last executing test programs: 54.653235182s ago: executing program 0 (id=1174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 54.234854123s ago: executing program 0 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 52.817640841s ago: executing program 0 (id=1179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) pipe(0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000000000000d000000080000000200000000000000030000000900000002000000000000000000000008000000000000000600000000000000f40d000000000000000000000000000000040000005354000090000000c1000000f4ffffff00"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 50.781568826s ago: executing program 0 (id=1183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./bus\x00', 0x25281e, &(0x7f0000000300)={[], [{@smackfsdef={'smackfsdef', 0x3d, '{'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x1, 0x50d, &(0x7f0000000580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='security.c'], 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x80, 0x7, 0x9}) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1503, &(0x7f0000002a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) 48.71513289s ago: executing program 0 (id=1186): syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x200040, &(0x7f0000000300)={[{@noload}, {@stripe={'stripe', 0x3d, 0xa000}}]}, 0x0, 0x793, &(0x7f0000001700)="$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") getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @tail_call, @call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000640)={{0x3, 0x3}, {}, 0x9}) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) gettid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1cdc7e, 0x0) close(0xffffffffffffffff) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 46.513596071s ago: executing program 0 (id=1191): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 33.540971278s ago: executing program 3 (id=1209): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000a40)=""/102368, 0x18fe0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) io_setup(0x800, 0x0) ftruncate(r1, 0x7fff) io_getevents(0x0, 0x2, 0x0, &(0x7f0000000240), 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_ATTR(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x442041, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='erofs\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x7a) chdir(0x0) setuid(0xee01) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 32.268534864s ago: executing program 3 (id=1210): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) setresuid(0x0, 0xee01, 0xee00) r7 = syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r8 = getpid() kcmp(r7, r8, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 31.157483242s ago: executing program 3 (id=1211): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000008000000000000caadc262a13355f6be04ab3c2ea04c7acc898c1629edac82f4e51eeb1eda544d85b6f6981aacbfdfe5da62f073916de54fad57cf659846a39840890f9ee9aa11aceaef8f3a4195514912", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 30.041951744s ago: executing program 3 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) dup3(r8, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 28.640817076s ago: executing program 3 (id=1217): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 28.217210876s ago: executing program 3 (id=1220): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom1\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200008d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x7ffffffe, 0x0, 0x20, 0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 15.040792514s ago: executing program 2 (id=1240): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 13.453636791s ago: executing program 2 (id=1242): socket(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, 0x0, 0x0) r5 = dup2(r4, r4) write$tun(r5, 0x0, 0x46) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) 12.205671543s ago: executing program 2 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) 10.960128821s ago: executing program 2 (id=1246): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./bus\x00', 0x25281e, &(0x7f0000000300)={[], [{@smackfsdef={'smackfsdef', 0x3d, '{'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x1, 0x50d, &(0x7f0000000580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='security.c'], 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x80, 0x7, 0x9}) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1503, &(0x7f0000002a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) 7.224263441s ago: executing program 1 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x10, r5, 0x1, 0x5}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 6.549597818s ago: executing program 2 (id=1253): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x2000000) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x202030, &(0x7f0000000380)=ANY=[], 0x2, 0x224, &(0x7f0000000700)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(r1, &(0x7f0000000000)={[0xff]}, 0x8) futex(0x0, 0x4, 0x1, &(0x7f0000000380), 0x0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 6.238908741s ago: executing program 4 (id=1254): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)=ANY=[], 0x90) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r0 = open(0x0, 0x143142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20}, 0x20) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, &(0x7f0000003700)={0x77359400}) pwritev2(r0, &(0x7f0000000180)=[{}, {&(0x7f00000010c0)="58f916fd1de9bd7a39715d3854393ab1707cb86c398c38a8596783be9ad601a8a14faff5846b75cc5d7a6442e98f453b2e210c260d52ef2b9c199fdb76abdb", 0x3f}], 0x2, 0x7a00, 0x0, 0x0) open(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60b281, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) 6.163032329s ago: executing program 1 (id=1255): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x60, 0x30, 