-1: config 0 descriptor?? [ 65.614226][ T4526] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.626730][ T4526] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.91: inode #13: comm syz.4.91: iget: illegal inode # [ 65.641026][ T4526] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.91: couldn't read orphan inode 13 (err -117) [ 65.659480][ T1324] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 65.670413][ T4224] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 65.702089][ T4534] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.715450][ T4526] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none. [ 65.727292][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.754666][ T4224] usb 1-1: setting power ON [ 65.788094][ T4224] dvb-usb: bulk message failed: -22 (2/0) [ 65.798287][ T4534] overlayfs: failed to set xattr on upper [ 65.804036][ T4534] overlayfs: ...falling back to index=off,metacopy=off. [ 65.825096][ T4224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 65.840607][ T1324] usb 2-1: Product: syz [ 65.849250][ T1324] usb 2-1: Manufacturer: syz [ 65.853872][ T1324] usb 2-1: SerialNumber: syz [ 65.864160][ T4534] overlayfs: conflicting lowerdir path [ 65.873289][ T4501] dvb-usb: bulk message failed: -22 (3/0) [ 65.880372][ T4224] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 65.894336][ T4501] cxusb: i2c rd: len=4096 is too big! [ 65.894336][ T4501] [ 65.903684][ T4224] usb 1-1: media controller created [ 65.922570][ T1324] usb 2-1: config 0 descriptor?? [ 65.950256][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.003408][ T4224] usb 1-1: selecting invalid altsetting 6 [ 66.009845][ T4224] usb 1-1: digital interface selection failed (-22) [ 66.016972][ T4224] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 66.074879][ T4224] usb 1-1: setting power OFF [ 66.090907][ T4224] dvb-usb: bulk message failed: -22 (2/0) [ 66.120151][ T4224] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 66.150287][ T4224] (NULL device *): no alternate interface [ 66.233434][ T4224] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 66.304484][ T4224] usb 1-1: USB disconnect, device number 2 [ 66.463795][ T4551] comedi comedi2: dt2801: I/O port conflict (0x5,2) [ 66.553733][ T4555] overlayfs: failed to resolve './file1': -2 [ 66.559313][ T4427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.700566][ T4427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.771476][ T1324] kaweth 2-1:0.58: Firmware present in device. [ 66.808317][ T4427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.815050][ T1324] kaweth 2-1:0.58: Error reading configuration (-71), no net device created [ 66.849020][ T1324] kaweth: probe of 2-1:0.58 failed with error -5 [ 66.896522][ T1324] usb 2-1: USB disconnect, device number 4 [ 66.951687][ T4579] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.962082][ T4427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.970747][ T4579] overlayfs: failed to set xattr on upper [ 66.993863][ T4579] overlayfs: ...falling back to index=off,metacopy=off. [ 67.207330][ T4581] chnl_net:caif_netlink_parms(): no params data found [ 67.226495][ T4594] loop2: detected capacity change from 0 to 256 [ 67.255087][ T4594] exfat: Unknown parameter 'keep_last_dots' [ 67.462426][ T4604] 9pnet: p9_client_clunk (4604): Trying to clunk with invalid fid [ 67.471090][ T4604] CPU: 0 PID: 4604 Comm: syz.2.118 Not tainted syzkaller #0 [ 67.478391][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.488464][ T4604] Call Trace: [ 67.491748][ T4604] [ 67.494769][ T4604] dump_stack_lvl+0x168/0x230 [ 67.499469][ T4604] ? show_regs_print_info+0x20/0x20 [ 67.504672][ T4604] ? load_image+0x3b0/0x3b0 [ 67.509184][ T4604] ? v9fs_fid_find+0x2d1/0x320 [ 67.513968][ T4604] p9_client_clunk+0x2b3/0x380 [ 67.518745][ T4604] v9fs_statfs+0x192/0x350 [ 67.523163][ T4604] ? slab_free_freelist_hook+0xea/0x170 [ 67.528723][ T4604] ? v9fs_drop_inode+0x130/0x130 [ 67.533678][ T4604] vfs_statfs+0x13d/0x2c0 [ 67.538023][ T4604] ovl_get_lowerstack+0x1fd/0x1bf0 [ 67.543144][ T4604] ? __se_sys_mount+0x2d6/0x3c0 [ 67.548004][ T4604] ? do_syscall_64+0x4c/0xa0 [ 67.552616][ T4604] ? ovl_get_workdir+0x11a0/0x11a0 [ 67.557756][ T4604] ovl_fill_super+0x174d/0x2ae0 [ 67.562658][ T4604] ? ovl_mount+0x30/0x30 [ 67.566905][ T4604] ? preempt_count_add+0x8d/0x190 [ 67.571942][ T4604] ? sget+0x427/0x440 [ 67.575930][ T4604] ? free_anon_bdev+0x20/0x20 [ 67.580612][ T4604] ? ovl_mount+0x30/0x30 [ 67.584858][ T4604] mount_nodev+0x52/0xe0 [ 67.589107][ T4604] legacy_get_tree+0xe6/0x180 [ 67.593790][ T4604] ? virtio_fs_zero_page_range+0x120/0x120 [ 67.599608][ T4604] vfs_get_tree+0x88/0x270 [ 67.604038][ T4604] do_new_mount+0x24a/0xa40 [ 67.608559][ T4604] __se_sys_mount+0x2d6/0x3c0 [ 67.613251][ T4604] ? __x64_sys_mount+0xc0/0xc0 [ 67.618023][ T4604] ? lockdep_hardirqs_on+0x94/0x140 [ 67.623225][ T4604] ? __x64_sys_mount+0x1c/0xc0 [ 67.628006][ T4604] do_syscall_64+0x4c/0xa0 [ 67.632437][ T4604] ? clear_bhb_loop+0x30/0x80 [ 67.637117][ T4604] ? clear_bhb_loop+0x30/0x80 [ 67.641800][ T4604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.647709][ T4604] RIP: 0033:0x7fabe8985ba9 [ 67.652134][ T4604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.671742][ T4604] RSP: 002b:00007fabe6bed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.680166][ T4604] RAX: ffffffffffffffda RBX: 00007fabe8bccfa0 RCX: 00007fabe8985ba9 [ 67.688156][ T4604] RDX: 0000200000000380 RSI: 0000200000000480 RDI: 0000000000000000 [ 67.696146][ T4604] RBP: 00007fabe8a08e19 R08: 00002000000003c0 R09: 0000000000000000 [ 67.704140][ T4604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.712220][ T4604] R13: 00007fabe8bcd038 R14: 00007fabe8bccfa0 R15: 00007ffe468fe178 [ 67.720223][ T4604] [ 67.746234][ T4604] overlayfs: statfs failed on './file0' [ 67.826773][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.844092][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.871669][ T4581] device bridge_slave_0 entered promiscuous mode [ 67.898663][ T4246] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 67.958574][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.969589][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.970952][ T4629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'. [ 67.987291][ T4581] device bridge_slave_1 entered promiscuous mode [ 68.006988][ T4626] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 68.122054][ T4581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.183074][ T4581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.310464][ T4246] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.328526][ T4581] team0: Port device team_slave_0 added [ 68.344462][ T4246] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 68.358703][ T4581] team0: Port device team_slave_1 added [ 68.364538][ T4246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.377880][ T4645] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.410418][ T4246] usb 2-1: config 0 descriptor?? [ 68.423236][ T4645] overlayfs: failed to set xattr on upper [ 68.424783][ T4647] fuse: Bad value for 'fd' [ 68.432574][ T4645] overlayfs: ...falling back to index=off,metacopy=off. [ 68.449009][ T4645] overlayfs: conflicting lowerdir path [ 68.477146][ T4581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.481892][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 68.493353][ T4581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.552927][ T4653] loop3: detected capacity change from 0 to 2048 [ 68.578995][ T4581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.623993][ T4581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.631141][ T4581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.671508][ T4653] loop3: p1 p2 p3 p4 [ 68.672539][ T4581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.689895][ T4653] loop3: partition table partially beyond EOD, truncated [ 68.716815][ T4653] loop3: p1 start 33554432 is beyond EOD, truncated [ 68.749449][ T4653] loop3: p2 start 117440512 is beyond EOD, truncated [ 68.771968][ T4653] loop3: p4 start 2309 is beyond EOD, truncated [ 68.783545][ T4581] device hsr_slave_0 entered promiscuous mode [ 68.810550][ T4581] device hsr_slave_1 entered promiscuous mode [ 68.820163][ T4581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.838624][ T4581] Cannot create hsr debugfs directory [ 68.895637][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 68.934647][ T4246] pwc: recv_control_msg error -32 req 02 val 2700 [ 68.974602][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 68.988308][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 69.034605][ T4246] pwc: recv_control_msg error -32 req 04 val 1000 [ 69.051320][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 69.084635][ T4246] pwc: recv_control_msg error -32 req 04 val 1300 [ 69.123244][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 69.134767][ T4225] Bluetooth: hci2: command 0x0409 tx timeout [ 69.142435][ T4246] pwc: recv_control_msg error -32 req 04 val 1400 [ 69.205707][ T4246] pwc: recv_control_msg error -32 req 02 val 2000 [ 69.240346][ T4676] loop3: detected capacity change from 0 to 8192 [ 