last executing test programs: 26.371829431s ago: executing program 0 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) setrlimit(0x8, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040), 0x0) pipe2$9p(&(0x7f0000000180), 0x0) 25.417120448s ago: executing program 0 (id=626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, &(0x7f00000004c0)=""/72, &(0x7f0000000740)="effc933fe97c092030c80851ca0cc117e36a7e03595e3af0c20ebb7e88059987afe046f064cfa53bb46c81b7863201e3f14db67db895893f0f", &(0x7f00000007c0)="df74c55f844757ee72779411b6043dd1c270b9048ad1f690a1dd3174496dc63d4f16ba8ef113afbf4139d33458e94867b75fd01544123aeb56aa0f50817c7bb7eef34c440e32c12df88697d1ffa6fe1a918b750f3768ac90aaa83e573281748a56722a4805f9", 0x1, 0xffffffffffffffff, 0x4}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, 0xffffffffffffffff, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}]) 14.111074951s ago: executing program 4 (id=643): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) close(r0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xf8, 0x8, 0x4, 0x6, {0x8, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x1, 0x1, 0x0, 0xfffe, 0x8, 0x6, 0xffffffff, 0x77, "ba9a42182e2cbb318719fb31f6699332292cc81f89f0758000"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 13.528966908s ago: executing program 0 (id=646): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) mbind(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0xaf, 0x8, 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 11.869930552s ago: executing program 4 (id=649): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) mbind(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0xaf, 0x8, 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x40000001) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 11.728033903s ago: executing program 0 (id=650): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0xc9}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 11.164930539s ago: executing program 4 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000005c0)={{0x7, 0x2, 0xb175, 0x1, 'syz1\x00', 0x9f}, 0x1, [0x0, 0x4, 0x3, 0x4, 0x6, 0x5, 0x40, 0xfffffffffffffffb, 0x2, 0x0, 0x480000000000, 0x8, 0x80, 0x6, 0x7, 0x2, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x7f, 0x2, 0x6, 0x7326, 0x6, 0x8e17, 0x619, 0x6657, 0x1, 0x6, 0xd, 0x8, 0x100000001, 0x6, 0x0, 0x7fffffff, 0x5, 0x0, 0x7fff, 0x8000, 0x5, 0x5b1e, 0x4ced, 0x1, 0x80000001, 0x80, 0x8, 0x4, 0x0, 0x1000, 0x390, 0x6, 0x3, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3e, 0x10, 0x46, 0x1, 0xfffffffffffffbff, 0xffffffffffff0001, 0x5, 0x8, 0x3, 0x3, 0x6, 0x4, 0xff, 0x7, 0x2493, 0xc, 0xe, 0xc5, 0x2, 0x0, 0x0, 0x5, 0x8, 0x9, 0xfff, 0x100, 0x2, 0x2, 0x81, 0x9, 0x5, 0x7, 0x2, 0x3, 0x9, 0x4, 0x8e9, 0x7, 0x1, 0x6, 0x100010000000, 0x2, 0xacc, 0x906d, 0xb, 0x10001, 0x9, 0x7, 0xfffffffffffffffe, 0x2f80, 0x0, 0xb3af, 0x80000001, 0xfffffffeffffffff, 0x2, 0x1, 0x5, 0x4, 0x8, 0x85a, 0xffffffffffff4e0a, 0x0, 0x200, 0x9, 0x1, 0x10000, 0x8, 0x2, 0x6, 0xd491]}) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x809, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYBLOB="8dc89e7744fa9283c8fa8c347820bdca1970caa5351156b73b183e1dc9fbec51f67262d0581ba26188990a74a6c6019862883960ebdace93bbf50ef802a5cdd5b03697b62f712512c7fe60cf519a4e60ca1894b0469dde3b32722ee8a3ea588ce873083729be815cc269c3"], 0xff, 0x210, &(0x7f0000000440)="$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") 9.672268799s ago: executing program 1 (id=654): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375af12f2cf2e3a00"], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x300, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 7.740604055s ago: executing program 3 (id=655): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101a02, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) 7.43278663s ago: executing program 4 (id=656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) mbind(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0xaf, 0x8, 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x40000001) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 7.365789445s ago: executing program 2 (id=657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r5, 0x1000) sigaltstack(&(0x7f0000000080)={0x0}, 0x0) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 6.416646492s ago: executing program 2 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/129, 0x81) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',group_id']) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x94) 6.164525422s ago: executing program 1 (id=659): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9200a0006000200"], 0xf) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}, {0x0, 0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000280)) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000000180)='./file0\x00') quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000000240)) 6.054752761s ago: executing program 2 (id=660): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) mbind(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0xaf, 0x8, 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 5.189423281s ago: executing program 4 (id=661): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.187135521s ago: executing program 3 (id=671): fanotify_mark(0xffffffffffffffff, 0x80, 0x8, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$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") 4.932013432s ago: executing program 1 (id=662): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) mbind(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0xaf, 0x8, 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x40000001) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 4.219719959s ago: executing program 3 (id=663): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) close(r0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xf8, 0x8, 0x4, 0x6, {0x8, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x1, 0x1, 0x0, 0xfffe, 0x8, 0x6, 0xffffffff, 0x77, "ba9a42182e2cbb318719fb31f6699332292cc81f89f0758000"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.046194833s ago: executing program 0 (id=664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) mbind(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0xaf, 0x8, 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x40000001) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 4.045942263s ago: executing program 1 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r5, 0x1000) sigaltstack(&(0x7f0000000080)={0x0}, 0x0) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 3.061980423s ago: executing program 1 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) setrlimit(0x8, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r4, 0x4e, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './file0'}, 0xb) 2.190396193s ago: executing program 1 (id=667): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000007000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000e1ffffff00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x2, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1c, 0xe) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 1.540784006s ago: executing program 4 (id=668): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c367634b7aac63a01000000000000004faa2ae2c084a0ea00ffffffffffffff7f0c00002000", "036c47c6335263a3bcef549ba197fce47ddfdd753abd9501ff00000000e8f20000000200000042e377d2eb637b4a73610200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.288533476s ago: executing program 3 (id=669): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0x604, 0x0) eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x301000, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x80003) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000002c0)={0x44, 0x2, {0x2, 0x0, 0xfffffffb, 0x3, 0x2}, 0x7ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0xc, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x15, 0x5, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x800, 0x0) setpriority(0x0, 0x0, 0x1fb) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000010000000000000000000018", @ANYRES32=r7, @ANYRESHEX=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.084157522s ago: executing program 2 (id=670): socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x12022) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x1, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x1, 0x0, 0x40}}, @TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001100c9a3e2dc7e2cbd7000fedbdf25fe8000000000000000ee2000ec4000bb130004d60aeb32000c0015005d0735006e000000"], 0x34}}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 489.86212ms ago: executing program 3 (id=672): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}, r1}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(r3, &(0x7f0000001540), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000240)={0x20000006}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000007c0)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0xbffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x454}, {0x2, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x21}, 0x5852}, r1, 0xd}}, 0x48) 371.35676ms ago: executing program 0 (id=673): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, &(0x7f00000004c0)=""/72, &(0x7f0000000740)="effc933fe97c092030c80851ca0cc117e36a7e03595e3af0c20ebb7e88059987afe046f064cfa53bb46c81b7863201e3f14db67db895893f0f", &(0x7f00000007c0)="df74c55f844757ee72779411b6043dd1c270b9048ad1f690a1dd3174496dc63d4f16ba8ef113afbf4139d33458e94867b75fd01544123aeb56aa0f50817c7bb7eef34c440e32c12df88697d1ffa6fe1a918b750f3768ac90aaa83e573281748a56722a4805f9", 0x1, 0xffffffffffffffff, 0x4}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, 0xffffffffffffffff, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}]) 317.466374ms ago: executing program 3 (id=674): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9200a0006000200"], 0xf) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}, {0x0, 0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000280)) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000000180)='./file0\x00') quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000000240)) 184.647905ms ago: executing program 2 (id=675): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) mbind(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0xaf, 0x8, 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x40000001) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 0s ago: executing program 2 (id=676): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000001900), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x1d0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xe0, r0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x1d, 0x2, 0x6) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 52.102490][ T4254] cgroup: Unknown subsys name 'net' [ 52.229406][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.448623][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.272895][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.283050][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.293495][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.300982][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.309163][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.316723][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.321325][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.323942][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.331200][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.339563][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.345279][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.352583][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.359288][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.373885][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.374204][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.381939][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.388694][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.395582][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.409546][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.409918][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.418219][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.424835][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.431280][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.438263][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.445348][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.452580][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.487117][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.495215][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.502801][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.510104][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.890975][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 56.006353][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 56.043009][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 56.067316][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 56.084471][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 56.117726][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.125494][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.133597][ T4275] device bridge_slave_0 entered promiscuous mode [ 56.165846][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.172964][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.181145][ T4275] device bridge_slave_1 entered promiscuous mode [ 56.202905][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.210043][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.217802][ T4264] device bridge_slave_0 entered promiscuous mode [ 56.249673][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.256811][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.265263][ T4264] device bridge_slave_1 