0x829, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 5.808451329s ago: executing program 1 (id=1256): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x278, 0x168, 0x9, 0x278, 0xb, 0x378, 0x250, 0x250, 0x378, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00'}, 0x6000000, 0x200, 0x248, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd7f, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r3, 0x409, 0x20) 4.681648104s ago: executing program 1 (id=1257): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x1008008, &(0x7f0000000a00)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYRES64], 0x2, 0xc46, &(0x7f0000001e40)="$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") openat(0xffffffffffffff9c, 0x0, 0x98101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[], 0x1, 0x1dd, &(0x7f0000000900)="$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") 4.655660991s ago: executing program 4 (id=1258): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000500), &(0x7f0000000640)=r2}, 0x17) 4.4552409s ago: executing program 4 (id=1259): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff92, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r3 = socket$inet6(0xa, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) syz_io_uring_setup(0x51c4, &(0x7f0000000200), 0x0, &(0x7f00000002c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x1c, r10, 0xe7d02281b1d40d47, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x1c}}, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0xc8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x804810, &(0x7f0000000b00)={[{@block_validity}, {@bsdgroups}, {@nobh}, {@nodelalloc}, {@nouid32}]}, 0x4, 0x756, &(0x7f00000002c0)="$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") ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000580)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80016, r2}) 2.736194528s ago: executing program 1 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.389634469s ago: executing program 2 (id=1261): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./bus\x00', 0x25281e, &(0x7f0000000300)={[], [{@smackfsdef={'smackfsdef', 0x3d, '{'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x1, 0x50d, &(0x7f0000000580)="$eJzs3c9vI1cdAPCvZ9eJ90ebbekBELRLW1jQap3E20ZVD1BOCKFKiB5B2obEG0Wx4yh2yibsIT1zRaISJzjyB3DuiTsXBDcu5YDEjwjUIDgMmvE4603sbpQfdhR/PtJo3ps3nu97cea9+Dn2C2Bi3Y6I3YiYioj3I2KmOF4qtninu2Xnfbr3eGl/7/FSKdL0vX+U8vLsWPQ9JnOjuGYlIn7wnYgfl47GbW/vrC02GvXNIj/baW7Mtrd37q02F1fqK/X1Wm1hfmHurftv1s6sra80p4rUlz/5/e43fppV62ZxpL8dZ6nb9PJBnMzViPjeeQQbgytFe6bGXRFOJImIFyPi1fz+n4kr+bMJAFxmaToT6Ux/HgC47JLpJ2N/ks+HJUm12p3DeymuJ41Wu3P3YWtrfbk7V3YrysnD1UZ9rpgrvBXlUpafz9NP8rVD+fsR8UJE/Hz6Wp6vLrUay2P5iwcAuJGP+aWkWoz//57ujv8AwCVXGXcFAICRM/4DwOQx/gPA5DH+A8Dk6Y7/18ZdDQBghLz+B4DJY/wHgIny/XffzbZ0v/j+6+UPtrfWWh/cW66316rNraXqUmtzo7rSaq3k39nTfNb1Gq3WxvwbsfXo1jc32p3Z9vbOg2Zra73zIP9e7wf1cn7W7ghaBgAM88IrH/+plI3Ib1/Lt+hby6E81poB5y0ZdwWAsbky7goAY2O1L5hcp3iNb3oALokBS/Q+pTLoA0JpmqbnVyXgnN35gvl/mFR98//+CxgmjPl/mFzm/2FypWnpuGv+x3FPBAAuNnP8wJD3/18s9r8p3hz40fLhMz46cchHJ34kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXBC99X+rxVrgNyNJqtWI5yLiVpRLD1cb9bmIeD4i/jhdns7y82OuMwBwWslfS8X6X3dmXr/5VNHLNw6SUxHxk1++94tHi53O5h8ipkr/nO4d73xUHK+NvvYAwLP1xul83/dC/tO9x0u9bZT1+du3I6LSjb+/NxX7B/GvxtV8X4lyRFz/V6nId5X65i5OY/fDiPj8oPaX4mY+B9Jd+fRw/Cz2cyONnzwVP8nLuvvsZ/G5M6gLTJqPs/7nnUH3XxK38/3g+7+S91CnV/R/2aWW9vM+8En8Xv93ZUj/d/u4Md743Xe7qWtHyz6M+OLViF7s/b7+pxe/NCT+68eM/+cvvfzqsLL0VxF3YnD8/liznebGbHt7595qc3GlvlJfr9UW5hfm3rr/Zm02n6OeHT4a/P3tu88PK8vaf31I/Moz2v/VY7b/1/97/4df+Yz4X39tUPwkXvqM+NmY+LVBF5w+emjx+m8rw+qWxV8e0v4Bz3/ae1x27O4x2p755C87R5YNBwDGp729s7bYaNQ3JSTOIvHfcw2R/cpelJYeTnxrVLGmYnDRz17r3tOHitL0RLGG9RhnMesGXAQHN31E/GfclQEAAAAAAAAAAAAAAAYaxSeWxt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq//BwAA//9t09Dz") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='security.c'], 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x80, 0x7, 0x9}) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1503, &(0x7f0000002a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) 1.682570423s ago: executing program 4 (id=1262): add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) unshare(0x20400) write(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) socket(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendto$inet6(r1, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r1, 0x1) 499.544032ms ago: executing program 1 (id=1263): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000008000000000000caadc262a13355f6be04ab3c2ea04c7acc898c1629edac82f4e51eeb1eda544d85b6f6981aacbfdfe5da62f073916de54fad57cf659846a39840890f9ee9aa11aceaef8f3a4195514912", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00030000000000000092075c332f1b9d3138f28d81c565b4b0b17f3c9aaf548ab8492fb2c3098a9e6325b18972ee71d2c9c33014569a7e6167c0b81ca7ba4ad5bd16150e60546b987f3514683373e1f8f13d0fbc2d37e49689dc059abcdeb85d2596a63c069ef5b0119ee3026ae6d40bd2162181530597d3e61cfbef5bc3ab0f1b28061b116325741ea86ea2a1210d9f1929122e9f6a9668e4b17021be44f0aa3641a597ee59ff037ceb9e92323c68dbb3e01a7a8272e8aecd6942edf884b158ceaaddcca4261f50acdff0e30c103bf328328946d393ea234553110a1b95ec6e2517699cfbdcc5e38218603fd8f540"], 0x0, 0x0}, 0x0) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f000000affb)=[{}], 0x1, 0x8001) epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0x100, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)={0x20000007}) 182.743961ms ago: executing program 4 (id=1264): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) lchown(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 4 (id=1265): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0xff, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) kernel console output (not intermixed with test programs): 78985][T11076] exfat: Deprecated parameter 'namecase' [ 775.784723][T11076] exfat: Deprecated parameter 'namecase' [ 775.806347][T11076] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 