last executing test programs: 1m47.921335362s ago: executing program 2 (id=885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x202800, 0x0) io_setup(0x8, &(0x7f0000000600)) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) eventfd2(0xfffffff7, 0x80000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m43.28276952s ago: executing program 2 (id=893): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m42.813700912s ago: executing program 2 (id=895): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) 1m40.038395146s ago: executing program 2 (id=898): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@minixdf}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) 1m37.2624886s ago: executing program 2 (id=907): openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYRESDEC, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) 1m36.682651901s ago: executing program 2 (id=910): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)={0x0}) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000001c0)={&(0x7f0000000180)=[r8, 0x0, r10], 0xe, 0x3, 0x2}) 1m36.179038785s ago: executing program 32 (id=910): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)={0x0}) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000001c0)={&(0x7f0000000180)=[r8, 0x0, r10], 0xe, 0x3, 0x2}) 28.688127795s ago: executing program 1 (id=1055): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x11, 0x2, 0x300) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xb) 20.553151331s ago: executing program 1 (id=1069): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) 18.898500986s ago: executing program 1 (id=1071): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000001c0)={0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13.74536232s ago: executing program 1 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x2000005c) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) 11.690214341s ago: executing program 1 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init1(0x800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10) 11.689791561s ago: executing program 4 (id=1084): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 11.454902632s ago: executing program 4 (id=1085): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) 11.179912716s ago: executing program 4 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) inotify_init1(0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c001980080001", @ANYRES64=r6], 0x40}, 0x1, 0x0, 0x0, 0x4004410}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffe) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e24, 0x162, @private1}, 0x1c) 10.049764195s ago: executing program 4 (id=1087): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./bus\x00', 0x800000, &(0x7f0000000700)=ANY=[], 0x1, 0x700, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ftruncate(r0, 0x100) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="0af1f5b9fadf33477bca227e0d3ecfe45b259c81adbb362276f92895787112b5224db036122320fc5eea59bb07baab157181b9a16a55eaf0bff9fdc1efec0a4eb12ab996fb1c69dc5ac81e3577cb7b6151c166f6519ec088c1acdc8e8e3e6b8467007ed63d5ab76c69e3a9341e7b7adf1b8af317f21e5980b4d7bcf57ffc6a513b8f07acbe05bd5b05d100d4f02b72eb2636e1b13ef337c63443fc6bf0", 0x9d}, {&(0x7f0000000180)="2ad3e7b7a4c60366e1b82040278163137a5bae5410599de0b94e71e028159c", 0x1f}, {&(0x7f00000001c0)="0dc24c8ef92f4fa7de78f4321f78e2fc0328cace79e988fb3449a61c62ead4081c7173b5b7fe099e840c924434d8ba55250e9f71e4214c0761cb3c2387dd367aed44dc6dd7", 0x45}], 0x3) 9.461565927s ago: executing program 4 (id=1089): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@minixdf}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) 8.605119582s ago: executing program 5 (id=1091): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000a40), 0x0) socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x10000000002) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x11, 0x1, 0x0}, &(0x7f0000000200)=0x40) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@rdmsr={0x66, 0x18, {0x400000b1}}], 0x18}) 8.389137801s ago: executing program 5 (id=1092): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) 7.61184271s ago: executing program 3 (id=1093): set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000f00000/0x2000)=nil, 0x2000, 0x17) 6.739956657s ago: executing program 5 (id=1094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x2000005c) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) 6.619543147s ago: executing program 0 (id=1095): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x11, 0x2, 0x300) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xb) 6.422821524s ago: executing program 3 (id=1096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) 6.25258012s ago: executing program 4 (id=1097): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000200)={[{@grpid}, {@resuid}, {@nodelalloc}, {@dioread_nolock}, {@quota}]}, 0x0, 0x54c, &(0x7f0000000280)="$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") chown(0x0, 0x0, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)={r0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2], 0x1, 0x538, &(0x7f0000003480)="$eJzs3VFr21YbwPFHaULyulBe3neUEpL2NN0ghdST7TbFlF1o8rFzWlkyklySqxIap4Q6XWk2WHIzetNtsH2I3u5DjH2hsruxuwxJduskjh3S1M7C/2facyw91nkkGz0otiQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiuRXbLljiGb+5qo7nVsKgPmB+d3m3DzQDxhWxkn8yMyPXsknXPvsw+2ry34LMZc/mZCZpZmTv8tX/Pvj/5ET39QMSGomd3b3n6+1269W4ExmTmvZNFJi6U9PKRIEq/0dEVqqRqhpPR2tRrOvKDbUTB6FadG+rQrlcUjq/FjT9WsXxdHfi/TtF215WD/MN7YRR4H/5MB+5K8bzjF9LY5LZScz95IP4yMQq1k5dqc2tdqs0LMkkqHCSoOKwoKJdLBYKxWJh+V753n3bnjwywT5EjkSM/0OL8TrjPThwehOd+i+eGPGlKaui+j5cqUgogdSPmd/Rrf9fTA8et7f+d6v8tQ+zZyWt/9ezZ9ePq//H5DK6x47syp48l3VpS1ta8mrsGY32URMtvhiJJBAjdXHSKaozRUlZlmVZbHkiK1KVSJRUxYgnWiJZk0hi0eknypVQtDgSSyChKFkUV26LkoLsT5elJEq05GVNAmmKLzWpiJMuZVO20u1eGpDj+6DCSYKKA4Ko//h4Z74PB05rv1v/AQAAAADAhWWlf31Pjv+nZF5kypKq8bQ97rQAAAAAAMAZSr/5n0uaqaQ3LxbH/wAAAAAAXDRWeo6dJSI5uZH1umdC8UcAAAAAAAAuiPT7/+tJk0t6N8Ti+B8AAAAAgIvmp+7VdycOXWP3j3SqZUnUmLZ+/1PCcMp63Vj93Np2khnO9qXsdZcOLzGuzlpXOgtJm+XJzjNXz1mdq1++vwjmu06zOexa/9YZJCC/yM0s5uZG1m5052Sj5KrG03k38B4UxHGuTMR6Nf7uxdb3kq7+z379iiWbW+1W/uk37Y00l9fJUl5vdy6geOQ6igNy+Vbms5j5/ms8lZ6I0Rk3l41r967/RPeNO/mYb2Qhi1nIZW3u4PrPJGMW8g+663Fo7bMspkXko9b8jdzKYm4t3sqaPlkU88e9B51tUezd/qfaFifIojQsi9KwLC5/NTALABiXzSFVyDpa+E+xrx1NdX8ji1nM4my6Y52c7bNHt4ft0e2PrOu/HbkHUv8aW0jH/TUZ9wfZarcK6bhvkxe8PXbcyCtaMvPyr/397ZdydWd3787W9vqz1rPWi2KxtGzfte17RZna3Jps2UnTbtnUHgBAH8PvsTM0wro75Kj6f+9/UpCXpyJ/7+9vyFJ6tkH6i4O+S831/AxhachRa67nDi9LQ47qcj03ejl5bGkE7wQAAKOzMKQOn6T+Lw057j5YywcfHffWcgAA8Gno8J2Vi3+0wtA0nhTK5YITr2gVBu4jFZpKTSvjxzp0Vxy/plUjDOLADbyk89hUdKSiZqMRhLGqBqFqBJFZTe/8rjq3fo903fFj40YNTzuRVm7gx44bq4qJXNVofu2ZaEWH6YujhnZN1bhObAJfRUEzdHVeqUjrnkBT0X5sqibp+qoRmroTrqnHgdesa1XRkRuaRhxkC+yOZfxqENbTxebHvbEBADgndnb3nq+3261Xn7Az7nUEAAAHUaUBAAAAAAAAAAAAAAAAAAAAADj/RnH+37+vM30+0hh3Z+J8pJF1Zno/tucgnzPrWHIu0jjcGd8+CcBo/BMAAP//fJVRAw==") mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x40, 0x1) 5.459926869s ago: executing program 0 (id=1098): syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) 5.373467877s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, 0x0, 0x405, 0x70bd29, 0x25ffdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) 5.205482991s ago: executing program 1 (id=1100): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) socket$inet6(0xa, 0x800000000000002, 0x0) 4.000555677s ago: executing program 0 (id=1101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fcb0229da}, 0xc045) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) r2 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00', @ANYRES16=r3, @ANYBLOB="00012cbd7000fbdbdf250900000008000300050000000800030001000000050005000200000008000400050000000c000680060001000a00", @ANYRES32=r4, @ANYBLOB="05000200540000000600010002000000080006000400000008000200"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40000) shutdown(r0, 0x1) 3.97249928s ago: executing program 3 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = inotify_init1(0x800) inotify_add_watch(r5, 0x0, 0x60000526) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c001980080001", @ANYRES64=r6], 0x40}, 0x1, 0x0, 0x0, 0x4004410}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000002c0)={0x2, 0x0, [{0xd, 0x5, 0x5, 0x5, 0xcd73, 0x3, 0x5}, {0x1, 0x2000, 0x9f603fe0013529b, 0x8, 0x20145b25, 0x0, 0x8}]}) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e24, 0x162, @private1}, 0x1c) bind$inet(r9, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10) 3.96991673s ago: executing program 5 (id=1103): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000700)="c87b35043e70167a3e59c95cf2d2470a409aed8df615eda880680920e7ea2e4413084cba0ac21d664201fbe69bf2660ea3918ef0b6727862bbd91dfce9385577a868d3a94cbfd3756c4fc07934e5ae442a225605985c4a8e3de576c99ecd23d425b1f09e6413e8f779e0723e88fc0d8cc981391df5e1f5ba5fa3ca690b472143edac8820850652322d4594f9b4e4e88482356e", 0x93}, {&(0x7f0000000300)="c071c346d7762184984cd6fc3bd9904a7df7f6f0cc0d7bf8e1359a106b1f25eb975e8b38ca101a0706ae6835", 0x2c}, {&(0x7f00000007c0)="e4e86ea4ab941009402773769eb1b04ad141f53294bf37a503b368ec7378ebb37de43aa11a211b4486253928fb4e4f8874d02cb4d8e961a9b6815ff9a2dec718f23e2b294767db301a17e9d6cd95d7f94a732e6a3c38750a53e71307f9fc58e26b1b9147df16e7b12720ed83999e722ea43c3f1b5b682f44ec468d762b1af6290f4bcd7fcc34e7facbf69dabcc4e95a7ac43f137e3a7d8bae77ad30928ac7aab8f3954ad4cb5430c93a4fd70f8ef79bbc8d44e9eda26d94c90354e8d", 0xbc}, {&(0x7f00000008c0)="96d2502e8c4241346fdc3fe5cee92278ad930f37caffe5853aaf307a54dbc2401f258383278cd81465da6006bf0e9fca4a645e7a170338ffda0e71555ad50ee0851a7e23c343e80a80696e0506ca8601cd8c75b2853fd821a0d92d4d6d39783a5a2b52c29ed15fe0c70a698e9a9d449df75692dd401991ce8398d5b1200f96486b0e945f82e8f195351587b2069eebd4108e37157a8cb58c6897ba7347210a76a3b5ce899dfd", 0xa6}], 0x4}}], 0x1, 0x24044000) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f800000000000000", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0", 0xb}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.667281057s ago: executing program 5 (id=1104): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) 2.716593431s ago: executing program 3 (id=1105): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x502) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000340)}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x2, 0x200400) ioctl$DVB_DEMUX_DMX_DQBUF(r1, 0xc0186f40, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x3, 0x18, 0x7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setregid(0xee00, 0xee00) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) 2.566919573s ago: executing program 0 (id=1106): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.524011495s ago: executing program 3 (id=1107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) remap_file_pages(&(0x7f000072b000/0x2000)=nil, 0x2000, 0x0, 0xfffffffffffffffd, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000010ba00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010fa00)={0x9, [], 0x0, "6251bb191b395c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000110a00)={0x0, 0x0, "d2b312bb07e0e74cc09e920a48ddaf5f285c198c3ad3d9e8cfd78b6ca970b027aaf5975d19b23c8541057cb86a0750ff31fd91b1412aaeb84eed992fb74ba1e0d87fed809275e97a19edf0f96023fe5effd98b1c9a0e2770228f2c8c062664af40cc7931821a333ae570498d5aa4c673b3237837fecbdfe07bf97c1a65b793871d1708f8a64c33f2582d05fb7b0e0d068fee5daae89bc4e8fc8229f38c92fce35b1e7ef3198d36082ccdd3444c6b78916d9f8c1da9f9d03b13e565e46833ab82dd65f697d39280426c7eeb3ea3fe491f7ae19ae6867f8049bf0faf5c3c6ded019f3a1fa92615128a200acb570bc373449790488d9adc56c7a2526b6110b00487", "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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.333087442s ago: executing program 0 (id=1108): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x11, 0x2, 0x300) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xb) 129.966568ms ago: executing program 0 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) 0s ago: executing program 5 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init1(0x800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10) kernel console output (not intermixed with test programs): dy [ 72.339954][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.349557][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.359536][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.368425][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.377817][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.386640][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.396282][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.405751][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.414836][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.455543][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.493144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.501715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.540099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.559340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.587474][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.622100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.652109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.673756][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.680931][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.718978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.739671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.764539][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.771909][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.795662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.849121][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.882215][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.893998][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.901485][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.963735][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.972889][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.994862][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.008970][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.037611][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.066724][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.084932][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.104391][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.123934][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.140149][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.169402][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.183249][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.192435][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.208579][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.218069][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.261750][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.273989][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.288686][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.305827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.323868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.349915][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.373744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.394276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.414082][ T4275] device veth0_vlan entered promiscuous mode [ 73.457587][ T4275] device veth1_vlan entered promiscuous mode [ 73.485026][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.495772][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.528757][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.543832][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.613870][ T4275] device veth0_macvtap entered promiscuous mode [ 73.621891][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.633616][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.657899][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.671190][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.686403][ T4271] device veth0_vlan entered promiscuous mode [ 73.693827][ T4266] device veth0_vlan entered promiscuous mode [ 73.708647][ T4275] device veth1_macvtap entered promiscuous mode [ 73.719127][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.728033][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.737690][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.747572][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.757315][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.766399][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.794021][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.809570][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.819407][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.838721][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.850663][ T4271] device veth1_vlan entered promiscuous mode [ 73.866119][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.885717][ T4266] device veth1_vlan entered promiscuous mode [ 73.896840][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.905217][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.915005][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.924256][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.933660][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.942285][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.950719][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.975077][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.994459][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.009325][ T4277] device veth0_vlan entered promiscuous mode [ 74.021001][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.029323][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.042270][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.051636][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.080087][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.089895][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.098322][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.111251][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.120478][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.130584][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.140146][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.153004][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 74.158149][ T4277] device veth1_vlan entered promiscuous mode [ 74.159161][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 74.171411][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 74.171424][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 74.197662][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.206334][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.215504][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.225138][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.235294][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 74.263043][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.273699][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.284360][ T4271] device veth0_macvtap entered promiscuous mode [ 74.294898][ T4277] device veth0_macvtap entered promiscuous mode [ 74.310853][ T4266] device veth0_macvtap entered promiscuous mode [ 74.334148][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.344996][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.355339][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.364690][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.373707][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.397271][ T4266] device veth1_macvtap entered promiscuous mode [ 74.411848][ T4271] device veth1_macvtap entered promiscuous mode [ 74.431834][ T4277] device veth1_macvtap entered promiscuous mode [ 74.460239][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.471812][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.481046][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.490434][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.499787][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.521318][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.537148][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.549625][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.568243][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.582159][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.593710][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.604578][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.617082][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.633505][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.642258][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.653903][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.663946][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.676807][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.687917][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.699663][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.728687][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.745257][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.756535][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.770372][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.780757][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.792501][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.805356][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.816649][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.833035][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.843812][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.855029][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.867715][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.889305][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.899335][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.908830][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.917755][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.927083][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.936649][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.945932][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.955429][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.964490][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.973025][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.982532][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.996244][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.006884][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.017662][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.027750][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.039226][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.053476][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.065082][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.075025][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084394][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.093347][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.114623][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.128365][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.137609][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.146804][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.158212][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.171557][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.184331][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.194393][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.203274][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.212444][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.238556][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.239908][ T4265] device veth0_vlan entered promiscuous mode [ 75.248489][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.316206][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.335752][ T4265] device veth1_vlan entered promiscuous mode [ 75.403213][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.417849][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.432367][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.447247][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.462948][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.479638][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.489501][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.520662][ T4265] device veth0_macvtap entered promiscuous mode [ 75.536136][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.568873][ T4265] device veth1_macvtap entered promiscuous mode [ 75.601851][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.614119][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.622086][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.629746][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.629789][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.629799][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.629811][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.629819][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.629829][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.629838][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.629848][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.668082][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.683291][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.772215][ T4353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.801313][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.815715][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.826818][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.838549][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.849985][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.860890][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.871968][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.883015][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.910218][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.918852][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.928124][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.936502][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.947819][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.964092][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.973809][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.007018][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.016040][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.037136][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.039946][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.057893][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.067567][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.138941][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.176278][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.182826][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.192176][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.192324][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.219060][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.220560][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.232939][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.242802][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 76.243347][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 76.249020][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 76.255957][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 76.277634][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.288287][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.324252][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 76.561084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.569713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.578136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.586656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.595001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.603705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.612602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.622606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.632628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.642614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 76.948971][ T4366] xt_TCPMSS: Only works on TCP SYN packets [ 77.989877][ T4312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.148886][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.178735][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.216724][ T4312] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 78.227350][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.242879][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.275010][ T4312] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 78.292635][ T4312] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 78.314599][ T4312] usb 4-1: Manufacturer: syz [ 78.319908][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.346246][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.368671][ T4312] usb 4-1: config 0 descriptor?? [ 78.377321][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.837700][ T4375] loop4: detected capacity change from 0 to 1024 [ 78.945268][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 79.158392][ T4312] rc_core: IR keymap rc-hauppauge not found [ 79.167216][ T4312] Registered IR keymap rc-empty [ 79.190178][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 79.476246][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 79.887296][ T4312] usb 4-1: USB disconnect, device number 2 [ 80.284877][ T4402] loop4: detected capacity change from 0 to 256 [ 80.397546][ T4402] FAT-fs (loop4): bogus number of FAT sectors [ 80.404364][ T4402] FAT-fs (loop4): Can't find a valid FAT filesystem [ 81.051556][ T4410] mmap: syz.3.14 (4410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.685650][ T14] cfg80211: failed to load regulatory.db [ 83.221592][ T4434] loop0: detected capacity change from 0 to 1024 [ 84.621180][ T4312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.899337][ T4312] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 84.955042][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.120215][ T4312] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 85.181052][ T4312] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 85.227065][ T4312] usb 5-1: Manufacturer: syz [ 85.274900][ T4312] usb 5-1: config 