entered promiscuous mode [ 56.288757][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.318520][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.334979][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.377058][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.386316][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.393382][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.401437][ T4274] device bridge_slave_0 entered promiscuous mode [ 56.420631][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.427983][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.435979][ T4271] device bridge_slave_0 entered promiscuous mode [ 56.448414][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.455819][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.463392][ T4274] device bridge_slave_1 entered promiscuous mode [ 56.470384][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.477719][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.485786][ T4265] device bridge_slave_0 entered promiscuous mode [ 56.495615][ T4275] team0: Port device team_slave_0 added [ 56.501632][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.511403][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.519148][ T4265] device bridge_slave_1 entered promiscuous mode [ 56.528731][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.535930][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.543535][ T4271] device bridge_slave_1 entered promiscuous mode [ 56.570467][ T4275] team0: Port device team_slave_1 added [ 56.590352][ T4264] team0: Port device team_slave_0 added [ 56.621091][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.631274][ T4264] team0: Port device team_slave_1 added [ 56.638850][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.656869][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.667304][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.684782][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.702215][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.709391][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.735331][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.748416][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.778583][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.785646][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.811663][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.823084][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.830349][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.856786][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.894824][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.901794][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.928203][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.948645][ T4265] team0: Port device team_slave_0 added [ 56.956791][ T4271] team0: Port device team_slave_0 added [ 56.964758][ T4274] team0: Port device team_slave_0 added [ 56.971493][ T4271] team0: Port device team_slave_1 added [ 56.997379][ T4265] team0: Port device team_slave_1 added [ 57.003616][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.011155][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.037424][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.049747][ T4274] team0: Port device team_slave_1 added [ 57.088843][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.096087][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.122620][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.150645][ T4275] device hsr_slave_0 entered promiscuous mode [ 57.157856][ T4275] device hsr_slave_1 entered promiscuous mode [ 57.172883][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.179940][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.206034][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.229820][ T4264] device hsr_slave_0 entered promiscuous mode [ 57.237111][ T4264] device hsr_slave_1 entered promiscuous mode [ 57.243636][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.251561][ T4264] Cannot create hsr debugfs directory [ 57.266405][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.273374][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.299613][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.314592][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.321550][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.348044][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.360207][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.367290][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.393287][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.491190][ T4265] device hsr_slave_0 entered promiscuous mode [ 57.497862][ T4265] device hsr_slave_1 entered promiscuous mode [ 57.504681][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.512238][ T4265] Cannot create hsr debugfs directory [ 57.521003][ T4271] device hsr_slave_0 entered promiscuous mode [ 57.527955][ T4271] device hsr_slave_1 entered promiscuous mode [ 57.534797][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.542346][ T4271] Cannot create hsr debugfs directory [ 57.555023][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 57.557453][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 57.561817][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 57.567340][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 57.567460][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 57.644234][ T4274] device hsr_slave_0 entered promiscuous mode [ 57.650938][ T4274] device hsr_slave_1 entered promiscuous mode [ 57.660162][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.667778][ T4274] Cannot create hsr debugfs directory [ 57.876768][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.886859][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.901893][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.919181][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.966236][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.989436][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.999886][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.021019][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.096556][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.105871][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.122631][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.131208][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.197046][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.210104][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.222201][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.240904][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.252480][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.277309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.286638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.303918][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.313654][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.329455][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.338318][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.350089][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.373496][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.388038][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.398435][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.408081][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.415304][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.423875][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.456507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.465936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.475359][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.482422][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.492438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.500539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.530063][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.541325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.551392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.560619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.570734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.582381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.612016][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.620100][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.630157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.638908][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.646001][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.655016][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.663517][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.672075][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.681093][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.689607][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.696725][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.726459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.735144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.743406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.753637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.765017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.775676][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.806735][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.816843][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.825039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.851260][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.875927][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.887348][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.902949][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.913022][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.928176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.937514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.946176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.954593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.962804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.976674][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.987560][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.005600][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.013545][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.050095][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.080493][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.087677][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.101387][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.111005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.125102][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.132200][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.140704][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.158947][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.183228][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.203899][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.226116][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.241403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.270927][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.288909][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.296946][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.308604][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.318677][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.335206][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.343671][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.351854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.360693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.376070][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.394198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.402813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.412628][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.419764][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.428634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.437185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.445712][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.454934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.463429][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.471231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.478956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.492460][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.502139][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.510681][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.517757][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.530344][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.544684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.556308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.565502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.574019][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.581107][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.620590][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.631375][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.642429][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 59.642447][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 59.648476][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 59.648504][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 59.648550][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 