775.869124][T11052] loop0: detected capacity change from 0 to 40427 [ 775.890775][T11052] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 775.898649][T11052] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 775.956183][T11052] F2FS-fs (loop0): invalid crc value [ 775.992760][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 775.992782][ T29] audit: type=1326 audit(1729155973.295:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11062 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802497dff9 code=0x7fc00000 [ 776.056926][T11075] /dev/loop0: Can't open blockdev [ 776.107536][T11052] F2FS-fs (loop0): Found nat_bits in checkpoint [ 779.328484][T11110] loop2: detected capacity change from 0 to 512 [ 779.632689][T11112] loop2: detected capacity change from 0 to 256 [ 779.639850][T11112] exfat: Deprecated parameter 'namecase' [ 779.645557][T11112] exfat: Deprecated parameter 'namecase' [ 779.877214][T11112] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 779.896975][T11111] syz.2.1104: attempt to access beyond end of device [ 779.896975][T11111] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 779.911687][T11111] syz.2.1104: attempt to access beyond end of device [ 779.911687][T11111] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 779.925724][T11111] syz.2.1104: attempt to access beyond end of device [ 779.925724][T11111] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 779.939823][T11111] Buffer I/O error on dev loop2, logical block 34225520824, async page read [ 779.949044][ T29] audit: type=1800 audit(1729155977.255:370): pid=11111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1104" name="file1" dev="loop2" ino=1048772 res=0 errno=0 [ 780.209839][ T29] audit: type=1326 audit(1729155977.515:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11108 comm="syz.2.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7fc00000 [ 780.322417][T11114] loop0: detected capacity change from 0 to 1024 [ 781.594172][T11125] loop4: detected capacity change from 0 to 128 [ 781.636564][T11125] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 781.802106][T11114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.848458][T11126] input: syz1 as /devices/virtual/input/input23 [ 781.860621][T11126] loop2: detected capacity change from 0 to 160 [ 782.022500][T11128] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 782.764297][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 783.462767][T11127] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 783.999753][T10543] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 784.096596][T11138] random: crng reseeded on system resumption [ 785.179177][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 786.039534][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 786.422757][T11143] dns_resolver: Unsupported server list version (255) [ 787.179560][T11130] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 787.191870][T11130] EXT4-fs (loop0): This should not happen!! Data will be lost [ 787.191870][T11130] [ 787.201626][T11130] EXT4-fs (loop0): Total free blocks count 0 [ 787.207668][T11130] EXT4-fs (loop0): Free/Dirty block details [ 787.213698][T11130] EXT4-fs (loop0): free_blocks=68451041280 [ 787.219604][T11130] EXT4-fs (loop0): dirty_blocks=70224 [ 787.225051][T11130] EXT4-fs (loop0): Block reservation details [ 787.231223][T11130] EXT4-fs (loop0): i_reserved_data_blocks=4389 [ 787.291388][T10543] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 787.912204][ T52] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 8 with error 28 [ 788.337187][ T52] EXT4-fs (loop0): This should not happen!! Data will be lost [ 788.337187][ T52] [ 788.379603][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 788.392000][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 788.437284][T11160] loop1: detected capacity change from 0 to 512 [ 788.554071][ T29] audit: type=1107 audit(1729155985.865:372): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¬ßŸaÂGa®ãù;6{x½KñŽÆMcªv¢I`¯wôUu)Ññ¬°3' [ 788.586356][T11151] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 788.732500][T10543] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 788.838119][T11160] loop1: detected capacity change from 0 to 256 [ 788.845287][T11160] exfat: Deprecated parameter 'namecase' [ 788.851452][T11160] exfat: Deprecated parameter 'namecase' [ 788.876409][T11160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 788.895494][T11160] syz.1.1118: attempt to access beyond end of device [ 788.895494][T11160] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 788.909949][T11160] syz.1.1118: attempt to access beyond end of device [ 788.909949][T11160] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 788.925176][T11160] syz.1.1118: attempt to access beyond end of device [ 788.925176][T11160] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 788.939265][T11160] Buffer I/O error on dev loop1, logical block 34225520824, async page read [ 788.948991][ T29] audit: type=1800 audit(1729155986.255:373): pid=11160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1118" name="file1" dev="loop1" ino=1048773 res=0 errno=0 [ 788.954635][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 789.001609][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.056136][T10543] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.081140][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 789.099531][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.130497][T10543] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.157291][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 789.178366][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.208887][ T29] audit: type=1326 audit(1729155986.515:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13acb7dff9 code=0x7fc00000 [ 789.304123][T10543] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.386514][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 