0 descriptor?? [ 85.744442][ T4467] loop0: detected capacity change from 0 to 256 [ 85.764261][ T4467] FAT-fs (loop0): bogus number of FAT sectors [ 85.770551][ T4467] FAT-fs (loop0): Can't find a valid FAT filesystem [ 86.508064][ T4347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.522879][ T4312] rc_core: IR keymap rc-hauppauge not found [ 86.531619][ T4312] Registered IR keymap rc-empty [ 86.552051][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 86.739129][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 86.823660][ T4312] usb 5-1: USB disconnect, device number 2 [ 90.262759][ T4268] block nbd0: Receive control failed (result -32) [ 90.313837][ T4500] block nbd0: shutting down sockets [ 90.469975][ T4515] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 90.825402][ T4520] loop3: detected capacity change from 0 to 256 [ 90.849106][ T4520] FAT-fs (loop3): bogus number of FAT sectors [ 90.849191][ T4520] FAT-fs (loop3): Can't find a valid FAT filesystem [ 91.560866][ T4394] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.856039][ T4532] loop0: detected capacity change from 0 to 512 [ 93.177825][ T4532] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 93.196517][ T4532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.210901][ T4532] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.47: Failed to acquire dquot type 1 [ 93.253911][ T4532] EXT4-fs (loop0): 1 truncate cleaned up [ 93.259647][ T4532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.293412][ T4532] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.324293][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 98.649508][ T4268] block nbd4: Receive control failed (result -32) [ 98.659216][ T4564] block nbd4: shutting down sockets [ 99.128460][ T4578] loop1: detected capacity change from 0 to 256 [ 99.164066][ T4578] FAT-fs (loop1): bogus number of FAT sectors [ 99.170554][ T4578] FAT-fs (loop1): Can't find a valid FAT filesystem [ 100.616910][ T4595] loop4: detected capacity change from 0 to 512 [ 100.813407][ T4595] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 100.865735][ T4595] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 100.919107][ T4595] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.61: Failed to acquire dquot type 1 [ 100.941567][ T4595] EXT4-fs (loop4): 1 truncate cleaned up [ 100.979591][ T4595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.109435][ T4595] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.209620][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 105.708485][ T4640] loop3: detected capacity change from 0 to 256 [ 105.810938][ T4640] FAT-fs (loop3): bogus number of FAT sectors [ 105.817442][ T4640] FAT-fs (loop3): Can't find a valid FAT filesystem [ 105.923340][ C0] hrtimer: interrupt took 69005 ns [ 107.872039][ T4669] fuse: Bad value for 'fd' [ 108.646323][ T4674] loop0: detected capacity change from 0 to 1024 [ 111.358680][ T4696] loop0: detected capacity change from 0 to 512 [ 111.490010][ T4696] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 111.536902][ T4696] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 111.578966][ T4696] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.89: Failed to acquire dquot type 1 [ 111.632470][ T4696] EXT4-fs (loop0): 1 truncate cleaned up [ 111.668933][ T4696] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.694597][ T4696] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.961529][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 112.947890][ T4716] fuse: Bad value for 'fd' [ 113.371313][ T4719] loop3: detected capacity change from 0 to 1024 [ 113.611659][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 115.723548][ T4738] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.739020][ T4738] loop4: detected capacity change from 0 to 128 [ 115.746344][ T4738] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.845831][ T4738] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.092823][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.055496][ T4753] fuse: Bad value for 'fd' [ 118.913297][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 119.120475][ T4776] loop0: detected capacity change from 0 to 1024 [ 121.757025][ T4806] loop4: detected capacity change from 0 to 512 [ 121.865324][ T4806] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 121.904645][ T4806] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 121.980867][ T4806] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.123: Failed to acquire dquot type 1 [ 122.035130][ T4806] EXT4-fs (loop4): 1 truncate cleaned up [ 122.044145][ T4806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.073459][ T4806] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.628823][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 122.723648][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.733890][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.741934][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.780519][ T4822] device bridge_slave_0 left promiscuous mode [ 122.800307][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.853460][ T4822] device bridge_slave_1 left promiscuous mode [ 122.873057][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.906668][ T4822] bond0: (slave bond_slave_0): Releasing backup interface [ 122.948267][ T4822] bond0: (slave bond_slave_1): Releasing backup interface [ 123.132243][ T4822] team0: Port device team_slave_0 removed [ 123.187477][ T4822] team0: Port device team_slave_1 removed [ 123.234412][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.253952][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 123.289920][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.340953][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.358341][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.535001][ T4830] loop3: detected capacity change from 0 to 1024 [ 126.205675][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 127.098728][ T4870] loop0: detected capacity change from 0 to 512 [ 130.419988][ T4895] xt_TCPMSS: Only works on TCP SYN packets [ 132.639961][ T4932] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.933057][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939522][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.018882][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 133.282583][ T4313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.012932][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 134.171833][ T4313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.182708][ T4313] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.192160][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.206131][ T4313] usb 5-1: config 0 descriptor?? [ 134.635516][ T4313] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 136.402549][ C0] sched: RT throttling activated [ 136.442756][ T4313] usb 5-1: USB disconnect, device number 3 [ 136.744459][ T4969] netlink: 220 bytes leftover after parsing attributes in process `syz.4.172'. [ 136.780998][ T4969] netlink: 220 bytes leftover after parsing attributes in process `syz.4.172'. [ 136.802936][ T4969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.172'. [ 138.114289][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 139.574833][ T4993] loop2: detected capacity change from 0 to 512 [ 139.585926][ T4993] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.599579][ T4993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.703370][ T4993] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.744684][ T4993] EXT4-fs (loop2): 1 truncate cleaned up [ 139.755881][ T4993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.587430][ T5001] loop3: detected capacity change from 0 to 256 [ 141.267225][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 141.650217][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.735878][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.865179][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.516701][ T5023] loop3: detected capacity change from 0 to 256 [ 143.346957][ T5023] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 143.641781][ T5032] loop4: detected capacity change from 0 to 512 [ 144.682036][ T5045] loop2: detected capacity change from 0 to 512 [ 144.750709][ T5041] Zero length message leads to an empty skb [ 144.808586][ T5045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.952324][ T5045] EXT4-fs (loop2): 1 truncate cleaned up [ 144.971648][ T5045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.709845][ T5061] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.416898][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 148.348293][ T5081] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.135954][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.242865][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.250824][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.325969][ T5087] loop2: detected capacity change from 0 to 512 [ 150.284849][ T5089] fuse: Unknown parameter 'grou00000000000000000000' [ 150.639061][ T5097] loop2: detected capacity change from 0 to 512 [ 150.812772][ T5097] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.438189][ T5097] EXT4-fs (loop2): 1 truncate cleaned up [ 151.489447][ T5097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.767178][ T5112] xt_TCPMSS: Only works on TCP SYN packets [ 153.341424][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 153.646066][ T5130] fuse: Unknown parameter 'group_i00000000000000000000' [ 153.843496][ T5128] loop3: detected capacity change from 0 to 512 [ 154.868341][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 157.990268][ T5172] loop0: detected capacity change from 0 to 512 [ 158.014583][ T5174] loop4: detected capacity change from 0 to 256 [ 158.046295][ T5172] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.162314][ T5172] EXT4-fs (loop0): 1 truncate cleaned up [ 158.194127][ T5172] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.937148][ T5179] loop4: detected capacity change from 0 to 512 [ 160.139586][ T5185] fuse: Unknown parameter 'group_i00000000000000000000' [ 165.142770][ T4310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 165.447598][ T4310] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 165.487557][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.534992][ T4310] usb 4-1: Product: syz [ 165.558649][ T4310] usb 4-1: Manufacturer: syz [ 165.581861][ T4310] usb 4-1: SerialNumber: syz [ 165.618027][ T4310] usb 4-1: config 0 descriptor?? [ 165.728668][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 166.283566][ T5225] loop0: detected capacity change from 0 to 128 [ 166.292352][ T5225] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.414689][ T5224] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 167.442724][ T5225] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.716310][ T5227] loop4: detected capacity change from 0 to 1024 [ 167.723418][ T4793] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.257616][ T4310] usb-storage 4-1:0.0: USB Mass Storage device detected [ 169.293448][ T4310] usb 4-1: USB disconnect, device number 3 [ 169.523232][ T4339] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.716653][ T4339] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 169.746732][ T4339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.763924][ T4339] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 169.774598][ T4339] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 169.790662][ T4339] usb 1-1: Manufacturer: syz [ 169.835110][ T4339] usb 1-1: config 0 descriptor?? [ 171.382636][ T4339] rc_core: IR keymap rc-hauppauge not found [ 171.398501][ T4339] Registered IR keymap rc-empty [ 171.464690][ T4339] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 171.563655][ T4339] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 172.046467][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 172.069227][ T4339] usb 1-1: USB disconnect, device number 2 [ 172.341398][ T5272] xt_TCPMSS: Only works on TCP SYN packets [ 173.907599][ T5283] loop1: detected capacity change from 0 to 1024 [ 174.641623][ T5294] fuse: Unknown parameter 'group_id00000000000000000000' [ 178.009644][ T5312] delete_channel: no stack [ 178.851297][ T5319] xt_TCPMSS: Only works on TCP SYN packets [ 180.172059][ T5326] loop1: detected capacity change from 0 to 128 [ 180.208253][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 180.225195][ T5326] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 180.446342][ T14] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 180.473430][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.570076][ T14] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 180.589199][ T14] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 180.612306][ T14] usb 3-1: Manufacturer: syz [ 180.701124][ T5335] fuse: Unknown parameter 'group_id00000000000000000000' [ 181.434435][ T14] usb 3-1: config 0 descriptor?? [ 182.121564][ T5345] fuse: Bad value for 'fd' [ 182.192632][ T14] rc_core: IR keymap rc-hauppauge not found [ 182.199923][ T14] Registered IR keymap rc-empty [ 182.219601][ T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 182.254734][ T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 182.395258][ T14] usb 3-1: USB disconnect, device number 2 [ 184.296930][ T5358] loop2: detected capacity change from 0 to 1024 [ 187.663567][ T5379] loop0: detected capacity change from 0 to 128 [ 188.419421][ T5379] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 188.453744][ T5380] fuse: Bad value for 'user_id' [ 188.982615][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 189.274509][ T14] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 189.427561][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.729664][ T14] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 189.820650][ T14] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 189.849757][ T14] usb 2-1: Manufacturer: syz [ 190.002889][ T14] usb 2-1: config 0 descriptor?? [ 190.678907][ T5401] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.317606][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 191.323813][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 191.329963][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 191.338337][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 191.338387][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.402686][ T14] rc_core: IR keymap rc-hauppauge not found [ 191.408853][ T14] Registered IR keymap rc-empty [ 191.494628][ T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 191.677082][ T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 192.899763][ T5414] loop0: detected capacity change from 0 to 1024 [ 193.372236][ T4312] usb 2-1: USB disconnect, device number 2 [ 193.705624][ T5419] fuse: Bad value for 'fd' [ 194.319270][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325778][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452734][ T5428] fuse: Bad value for 'user_id' [ 195.301813][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.311224][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.320102][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.330275][ T5430] device bridge_slave_0 