69.311614][ T4427] device hsr_slave_0 left promiscuous mode [ 69.326432][ T4427] device hsr_slave_1 left promiscuous mode [ 69.372191][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.388112][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.391347][ T4686] loop2: detected capacity change from 0 to 1024 [ 69.404998][ T4328] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.405312][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.420714][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.429440][ T4427] device bridge_slave_1 left promiscuous mode [ 69.457727][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.491641][ T4246] pwc: recv_control_msg error -32 req 04 val 1500 [ 69.508015][ T4427] device bridge_slave_0 left promiscuous mode [ 69.514321][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.515155][ T1507] hfsplus: b-tree write err: -5, ino 4 [ 69.554580][ T4246] pwc: recv_control_msg error -32 req 02 val 2500 [ 69.562568][ T4427] device veth1_macvtap left promiscuous mode [ 69.575793][ T4427] device veth0_macvtap left promiscuous mode [ 69.581900][ T4427] device veth1_vlan left promiscuous mode [ 69.608653][ T4246] pwc: recv_control_msg error -32 req 02 val 2400 [ 69.615167][ T4427] device veth0_vlan left promiscuous mode [ 69.670426][ T4246] pwc: recv_control_msg error -32 req 02 val 2600 [ 69.715002][ T4246] pwc: recv_control_msg error -32 req 02 val 2900 [ 69.732076][ T26] audit: type=1326 audit(1758167034.585:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.2.148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabe8985ba9 code=0x0 [ 69.764702][ T4246] pwc: recv_control_msg error -32 req 02 val 2800 [ 69.784634][ T4328] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 69.795913][ T4328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.807553][ T4328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.818236][ T4328] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 69.868124][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 69.881314][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 69.902368][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.904808][ T4328] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 69.920774][ T4328] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 69.930309][ T4328] usb 1-1: Manufacturer: syz [ 69.938546][ T4328] usb 1-1: config 0 descriptor?? [ 69.944774][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.002803][ T4427] bond0 (unregistering): Released all slaves [ 70.027863][ T4246] pwc: Registered as video103. [ 70.033455][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 70.073469][ T4700] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.102128][ T4581] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.121100][ T4581] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.137551][ T4581] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.204154][ T4581] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.233459][ T1324] usb 2-1: USB disconnect, device number 5 [ 70.401506][ T4581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.416209][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.417401][ T4328] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 70.425292][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.441393][ T4581] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.476798][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.480089][ T4328] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 70.487242][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.502602][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.509788][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.532359][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.541822][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.556722][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.576047][ T4328] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 70.577388][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.594343][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.622717][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.640977][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.682960][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.713424][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.739772][ T4286] usb 1-1: USB disconnect, device number 3 [ 70.740636][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.788563][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.813830][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.841992][ T4730] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.851060][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.859271][ T4730] overlayfs: failed to set xattr on upper [ 70.894592][ T4730] overlayfs: ...falling back to index=off,metacopy=off. [ 70.913001][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.922608][ T4730] overlayfs: conflicting lowerdir path [ 70.939509][ T4734] loop1: detected capacity change from 0 to 64 [ 70.950886][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.965380][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.977512][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.042360][ T4734] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.213748][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 71.221709][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228318][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.260584][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.268290][ T1507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.305380][ T4581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.714638][ T4328] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 71.756291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.775645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.859997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.882482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.905852][ T4581] device veth0_vlan entered promiscuous mode [ 71.922106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.932239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.966864][ T4581] device veth1_vlan entered promiscuous mode [ 72.004168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.030795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.048493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.060693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.078293][ T4581] device veth0_macvtap entered promiscuous mode [ 72.095148][ T4328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.117282][ T4328] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 72.122272][ T4581] device veth1_macvtap entered promiscuous mode [ 72.129001][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.151545][ T4328] usb 2-1: config 0 descriptor?? [ 72.185132][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.198429][ T4328] pwc: Askey VC010 type 2 USB webcam detected. [ 72.211741][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.232915][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.252117][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.270331][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.281175][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.296381][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.310123][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.340249][ T4581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.363645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.378886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.419595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.436447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.439358][ T4786] Set syz1 is full, maxelem 6117 reached [ 72.458093][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.474032][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.499431][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.535833][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.546589][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.557624][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.568595][ T4581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.580439][ T4581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.596893][ T4581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.613128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.656574][ T4791] loop2: detected capacity change from 0 to 8 [ 72.657940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.723091][ T4581] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.739677][ T4581] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.750191][ T4581] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.834051][ T4581] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.875245][ T4328] pwc: recv_control_msg error -32 req 02 val 2700 [ 72.919213][ T4328] pwc: recv_control_msg error -32 req 02 val 2c00 [ 72.930467][ T4800] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.967489][ T4328] pwc: recv_control_msg error -32 req 04 val 1000 [ 72.990341][ T4800] overlayfs: failed to set xattr on upper [ 73.004826][ T4328] pwc: recv_control_msg