789.443421][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.533091][T10543] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 789.683362][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 789.747712][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 789.947619][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 789.986682][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 790.609858][T11172] input: syz1 as /devices/virtual/input/input24 [ 790.647555][T11172] loop1: detected capacity change from 0 to 160 [ 790.678484][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 790.704703][T11171] loop3: detected capacity change from 0 to 1024 [ 790.751922][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 790.801820][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 790.816094][T11171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.846022][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 790.862623][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 791.284247][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 791.321304][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 791.339353][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 791.395039][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 791.422464][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 792.437123][T11177] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 792.452741][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 793.205830][T11180] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 793.218972][T11180] EXT4-fs (loop3): This should not happen!! Data will be lost [ 793.218972][T11180] [ 793.228628][T11180] EXT4-fs (loop3): Total free blocks count 0 [ 793.234704][T11180] EXT4-fs (loop3): Free/Dirty block details [ 793.240706][T11180] EXT4-fs (loop3): free_blocks=68451041280 [ 793.246636][T11180] EXT4-fs (loop3): dirty_blocks=70224 [ 793.252502][T11180] EXT4-fs (loop3): Block reservation details [ 793.258499][T11180] EXT4-fs (loop3): i_reserved_data_blocks=4389 [ 793.293930][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 793.316052][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 793.328302][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 793.375475][T10543] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 793.400484][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 793.450217][T10543] EXT4-fs error: 22 callbacks suppressed [ 793.450237][T10543] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /13/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 793.490428][ T2904] EXT4-fs: 14 callbacks suppressed [ 793.490450][ T2904] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 76 with max blocks 4 with error 28 [ 793.530094][ T2904] EXT4-fs (loop0): This should not happen!! Data will be lost [ 793.530094][ T2904] [ 793.621819][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 793.662461][ T2904] EXT4-fs (loop0): Total free blocks count 0 [ 793.669385][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 793.692149][ T2904] EXT4-fs (loop0): Free/Dirty block details [ 793.698118][ T2904] EXT4-fs (loop0): free_blocks=68451041280 [ 793.728920][ T2904] EXT4-fs (loop0): dirty_blocks=70192 [ 793.734413][ T2904] EXT4-fs (loop0): Block reservation details [ 793.750959][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 793.768893][ T2904] EXT4-fs (loop0): i_reserved_data_blocks=4387 [ 794.755852][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 794.768428][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 794.978342][ T5260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 794.991618][ T5260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.000862][ T5260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.010667][ T5260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.018216][ T5260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 795.025839][ T5260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 795.077042][ T5260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 795.089493][ T5260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 795.124355][T10645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 795.183481][T10645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 795.210144][T10645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 795.217583][T10645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 795.231047][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 795.250802][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 795.294348][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 795.376591][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 795.415693][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 795.446158][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 795.632390][ T8587] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 264 with max blocks 8 with error 28 [ 795.697643][ T8587] EXT4-fs (loop0): This should not happen!! Data will be lost [ 795.697643][ T8587] [ 795.951139][ T7668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.245327][ T1835] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 8 with error 28 [ 796.329017][ T1835] EXT4-fs (loop3): This should not happen!! Data will be lost [ 796.329017][ T1835] [ 796.407693][ T1835] EXT4-fs (loop3): Total free blocks count 0 [ 796.419171][ T1835] EXT4-fs (loop3): Free/Dirty block details [ 796.425262][ T1835] EXT4-fs (loop3): free_blocks=68451041280 [ 796.452902][ T7668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.485587][ T1835] EXT4-fs (loop3): dirty_blocks=70224 [ 796.504628][ T1835] EXT4-fs (loop3): Block reservation details [ 796.538953][ T1835] EXT4-fs (loop3): i_reserved_data_blocks=4389 [ 796.549521][ T1835] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 36 with error 28 [ 796.577390][ T1835] EXT4-fs (loop3): This should not happen!! Data will be lost [ 796.577390][ T1835] [ 796.584796][T11208] loop2: detected