left promiscuous mode [ 195.350377][ T5430] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.447915][ T5430] device bridge_slave_1 left promiscuous mode [ 195.515594][ T5430] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.639285][ T5430] bond0: (slave bond_slave_0): Releasing backup interface [ 195.746192][ T5430] bond0: (slave bond_slave_1): Releasing backup interface [ 196.009363][ T5430] team0: Port device team_slave_0 removed [ 197.046831][ T5430] team0: Port device team_slave_1 removed [ 197.104366][ T5430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.190252][ T5430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.259798][ T5430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.278972][ T5430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.568667][ T5458] loop1: detected capacity change from 0 to 1024 [ 200.982908][ T4362] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.402346][ T4362] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.473146][ T4362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.766691][ T4362] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.779418][ T4362] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.802808][ T4362] usb 4-1: Manufacturer: syz [ 201.827464][ T4362] usb 4-1: config 0 descriptor?? [ 203.625815][ T4362] rc_core: IR keymap rc-hauppauge not found [ 203.631882][ T4362] Registered IR keymap rc-empty [ 203.663354][ T4362] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 203.699004][ T4362] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 203.765957][ T4362] usb 4-1: USB disconnect, device number 4 [ 204.890992][ T5482] xt_TCPMSS: Only works on TCP SYN packets [ 205.754342][ T5488] fuse: Bad value for 'fd' [ 210.311882][ T5511] loop2: detected capacity change from 0 to 1024 [ 210.358669][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 210.455452][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 210.488584][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 210.923751][ T4339] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 211.147248][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 211.215186][ T4339] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 211.238912][ T4339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.303815][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 211.333560][ T4339] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 211.434107][ T4339] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 211.442440][ T4339] usb 5-1: Manufacturer: syz [ 211.459062][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 211.470481][ T4339] usb 5-1: config 0 descriptor?? [ 211.663670][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 211.782649][ T4339] rc_core: IR keymap rc-hauppauge not found [ 211.798503][ T4339] Registered IR keymap rc-empty [ 211.811435][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 211.817807][ T4339] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 211.842439][ T4339] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 211.878989][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 211.931089][ T4339] usb 5-1: USB disconnect, device number 4 [ 214.698860][ T5559] loop3: detected capacity change from 0 to 1024 [ 215.858327][ T5572] loop1: detected capacity change from 0 to 1024 [ 215.899896][ T5572] ======================================================= [ 215.899896][ T5572] WARNING: The mand mount option has been deprecated and [ 215.899896][ T5572] and is ignored by this kernel. Remove the mand [ 215.899896][ T5572] option from the mount to silence this warning. [ 215.899896][ T5572] ======================================================= [ 215.936565][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.149376][ T5577] loop4: detected capacity change from 0 to 1024 [ 216.217997][ T5572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 216.262746][ T5572] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.400981][ T26] audit: type=1800 audit(1771632613.095:2): pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.343" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 216.549064][ T5572] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.343: lblock 0 mapped to illegal pblock 0 (length 1) [ 217.025476][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 218.963039][ T127] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 219.247808][ T127] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 219.265485][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.305568][ T127] usb 1-1: Product: syz [ 219.309936][ T127] usb 1-1: Manufacturer: syz [ 219.333140][ T127] usb 1-1: SerialNumber: syz [ 219.430329][ T127] usb 1-1: config 0 descriptor?? [ 221.387172][ T127] usb-storage 1-1:0.0: USB Mass Storage device detected [ 221.534847][ T127] usb 1-1: USB disconnect, device number 3 [ 222.468822][ T5633] loop4: detected capacity change from 0 to 512 [ 223.196220][ T5633] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 223.262672][ T5633] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 223.357595][ T5633] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.359: Failed to acquire dquot type 1 [ 223.431109][ T5633] EXT4-fs (loop4): 1 truncate cleaned up [ 223.437200][ T5633] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.446955][ T5633] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.472252][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 225.643510][ T5662] loop0: detected capacity change from 0 to 1024 [ 231.595051][ T5708] loop3: detected capacity change from 0 to 1024 [ 233.275922][ T5723] loop1: detected capacity change from 0 to 1024 [ 236.084164][ T5730] xt_TCPMSS: Only works on TCP SYN packets [ 236.091015][ T5746] fuse: Bad value for 'fd' [ 236.177223][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.188516][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.197849][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.623188][ T5769] loop0: detected capacity change from 0 to 1024 [ 240.308260][ T5788] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 240.986729][ T5792] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 241.801924][ T5788] device syz_tun entered promiscuous mode [ 241.810615][ T5796] fuse: Bad value for 'fd' [ 241.838167][ T5788] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 244.680744][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.688549][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.854280][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.013132][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.833205][ T127] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 250.077792][ T127] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 250.121760][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.175751][ T127] usb 3-1: Product: syz [ 250.180247][ T127] usb 3-1: Manufacturer: syz [ 250.218615][ T127] usb 3-1: SerialNumber: syz [ 250.237434][ T127] usb 3-1: config 0 descriptor?? [ 250.331552][ T5840] fuse: Bad value for 'fd' [ 250.527937][ T127] usb-storage 3-1:0.0: USB Mass Storage device detected [ 250.703278][ T5844] xt_TCPMSS: Only works on TCP SYN packets [ 251.187687][ T127] usb 3-1: USB disconnect, device number 3 [ 253.687440][ T5797] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.712767][ T5797] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.752356][ T5797] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.776616][ T5797] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.174036][ T4272] block nbd4: Receive control failed (result -32) [ 254.191444][ T5863] block nbd4: shutting down sockets [ 255.375252][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 255.644721][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.662726][ T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.692591][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.701861][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.755575][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.763041][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.779762][ T5874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.187337][ T5527] usb 2-1: USB disconnect, device number 3 [ 258.399856][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.434306][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.442189][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.425783][ T5902] xt_TCPMSS: Only works on TCP SYN packets [ 260.072764][ T127] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 260.614682][ T127] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 260.652566][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.718545][ T127] usb 3-1: Product: syz [ 260.792426][ T127] usb 3-1: Manufacturer: syz [ 261.386135][ T127] usb 3-1: SerialNumber: syz [ 261.453620][ T127] usb 3-1: config 0 descriptor?? [ 262.424781][ T127] usb 3-1: can't set config #0, error -71 [ 262.465595][ T127] usb 3-1: USB disconnect, device number 4 [ 264.367696][ T4272] block nbd4: Receive control failed (result -32) [ 264.433692][ T5922] block nbd4: shutting down sockets [ 265.076336][ T5940] loop2: detected capacity change from 0 to 1024 [ 265.234112][ T5940] EXT4-fs: Ignoring removed oldalloc option [ 265.240176][ T5940] EXT4-fs: Ignoring removed orlov option [ 266.183845][ T5940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.957929][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 271.269428][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 271.602682][ T7] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 271.616533][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.592603][ T7] usb 2-1: Product: syz [ 272.602585][ T7] usb 2-1: Manufacturer: syz [ 272.607444][ T7] usb 2-1: SerialNumber: syz [ 272.628586][ T7] usb 2-1: config 0 descriptor?? [ 272.672904][ T7] usb 2-1: can't set config #0, error -71 [ 272.704674][ T7] usb 2-1: USB disconnect, device number 4 [ 272.713431][ T5994] loop4: detected capacity change from 0 to 512 [ 272.943513][ T5994] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 272.997842][ T5994] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 273.094030][ T5994] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.460: Failed to acquire dquot type 1 [ 273.150577][ T5994] EXT4-fs (loop4): 1 truncate cleaned up [ 273.273895][ T5994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 273.293996][ T5994] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.144938][ T4272] block nbd3: Receive control failed (result -32) [ 274.152873][ T5997] block nbd3: shutting down sockets [ 274.996868][ T6018] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 275.834553][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 277.855207][ T6043] loop0: detected capacity change from 0 to 512 [ 277.916257][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 278.127577][ T7] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 278.152856][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.161781][ T7] usb 2-1: Product: syz [ 278.212792][ T7] usb 2-1: Manufacturer: syz [ 278.217950][ T7] usb 2-1: SerialNumber: syz [ 278.347992][ T6043] EXT4-fs (loop0): Test dummy encryption mode enabled [ 278.369926][ T6043] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.475: inode has both inline data and extents flags [ 278.391638][ T6043] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.475: couldn't read orphan inode 15 (err -117) [ 278.445067][ T7] usb 2-1: config 0 descriptor?? [ 278.674714][ T6043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.212621][ T7] usb-storage 2-1:0.0: USB Mass Storage device detected [ 279.354259][ T7] usb 2-1: USB disconnect, device number 5 [ 279.569534][ T6043] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 279.641876][ T6070] loop2: detected capacity change from 0 to 512 [ 279.667962][ T6064] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 279.953456][ T6070] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 280.062705][ T6070] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 280.102870][ T6070] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.478: Failed to acquire dquot type 1 [ 280.182907][ T6070] EXT4-fs (loop2): 1 truncate cleaned up [ 280.217669][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 280.256272][ T6070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 280.298821][ T6070] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.312689][ T6089] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 281.470562][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 284.029817][ T6109] loop1: detected capacity change from 0 to 128 [ 284.037450][ T6109] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.239302][ T6109] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.459025][ T4272] block nbd2: Receive control failed (result -32) [ 284.468545][ T6095] block nbd2: shutting down sockets [ 284.808571][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.614841][ T6131] loop4: detected capacity change from 0 to 512 [ 287.693518][ T6131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.747373][ T6131] EXT4-fs (loop4): 1 truncate cleaned up [ 287.782631][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 287.782872][ T6131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.099331][ T7] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 288.298738][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.358646][ T7] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 288.381125][ T7] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 288.436371][ T7] usb 4-1: Manufacturer: syz [ 288.460331][ T7] usb 4-1: config 0 descriptor?? [ 288.551568][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 289.622582][ T7] rc_core: IR keymap rc-hauppauge not found [ 289.628644][ T7] Registered IR keymap rc-empty [ 289.642160][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 289.695815][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 289.871298][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 289.915230][ T7] usb 4-1: USB disconnect, device number 5 [ 294.754211][ T6176] loop0: detected capacity change from 0 to 1024 [ 294.777794][ T6176] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 294.938131][ T6176] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 295.061205][ T6176] EXT4-fs error (device loop0): ext4_get_journal_inode:5756: inode #32: comm syz.0.504: iget: special inode unallocated [ 295.177836][ T6176] EXT4-fs (loop0): no journal found [ 295.333470][ T6176] EXT4-fs (loop0): can't get journal size [ 295.357376][ T6176] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 296.092859][ T6176] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.504: iget: special inode unallocated [ 296.164830][ T6188] loop1: detected capacity change from 0 to 512 [ 296.166121][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.180224][ T6176] EXT4-fs (loop0): failed to initialize system zone (-117) [ 296.188912][ T6176] EXT4-fs (loop0): mount failed [ 296.210920][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.218907][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.243349][ T6188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.398621][ T6188] EXT4-fs (loop1): 1 truncate cleaned up [ 296.414159][ T6188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 297.351898][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 302.494044][ T6237] loop0: detected capacity change from 0 to 512 [ 302.546769][ T6237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.572331][ T6240] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 302.640077][ T6237] EXT4-fs (loop0): 1 truncate cleaned up [ 302.686641][ T6237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 303.518101][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 306.857851][ T6281] loop1: detected capacity change from 0 to 128 [ 307.053797][ T6281] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 307.903787][ T6286] loop1: detected capacity change from 0 to 512 [ 307.927538][ T6286] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 308.020455][ T6286] EXT4-fs (loop1): 1 truncate cleaned up [ 308.032582][ T6286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 308.844837][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 310.435276][ T6309] fuse: Bad value for 'group_id' [ 310.484255][ T6311] loop0: detected capacity change from 0 to 512 [ 310.690280][ T6311] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 310.758802][ T6311] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 310.785362][ T6311] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.540: Failed to acquire dquot type 1 [ 310.823371][ T6311] EXT4-fs (loop0): 1 truncate cleaned up [ 310.847186][ T6311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.881452][ T6311] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.826487][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 313.219532][ T6340] loop3: detected capacity change from 0 to 512 [ 313.262015][ T6340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 313.359826][ T6340] EXT4-fs (loop3): 1 truncate cleaned up [ 313.367070][ T6340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 314.586559][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 315.511436][ T6362] fuse: Bad value for 'group_id' [ 315.777478][ T6367] loop0: detected capacity change from 0 to 512 [ 316.044146][ T6367] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 316.763315][ T6367] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 316.922596][ T6367] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.555: Failed to acquire dquot type 1 [ 316.983303][ T6367] EXT4-fs (loop0): 1 truncate cleaned up [ 316.996217][ T6367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 317.042698][ T6367] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.197682][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204912][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.676626][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 318.808977][ T6389] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 320.285476][ T6404] fuse: Bad value for 'group_id' [ 322.052332][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.224300][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 322.236398][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.064391][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.814200][ T6433] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 324.828881][ T6433] loop2: detected capacity change from 0 to 128 [ 324.836368][ T6433] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.920841][ T6433] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 325.652975][ T2887] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 325.670780][ T6438] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 330.360834][ T6465] fuse: Unknown parameter 'user_id00000000000000000000' [ 331.978250][ T6478] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 331.993299][ T6478] loop4: detected capacity change from 0 to 128 [ 332.000878][ T6478] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.292617][ T6478] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.872290][ T2887] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 335.920168][ T6492] loop3: detected capacity change from 0 to 512 [ 336.116753][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 336.136486][ T6492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 336.181272][ T6492] EXT4-fs (loop3): 1 truncate cleaned up [ 336.189749][ T6492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 336.883847][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 343.836546][ T6538] loop2: detected capacity change from 0 to 512 [ 343.866624][ T6538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.590836][ T6538] EXT4-fs (loop2): 1 truncate cleaned up [ 344.607274][ T6538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 345.710248][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 347.401840][ T6566] fuse: Unknown parameter 'user_id00000000000000000000' [ 347.587669][ T6568] fuse: Bad value for 'group_id' [ 348.709021][ T6580] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 348.722600][ T6580] loop4: detected capacity change from 0 to 128 [ 348.730274][ T6580] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 348.746658][ T6580] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 348.893160][ T46] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.075045][ T6583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 349.230079][ T6583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.038066][ T6588] loop3: detected capacity change from 0 to 512 [ 350.052223][ T6583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.070514][ T6588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 350.163389][ T6583] device bridge_slave_0 left promiscuous mode [ 350.206120][ T6588] EXT4-fs (loop3): 1 truncate cleaned up [ 350.212271][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.233509][ T6588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 351.423258][ T6583] device bridge_slave_1 left promiscuous mode [ 351.430178][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.714126][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 351.884131][ T6583] bond0: (slave bond_slave_0): Releasing backup interface [ 352.053268][ T6583] bond0: (slave bond_slave_1): Releasing backup interface [ 352.231241][ T6583] team0: Port device team_slave_0 removed [ 352.398372][ T6583] team0: Port device team_slave_1 removed [ 352.644029][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.820705][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.862818][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.907524][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.081870][ T6623] fuse: Bad value for 'fd' [ 354.471007][ T6636] fuse: Bad value for 'group_id' [ 358.749220][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.765690][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.813432][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.302684][ T5853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 361.126115][ T5853] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 361.162801][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.189157][ T5853] usb 2-1: Product: syz [ 361.196778][ T5853] usb 2-1: Manufacturer: syz [ 361.201685][ T5853] usb 2-1: SerialNumber: syz [ 363.035596][ T5853] usb 2-1: config 0 descriptor?? [ 363.120800][ T6678] delete_channel: no stack [ 363.165642][ T5853] usb 2-1: can't set config #0, error -71 [ 363.188855][ T5853] usb 2-1: USB disconnect, device number 6 [ 366.745901][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.764345][ T6741] loop0: detected capacity change from 0 to 512 [ 366.774967][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.789688][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.799967][ T6736] device bridge_slave_0 left promiscuous mode [ 366.879733][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.112030][ T6736] device bridge_slave_1 left promiscuous mode [ 368.149477][ T6741] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 368.163042][ T6741] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 368.173815][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.315711][ T6741] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.657: Failed to acquire dquot type 1 [ 368.406048][ T6741] EXT4-fs (loop0): 1 truncate cleaned up [ 368.423224][ T6741] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 368.429979][ T6736] bond0: (slave bond_slave_0): Releasing backup interface [ 369.362943][ T6741] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.477967][ T6736] bond0: (slave bond_slave_1): Releasing backup interface [ 369.921818][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 370.438831][ T6736] team0: Port device team_slave_0 removed [ 370.563259][ T6736] team0: Port device team_slave_1 removed [ 370.581169][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.601104][ T6736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.650010][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.679777][ T6763] delete_channel: no stack [ 370.689021][ T6775] loop0: detected capacity change from 0 to 1024 [ 370.704113][ T6736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.769530][ T6777] loop1: detected capacity change from 0 to 1024 [ 371.011714][ T6777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 372.041767][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 372.076799][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 374.896272][ T6807] fuse: Unknown parameter 'grou00000000000000000000' [ 376.162611][ T127] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 376.171519][ T6818] loop1: detected capacity change from 0 to 1024 [ 376.403322][ T127] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 376.894804][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.020725][ T127] usb 3-1: Product: syz [ 377.078699][ T127] usb 3-1: Manufacturer: syz [ 377.154380][ T127] usb 3-1: SerialNumber: syz [ 377.271189][ T127] usb 3-1: config 0 descriptor?? [ 378.018197][ T127] usb-storage 3-1:0.0: USB Mass Storage device detected [ 378.170660][ T127] usb 3-1: USB disconnect, device number 5 [ 378.229403][ T6828] bond0: (slave syz_tun): Releasing backup interface [ 378.383474][ T6828] device bridge_slave_0 left promiscuous mode [ 378.389872][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.470094][ T6828] device bridge_slave_1 left promiscuous mode [ 378.538406][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.644801][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.653557][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.126218][ T6828] bond0: (slave bond_slave_0): Releasing backup interface [ 379.217038][ T6828] bond0: (slave bond_slave_1): Releasing backup interface [ 379.475247][ T6831] delete_channel: no stack [ 379.534639][ T6828] team0: Port device team_slave_0 removed [ 379.584612][ T6828] team0: Port device team_slave_1 removed [ 380.474543][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.572323][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.814791][ T4272] block nbd3: Receive control failed (result -32) [ 380.821941][ T6848] block nbd3: shutting down sockets [ 381.016536][ T6859] loop1: detected capacity change from 0 to 1024 [ 383.762699][ T4313] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 383.849992][ T6874] loop4: detected capacity change from 0 to 512 [ 384.047725][ T4313] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 384.060207][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.079164][ T4313] usb 2-1: Product: syz [ 384.102589][ T4313] usb 2-1: Manufacturer: syz [ 384.107356][ T4313] usb 2-1: SerialNumber: syz [ 384.115380][ T4313] usb 2-1: config 0 descriptor?? [ 384.171983][ T6874] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 384.339782][ T4313] usb-storage 2-1:0.0: USB Mass Storage device detected [ 384.363174][ T6874] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.395297][ T6884] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 384.484830][ T4313] usb 2-1: USB disconnect, device number 7 [ 384.626802][ T6874] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.692: corrupted inode contents [ 384.676291][ T6874] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #2: comm syz.4.692: mark_inode_dirty error [ 384.719982][ T6874] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.692: corrupted inode contents [ 384.755850][ T6874] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.692: mark_inode_dirty error [ 385.034296][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 385.963178][ T6892] fuse: Unknown parameter 'grou00000000000000000000' [ 386.052298][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 386.096448][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.124009][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.704491][ T6908] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 386.720261][ T6908] loop2: detected capacity change from 0 to 128 [ 386.727786][ T6908] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 386.998991][ T6908] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 387.504967][ T4672] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 387.739477][ T6911] loop2: detected capacity change from 0 to 1024 [ 387.944104][ T6901] delete_channel: no stack [ 390.368662][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 390.500555][ T6930] fuse: Unknown parameter '0x0000000000000006' [ 394.906130][ T6940] xt_TCPMSS: Only works on TCP SYN packets [ 396.842100][ T6955] loop3: detected capacity change from 0 to 1024 [ 398.855718][ T6964] delete_channel: no stack [ 399.438517][ T6979] fuse: Unknown parameter '0x0000000000000005' [ 400.162233][ T4272] block nbd3: Receive control failed (result -32) [ 400.169157][ T6973] block nbd3: shutting down sockets [ 401.480868][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 401.925266][ T6999] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 401.940560][ T6999] loop0: detected capacity change from 0 to 128 [ 401.949656][ T6999] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 402.864726][ T6999] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 403.882693][ T5131] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.147919][ T7011] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 405.809145][ T7014] delete_channel: no stack [ 406.119656][ T7022] fuse: Unknown parameter '0x0000000000000006' [ 407.306980][ T7028] loop1: detected capacity change from 0 to 512 [ 408.724370][ T7028] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 408.781891][ T7028] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 408.842544][ T7028] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.725: Failed to acquire dquot type 1 [ 408.952625][ T7028] EXT4-fs (loop1): 1 truncate cleaned up [ 408.958884][ T7028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 409.012616][ T7028] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.650516][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 411.000063][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 412.234735][ T7056] delete_channel: no stack [ 415.369185][ T7075] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 415.699048][ T7077] loop4: detected capacity change from 0 to 512 [ 415.748706][ T7077] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 415.771214][ T7077] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 415.792078][ T7077] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.750: Failed to acquire dquot type 1 [ 415.812552][ T7077] EXT4-fs (loop4): 1 truncate cleaned up [ 416.022301][ T7077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 416.203676][ T7077] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.910309][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 416.925644][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 417.311990][ T7091] fuse: Unknown parameter 'fd0x0000000000000006' [ 419.018998][ T7102] fuse: Unknown parameter 'grou00000000000000000000' [ 419.254370][ T7106] loop0: detected capacity change from 0 to 256 [ 419.330852][ T7106] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 420.992802][ T5853] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 424.425206][ T7130] loop0: detected capacity change from 0 to 512 [ 424.534791][ T7130] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 424.572816][ T7130] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 424.588238][ T7136] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 424.615510][ T7130] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.765: Failed to acquire dquot type 1 [ 424.842732][ T7130] EXT4-fs (loop0): 1 truncate cleaned up [ 424.864102][ T7130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 424.893453][ T7130] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.496870][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 425.965212][ T7143] loop1: detected capacity change from 0 to 128 [ 426.087519][ T26] audit: type=1800 audit(1771632822.785:3): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.759" name="file1" dev="loop1" ino=1048624 res=0 errno=0 [ 426.494527][ T7152] loop1: detected capacity change from 0 to 256 [ 427.459117][ T7152] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 431.553718][ T7170] 9pnet_fd: Insufficient options for proto=fd [ 432.389907][ T7179] loop2: detected capacity change from 0 to 512 [ 433.295113][ T7179] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 433.352220][ T7179] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 433.412630][ T7179] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.777: Failed to acquire dquot type 1 [ 433.437408][ T7179] EXT4-fs (loop2): 1 truncate cleaned up [ 433.452603][ T7179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 433.472722][ T7179] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.353534][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 437.573898][ T7213] loop0: detected capacity change from 0 to 256 [ 437.616048][ T7213] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 440.094621][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.110870][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.584947][ T7224] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 442.452349][ T7253] loop3: detected capacity change from 0 to 256 [ 443.164088][ T7253] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 443.677363][ T7258] loop0: detected capacity change from 0 to 256 [ 443.849446][ T7258] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.177339][ T7258] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 444.634656][ T7258] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 445.223176][ T7269] xt_TCPMSS: Only works on TCP SYN packets [ 446.308152][ T7258] exFAT-fs (loop0): error, found bogus dentry(17) beyond unused empty group(6) (start_clu : 6, cur_clu : 6) [ 446.334301][ T7258] exFAT-fs (loop0): Filesystem has been set read-only [ 446.579528][ T7275] loop0: detected capacity change from 0 to 512 [ 446.754281][ T7275] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 446.772988][ T7275] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.333778][ T7281] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 447.718800][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 448.532590][ T4267] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 449.449441][ T4267] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 449.481630][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.519806][ T4267] usb 1-1: Product: syz [ 449.540029][ T4267] usb 1-1: Manufacturer: syz [ 449.558531][ T4267] usb 1-1: SerialNumber: syz [ 449.590956][ T4267] usb 1-1: config 0 descriptor?? [ 450.267921][ T7317] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 450.302120][ T7317] loop4: detected capacity change from 0 to 128 [ 450.359506][ T7317] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 450.429565][ T7317] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 450.745893][ T7319] loop1: detected capacity change from 0 to 256 [ 450.870559][ T7319] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 450.893702][ T4267] usb-storage 1-1:0.0: USB Mass Storage device detected [ 451.150642][ T4267] usb 1-1: USB disconnect, device number 4 [ 452.415811][ T7328] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 452.442168][ T7328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.525151][ T7328] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 452.617822][ T7321] loop3: detected capacity change from 0 to 8192 [ 453.611025][ T4275] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 453.620794][ T4275] FAT-fs (loop3): Filesystem has been set read-only [ 454.139145][ T4388] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 458.434209][ T7351] delete_channel: no stack [ 458.479875][ T7366] loop3: detected capacity change from 0 to 256 [ 458.534540][ T7366] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 460.686449][ T4315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 460.715012][ T7377] loop2: detected capacity change from 0 to 512 [ 460.778644][ T7379] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 460.876444][ T4315] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 460.901715][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.931866][ T7377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 460.941774][ T4315] usb 4-1: Product: syz [ 460.950868][ T4315] usb 4-1: Manufacturer: syz [ 460.980832][ T4315] usb 4-1: SerialNumber: syz [ 460.988364][ T7377] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.026682][ T7379] loop0: detected capacity change from 0 to 128 [ 461.105731][ T4315] usb 4-1: config 0 descriptor?? [ 461.133910][ T7379] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.320554][ T4315] usb-storage 4-1:0.0: USB Mass Storage device detected [ 461.360953][ T7379] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 462.283544][ T4315] usb 4-1: USB disconnect, device number 6 [ 462.375507][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 464.037812][ T7411] loop4: detected capacity change from 0 to 256 [ 464.086536][ T7411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 464.703255][ T7407] delete_channel: no stack [ 467.422949][ T4453] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 468.139670][ T7434] loop4: detected capacity change from 0 to 512 [ 468.209790][ T7434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 468.299949][ T7434] EXT4-fs (loop4): 1 truncate cleaned up [ 468.308311][ T7434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 469.886789][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 470.048119][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 470.349593][ T7464] loop3: detected capacity change from 0 to 256 [ 470.382303][ T7464] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 470.572850][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 472.006264][ T22] usb 1-1: device descriptor read/64, error -71 [ 472.322639][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 472.702507][ T22] usb 1-1: device descriptor read/64, error -71 [ 472.764644][ T7475] NILFS (nullb0): couldn't find nilfs on the device [ 473.231843][ T22] usb usb1-port1: attempt power cycle [ 474.372551][ T7480] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 474.426665][ T7480] loop3: detected capacity change from 0 to 128 [ 474.520601][ T7488] loop0: detected capacity change from 0 to 512 [ 474.552598][ T7488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 474.763602][ T7488] EXT4-fs (loop0): 1 truncate cleaned up [ 474.769437][ T7488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 475.313467][ T7498] xt_TCPMSS: Only works on TCP SYN packets [ 476.477616][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 476.699923][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 476.927737][ T7508] loop4: detected capacity change from 0 to 1024 [ 476.941494][ T7511] loop3: detected capacity change from 0 to 256 [ 477.238100][ T7511] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 479.592743][ T4339] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 479.689942][ T7529] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 479.817778][ T4339] usb 1-1: config 0 has no interfaces? [ 479.830239][ T4339] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 480.389613][ T4339] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 480.398471][ T4339] usb 1-1: Manufacturer: syz [ 480.428242][ T4339] usb 1-1: config 0 descriptor?? [ 481.928442][ T7536] xt_TCPMSS: Only works on TCP SYN packets [ 483.316197][ T4313] usb 1-1: USB disconnect, device number 8 [ 484.567260][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 487.592641][ T4339] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 487.786113][ T4339] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 487.821700][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.897668][ T4339] usb 4-1: Product: syz [ 487.934878][ T4339] usb 4-1: Manufacturer: syz [ 487.972317][ T4339] usb 4-1: SerialNumber: syz [ 488.035022][ T4339] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 488.294295][ T4339] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 488.783038][ T4315] usb 4-1: USB disconnect, device number 7 [ 489.512687][ T4339] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 489.645007][ T4339] ath9k_htc: Failed to initialize the device [ 489.675328][ T4315] usb 4-1: ath9k_htc: USB layer deinitialized [ 490.676266][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 491.214571][ T14] usb 3-1: config 0 has no interfaces? [ 491.226200][ T14] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 491.238980][ T14] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 491.252056][ T14] usb 3-1: Manufacturer: syz [ 491.262726][ T14] usb 3-1: config 0 descriptor?? [ 491.338606][ T7602] loop0: detected capacity change from 0 to 1024 [ 492.217393][ T7609] loop3: detected capacity change from 0 to 1024 [ 492.772623][ T26] audit: type=1800 audit(1771632889.365:4): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.891" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 493.176240][ T4451] hfsplus: bad catalog file entry [ 493.182136][ T4451] hfsplus: b-tree write err: -5, ino 3 [ 493.357092][ T7583] usb 3-1: USB disconnect, device number 6 [ 493.471524][ T7615] loop3: detected capacity change from 0 to 512 [ 493.507320][ T7615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 493.709699][ T7617] Bluetooth: MGMT ver 1.22 [ 493.773509][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 494.123921][ T7622] loop3: detected capacity change from 0 to 256 [ 494.143248][ T7622] FAT-fs (loop3): bogus number of FAT sectors [ 494.150382][ T7622] FAT-fs (loop3): Can't find a valid FAT filesystem [ 495.132704][ T7583] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 495.493318][ T7583] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 495.512843][ T7583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.534340][ T7583] usb 5-1: Product: syz [ 496.191126][ T7583] usb 5-1: Manufacturer: syz [ 496.196166][ T7583] usb 5-1: SerialNumber: syz [ 496.252023][ T7583] usb 5-1: config 0 descriptor?? [ 496.508702][ T7583] usb-storage 5-1:0.0: USB Mass Storage device detected [ 496.615873][ T7583] usb 5-1: USB disconnect, device number 6 [ 498.116587][ T7649] loop1: detected capacity change from 0 to 512 [ 498.443651][ T7649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 498.502947][ T7649] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.535311][ T4315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 498.550909][ T7649] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.900: corrupted inode contents [ 498.634506][ T7649] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.900: mark_inode_dirty error [ 498.671075][ T7649] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.900: corrupted inode contents [ 498.748677][ T7649] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.900: mark_inode_dirty error [ 498.770013][ T4315] usb 5-1: config 0 has no interfaces? [ 498.777776][ T4315] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 498.813933][ T4315] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 498.832482][ T4315] usb 5-1: Manufacturer: syz [ 498.842559][ T4312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 498.857417][ T4315] usb 5-1: config 0 descriptor?? [ 498.996351][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 499.014707][ T7663] loop2: detected capacity change from 0 to 2048 [ 499.086602][ T4312] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 499.105353][ T7663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 499.116249][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.159503][ T4312] usb 1-1: Product: syz [ 499.177011][ T4312] usb 1-1: Manufacturer: syz [ 499.198533][ T4312] usb 1-1: SerialNumber: syz [ 499.218181][ T7663] loop2: detected capacity change from 2048 to 0 [ 499.226130][ T4312] usb 1-1: config 0 descriptor?? [ 499.287802][ C1] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 499.299239][ T7669] EXT4-fs error (device loop2): __ext4_find_entry:1685: inode #2: comm syz.2.898: reading directory lblock 0 [ 499.334375][ T11] loop: Write error at byte offset 9223372036854775807, length 2048. [ 499.348030][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 499.358300][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 499.368539][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 499.377851][ T7669] EXT4-fs (loop2): I/O error while writing superblock [ 499.450622][ C1] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 499.544147][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 499.559912][ T46] loop: Write error at byte offset 9223372036854775807, length 2048. [ 499.585291][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 499.595187][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 499.605056][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 499.613858][ T4265] EXT4-fs (loop2): I/O error while writing superblock [ 499.621672][ T46] loop: Write error at byte offset 9223372036854906879, length 2048. [ 499.630687][ C1] I/O error, dev loop2, sector 256 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 499.641182][ C1] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 500.336393][ T4328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.615809][ T4328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.795854][ T4328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.918873][ T4328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.366344][ T4339] usb 5-1: USB disconnect, device number 7 [ 