59.675234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.689044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.700736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.709447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.718367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.728316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.737249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.745943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.754464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.762722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.771516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.780321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.789034][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.796191][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.805194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.812977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.821238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.829159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.842830][ T4275] device veth0_vlan entered promiscuous mode [ 59.866609][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.885818][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.894934][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.914725][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.934492][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.948197][ T4275] device veth1_vlan entered promiscuous mode [ 59.959124][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.972582][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.016564][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.046484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.059072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.095022][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.112246][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.131296][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.151749][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.173571][ T4275] device veth0_macvtap entered promiscuous mode [ 60.191359][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.216020][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.230248][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.256297][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.276380][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.295906][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.305209][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.313721][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.323279][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.337701][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.348226][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.376914][ T4275] device veth1_macvtap entered promiscuous mode [ 60.403837][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.419966][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.432337][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.503574][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.529583][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.553321][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.562819][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.570845][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.585763][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.596688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.615681][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.630151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.639927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.657044][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.670762][ T4264] device veth0_vlan entered promiscuous mode [ 60.681234][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.691264][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.700811][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.709882][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.722803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.737660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.759383][ T4264] device veth1_vlan entered promiscuous mode [ 60.790046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.798921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.808109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.816185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.823565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.832585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.842714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.850336][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.863478][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.902056][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.919563][ T4265] device veth0_vlan entered promiscuous mode [ 60.965283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.976790][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.986090][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.995103][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.003681][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.012292][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.020990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.030016][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.039384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.047403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.060427][ T4265] device veth1_vlan entered promiscuous mode [ 61.075511][ T4264] device veth0_macvtap entered promiscuous mode [ 61.086287][ T4264] device veth1_macvtap entered promiscuous mode [ 61.109705][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.118672][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.156322][ T4274] device veth0_vlan entered promiscuous mode [ 61.169808][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.178242][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.186076][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.195897][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.204500][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.212724][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.227258][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.242265][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.253290][ T4271] device veth0_vlan entered promiscuous mode [ 61.262898][ T4274] device veth1_vlan entered promiscuous mode [ 61.269796][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.279225][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.289310][ T4265] device veth0_macvtap entered promiscuous mode [ 61.301665][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.312924][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.325053][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.339348][ T4271] device veth1_vlan entered promiscuous mode [ 61.354400][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.362445][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.370393][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.379268][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.388531][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.396808][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.405566][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.415144][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.425627][ T4265] device veth1_macvtap entered promiscuous mode [ 61.464586][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.476590][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.489512][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.503378][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.512293][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.521118][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.530139][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.546251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.556739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.565252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.573760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.582563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.591794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.600287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.610034][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.621077][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.631018][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.643628][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.655608][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.666271][ T4274] device veth0_macvtap entered promiscuous mode [ 61.680536][ T4271] device veth0_macvtap entered promiscuous mode [ 61.688102][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.697219][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.705296][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.713722][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.714964][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 61.723054][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 61.728901][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 61.733739][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 61.739781][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 61.749198][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.755806][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.764647][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.780376][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.791040][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.803702][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.806308][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.821864][ T4274] device veth1_macvtap entered promiscuous mode [ 61.835826][ T4271] device veth1_macvtap entered promiscuous mode [ 61.846502][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.861264][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.870967][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.880598][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.889536][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.901382][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.910638][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.919995][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.929101][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.951470][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.970941][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.981092][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.992654][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.002712][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.013714][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.030631][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.068948][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.078654][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.125045][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.164761][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.174946][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.185491][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.196680][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.207360][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.219005][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.239109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.247975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.301569][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.316263][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.326449][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.337916][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.347786][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.359055][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.369621][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.380191][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.391912][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.408460][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.421507][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.430797][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.440577][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.455982][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.466227][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.490571][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.501650][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.513874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.578145][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.589234][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.599805][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.610317][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.624280][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.634987][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.647373][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.658256][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.676279][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.708152][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.717278][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.729494][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.738331][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.747433][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.929054][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.016830][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.050280][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.050674][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.060434][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.066756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 63.081641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 63.099045][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.113008][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.166101][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.186310][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.195160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.279921][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.297266][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.320597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.431287][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.431335][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.432784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.457334][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.457376][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.462440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.503149][ T4389] device batadv_slave_1 entered promiscuous mode [ 63.556021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.556064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.556633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.556766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.584250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.594939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.594982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.595041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.794097][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 63.794139][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 63.794163][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 63.794212][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 63.794237][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 65.184447][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.296110][ T4385] 9pnet_fd: Insufficient options for proto=fd [ 65.398131][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.401038][ T4393] Zero length message leads to an empty skb [ 65.425985][ T4387] device batadv_slave_1 left promiscuous mode [ 65.454273][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.534152][ T125] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.003201][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 66.016888][ T125] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.038287][ T125] usb 4-1: config 179 has no interface number 0 [ 66.047872][ T125] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.284097][ T125] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 66.395502][ T125] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 67.003761][ T4417] fuse: Bad value for 'group_id' [ 67.326563][ T125] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 67.351807][ T125] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 67.378809][ T125] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 67.392843][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.433419][ T4402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.635639][ T4422] device batadv_slave_1 entered promiscuous mode [ 68.591436][ T4421] device batadv_slave_1 left promiscuous mode [ 69.555422][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 69.561804][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 70.426149][ T4322] usb 4-1: USB disconnect, device number 2 [ 70.432106][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 70.440378][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 70.639167][ T4437] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.655734][ T4435] loop3: detected capacity change from 0 to 512 [ 70.723635][ T4435] EXT4-fs: Ignoring removed orlov option [ 70.800514][ T4435] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 70.902447][ T4435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 71.055305][ T4435] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.13: corrupted in-inode xattr [ 71.111329][ T4435] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.13: couldn't read orphan inode 15 (err -117) [ 71.174629][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.238558][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.245171][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.222174][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.394128][ T4455] device batadv_slave_1 entered promiscuous mode [ 72.584171][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.334796][ T4454] device batadv_slave_1 left promiscuous mode [ 74.262652][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 74.274150][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 74.281063][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 75.708175][ T4470] loop3: detected capacity change from 0 to 512 [ 76.369740][ T41] cfg80211: failed to load regulatory.db [ 76.662024][ T4470] EXT4-fs: Ignoring removed orlov option [ 76.923598][ T4485] fuse: Bad value for 'group_id' [ 77.247913][ T4470] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 78.922731][ T4470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 79.110170][ T4470] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.22: corrupted in-inode xattr [ 79.162303][ T4470] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.22: couldn't read orphan inode 15 (err -117) [ 79.208340][ T4470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.935259][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 81.475010][ T4509] loop1: detected capacity change from 0 to 256 [ 82.387912][ T4508] sched: RT throttling activated [ 82.388437][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.604025][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 82.610897][ T14] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 82.624077][ T14] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 82.637048][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.669449][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 82.678513][ T14] usb 4-1: config 1 has no interface number 0 [ 82.684894][ T14] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 82.695350][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.712452][ T14] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 83.021260][ T14] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 83.086838][ T14] snd_usb_pod 4-1:1.1: invalid control EP [ 83.106437][ T14] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 83.138268][ T14] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 83.168766][ T14] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 83.182039][ T4516] loop0: detected capacity change from 0 to 512 [ 83.225478][ T4516] EXT4-fs: Ignoring removed orlov option [ 83.261314][ T14] usb 4-1: USB disconnect, device number 3 [ 83.272826][ T4516] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 83.384279][ T4516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 83.444479][ T4516] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.33: corrupted in-inode xattr [ 83.474976][ T4516] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.33: couldn't read orphan inode 15 (err -117) [ 83.560318][ T4516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.181758][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 84.345239][ T4521] netlink: 3 bytes leftover after parsing attributes in process `syz.2.31'. [ 85.888589][ T4533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'. [ 88.601854][ T4426] Bluetooth: hci5: Frame reassembly failed (-84) [ 88.688812][ T4556] netlink: 'syz.2.38': attribute type 4 has an invalid length. [ 88.798691][ T4544] block device autoloading is deprecated and will be removed. [ 89.719349][ T4561] fuse: Bad value for 'group_id' [ 90.674193][ T4280] Bluetooth: hci5: command 0x1003 tx timeout [ 90.681363][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 91.302563][ T4565] fuse: Bad value for 'group_id' [ 93.502742][ T4575] loop3: detected capacity change from 0 to 512 [ 93.572892][ T4426] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.585875][ T4575] EXT4-fs: Ignoring removed orlov option [ 93.607308][ T4426] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.638774][ T4575] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 93.679203][ T4579] loop2: detected capacity change from 0 to 512 [ 93.709648][ T4575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 93.722191][ T4579] EXT4-fs: Ignoring removed orlov option [ 93.736669][ T4579] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 93.768058][ T4579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 93.785126][ T4575] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.47: corrupted in-inode xattr [ 93.803433][ T4575] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.47: couldn't read orphan inode 15 (err -117) [ 93.846007][ T4579] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.48: corrupted in-inode xattr [ 93.861059][ T4585] device bridge1 entered promiscuous mode [ 93.869142][ T4575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.879959][ T4579] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.48: couldn't read orphan inode 15 (err -117) [ 93.966008][ T4579] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.566068][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 95.189354][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 95.634158][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 95.641137][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.711801][ T4603] loop2: detected capacity change from 0 to 256 [ 96.508820][ T4606] device batadv_slave_1 entered promiscuous mode [ 97.354785][ T4605] device batadv_slave_1 left promiscuous mode [ 97.869895][ T4622] device bridge2 entered promiscuous mode [ 97.948177][ T4623] netlink: 'syz.2.54': attribute type 4 has an invalid length. [ 98.804555][ T4614] netlink: 3 bytes leftover after parsing attributes in process `syz.1.53'. [ 99.258599][ T4631] netlink: 3 bytes leftover after parsing attributes in process `syz.3.55'. [ 101.459696][ T4650] loop2: detected capacity change from 0 to 256 [ 102.337764][ T4280] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 102.608467][ T4661] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 104.457229][ T4670] loop0: detected capacity change from 0 to 512 [ 104.501400][ T4670] EXT4-fs: Ignoring removed orlov option [ 104.533046][ T4670] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.575197][ T4670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 104.614764][ T4670] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.65: corrupted in-inode xattr [ 104.635589][ T4673] input: syz1 as /devices/virtual/input/input8 [ 104.652657][ T4670] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.65: couldn't read orphan inode 15 (err -117) [ 104.734317][ T4670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.439932][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 105.579574][ T4681] loop0: detected capacity change from 0 to 512 [ 105.621238][ T4681] EXT4-fs: Ignoring removed orlov option [ 105.695024][ T4681] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 105.765020][ T4681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 105.914078][ T4681] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.67: corrupted in-inode xattr [ 105.934421][ T4681] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.67: couldn't read orphan inode 15 (err -117) [ 105.968494][ T4681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.191321][ T4689] netlink: 3 bytes leftover after parsing attributes in process `syz.2.66'. [ 106.596743][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 106.754054][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.054570][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 107.171098][ T4701] fuse: Bad value for 'group_id' [ 108.026330][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.059008][ T22] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.088366][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.119845][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.142732][ T22] usb 5-1: Product: syz [ 108.155779][ T22] usb 5-1: Manufacturer: syz [ 108.168883][ T22] usb 5-1: SerialNumber: syz [ 108.192642][ T22] usb 5-1: config 0 descriptor?? [ 108.379838][ T4704] loop1: detected capacity change from 0 to 512 [ 108.395582][ T4704] EXT4-fs: Ignoring removed orlov option [ 108.418907][ T4704] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.962590][ T4704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 109.031201][ T4704] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.72: corrupted in-inode xattr [ 109.068273][ T4704] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.72: couldn't read orphan inode 15 (err -117) [ 109.074324][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 109.083996][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 109.163546][ T4704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.603058][ T4713] loop2: detected capacity change from 0 to 256 [ 110.576394][ T125] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.623305][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 110.765625][ T125] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.820510][ T125] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.884125][ T125] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.082013][ T125] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 111.121431][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.133670][ T4722] loop0: detected capacity change from 0 to 512 [ 111.138749][ T125] usb 4-1: Product: syz [ 111.149552][ T125] usb 4-1: Manufacturer: syz [ 111.160235][ T125] usb 4-1: SerialNumber: syz [ 111.174069][ T4374] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.185185][ T4722] EXT4-fs: Ignoring removed orlov option [ 111.196446][ T4722] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 111.279660][ T4722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 111.306498][ T4722] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.77: corrupted in-inode xattr [ 111.326061][ T4722] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.77: couldn't read orphan inode 15 (err -117) [ 111.359684][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.377163][ T4374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.411465][ T4374] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.442789][ T125] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.098221][ T4374] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.659633][ T4374] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 