error -71 req 04 val 1300 [ 73.012617][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.037274][ T4800] overlayfs: ...falling back to index=off,metacopy=off. [ 73.038668][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.059316][ T4328] pwc: recv_control_msg error -71 req 04 val 1400 [ 73.072138][ T4800] overlayfs: conflicting lowerdir path [ 73.084524][ T4328] pwc: recv_control_msg error -71 req 02 val 2000 [ 73.106970][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.122332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.134591][ T4328] pwc: recv_control_msg error -71 req 02 val 2100 [ 73.141270][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.160420][ T4328] pwc: recv_control_msg error -71 req 04 val 1500 [ 73.189590][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.227663][ T4328] pwc: recv_control_msg error -71 req 02 val 2500 [ 73.244661][ T4328] pwc: recv_control_msg error -71 req 02 val 2400 [ 73.266007][ T4328] pwc: recv_control_msg error -71 req 02 val 2600 [ 73.284826][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 73.292684][ T4328] pwc: recv_control_msg error -71 req 02 val 2900 [ 73.304157][ T4814] loop3: detected capacity change from 0 to 1024 [ 73.354489][ T4328] pwc: recv_control_msg error -71 req 02 val 2800 [ 73.374547][ T4328] pwc: recv_control_msg error -71 req 04 val 1100 [ 73.399570][ T4328] pwc: recv_control_msg error -71 req 04 val 1200 [ 73.435978][ T4328] pwc: Registered as video103. [ 73.441762][ T4328] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 73.448835][ T4825] loop5: detected capacity change from 0 to 2048 [ 73.554620][ T4328] usb 2-1: USB disconnect, device number 6 [ 73.558781][ T4825] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 73.587898][ T4814] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.607790][ T4825] UDF-fs: Scanning with blocksize 512 failed [ 73.624998][ T4814] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.628599][ T4831] loop2: detected capacity change from 0 to 128 [ 73.671263][ T4825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.706355][ T4831] ======================================================= [ 73.706355][ T4831] WARNING: The mand mount option has been deprecated and [ 73.706355][ T4831] and is ignored by this kernel. Remove the mand [ 73.706355][ T4831] option from the mount to silence this warning. [ 73.706355][ T4831] ======================================================= [ 73.706640][ T4832] hfsplus: request for non-existent node 33423360 in B*Tree [ 73.927160][ T4831] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000010000,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 73.944619][ T4831] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.947801][ T4832] hfsplus: request for non-existent node 33423360 in B*Tree [ 74.012987][ T4834] hfsplus: request for non-existent node 33423360 in B*Tree [ 74.022130][ T4834] hfsplus: request for non-existent node 33423360 in B*Tree [ 74.262587][ T4860] loop3: detected capacity change from 0 to 1024 [ 74.339989][ T4872] loop5: detected capacity change from 0 to 8 [ 74.379632][ T4860] EXT4-fs (loop3): Ignoring removed bh option [ 74.439811][ T4860] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 74.506135][ T4881] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.532001][ T4881] overlayfs: failed to set xattr on upper [ 74.538251][ T4881] overlayfs: ...falling back to index=off,metacopy=off. [ 74.554239][ T26] audit: type=1804 audit(1758167039.405:55): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.180" name="/newroot/29/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 74.614743][ T1324] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 74.938419][ T4896] syz.3.189 uses obsolete (PF_INET,SOCK_PACKET) [ 74.997384][ T1324] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.019260][ T1324] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.029917][ T1324] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.039196][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.065940][ T4869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.273314][ T4908] loop2: detected capacity change from 0 to 64 [ 75.302816][ T4903] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.333422][ T1324] usb 2-1: USB disconnect, device number 7 [ 75.364594][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 76.129807][ T4916] loop1: detected capacity change from 0 to 256 [ 76.150892][ T3084] attempt to access beyond end of device [ 76.150892][ T3084] loop2: rw=1, want=4169, limit=64 [ 76.165354][ T3084] attempt to access