501.519259][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.526398][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.651405][ T127] usb 1-1: USB disconnect, device number 9 [ 501.730619][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.749872][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.775792][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.791877][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.800913][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 501.811317][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.999855][ T7701] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 502.015056][ T7701] loop3: detected capacity change from 0 to 128 [ 502.022627][ T7701] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 502.862540][ T7698] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 502.997701][ T7701] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 503.899173][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 505.218004][ T7692] chnl_net:caif_netlink_parms(): no params data found [ 506.001209][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 506.882491][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 506.956075][ T7747] loop1: detected capacity change from 0 to 512 [ 507.015488][ T7747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c1a8, mo2=0002] [ 507.045214][ T7747] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.925: inode #1: comm syz.1.925: iget: illegal inode # [ 507.085876][ T22] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 507.110872][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.142847][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.150721][ T22] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 507.162784][ T7747] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.925: error while reading EA inode 1 err=-117 [ 507.196091][ T22] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 507.207191][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.223245][ T7747] EXT4-fs (loop1): 1 orphan inode deleted [ 507.229094][ T7747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 507.232420][ T22] usb 1-1: Manufacturer: syz [ 507.286731][ T22] usb 1-1: config 0 descriptor?? [ 507.333431][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.333481][ T22] igorplugusb 1-1:0.0: incorrect number of endpoints [ 507.343620][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.374276][ T7747] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #13: comm syz.1.925: corrupted inode contents [ 507.425974][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.429960][ T7692] device bridge_slave_0 entered promiscuous mode [ 507.439061][ T7747] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #13: comm syz.1.925: mark_inode_dirty error [ 507.477865][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.502527][ T7747] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.925: invalid indirect mapped block 234881024 (level 0) [ 507.533314][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.540680][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.562996][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.579722][ T7692] device bridge_slave_1 entered promiscuous mode [ 507.582665][ T7747] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #13: comm syz.1.925: corrupted inode contents [ 507.652602][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.659691][ T7747] EXT4-fs error (device loop1): ext4_truncate:4318: inode #13: comm syz.1.925: mark_inode_dirty error [ 507.718077][ T4328] device hsr_slave_0 left promiscuous mode [ 507.737832][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.772466][ T7747] EXT4-fs error (device loop1) in ext4_setattr:5676: Corrupt filesystem [ 507.824221][ T7747] EXT4-fs (loop1): Remounting filesystem read-only [ 507.893932][ T4328] device hsr_slave_1 left promiscuous mode [ 508.005104][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 508.046801][ T4328] device veth1_macvtap left promiscuous mode [ 508.101094][ T4328] device veth0_macvtap left promiscuous mode [ 508.152873][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 508.233655][ T4328] device veth1_vlan left promiscuous mode [ 508.254133][ T4328] device veth0_vlan left promiscuous mode [ 509.448979][ T7773] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 509.612444][ T127] usb 1-1: USB disconnect, device number 10 [ 510.723354][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 510.907968][ T7785] syz.1.931 uses obsolete (PF_INET,SOCK_PACKET) [ 511.639908][ T4328] bond1 (unregistering): (slave vlan2): Releasing active interface [ 512.424748][ T4328] bond1 (unregistering): Released all slaves [ 516.722576][ T127] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 516.924683][ T127] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 516.945996][ T127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.963995][ T127] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 516.982640][ T127] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 516.990938][ T127] usb 1-1: Manufacturer: syz [ 517.019916][ T127] usb 1-1: config 0 descriptor?? [ 517.035196][ T127] igorplugusb 1-1:0.0: incorrect number of endpoints [ 518.196314][ T4328] bond0 (unregistering): Released all slaves [ 518.457601][ T7692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.523587][ T7692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.693013][ T7692] team0: Port device team_slave_0 added [ 518.726305][ T7692] team0: Port device team_slave_1 added [ 518.894402][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.912762][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.037912][ T7692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.077579][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.119205][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.177382][ T7692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.259936][ T7840] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 519.348601][ T7692] device hsr_slave_0 entered promiscuous mode [ 519.720024][ T7692] device hsr_slave_1 entered promiscuous mode [ 519.837554][ T7692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.961336][ T7692] Cannot create hsr debugfs directory [ 520.112510][ T22] usb 1-1: USB disconnect, device number 11 [ 521.440347][ T7861] loop1: detected capacity change from 0 to 16 [ 521.529465][ T7861] erofs: (device loop1): mounted with root inode @ nid 36. [ 521.722936][ T7692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 521.780966][ T7692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 521.939700][ T7869] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 522.578591][ T7692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 523.006836][ T7692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 523.711573][ T7692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.768422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.778318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.825817][ T7692] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.873041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.912066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.953142][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.960889][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.017760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.047468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.081258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.100426][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.107761][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.122526][ T4312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 524.136748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.155890][ T7885] loop4: detected capacity change from 0 to 4096 [ 524.215163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.287333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.297526][ T7885] ntfs: volume version 3.1. [ 524.317131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.334522][ T4312] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 524.357128][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.369543][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.403974][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.414079][ T4312] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 524.423432][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.461028][ T4312] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 524.479674][ T4312] usb 2-1: Manufacturer: syz [ 524.507133][ T4312] usb 2-1: config 0 descriptor?? [ 524.559578][ T4312] igorplugusb 2-1:0.0: incorrect number of endpoints [ 524.622768][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.663016][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.899117][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.491630][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.504860][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.945468][ T7915] loop3: detected capacity change from 0 to 2048 [ 527.121644][ T4312] usb 2-1: USB disconnect, device number 8 [ 527.343767][ T7915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 527.636050][ T4275] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 527.687376][ T7692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.719524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.740257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.882328][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 528.307154][ T7947] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 528.575918][ T7946] netlink: 868 bytes leftover after parsing attributes in process `syz.3.968'. [ 532.121686][ T7981] loop1: detected capacity change from 0 to 512 [ 532.800129][ T7981] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 532.819475][ T7980] loop3: detected capacity change from 0 to 2048 [ 532.859146][ T7981] EXT4-fs (loop1): orphan cleanup on readonly fs [ 532.868930][ T7981] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.978: Allocating blocks 41-42 which overlap fs metadata [ 532.889825][ T7981] Quota error (device loop1): write_blk: dquota write failed [ 532.898286][ T7981] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 532.910752][ T7981] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.978: Failed to acquire dquot type 0 [ 532.925222][ T7981] EXT4-fs error (device loop1): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 532.941760][ T7981] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.978: corrupted inode contents [ 532.956467][ T7981] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #12: comm syz.1.978: mark_inode_dirty error [ 532.968617][ T7981] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.978: corrupted inode contents [ 532.980939][ T7981] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.978: mark_inode_dirty error [ 532.993495][ T7981] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.978: corrupted inode contents [ 533.007467][ T7981] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 533.017366][ T7981] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #12: comm syz.1.978: corrupted inode contents [ 533.030038][ T7981] EXT4-fs error (device loop1): ext4_truncate:4318: inode #12: comm syz.1.978: mark_inode_dirty error [ 533.041482][ T7981] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 533.050860][ T127] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 533.060182][ T7981] EXT4-fs (loop1): 1 truncate cleaned up [ 533.066905][ T7981] EXT4-fs (loop1): pa ffff888073b6a0e0: logic 1, phys. 41, len 23 [ 533.075276][ T7981] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4892: group 0, free 22, pa_free 23 [ 533.086966][ T7981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 533.173657][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 533.497873][ T7980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 533.523175][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.663596][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.290969][ T26] audit: type=1804 audit(1771632930.905:5): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.980" name="/newroot/198/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 534.411523][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.483396][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.523196][ T4275] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 534.535876][ T7692] device veth0_vlan entered promiscuous mode [ 534.542500][ T26] audit: type=1800 audit(1771632930.915:6): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.980" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 534.563537][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 534.573432][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 534.587843][ T7692] device veth1_vlan entered promiscuous mode [ 534.612715][ T127] usb 5-1: device descriptor read/all, error -71 [ 534.663590][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 534.714193][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 534.741481][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 534.764416][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 534.805691][ T7692] device veth0_macvtap entered promiscuous mode [ 534.847955][ T7692] device veth1_macvtap entered promiscuous mode [ 534.953100][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.960660][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 534.973504][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 534.975137][ T7999] fuse: Unknown parameter 'user00000000000000000000' [ 535.105785][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.131110][ T8005] loop0: detected capacity change from 0 to 256 [ 535.165057][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.213397][ T8005] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 535.593178][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.726935][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.083237][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.597619][ T8015] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 537.769181][ T7692] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.223100][ T7692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.243534][ T7692] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.260796][ T7692] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.159381][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.182060][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.220536][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 540.310432][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.324198][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.345771][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 542.829404][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 543.091532][ T22] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 543.441578][ T8069] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 543.762571][ T4315] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 543.794545][ T22] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 543.806509][ T22] usb 4-1: config 0 has no interface number 0 [ 543.813674][ T8072] fuse: Unknown parameter 