113.808524][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 113.833391][ T4374] usb 3-1: Product: syz [ 113.858784][ T4374] usb 3-1: Manufacturer: syz [ 114.017194][ T4374] usb 3-1: SerialNumber: syz [ 114.053030][ T41] usb 4-1: USB disconnect, device number 4 [ 114.064131][ T4374] usb 3-1: can't set config #1, error -71 [ 114.088083][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 114.122534][ T4374] usb 3-1: USB disconnect, device number 2 [ 114.154398][ T4727] usblp0: removed [ 114.190445][ T128] usb 5-1: USB disconnect, device number 2 [ 115.250310][ T4738] device batadv_slave_1 entered promiscuous mode [ 116.197411][ T4736] device batadv_slave_1 left promiscuous mode [ 116.766692][ T4739] fuse: Bad value for 'fd' [ 117.262375][ T4748] fuse: Bad value for 'group_id' [ 119.547673][ T4766] device batadv_slave_1 entered promiscuous mode [ 120.476252][ T4765] device batadv_slave_1 left promiscuous mode [ 120.837883][ T4769] loop0: detected capacity change from 0 to 512 [ 120.867577][ T4769] EXT4-fs: Ignoring removed orlov option [ 120.901221][ T4769] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 120.954827][ T4769] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 120.979680][ T4769] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.87: corrupted in-inode xattr [ 121.010472][ T4769] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.87: couldn't read orphan inode 15 (err -117) [ 121.035600][ T4769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.830306][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 122.264078][ T4609] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.257979][ T4791] fuse: Bad value for 'group_id' [ 123.266436][ T4609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.409715][ T4793] loop4: detected capacity change from 0 to 256 [ 124.634217][ T4609] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.842632][ T4609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.870259][ T4609] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 125.796137][ T4609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 125.861888][ T4609] usb 2-1: Product: syz [ 125.878650][ T4609] usb 2-1: Manufacturer: syz [ 125.890583][ T4609] usb 2-1: SerialNumber: syz [ 125.923759][ T4609] usb 2-1: can't set config #1, error -71 [ 126.857237][ T4609] usb 2-1: USB disconnect, device number 2 [ 129.667886][ T4836] device bridge1 entered promiscuous mode [ 130.396928][ T4846] loop4: detected capacity change from 0 to 32768 [ 130.520891][ T4846] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.104 (4846) [ 130.616804][ T4846] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.668490][ T4848] netlink: 3 bytes leftover after parsing attributes in process `syz.2.101'. [ 130.684241][ T4846] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 130.705341][ T4846] BTRFS info (device loop4): enabling disk space caching [ 130.745847][ T4846] BTRFS info (device loop4): doing ref verification [ 130.752464][ T4846] BTRFS info (device loop4): use zlib compression, level 3 [ 130.798730][ T4846] BTRFS info (device loop4): force clearing of disk cache [ 130.827914][ T4846] BTRFS info (device loop4): setting nodatacow, compression disabled [ 130.879453][ T4846] BTRFS info (device loop4): doing ref verification [ 130.901231][ T4846] BTRFS info (device loop4): disk space caching is enabled [ 131.277227][ T4846] BTRFS info (device loop4): enabling ssd optimizations [ 131.324377][ T4846] BTRFS info (device loop4): rebuilding free space tree [ 131.431651][ T4846] BTRFS info (device loop4): disabling free space tree [ 131.465879][ T4846] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.488705][ T4871] device batadv_slave_1 entered promiscuous mode [ 131.544199][ T4846] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.388277][ T4870] device batadv_slave_1 left promiscuous mode [ 132.676327][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.682679][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.355985][ T4264] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.899528][ T4885] loop0: detected capacity change from 0 to 256 [ 134.849168][ T4895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.900400][ T4890] netlink: 'syz.1.105': attribute type 4 has an invalid length. [ 135.009428][ T4889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.046793][ T4889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.364057][ T4883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.381482][ T4901] netlink: 3 bytes leftover after parsing attributes in process `syz.3.109'. [ 135.574135][ T4883] usb 1-1: Using ep0 maxpacket: 16 [ 135.584933][ T4883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.596143][ T4883] usb 1-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 135.605345][ T4883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.623043][ T4883] usb 1-1: config 0 descriptor?? [ 135.844236][ T4883] usbhid 1-1:0.0: can't add hid device: -71 [ 135.858866][ T4883] usbhid: probe of 1-1:0.0 failed with error -71 [ 135.882772][ T4883] usb 1-1: USB disconnect, device number 3 [ 135.980670][ T4900] loop1: detected capacity change from 0 to 32768 [ 136.019949][ T4900] (syz.1.112,4900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.090383][ T4900] (syz.1.112,4900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.216439][ T4900] JBD2: Ignoring recovery information on journal [ 136.319147][ T4900] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.845702][ T4900] ocfs2: Unmounting device (7,1) on (node local) [ 137.347310][ T4917] loop4: detected capacity change from 0 to 512 [ 137.385398][ T4917] EXT4-fs: Ignoring removed orlov option [ 137.419756][ T4917] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.499368][ T4917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 137.552486][ T4917] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.116: corrupted in-inode xattr [ 137.651501][ T4917] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.116: couldn't read orphan inode 15 (err -117) [ 137.704152][ T4917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.793374][ T4915] loop3: detected capacity change from 0 to 32768 [ 138.377221][ T4915] XFS (loop3): Mounting V5 Filesystem [ 138.402114][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 138.989359][ T4915] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 139.115867][ T4915] XFS (loop3): Starting recovery (logdev: internal) [ 142.208921][ T4915] XFS (loop3): Ending recovery (logdev: internal) [ 142.363156][ T4274] XFS (loop3): Unmounting Filesystem [ 144.108819][ T4960] netlink: 3 bytes leftover after parsing attributes in process `syz.1.122'. [ 145.740382][ T4969] loop3: detected capacity change from 0 to 32768 [ 145.797316][ T4969] (syz.3.128,4969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.851464][ T4969] (syz.3.128,4969,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.891805][ T4280] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 146.038632][ T4969] JBD2: Ignoring recovery information on journal [ 146.124493][ T4975] loop2: detected capacity change from 0 to 512 [ 146.132827][ T4975] EXT4-fs: Ignoring removed orlov option [ 146.142008][ T4975] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 146.215328][ T4975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 146.225713][ T4969] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.247123][ T4975] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.130: corrupted in-inode xattr [ 146.363426][ T4975] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.130: couldn't read orphan inode 15 (err -117) [ 146.436541][ T4975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.166964][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 147.180029][ T4969] loop3: detected capacity change from 32768 to 0 [ 147.228863][ C1] I/O error, dev loop3, sector 23 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.239579][ T4978] (syz.3.128,4978,1):ocfs2_assign_bh:2414 ERROR: status = -5 [ 147.265305][ T4978] (syz.3.128,4978,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 147.296100][ T4978] (syz.3.128,4978,1):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 147.345090][ T4398] loop: Write error at byte offset 9223372036863447039, length 512. [ 147.385087][ C0] I/O error, dev loop3, sector 16936 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 147.394947][ C0] Buffer I/O error on dev loop3, logical block 16936, lost sync page write [ 147.404042][ T4978] (syz.3.128,4978,0):ocfs2_write_block:78 ERROR: status = -5 [ 147.435993][ T4978] (syz.3.128,4978,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 147.464365][ T4978] (syz.3.128,4978,0):ocfs2_put_slot:517 ERROR: status = -5 [ 147.487296][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.507263][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.533963][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.557801][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.591092][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.618815][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.644130][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.666123][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.693738][ T4398] loop: Write error at byte offset 9223372036855068671, length 512. [ 147.727954][ C0] I/O error, dev loop3, sector 572 op 0x1:(WRITE) flags 0x9800 phys_seg 9 prio class 2 [ 147.738172][ T4977] Aborting journal on device loop3-29. [ 147.749411][ C0] I/O error, dev loop3, sector 552 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 147.759165][ C0] Buffer I/O error on dev loop3, logical block 552, lost sync page write [ 147.767850][ T4977] JBD2: I/O error when updating journal superblock for loop3-29. [ 147.786161][ T4978] (syz.3.128,4978,0):ocfs2_journal_shutdown:1074 ERROR: status = -5 [ 147.804967][ T4978] ocfs2: Unmounting device (7,3) on (node local) [ 148.007117][ T4992] input: syz1 as /devices/virtual/input/input12 [ 148.346286][ T4988] loop4: detected capacity change from 0 to 32768 [ 148.422501][ T4986] loop2: detected capacity change from 0 to 32768 [ 148.488665][ T4988] XFS (loop4): Mounting V5 Filesystem [ 148.579578][ T4988] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 148.630862][ T4986] XFS (loop2): Mounting V5 Filesystem [ 148.682188][ T4988] XFS (loop4): Starting recovery (logdev: internal) [ 148.733050][ T4988] XFS (loop4): Ending recovery (logdev: internal) [ 148.946095][ T4986] XFS (loop2): Ending clean mount [ 148.968412][ T4986] XFS (loop2): Quotacheck needed: Please wait. [ 149.044426][ T4264] XFS (loop4): Unmounting Filesystem [ 149.083485][ T4986] XFS (loop2): Quotacheck: Done. [ 150.396229][ T5015] XFS (loop2): User initiated shutdown received. [ 150.402912][ T5015] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 150.416290][ T5015] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 151.143002][ T5021] device bridge1 entered promiscuous mode [ 153.673175][ T4986] syz.2.132 (4986): drop_caches: 2 [ 153.862999][ T4275] XFS (loop2): Unmounting Filesystem [ 154.405527][ T5053] netlink: 3 bytes leftover after parsing attributes in process `syz.4.144'. [ 154.738977][ T5052] loop2: detected capacity change from 0 to 32768 [ 154.750161][ T5052] (syz.2.146,5052,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.800135][ T5052] (syz.2.146,5052,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.883355][ T5052] JBD2: Ignoring recovery information on journal [ 154.931865][ T5052] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 155.124202][ T5052] loop2: detected capacity change from 32768 to 0 [ 155.137086][ C0] I/O error, dev loop2, sector 32760 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.229576][ C0] I/O error, dev loop2, sector 23 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.238932][ T5052] (syz.2.146,5052,1):ocfs2_assign_bh:2414 ERROR: status = -5 [ 155.276330][ T5052] (syz.2.146,5052,0):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 155.295533][ T5052] (syz.2.146,5052,0):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 155.316477][ T4418] lo_write_bvec: 1 callbacks suppressed [ 155.316488][ T4418] loop: Write error at byte offset 9223372036863447039, length 512. [ 155.365548][ C1] I/O error, dev loop2, sector 16936 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 155.375217][ C1] Buffer I/O error on dev loop2, logical block 16936, lost sync page write [ 155.388156][ T5052] (syz.2.146,5052,1):ocfs2_write_block:78 ERROR: status = -5 [ 155.395684][ T5052] (syz.2.146,5052,1):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 155.403591][ T5052] (syz.2.146,5052,1):ocfs2_put_slot:517 ERROR: status = -5 [ 155.412068][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.428845][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.439006][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.524773][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.536106][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.561260][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.570950][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.579379][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.685548][ T5067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 155.705265][ T4484] loop: Write error at byte offset 9223372036855068671, length 512. [ 155.713537][ C1] I/O error, dev loop2, sector 572 op 0x1:(WRITE) flags 0x9800 phys_seg 9 prio class 2 [ 155.723964][ T5058] Aborting journal on device loop2-29. [ 155.740087][ C1] I/O error, dev loop2, sector 552 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 155.749808][ C1] Buffer I/O error on dev loop2, logical block 552, lost sync page write [ 156.149230][ T5058] JBD2: I/O error when updating journal superblock for loop2-29. [ 156.204898][ T5052] (syz.2.146,5052,1):ocfs2_journal_shutdown:1074 ERROR: status = -5 [ 156.229456][ T5052] ocfs2: Unmounting device (7,2) on (node local) [ 161.534961][ T5126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 