beyond end of device [ 76.165354][ T3084] loop2: rw=1, want=4170, limit=64 [ 76.176940][ T3084] Buffer I/O error on dev loop2, logical block 4169, lost async page write [ 76.223280][ T3084] attempt to access beyond end of device [ 76.223280][ T3084] loop2: rw=1, want=4171, limit=64 [ 76.235336][ T3084] Buffer I/O error on dev loop2, logical block 4170, lost async page write [ 76.244011][ T3084] attempt to access beyond end of device [ 76.244011][ T3084] loop2: rw=1, want=4173, limit=64 [ 76.255081][ T3084] Buffer I/O error on dev loop2, logical block 4172, lost async page write [ 76.327773][ T1108] cfg80211: failed to load regulatory.db [ 76.337275][ T3084] attempt to access beyond end of device [ 76.337275][ T3084] loop2: rw=1, want=4174, limit=64 [ 76.360594][ T3084] Buffer I/O error on dev loop2, logical block 4173, lost async page write [ 76.369329][ T3084] attempt to access beyond end of device [ 76.369329][ T3084] loop2: rw=1, want=4175, limit=64 [ 76.380185][ T3084] Buffer I/O error on dev loop2, logical block 4174, lost async page write [ 76.388878][ T3084] attempt to access beyond end of device [ 76.388878][ T3084] loop2: rw=1, want=4176, limit=64 [ 76.399534][ T3084] Buffer I/O error on dev loop2, logical block 4175, lost async page write [ 76.414601][ T3084] attempt to access beyond end of device [ 76.414601][ T3084] loop2: rw=1, want=4177, limit=64 [ 76.434469][ T3084] Buffer I/O error on dev loop2, logical block 4176, lost async page write [ 76.453379][ T3084] attempt to access beyond end of device [ 76.453379][ T3084] loop2: rw=1, want=4178, limit=64 [ 76.474428][ T3084] Buffer I/O error on dev loop2, logical block 4177, lost async page write [ 76.532379][ T3084] attempt to access beyond end of device [ 76.532379][ T3084] loop2: rw=1, want=4194, limit=64 [ 76.594322][ T3084] Buffer I/O error on dev loop2, logical block 4196, lost async page write [ 76.657911][ T3084] Buffer I/O error on dev loop2, logical block 4197, lost async page write [ 76.741729][ T4929] loop3: detected capacity change from 0 to 16 [ 76.808001][ T4929] erofs: (device loop3): mounted with root inode @ nid 36. [ 76.984813][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 77.183500][ T4903] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.278570][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 77.291619][ T4903] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.317609][ T4933] process 'syz.2.196' launched '/dev/fd/3' with NULL argv: empty string added [ 77.396643][ T4903] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.425832][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.441794][ T7] usb 2-1: config 0 has no interface number 0 [ 77.453940][ T7] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.472537][ T7] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.482501][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.494996][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.512190][ T7] usb 2-1: config 0 descriptor?? [ 77.541850][ T4903] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.554257][ T4903] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.572468][ T4903] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.589121][ T7] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 77.600026][ T4942] overlayfs: failed to clone upperpath [ 77.621990][ T4903] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.661592][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 77.671583][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 77.680456][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 77.777067][ T13] xfrm0 speed is unknown, defaulting to 1000 [ 77.787372][ T4328] usb 2-1: USB disconnect, device number 8 [ 77.788195][ T4945] infiniband syz0: set active [ 77.803882][ T4945] infiniband syz0: added xfrm0 [ 77.874320][ T4945] RDS/IB: syz0: added [ 77.878963][ T4945] smc: adding ib device syz0 with port count 1 [ 77.890269][ T4945] smc: ib device syz0 port 1 has pnetid [ 77.899822][ T7] xfrm0 speed is unknown, defaulting to 1000 [ 77.911042][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 78.007019][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 78.131123][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 78.376511][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 78.552269][ T4945] xfrm0 speed is unknown, defaulting to 1000 [ 78.701743][ T4971] xfrm0 speed is unknown, defaulting to 1000 [ 78.708553][ T4174] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 78.740116][ T4990] overlayfs: missing 'lowerdir' [ 78.963370][ T4328] kernel write not