'user00000000000000000000' [ 543.821734][ T22] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 543.831826][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.851000][ T22] usb 4-1: config 0 descriptor?? [ 543.862839][ T22] hub 4-1:0.3: bad descriptor, ignoring hub [ 543.869559][ T22] hub: probe of 4-1:0.3 failed with error -5 [ 543.878265][ T22] sierra 4-1:0.3: Sierra USB modem converter detected [ 543.954708][ T4315] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 543.967175][ T4315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.984786][ T4315] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.201730][ T4315] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 544.251941][ T4315] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 544.304799][ T4315] usb 6-1: Manufacturer: syz [ 544.367089][ T4315] usb 6-1: config 0 descriptor?? [ 544.436938][ T4315] igorplugusb 6-1:0.0: incorrect number of endpoints [ 544.567996][ T22] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 545.483125][ T22] usb 4-1: USB disconnect, device number 8 [ 545.560355][ T22] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 545.608528][ T22] sierra 4-1:0.3: device disconnected [ 545.726186][ T8093] loop4: detected capacity change from 0 to 1024 [ 547.167530][ T26] audit: type=1800 audit(1771632943.685:7): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1003" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 547.807624][ T4310] usb 6-1: USB disconnect, device number 2 [ 547.879446][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 549.509656][ T8120] xt_TCPMSS: Only works on TCP SYN packets [ 550.156659][ T8139] loop1: detected capacity change from 0 to 1024 [ 550.669510][ T26] audit: type=1800 audit(1771632947.365:8): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1016" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 550.690066][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.913905][ T8172] loop4: detected capacity change from 0 to 1024 [ 553.082506][ T4312] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 553.284680][ T4312] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 553.296562][ T4312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.329976][ T4312] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.402220][ T26] audit: type=1800 audit(1771632950.095:9): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1022" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 553.584499][ T4312] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 553.772778][ T4312] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 553.817625][ T4312] usb 1-1: Manufacturer: syz [ 553.874206][ T4312] usb 1-1: config 0 descriptor?? [ 553.907785][ T4312] igorplugusb 1-1:0.0: incorrect number of endpoints [ 553.925889][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 555.212653][ T8197] usb 1-1: USB disconnect, device number 12 [ 555.291790][ T8200] device syzkaller0 entered promiscuous mode [ 556.366571][ T8204] xt_TCPMSS: Only works on TCP SYN packets [ 556.537248][ T8210] loop5: detected capacity change from 0 to 1024 [ 558.032855][ T4310] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 558.316513][ T4310] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 558.360235][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.492681][ T26] audit: type=1800 audit(1771632955.125:10): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1031" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 558.842627][ T4312] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 558.860158][ T4310] usb 5-1: Product: syz [ 558.903354][ T4310] usb 5-1: Manufacturer: syz [ 558.926850][ T4310] usb 5-1: SerialNumber: syz [ 558.958810][ T4310] usb 5-1: config 0 descriptor?? [ 559.032770][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 559.039994][ T4312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.089741][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.138808][ T4312] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.180782][ T4310] usb-storage 5-1:0.0: USB Mass Storage device detected [ 559.198979][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.236529][ T4312] usb 2-1: Product: syz [ 559.240874][ T4312] usb 2-1: Manufacturer: syz [ 559.291113][ T4310] usb 5-1: USB disconnect, device number 10 [ 559.292746][ T4312] usb 2-1: SerialNumber: syz [ 560.368622][ T4312] usb 2-1: 0:2 : does not exist [ 560.396077][ T4312] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 560.479569][ T4312] usb 2-1: USB disconnect, device number 9 [ 561.052574][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.078851][ T8261] device syzkaller0 entered promiscuous mode [ 562.126876][ T8262] loop0: detected capacity change from 0 to 2048 [ 562.229469][ T8262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 562.495998][ T4362] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 563.073519][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.080448][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.319526][ T4271] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 563.424306][ T4362] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 563.442481][ T4362] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.457202][ T4362] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 563.482441][ T4362] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 563.490596][ T4362] usb 5-1: Manufacturer: syz [ 563.503849][ T4362] usb 5-1: config 0 descriptor?? [ 563.524173][ T4362] igorplugusb 5-1:0.0: incorrect number of endpoints [ 563.685121][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 565.246196][ T8282] xt_TCPMSS: Only works on TCP SYN packets [ 566.505289][ T8300] loop3: detected capacity change from 0 to 1024 [ 567.360398][ T4310] usb 5-1: USB disconnect, device number 11 [ 567.682784][ T26] audit: type=1800 audit(1771632964.255:11): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1049" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 567.703945][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.803026][ T8313] delete_channel: no stack [ 571.450564][ T8340] loop0: detected capacity change from 0 to 256 [ 571.496797][ T8340] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 571.539381][ T8340] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 571.589688][ T8340] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 572.013336][ T8338] device syzkaller0 entered promiscuous mode [ 576.205158][ T8383] loop3: detected capacity change from 0 to 128 [ 576.216269][ T8383] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 576.867476][ T8383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 581.419214][ T8404] delete_channel: no stack [ 581.547846][ T8422] device syzkaller0 entered promiscuous mode [ 581.572882][ T4272] block nbd4: Receive control failed (result -32) [ 581.583079][ T8408] block nbd4: shutting down sockets [ 582.257768][ T8432] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 585.716792][ T8472] loop5: detected capacity change from 0 to 1024 [ 586.893745][ T8480] loop4: detected capacity change from 0 to 1024 [ 588.144806][ T8493] loop3: detected capacity change from 0 to 1024 [ 588.413501][ T8497] loop4: detected capacity change from 0 to 2048 [ 589.067229][ T26] audit: type=1800 audit(1771632985.275:12): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1090" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 590.139123][ T8497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 590.214652][ T26] audit: type=1804 audit(1771632986.915:13): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1089" name="/newroot/221/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 590.236963][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.460562][ T26] audit: type=1800 audit(1771632986.945:14): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1089" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 590.688355][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 590.931719][ T8529] loop4: detected capacity change from 0 to 512 [ 591.016034][ T8529] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 591.054296][ T8529] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 591.077782][ T8529] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1097: Failed to acquire dquot type 1 [ 591.091885][ T8529] EXT4-fs (loop4): 1 truncate cleaned up [ 591.098071][ T8529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 591.116942][ T8529] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.443341][ T8535] loop0: detected capacity change from 0 to 1024 [ 591.480793][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 591.591437][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 592.627347][ T8515] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 592.843748][ T8550] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 596.884158][ T8593] [ 596.886574][ T8593] ====================================================== [ 596.893796][ T8593] WARNING: possible circular locking dependency detected [ 596.901536][ T8593] syzkaller #0 Not tainted [ 596.905980][ T8593] ------------------------------------------------------ [ 596.913209][ T8593] syz.3.1107/8593 is trying to acquire lock: [ 596.919464][ T8593] ffff888024958f30 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 596.930967][ T8593] [ 596.930967][ T8593] but task is already holding lock: [ 596.938416][ T8593] ffff8880779e7958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 596.948612][ T8593] [ 596.948612][ T8593] which lock already depends on the new lock. [ 596.948612][ T8593] [ 596.959019][ T8593] [ 596.959019][ T8593] the existing dependency chain (in reverse order) is: [ 596.968053][ T8593] [ 596.968053][ T8593] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 596.976021][ T8593] down_read_killable+0x4c/0x340 [ 596.981700][ T8593] mmap_read_lock_killable+0x1d/0x60 [ 596.987973][ T8593] lock_mm_and_find_vma+0x2b1/0x2f0 [ 596.994197][ T8593] do_user_addr_fault+0x2db/0xb10 [ 596.999924][ T8593] exc_page_fault+0x60/0x100 [ 597.005128][ T8593] asm_exc_page_fault+0x22/0x30 [ 597.010505][ T8593] fault_in_readable+0x13e/0x1f0 [ 597.016058][ T8593] fault_in_iov_iter_readable+0xbb/0x2e0 [ 597.022399][ T8593] generic_perform_write+0x1f1/0x5c0 [ 597.028222][ T8593] __generic_file_write_iter+0x148/0x2a0 [ 597.034379][ T8593] generic_file_write_iter+0xab/0x2e0 [ 597.040364][ T8593] vfs_write+0x4b1/0xa30 [ 597.045322][ T8593] ksys_write+0x14c/0x250 [ 597.050280][ T8593] do_syscall_64+0x4c/0xa0 [ 597.055400][ T8593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.061993][ T8593] [ 597.061993][ T8593] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 597.071322][ T8593] __lock_acquire+0x2d07/0x7d10 [ 597.077054][ T8593] lock_acquire+0x1bb/0x4a0 [ 597.082449][ T8593] down_write+0x36/0x60 [ 597.087334][ T8593] process_measurement+0x3a2/0x1c30 [ 597.093663][ T8593] ima_file_mmap+0x102/0x150 [ 597.098951][ T8593] __se_sys_remap_file_pages+0x559/0x7b0 [ 597.105288][ T8593] do_syscall_64+0x4c/0xa0 [ 597.110428][ T8593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.117176][ T8593] [ 597.117176][ T8593] other info that might help us debug this: [ 597.117176][ T8593] [ 597.127580][ T8593] Possible unsafe locking scenario: [ 597.127580][ T8593] [ 597.135568][ T8593] CPU0 CPU1 [ 597.141027][ T8593] ---- ---- [ 597.146753][ T8593] lock(&mm->mmap_lock); [ 597.151367][ T8593] lock(&sb->s_type->i_mutex_key#13); [ 597.159537][ T8593] lock(&mm->mmap_lock); [ 597.166393][ T8593] lock(&sb->s_type->i_mutex_key#13); [ 597.172032][ T8593] [ 597.172032][ T8593] *** DEADLOCK *** [ 597.172032][ T8593] [ 597.180265][ T8593] 1 lock held by syz.3.1107/8593: [ 597.185476][ T8593] #0: ffff8880779e7958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 597.196403][ T8593] [ 597.196403][ T8593] stack backtrace: [ 597.202813][ T8593] CPU: 0 PID: 8593 Comm: syz.3.1107 Not tainted syzkaller #0 [ 597.210447][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.221382][ T8593] Call Trace: [ 597.224783][ T8593] [ 597.227809][ T8593] dump_stack_lvl+0x188/0x24e [ 597.232939][ T8593] ? load_image+0x400/0x400 [ 597.237541][ T8593] ? show_regs_print_info+0x12/0x12 [ 597.243397][ T8593] ? print_circular_bug+0x12b/0x1a0 [ 597.248896][ T8593] check_noncircular+0x296/0x330 [ 597.254027][ T8593] ? look_up_lock_class+0x75/0x140 [ 597.259236][ T8593] ? add_chain_block+0x940/0x940 [ 597.264386][ T8593] ? lockdep_lock+0xf1/0x1f0 [ 597.268994][ T8593] ? _find_first_zero_bit+0xcf/0x100 [ 597.274292][ T8593] __lock_acquire+0x2d07/0x7d10 [ 597.279334][ T8593] ? ima_match_policy+0x107/0x2120 [ 597.284718][ T8593] ? __lock_acquire+0x7d10/0x7d10 [ 597.289852][ T8593] ? is_bpf_text_address+0x22/0x2a0 [ 597.295151][ T8593] ? verify_lock_unused+0x140/0x140 [ 597.300793][ T8593] ? ima_match_policy+0x107/0x2120 [ 597.306009][ T8593] ? ima_match_policy+0x2093/0x2120 [ 597.311304][ T8593] lock_acquire+0x1bb/0x4a0 [ 597.316338][ T8593] ? process_measurement+0x3a2/0x1c30 [ 597.321748][ T8593] ? __might_sleep+0xd0/0xd0 [ 597.326442][ T8593] ? read_lock_is_recursive+0x10/0x10 [ 597.332001][ T8593] ? __se_sys_ioctl+0x48/0x170 [ 597.336784][ T8593] ? ima_get_action+0x71/0xa0 [ 597.341488][ T8593] down_write+0x36/0x60 [ 597.345831][ T8593] ? process_measurement+0x3a2/0x1c30 [ 597.351729][ T8593] process_measurement+0x3a2/0x1c30 [ 597.357111][ T8593] ? ima_file_mmap+0x150/0x150 [ 597.362424][ T8593] ? aa_file_perm+0x112/0xf00 [ 597.367459][ T8593] ? aa_file_perm+0x112/0xf00 [ 597.372231][ T8593] ? mtree_load+0x100/0xa70 [ 597.377092][ T8593] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 597.383519][ T8593] ima_file_mmap+0x102/0x150 [ 597.388111][ T8593] ? end_current_label_crit_section+0x14b/0x170 [ 597.394371][ T8593] ? ima_file_free+0x3e0/0x3e0 [ 597.399311][ T8593] ? common_file_perm+0x171/0x1c0 [ 597.404617][ T8593] ? bpf_lsm_mmap_file+0x5/0x10 [ 597.409500][ T8593] ? security_mmap_file+0x11b/0x180 [ 597.414827][ T8593] __se_sys_remap_file_pages+0x559/0x7b0 [ 597.420849][ T8593] ? lockdep_hardirqs_on+0x94/0x140 [ 597.426448][ T8593] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 597.432373][ T8593] ? lock_chain_count+0x20/0x20 [ 597.437253][ T8593] ? lockdep_hardirqs_on+0x94/0x140 [ 597.442545][ T8593] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 597.448278][ T8593] do_syscall_64+0x4c/0xa0 [ 597.452803][ T8593] ? clear_bhb_loop+0x60/0xb0 [ 597.457842][ T8593] ? clear_bhb_loop+0x60/0xb0 [ 597.462630][ T8593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.468748][ T8593] RIP: 0033:0x7fa26fb9c629 [ 597.473178][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.493580][ T8593] RSP: 002b:00007fa270a46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 597.502139][ T8593] RAX: ffffffffffffffda RBX: 00007fa26fe16090 RCX: 00007fa26fb9c629 [ 597.510243][ T8593] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 000020000072b000 [ 597.519083][ T8593] RBP: 00007fa26fc32b39 R08: 0000000000000001 R09: 0000000000000000 [ 597.527499][ T8593] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 597.536022][ T8593] R13: 00007fa26fe16128 R14: 00007fa26fe16090 R15: 00007ffc98077fd8 [ 597.544346][ T8593] [ 597.547386][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.817750][ T4277] EXT4-fs (loop4): unmounting filesystem.