162.540102][ T4280] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 162.694097][ T4729] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.911943][ T4729] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.931496][ T4729] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.967155][ T4729] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.987156][ T4729] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 162.996578][ T4729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 163.004816][ T4729] usb 5-1: Product: syz [ 163.014071][ T4729] usb 5-1: Manufacturer: syz [ 163.018813][ T4729] usb 5-1: SerialNumber: syz [ 163.252943][ T4729] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 163.419854][ T5147] loop0: detected capacity change from 0 to 512 [ 163.427227][ T5147] EXT4-fs: Ignoring removed orlov option [ 163.439220][ T5147] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 163.505834][ T5147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 163.532918][ T5147] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.174: corrupted in-inode xattr [ 163.677829][ T4882] usb 5-1: USB disconnect, device number 3 [ 163.804724][ T5150] usblp0: removed [ 165.804980][ T5147] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.174: couldn't read orphan inode 15 (err -117) [ 165.823996][ T5147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.742993][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 173.612089][ T5207] loop4: detected capacity change from 0 to 256 [ 180.246264][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 180.834213][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 180.840311][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 180.846340][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 180.852330][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 180.852356][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 181.114715][ T5256] loop4: detected capacity change from 0 to 512 [ 181.149240][ T5256] EXT4-fs: Ignoring removed orlov option [ 181.185081][ T5256] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 181.249256][ T5256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 181.283007][ T5256] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.204: corrupted in-inode xattr [ 181.401202][ T5256] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.204: couldn't read orphan inode 15 (err -117) [ 181.436756][ T5256] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 182.135681][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 183.246562][ T5277] device batadv_slave_1 entered promiscuous mode [ 184.212230][ T5275] device batadv_slave_1 left promiscuous mode [ 185.470501][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 186.173630][ T5301] loop4: detected capacity change from 0 to 512 [ 186.200422][ T5301] EXT4-fs: Ignoring removed orlov option [ 186.221205][ T5301] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 186.292504][ T5301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 186.305141][ T5301] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.216: corrupted in-inode xattr [ 186.374176][ T5301] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.216: couldn't read orphan inode 15 (err -117) [ 186.402292][ T5301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.096350][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 191.014091][ T4609] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.047844][ T5346] loop0: detected capacity change from 0 to 512 [ 191.098670][ T5346] EXT4-fs: Ignoring removed orlov option [ 191.133047][ T5346] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 191.214119][ T4609] usb 5-1: Using ep0 maxpacket: 32 [ 191.222279][ T4609] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.251409][ T5346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 191.260984][ T5346] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.229: corrupted in-inode xattr [ 191.273974][ T5346] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.229: couldn't read orphan inode 15 (err -117) [ 191.285961][ T4609] usb 5-1: config 1 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 191.314068][ T5346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 191.723740][ T4609] usb 5-1: config 1 interface 0 has no altsetting 0 [ 191.759966][ T4609] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.780938][ T4609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 191.791057][ T4609] usb 5-1: SerialNumber: syz [ 191.872190][ T4609] cdc_acm 5-1:1.0: Zero length descriptor references [ 191.879930][ T4609] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 191.890738][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 192.054557][ T5355] loop0: detected capacity change from 0 to 512 [ 192.101972][ T5355] EXT4-fs: Ignoring removed orlov option [ 192.120816][ T5355] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 192.178416][ T5355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 192.212035][ T5355] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.231: corrupted in-inode xattr [ 192.257715][ T5355] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.231: couldn't read orphan inode 15 (err -117) [ 192.288142][ T5355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 193.022161][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 193.193935][ T5366] device bridge2 entered promiscuous mode [ 193.625863][ T4609] usb 5-1: USB disconnect, device number 4 [ 193.713354][ T5376] netlink: 3 bytes leftover after parsing attributes in process `syz.1.233'. [ 194.122556][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.128930][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.532240][ T5372] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 194.715029][ T5372] batman_adv: batadv0: Adding interface: team0 [ 194.822413][ T5372] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.028117][ T5372] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 196.602188][ T5396] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 203.503312][ T5472] device batadv_slave_1 entered promiscuous mode [ 203.540549][ T5471] device batadv_slave_1 left promiscuous mode [ 203.804461][ T5474] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 205.734592][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 207.931999][ T5509] loop4: detected capacity change from 0 to 256 [ 208.357778][ T5517] 9pnet_fd: Insufficient options for proto=fd [ 210.262935][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 210.964248][ T5544] loop4: detected capacity change from 0 to 512 [ 210.974884][ T5544] EXT4-fs: Ignoring removed orlov option [ 211.023300][ T5544] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 211.061007][ T5544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 211.081975][ T5544] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.281: corrupted in-inode xattr [ 211.100663][ T5544] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.281: couldn't read orphan inode 15 (err -117) [ 211.146133][ T5544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.937299][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 212.101299][ T4609] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.248484][ T5565] device bridge2 entered promiscuous mode [ 212.323985][ T4609] usb 1-1: Using ep0 maxpacket: 32 [ 212.352639][ T4609] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.998432][ T4609] usb 1-1: config 1 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 214.012186][ T4609] usb 1-1: config 1 interface 0 has no altsetting 0 [ 214.029914][ T4609] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.054059][ T4609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.072446][ T4609] usb 1-1: SerialNumber: syz [ 214.087804][ T4609] cdc_acm 1-1:1.0: Zero length descriptor references [ 214.232711][ T4609] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 214.282483][ T4609] usb 1-1: USB disconnect, device number 4 [ 214.405147][ T5573] loop0: detected capacity change from 0 to 512 [ 214.437588][ T5573] EXT4-fs: Ignoring removed orlov option [ 214.468507][ T5573] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 214.496916][ T5575] netlink: 'syz.2.290': attribute type 4 has an invalid length. [ 214.536784][ T5573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 214.564175][ T5573] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.291: corrupted in-inode xattr [ 214.580778][ T5573] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.291: couldn't read orphan inode 15 (err -117) [ 214.624419][ T5573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 215.425313][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 215.810994][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 216.483970][ T5588] 9pnet_fd: Insufficient options for proto=fd [ 217.296520][ T5594] 9pnet_fd: Insufficient options for proto=fd [ 218.808088][ T5615] netlink: 3 bytes leftover after parsing attributes in process `syz.3.297'. [ 219.024099][ T5237] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.260759][ T5618] loop4: detected capacity change from 0 to 512 [ 219.278628][ T5618] EXT4-fs: Ignoring removed orlov option [ 219.296870][ T5618] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 219.312969][ T5618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 219.325577][ T5618] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.302: corrupted in-inode xattr [ 219.354097][ T5237] usb 1-1: Using ep0 maxpacket: 32 [ 219.363500][ T5237] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.389446][ T5618] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.302: couldn't read orphan inode 15 (err -117) [ 219.404616][ T5618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 219.413358][ T5237] usb 1-1: config 1 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 219.621478][ T5237] usb 1-1: config 1 interface 0 has no altsetting 0 [ 220.218385][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 220.233800][ T5237] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.324025][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.354699][ T5237] usb 1-1: SerialNumber: syz [ 220.396491][ T5237] cdc_acm 1-1:1.0: Zero length descriptor references [ 221.393721][ T5237] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 221.438132][ T5237] usb 1-1: USB disconnect, device number 5 [ 221.743131][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 222.632322][ T5640] device batadv_slave_1 entered promiscuous mode [ 222.696143][ T5638] device batadv_slave_1 left promiscuous mode [ 223.163774][ T5654] input: syz1 as /devices/virtual/input/input14 [ 225.920552][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 227.401658][ T5696] netlink: 3 bytes leftover after parsing attributes in process `syz.0.322'. [ 228.954577][ T5704] loop4: detected capacity change from 0 to 40427 [ 228.980069][ T5704] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 229.016976][ T5704] F2FS-fs (loop4): invalid crc value [ 229.079498][ T5704] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.239083][ T5704] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 229.479813][ T4264] syz-executor: attempt to access beyond end of device [ 229.479813][ T4264] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 230.041699][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 230.071573][ T128] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.574025][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 230.645159][ T128] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.657391][ T128] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 230.767225][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.806955][ T128] usb 1-1: Product: syz [ 230.814149][ T128] usb 1-1: Manufacturer: syz [ 230.818967][ T128] usb 1-1: SerialNumber: syz [ 230.827035][ T128] usb 1-1: config 0 descriptor?? [ 231.920660][ T4281] Bluetooth: Frame is too long (len 10, expected len 4) [ 232.003258][ T5742] input: syz1 as /devices/virtual/input/input16 [ 232.949874][ T4374] usb 1-1: USB disconnect, device number 6 [ 233.615253][ T5756] device batadv_slave_1 entered promiscuous mode [ 233.653022][ T5755] device batadv_slave_1 left promiscuous mode [ 233.929566][ T5757] netlink: 'syz.0.341': attribute type 4 has an invalid length. [ 235.391312][ T4281] Bluetooth: Frame is too long (len 10, expected len 4) [ 240.142066][ T5820] device bridge1 entered promiscuous mode [ 240.404025][ T4882] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 240.595794][ T4882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.617009][ T4882] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.641998][ T4882] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.666032][ T4882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 240.684119][ T4882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 240.707916][ T4882] usb 1-1: Product: syz [ 240.712244][ T4882] usb 1-1: Manufacturer: syz [ 240.725797][ T4882] usb 1-1: SerialNumber: syz [ 240.902309][ T5830] netlink: 3 bytes leftover after parsing attributes in process `syz.4.364'. [ 240.958782][ T4882] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.278674][ T4340] usb 1-1: USB disconnect, device number 7 [ 242.652899][ T5832] usblp0: removed [ 242.829096][ T9] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 244.383259][ T5845] device bridge1 entered promiscuous mode [ 245.158206][ T5855] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 247.593974][ T128] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 247.805430][ T128] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.846230][ T128] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.906483][ T128] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.013631][ T128] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 248.065699][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 248.100652][ T128] usb 1-1: Product: syz [ 248.133355][ T128] usb 1-1: Manufacturer: syz [ 248.167200][ T128] usb 1-1: SerialNumber: syz [ 248.414269][ T128] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.754467][ T4883] usb 1-1: USB disconnect, device number 8 [ 250.128229][ T5893] usblp0: removed [ 251.154004][ T4340] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 252.205649][ T4340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.244116][ T4340] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.279059][ T4340] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.320755][ T4340] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 252.354042][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 252.376735][ T4340] usb 5-1: Product: syz [ 252.380914][ T4340] usb 5-1: Manufacturer: syz [ 252.407182][ T4340] usb 5-1: SerialNumber: syz [ 252.669295][ T4340] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.083237][ T4340] usb 5-1: USB disconnect, device number 5 [ 254.441455][ T5924] usblp0: removed [ 255.555582][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.561922][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.573517][ T5935] 9pnet_fd: Insufficient options for proto=fd [ 256.514022][ T4374] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 256.756286][ T4374] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.796588][ T4374] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.869775][ T4374] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.945339][ T4374] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 257.020246][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 257.051924][ T4374] usb 1-1: Product: syz [ 257.086698][ T4374] usb 1-1: Manufacturer: syz [ 257.138388][ T4374] usb 1-1: SerialNumber: syz [ 257.386215][ T4374] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 257.757788][ T4374] usb 1-1: USB disconnect, device number 9 [ 259.658284][ T4374] usblp0: removed [ 259.896042][ T5954] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 262.692603][ T5974] netlink: 3 bytes leftover after parsing attributes in process `syz.1.405'. [ 262.839638][ T5979] device bridge3 entered promiscuous mode [ 265.236581][ T5994] netlink: 'syz.4.411': attribute type 4 has an invalid length. [ 266.740921][ T6010] device bridge3 entered promiscuous mode [ 268.341004][ T6025] loop4: detected capacity change from 0 to 16 [ 268.513027][ T6025] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 268.623940][ T6025] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 268.728493][ T6025] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 268.772143][ T6025] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 270.385613][ T6050] loop0: detected capacity change from 0 to 256 [ 271.634073][ T4609] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 271.941101][ T4609] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.971593][ T4609] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.160549][ T4609] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.230673][ T4609] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 272.258727][ T4609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 272.290595][ T4609] usb 5-1: Product: syz [ 272.304224][ T4609] usb 5-1: Manufacturer: syz [ 272.319154][ T4609] usb 5-1: SerialNumber: syz [ 272.560959][ T4609] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 272.918577][ T5237] usb 5-1: USB disconnect, device number 6 [ 274.384169][ T6060] usblp0: removed [ 277.413325][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 279.054629][ T6108] fuse: Unknown parameter 'grou' [ 281.688979][ T6124] loop0: detected capacity change from 0 to 512 [ 281.740680][ T6124] EXT4-fs: Ignoring removed orlov option [ 281.800060][ T6124] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 282.087883][ T6124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 282.127105][ T6124] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.449: corrupted in-inode xattr [ 282.198666][ T6124] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.449: couldn't read orphan inode 15 (err -117) [ 282.237978][ T6135] device bridge2 entered promiscuous mode [ 282.324406][ T6124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 282.879249][ T6139] loop4: detected capacity change from 0 to 16 [ 283.039295][ T6139] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 283.100821][ T6139] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 283.169285][ T6139] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 283.215979][ T6139] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 283.834658][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 283.970049][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 284.504066][ T4880] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 286.205361][ T4880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.284019][ T4880] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.294799][ T4880] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.330825][ T4880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 286.465859][ T4880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 286.494976][ T4880] usb 1-1: Product: syz [ 286.499370][ T4880] usb 1-1: Manufacturer: syz [ 286.516370][ T4880] usb 1-1: SerialNumber: syz [ 286.567401][ T6172] netlink: 3 bytes leftover after parsing attributes in process `syz.3.455'. [ 286.752482][ T4880] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 287.385857][ T5237] usb 1-1: USB disconnect, device number 10 [ 288.589985][ T6177] usblp0: removed [ 289.453128][ T6189] device bridge4 entered promiscuous mode [ 289.800120][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 295.181746][ T6241] input: syz1 as /devices/virtual/input/input18 [ 300.259643][ T6269] netlink: 3 bytes leftover after parsing attributes in process `syz.3.483'. [ 300.303499][ T6265] loop0: detected capacity change from 0 to 32768 [ 300.313087][ T6265] (syz.0.485,6265,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 300.350727][ T6265] (syz.0.485,6265,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 300.428585][ T6265] JBD2: Ignoring recovery information on journal [ 300.560610][ T6265] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 300.676144][ T6265] loop0: detected capacity change from 32768 to 0 [ 300.713697][ C0] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.753733][ C1] I/O error, dev loop0, sector 23 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.763136][ T6264] (syz.0.485,6264,1):ocfs2_assign_bh:2414 ERROR: status = -5 [ 300.786889][ T6264] (syz.0.485,6264,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 300.829697][ T6264] (syz.0.485,6264,1):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 300.972688][ T4398] lo_write_bvec: 1 callbacks suppressed [ 300.972704][ T4398] loop: Write error at byte offset 9223372036863447039, length 512. [ 300.993059][ C1] I/O error, dev loop0, sector 16936 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 301.002713][ C1] Buffer I/O error on dev loop0, logical block 16936, lost sync page write [ 301.011411][ T6264] (syz.0.485,6264,0):ocfs2_write_block:78 ERROR: status = -5 [ 301.053991][ T6264] (syz.0.485,6264,1):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 301.124127][ T6264] (syz.0.485,6264,1):ocfs2_put_slot:517 ERROR: status = -5 [ 301.132757][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.191903][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.232354][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.292460][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.321306][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.329820][ T4281] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 301.354003][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.362211][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.370964][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.379358][ T4452] loop: Write error at byte offset 9223372036855068671, length 512. [ 301.387487][ C1] I/O error, dev loop0, sector 572 op 0x1:(WRITE) flags 0x9800 phys_seg 9 prio class 2 [ 301.397328][ T6272] Aborting journal on device loop0-29. [ 301.417427][ C1] I/O error, dev loop0, sector 552 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 301.427181][ C1] Buffer I/O error on dev loop0, logical block 552, lost sync page write [ 301.439398][ T6272] JBD2: I/O error when updating journal superblock for loop0-29. [ 301.610506][ T6264] (syz.0.485,6264,1):ocfs2_journal_shutdown:1074 ERROR: status = -5 [ 301.620636][ T6264] ocfs2: Unmounting device (7,0) on (node local) [ 301.976759][ T6289] 9pnet_fd: Insufficient options for proto=fd [ 303.552245][ T6304] loop4: detected capacity change from 0 to 16 [ 304.888107][ T6304] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 304.899075][ T6304] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 304.915758][ T6304] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 304.962389][ T6304] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 307.987161][ T6323] netlink: 'syz.2.498': attribute type 10 has an invalid length. [ 308.163058][ T6326] device bridge4 entered promiscuous mode [ 308.313070][ T6329] netlink: 3 bytes leftover after parsing attributes in process `syz.0.499'. [ 309.748643][ T6339] fuse: Unknown parameter 'group_' [ 310.461106][ T6330] loop4: detected capacity change from 0 to 32768 [ 310.658142][ T6330] (syz.4.502,6330,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 310.803461][ T6330] (syz.4.502,6330,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 311.111700][ T6330] JBD2: Ignoring recovery information on journal [ 311.339174][ T6356] netlink: 'syz.3.510': attribute type 10 has an invalid length. [ 311.362568][ T6330] JBD2: recovery failed [ 311.397706][ T6330] (syz.4.502,6330,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 311.461358][ T6330] (syz.4.502,6330,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 311.478206][ T6356] batman_adv: batadv0: Adding interface: team0 [ 311.486744][ T6356] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.527882][ T6330] (syz.4.502,6330,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 311.547132][ T6330] (syz.4.502,6330,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 311.605912][ T6356] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 311.619380][ T6330] (syz.4.502,6330,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 311.771852][ T6358] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 312.872638][ T6367] device batadv_slave_1 entered promiscuous mode [ 312.925924][ T6366] device batadv_slave_1 left promiscuous mode [ 314.672270][ T6380] fuse: Unknown parameter 'group_' [ 314.808033][ T4281] Bluetooth: Frame is too long (len 10, expected len 4) [ 314.821088][ T6381] netlink: 'syz.4.514': attribute type 10 has an invalid length. [ 314.877858][ T6381] batman_adv: batadv0: Adding interface: team0 [ 314.975587][ T6381] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.018533][ T6381] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 315.096645][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 317.013029][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.019469][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.628703][ T6414] netlink: 3 bytes leftover after parsing attributes in process `syz.4.526'. [ 319.085908][ T6424] fuse: Unknown parameter 'group_i' [ 320.177201][ T6429] netlink: 3 bytes leftover after parsing attributes in process `syz.3.533'. [ 320.449105][ T6437] device bridge3 entered promiscuous mode [ 320.455549][ T4281] Bluetooth: Frame is too long (len 10, expected len 4) [ 324.194756][ T6467] fuse: Unknown parameter 'group_i' [ 326.793769][ T4281] Bluetooth: Frame is too long (len 10, expected len 4) [ 331.476989][ T6527] loop4: detected capacity change from 0 to 8 [ 331.870406][ T6527] SQUASHFS error: Failed to read block 0x4de: -5 [ 331.881448][ T6527] SQUASHFS error: Failed to read block 0x4de: -5 [ 331.915648][ T6527] SQUASHFS error: Failed to read block 0x4de: -5 [ 331.925043][ T6527] SQUASHFS error: Failed to read block 0x4de: -5 [ 331.933492][ T6527] SQUASHFS error: Failed to read block 0x4de: -5 [ 331.941747][ T6527] SQUASHFS error: Failed to read block 0x4de: -5 [ 331.974748][ T26] audit: type=1800 audit(1756607959.144:2): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.560" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 332.098745][ T6527] syz.4.560 (6527) used greatest stack depth: 20704 bytes left [ 332.298522][ T6530] loop4: detected capacity change from 0 to 512 [ 332.345204][ T6530] EXT4-fs: Ignoring removed orlov option [ 332.380968][ T6530] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 332.455352][ T6530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 332.550227][ T6530] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.561: corrupted in-inode xattr [ 332.646801][ T6530] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.561: couldn't read orphan inode 15 (err -117) [ 332.677120][ T6530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 333.333655][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 334.300726][ T6542] netlink: 3 bytes leftover after parsing attributes in process `syz.2.562'. [ 335.491328][ T6555] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 338.017589][ T6576] loop4: detected capacity change from 0 to 512 [ 338.057782][ T6576] EXT4-fs: Ignoring removed orlov option [ 338.091112][ T6576] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 338.156998][ T6576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 338.182312][ T6576] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.573: corrupted in-inode xattr [ 338.200249][ T6576] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.573: couldn't read orphan inode 15 (err -117) [ 338.217086][ T6576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 339.153112][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 339.608716][ T6593] loop4: detected capacity change from 0 to 8 [ 340.180410][ T6591] SQUASHFS error: Failed to read block 0x4de: -5 [ 340.188186][ T6591] SQUASHFS error: Failed