supported for file /input/mouse0 (pid: 4328 comm: kworker/1:7) [ 79.094816][ T4174] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 79.124889][ T4174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.162168][ T4174] usb 6-1: config 0 descriptor?? [ 79.179522][ T146] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 79.245547][ T4174] cp210x 6-1:0.0: cp210x converter detected [ 79.268902][ T5017] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.284100][ T5017] overlayfs: failed to set xattr on upper [ 79.293504][ T5017] overlayfs: ...falling back to index=off,metacopy=off. [ 79.464587][ T4174] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 79.471933][ T4174] cp210x 6-1:0.0: querying part number failed [ 79.497539][ T4174] usb 6-1: cp210x converter now attached to ttyUSB0 [ 79.524803][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.667050][ T13] usb 6-1: USB disconnect, device number 2 [ 79.701523][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 79.728670][ T13] cp210x 6-1:0.0: device disconnected [ 79.889897][ T7] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 79.909313][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.937382][ T7] usb 1-1: config 0 descriptor?? [ 79.991719][ T7] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 80.016449][ T5026] overlayfs: missing 'lowerdir' [ 80.235714][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 80.270523][ T5040] loop5: detected capacity change from 0 to 128 [ 80.286916][ T5040] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.326456][ T5040] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.354498][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 80.549037][ T5048] loop3: detected capacity change from 0 to 64 [ 80.639820][ T7] gspca_sunplus: reg_w_riv err -71 [ 80.645463][ T7] sunplus: probe of 1-1:0.0 failed with error -71 [ 80.668568][ T26] audit: type=1800 audit(1758167045.525:56): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.234" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 80.718964][ T7] usb 1-1: USB disconnect, device number 4 [ 80.769638][ T5052] loop5: detected capacity change from 0 to 2048 [ 80.776467][ T13] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 80.789724][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.889073][ T5052] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 80.915181][ T5052] UDF-fs: Scanning with blocksize 512 failed [ 80.932261][ T5052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.941434][ T13] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 80.952903][ T13] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 80.961433][ T13] usb 2-1: Manufacturer: syz [ 81.011452][ T13] usb 2-1: config 0 descriptor?? [ 81.148478][ T5062] overlayfs: missing 'lowerdir' [ 81.193598][ T5064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.221149][ T5064] overlayfs: failed to set xattr on upper [ 81.224521][ T13] rc_core: IR keymap rc-hauppauge not found [ 81.235191][ T13] Registered IR keymap rc-empty [ 81.247971][ T5064] overlayfs: ...falling back to index=off,metacopy=off. [ 81.252698][ T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 81.276024][ T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 81.291572][ T5064] overlayfs: conflicting lowerdir path [ 81.432454][ T5071] loop3: detected capacity change from 0 to 4096 [ 81.500772][ T5071] NILFS (loop3): invalid segment: Checksum error in segment payload [ 81.529999][ T5071] NILFS (loop3): trying rollback from an earlier position [ 81.606689][ T5071] NILFS (loop3): recovery complete [ 81.652064][ T5079] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.799829][ T4328] usb 2-1: USB disconnect, device number 9 [ 81.982315][ T5093] overlayfs: missing 'lowerdir' [ 82.053859][ T5095] loop5: detected capacity change from 0 to 2048 [ 82.188025][ T5100] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.191530][ T5103] capability: warning: `syz.0.256' uses 32-bit capabilities (legacy support in use) [ 82.212583][ T5098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'. [ 82.231764][ T26] audit: type=1800 audit(1758167047.085:57): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.253" name="bus" dev="loop5" ino=2097152 res=0 errno=0 [ 82.390370][ T5105] loop1: detected capacity change from 0 to 64 [ 82.537687][ T26] audit: type=1800 audit(1758167047.395:58): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.259" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 82.640598][ T144] ------------[ cut here ]------------ [ 82.644645][ T26] audit: type=1800 