to read block 0x4de: -5 [ 340.199427][ T26] audit: type=1800 audit(1756607967.454:3): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.575" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 342.724422][ T6609] device batadv_slave_1 entered promiscuous mode [ 342.816173][ T6608] device batadv_slave_1 left promiscuous mode [ 343.699447][ T6617] netlink: 3 bytes leftover after parsing attributes in process `syz.3.581'. [ 344.452997][ T6626] device bridge2 entered promiscuous mode [ 344.563204][ T6625] device bridge5 entered promiscuous mode [ 351.763194][ T6683] netlink: 3 bytes leftover after parsing attributes in process `syz.1.593'. [ 352.393948][ T4782] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 352.937334][ T4782] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 353.455683][ T6697] device bridge3 entered promiscuous mode [ 357.519931][ T6724] netlink: 3 bytes leftover after parsing attributes in process `syz.2.604'. [ 357.737435][ T6727] input: syz1 as /devices/virtual/input/input20 [ 360.933905][ T4373] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 361.133938][ T4373] usb 5-1: Using ep0 maxpacket: 16 [ 361.171395][ T4373] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.208529][ T4373] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 361.374222][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.404037][ T4373] usb 5-1: Product: syz [ 361.404056][ T4373] usb 5-1: Manufacturer: syz [ 361.424154][ T4373] usb 5-1: SerialNumber: syz [ 361.445043][ T4373] usb 5-1: config 0 descriptor?? [ 364.260630][ T4882] usb 5-1: USB disconnect, device number 7 [ 365.975620][ T6778] netlink: 3 bytes leftover after parsing attributes in process `syz.0.615'. [ 367.242383][ T6779] netlink: 3 bytes leftover after parsing attributes in process `syz.4.619'. [ 370.872038][ T6812] loop4: detected capacity change from 0 to 8 [ 371.546460][ T6811] SQUASHFS error: Failed to read block 0x4de: -5 [ 371.553143][ T6811] SQUASHFS error: Failed to read block 0x4de: -5 [ 371.564235][ T26] audit: type=1800 audit(1756607998.814:4): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.627" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 376.424013][ T6840] loop4: detected capacity change from 0 to 16 [ 376.614239][ T6840] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 376.992831][ T6840] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 377.082377][ T6840] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 378.008286][ T6840] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 378.435115][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.441449][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.776335][ T6863] loop4: detected capacity change from 0 to 8 [ 379.432099][ T6862] SQUASHFS error: Failed to read block 0x4de: -5 [ 379.438731][ T6862] SQUASHFS error: Failed to read block 0x4de: -5 [ 379.445278][ T26] audit: type=1800 audit(1756608006.704:5): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.641" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 379.467984][ T6862] SQUASHFS error: Failed to read block 0x4de: -5 [ 379.474450][ T6862] SQUASHFS error: Failed to read block 0x4de: -5 [ 379.480870][ T6862] SQUASHFS error: Failed to read block 0x4de: -5 [ 379.487329][ T6862] SQUASHFS error: Failed to read block 0x4de: -5 [ 379.783595][ T6865] loop4: detected capacity change from 0 to 512 [ 379.884562][ T6865] EXT4-fs: Ignoring removed orlov option [ 379.925723][ T6865] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 380.018669][ T6865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 380.042685][ T6865] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.642: corrupted in-inode xattr [ 380.074399][ T6865] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.642: couldn't read orphan inode 15 (err -117) [ 380.109589][ T6865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 380.815392][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 381.091326][ T6873] device bridge4 entered promiscuous mode [ 382.022004][ T6887] netlink: 3 bytes leftover after parsing attributes in process `syz.1.644'. [ 383.380550][ T6899] netlink: 3 bytes leftover after parsing attributes in process `syz.2.647'. [ 385.390146][ T6913] loop4: detected capacity change from 0 to 16 [ 385.842538][ T6913] erofs: (device loop4): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 386.836003][ T6918] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 386.884384][ T6913] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 386.996763][ T6913] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 387.114817][ T6913] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 387.356349][ T6918] batman_adv: batadv0: Adding interface: team0 [ 387.437546][ T6918] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.737707][ T6918] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 388.692430][ T6929] fuse: Unknown parameter '00000000000000000000' [ 390.304179][ T4879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 390.744032][ T4879] usb 5-1: Using ep0 maxpacket: 16 [ 390.752244][ T4879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.806835][ T6950] device bridge4 entered promiscuous mode [ 390.808755][ T4879] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 390.865214][ T4879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.899428][ T4879] usb 5-1: Product: syz [ 390.903650][ T4879] usb 5-1: Manufacturer: syz [ 391.172621][ T4879] usb 5-1: SerialNumber: syz [ 391.437679][ T4879] usb 5-1: config 0 descriptor?? [ 393.240066][ T4374] usb 5-1: USB disconnect, device number 8 [ 393.972099][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 394.318555][ T6965] loop4: detected capacity change from 0 to 32768 [ 394.338532][ T6965] (syz.4.668,6965,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 394.412531][ T6965] (syz.4.668,6965,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 394.453582][ T6965] JBD2: Ignoring recovery information on journal [ 394.541399][ T6965] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 394.714650][ T6965] loop4: detected capacity change from 32768 to 0 [ 394.731651][ T46] lo_write_bvec: 1 callbacks suppressed [ 394.731660][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.769995][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.781888][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.790344][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.802033][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.813290][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.827143][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.840372][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.858942][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.870407][ T46] loop: Write error at byte offset 9223372036855059455, length 512. [ 394.879594][ C0] I/O error, dev loop4, sector 554 op 0x1:(WRITE) flags 0x9800 phys_seg 17 prio class 2 [ 394.889965][ T6977] Aborting journal on device loop4-29. [ 394.895941][ C0] I/O error, dev loop4, sector 552 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 394.905720][ C0] Buffer I/O error on dev loop4, logical block 552, lost sync page write [ 394.991512][ T6977] JBD2: I/O error when updating journal superblock for loop4-29. [ 395.001890][ T6983] (syz.4.668,6983,0):ocfs2_start_trans:381 ERROR: status = -30 [ 395.009753][ T6977] (jbd2/loop4-29,6977,0):ocfs2_abort_trigger:596 ERROR: ocfs2_abort_trigger called by JBD2. bh = 0xffff888076869000, bh->b_blocknr = 16969 [ 395.033958][ T6983] OCFS2: abort (device loop4): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 395.060849][ T6977] OCFS2: ERROR (device (efault)): void ocfs2_abort_trigger(struct jbd2_buffer_trigger_type *, struct buffer_head *): JBD2 has aborted our journal, ocfs2 cannot continue [ 395.083429][ T6983] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 395.099471][ T6983] OCFS2: Returning error to the calling process. [ 395.106200][ T6983] (syz.4.668,6983,0):ocfs2_modify_bh:105 ERROR: status = -30 [ 395.117059][ T6977] general protection fault, probably for non-canonical address 0xdffffc00000000cf: 0000 [#1] PREEMPT SMP KASAN [ 395.128797][ T6977] KASAN: null-ptr-deref in range [0x0000000000000678-0x000000000000067f] [ 395.137262][ T6977] CPU: 0 PID: 6977 Comm: jbd2/loop4-29 Not tainted syzkaller #0 [ 395.144879][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.154933][ T6977] RIP: 0010:ocfs2_handle_error+0x2a/0x250 [ 395.160657][ T6977] Code: 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 34 1c 73 f7 4c 8d b3 78 06 00 00 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 67 38 c3 f7 4d 8b 26 4d 8d b4 24 [ 395.180309][ T6977] RSP: 0018:ffffc90004be7748 EFLAGS: 00010206 [ 395.186400][ T6977] RAX: 00000000000000cf RBX: 0000000000000000 RCX: ffff88805241bb80 [ 395.194378][ T6977] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 395.202336][ T6977] RBP: ffffc90004be7890 R08: dffffc0000000000 R09: fffff5200097ce91 [ 395.210292][ T6977] R10: fffff5200097ce91 R11: 1ffff9200097ce90 R12: ffffffff8acc4280 [ 395.218257][ T6977] R13: dffffc0000000000 R14: 0000000000000678 R15: 1ffff9200097cef8 [ 395.226234][ T6977] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 395.235161][ T6977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.241726][ T6977] CR2: 0000001b2f617ff8 CR3: 000000005b72b000 CR4: 00000000003506f0 [ 395.249686][ T6977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.257640][ T6977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.265603][ T6977] Call Trace: [ 395.268867][ T6977] [ 395.271781][ T6977] __ocfs2_error+0x124/0x170 [ 395.276352][ T6977] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 395.282248][ T6977] ? cachefiles_withdraw_cache+0x9d0/0x9d0 [ 395.288124][ T6977] ? jbd2_journal_commit_transaction+0x1010/0x60e0 [ 395.294702][ T6977] ocfs2_abort_trigger+0xfc/0x130 [ 395.299732][ T6977] ? ocfs2_frozen_trigger+0x60/0x60 [ 395.304908][ T6977] jbd2_journal_commit_transaction+0x1314/0x60e0 [ 395.311223][ T6977] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 395.317981][ T6977] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 395.323958][ T6977] ? lock_chain_count+0x20/0x20 [ 395.328811][ T6977] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 395.334704][ T6977] ? _raw_spin_unlock+0x40/0x40 [ 395.339537][ T6977] ? detach_timer+0x173/0x350 [ 395.344197][ T6977] ? timer_delete_sync+0x1f8/0x2a0 [ 395.349290][ T6977] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 395.354734][ T6977] ? do_raw_read_unlock+0x70/0x70 [ 395.359753][ T6977] ? prepare_to_wait+0x16d/0x1f0 [ 395.364670][ T6977] ? prepare_to_wait+0x1a6/0x1f0 [ 395.369586][ T6977] kjournald2+0x412/0x810 [ 395.373905][ T6977] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 395.379089][ T6977] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 395.384964][ T6977] ? wake_bit_function+0x200/0x200 [ 395.390055][ T6977] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 395.395928][ T6977] ? __kthread_parkme+0x162/0x1c0 [ 395.400932][ T6977] kthread+0x29d/0x330 [ 395.404995][ T6977] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 395.410181][ T6977] ? kthread_blkcg+0xd0/0xd0 [ 395.414796][ T6977] ret_from_fork+0x1f/0x30 [ 395.419208][ T6977] [ 395.422218][ T6977] Modules linked in: [ 395.429267][ T6983] (syz.4.668,6983,0):ocfs2_local_free_info:856 ERROR: status = -30 [ 395.438471][ T6983] (syz.4.668,6983,0):ocfs2_start_trans:381 ERROR: status = -30 [ 395.446419][ T6983] OCFS2: abort (device loop4): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 395.458377][ T6983] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 395.468268][ T6983] OCFS2: Returning error to the calling process. [ 395.476095][ T6983] (syz.4.668,6983,0):ocfs2_modify_bh:105 ERROR: status = -30 [ 395.483573][ T6983] (syz.4.668,6983,0):ocfs2_local_free_info:856 ERROR: status = -30 [ 395.497065][ C1] I/O error, dev loop4, sector 23 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.507760][ T6983] (syz.4.668,6983,0):ocfs2_assign_bh:2414 ERROR: status = -5 [ 395.529061][ T6983] (syz.4.668,6983,0):ocfs2_inode_lock_full_nested:2509 ERROR: status = -5 [ 395.562192][ T6983] (syz.4.668,6983,0):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 395.586217][ C0] I/O error, dev loop4, sector 16936 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 395.595860][ C0] Buffer I/O error on dev loop4, logical block 16936, lost sync page write [ 395.604572][ T6983] (syz.4.668,6983,0):ocfs2_write_block:78 ERROR: status = -5 [ 395.611956][ T6983] (syz.4.668,6983,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 395.627333][ T6983] (syz.4.668,6983,0):ocfs2_put_slot:517 ERROR: status = -5 [ 395.661784][ T6977] ---[ end trace 0000000000000000 ]--- [ 395.675355][ T6977] RIP: 0010:ocfs2_handle_error+0x2a/0x250 [ 395.690248][ T6977] Code: 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 34 1c 73 f7 4c 8d b3 78 06 00 00 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 67 38 c3 f7 4d 8b 26 4d 8d b4 24 [ 395.739457][ T6977] RSP: 0018:ffffc90004be7748 EFLAGS: 00010206 [ 395.755371][ T6977] RAX: 00000000000000cf RBX: 0000000000000000 RCX: ffff88805241bb80 [ 395.772929][ T6977] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 395.792255][ T6977] RBP: ffffc90004be7890 R08: dffffc0000000000 R09: fffff5200097ce91 [ 395.810136][ T6977] R10: fffff5200097ce91 R11: 1ffff9200097ce90 R12: ffffffff8acc4280 [ 395.828496][ T6977] R13: dffffc0000000000 R14: 0000000000000678 R15: 1ffff9200097cef8 [ 395.847175][ T6977] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 395.865738][ T6977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.880459][ T6977] CR2: 0000000000000000 CR3: 000000005bef5000 CR4: 00000000003506f0 [ 395.904636][ T6977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.927962][ T6977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.956359][ T6977] Kernel panic - not syncing: Fatal exception [ 395.962716][ T6977] Kernel Offset: disabled [ 395.967044][ T6977] Rebooting in 86400 seconds..