audit(1758167047.415:59): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.259" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 82.674260][ T144] kernel BUG at fs/hfs/inode.c:447! [ 82.701696][ T144] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 82.707980][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 82.715439][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.725486][ T144] Workqueue: writeback wb_workfn (flush-7:1) [ 82.731585][ T144] RIP: 0010:hfs_write_inode+0x964/0x970 [ 82.737116][ T144] Code: 8f ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 a6 07 8f ff e9 51 fe ff ff e8 9c 9f 4a ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 82.756805][ T144] RSP: 0018:ffffc900016cf3c0 EFLAGS: 00010293 [ 82.762855][ T144] RAX: ffffffff822d2b84 RBX: ffff888020eb2898 RCX: ffff8880187dbb80 [ 82.770811][ T144] RDX: 0000000000000000 RSI: ffffffff8c2e01a0 RDI: 0000000000000000 [ 82.778762][ T144] RBP: ffffc900016cf550 R08: ffff8880187dbb80 R09: 0000000000000003 [ 82.787074][ T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 82.795026][ T144] R13: 1ffff920002d9e7c R14: 0000000000000000 R15: ffff888020eb2858 [ 82.802981][ T144] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 82.811891][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.818456][ T144] CR2: 00007f7d2a50a698 CR3: 0000000064631000 CR4: 00000000003506f0 [ 82.826411][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.834391][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.842344][ T144] Call Trace: [ 82.845607][ T144] [ 82.848518][ T144] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 82.853876][ T144] ? __writeback_single_inode+0x471/0xda0 [ 82.859577][ T144] ? __rwlock_init+0x140/0x140 [ 82.864319][ T144] ? __lock_acquire+0x7c60/0x7c60 [ 82.869325][ T144] __writeback_single_inode+0x6c3/0xda0 [ 82.874851][ T144] writeback_sb_inodes+0x9fe/0x1610 [ 82.880033][ T144] ? queue_io+0x550/0x550 [ 82.884371][ T144] ? rcu_is_watching+0x11/0xa0 [ 82.889118][ T144] wb_writeback+0x443/0xb90 [ 82.893603][ T144] ? rcu_lock_release+0x20/0x20 [ 82.898429][ T144] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.904391][ T144] ? mark_lock+0x94/0x320 [ 82.908699][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 82.913883][ T144] wb_workfn+0x423/0xe60 [ 82.918113][ T144] ? inode_wait_for_writeback+0x200/0x200 [ 82.923816][ T144] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.929775][ T144] ? read_lock_is_recursive+0x10/0x10 [ 82.935136][ T144] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 82.941017][ T144] ? _raw_spin_unlock+0x40/0x40 [ 82.945851][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 82.951030][ T144] process_one_work+0x863/0x1000 [ 82.955953][ T144] ? worker_detach_from_pool+0x240/0x240 [ 82.961564][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 82.966829][ T144] ? _raw_spin_lock_irq+0xab/0xe0 [ 82.971832][ T144] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 82.977185][ T144] ? wq_worker_running+0x97/0x170 [ 82.982188][ T144] worker_thread+0xaa8/0x12a0 [ 82.986854][ T144] kthread+0x436/0x520 [ 82.990901][ T144] ? rcu_lock_release+0x20/0x20 [ 82.995728][ T144] ? kthread_blkcg+0xd0/0xd0 [ 83.000295][ T144] ret_from_fork+0x1f/0x30 [ 83.004694][ T144] [ 83.007706][ T144] Modules linked in: [ 83.016157][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.047611][ T144] ---[ end trace 85860254e04f05f2 ]--- [ 83.053154][ T144] RIP: 0010:hfs_write_inode+0x964/0x970 [ 83.059380][ T144] Code: 8f ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 a6 07 8f ff e9 51 fe ff ff e8 9c 9f 4a ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 83.080828][ T144] RSP: 0018:ffffc900016cf3c0 EFLAGS: 00010293 [ 83.089138][ T144] RAX: ffffffff822d2b84 RBX: ffff888020eb2898 RCX: ffff8880187dbb80 [ 83.101626][ T144] RDX: 0000000000000000 RSI: ffffffff8c2e01a0 RDI: 0000000000000000 [ 83.109882][ T144] RBP: ffffc900016cf550 R08: ffff8880187dbb80 R09: 0000000000000003 [ 83.120205][ T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 83.129590][ T144] R13: 1ffff920002d9e7c R14: 0000000000000000 R15: ffff888020eb2858 [ 83.139229][ T144] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 83.148310][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.156504][ T144] CR2: 0000000000000000 CR3: 000000007eb0c000 CR4: 00000000003506e0 [ 83.164598][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.172617][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.182261][ T144] Kernel panic - not syncing: Fatal exception [ 83.188505][ T144] Kernel Offset: disabled [ 83.192817][ T144] Rebooting in 86400 seconds..