capacity change from 0 to 128 [ 796.634094][T11208] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 796.644170][T10320] EXT4-fs error: 76 callbacks suppressed [ 796.644190][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 796.745921][T10320] EXT4-fs warning: 32 callbacks suppressed [ 796.747906][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 796.889105][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 797.299808][T10645] Bluetooth: hci4: command tx timeout [ 797.309935][ T29] audit: type=1326 audit(1729155994.235:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.334789][ T7668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.347647][ T29] audit: type=1326 audit(1729155994.235:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.351250][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 797.370149][ T29] audit: type=1326 audit(1729155994.235:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.410243][T10645] Bluetooth: hci5: command tx timeout [ 797.411952][ T29] audit: type=1326 audit(1729155994.235:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.440725][ T29] audit: type=1326 audit(1729155994.235:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.463504][ T29] audit: type=1326 audit(1729155994.235:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.486023][ T29] audit: type=1326 audit(1729155994.245:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.508981][ T29] audit: type=1326 audit(1729155994.245:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.534712][ T29] audit: type=1326 audit(1729155994.245:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.557507][ T29] audit: type=1326 audit(1729155994.245:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fcf7dff9 code=0x7ffc0000 [ 797.634234][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 797.650103][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 797.732078][T11189] chnl_net:caif_netlink_parms(): no params data found [ 797.972536][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 798.786665][T11219] loop1: detected capacity change from 0 to 1024 [ 798.816622][ T7668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.930470][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.984217][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 799.018134][T11219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.037514][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.054525][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 799.097754][T11189] bridge_slave_0: entered allmulticast mode [ 799.122882][T11189] bridge_slave_0: entered promiscuous mode [ 799.157127][T11191] chnl_net:caif_netlink_parms(): no params data found [ 799.172960][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 799.236420][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.261206][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 799.278988][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.301987][T11189] bridge_slave_1: entered allmulticast mode [ 799.308396][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 799.339751][T11189] bridge_slave_1: entered promiscuous mode [ 799.380215][T10320] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 799.468565][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 799.514116][T11189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.536473][T10320] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /31/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 799.563019][T10645] Bluetooth: hci4: command tx timeout [ 799.568532][T10645] Bluetooth: hci5: command tx timeout [ 800.122038][T10643] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 800.191538][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 800.215739][T10643] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 800.270836][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 800.306401][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 800.366733][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 800.399911][T10643] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 800.433796][T11189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.460349][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 800.544802][T10643] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 800.564782][T10320] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 800.590634][T11191] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.597779][T11191] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.644512][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 800.659329][T11191] bridge_slave_0: entered allmulticast mode [ 800.666546][T11191] bridge_slave_0: entered promiscuous mode [ 800.719362][T10643] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 800.872641][T11189] team0: Port device team_slave_0 added [ 800.889726][T10643] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 800.939294][T11191] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.979436][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.000514][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 801.030085][T11191] bridge_slave_1: entered allmulticast mode [ 801.060321][T11191] bridge_slave_1: entered promiscuous mode [ 801.091067][T10643] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 801.242634][T10643] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 801.284591][ T7668] bridge_slave_1: left allmulticast mode [ 801.332430][ T7668] bridge_slave_1: left promiscuous mode [ 801.389253][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.397480][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 801.443076][ T7668] bridge_slave_0: left allmulticast mode [ 801.450581][T10643] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 801.489595][ T7668] bridge_slave_0: left promiscuous mode [ 801.529141][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.625490][T10643] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 801.649563][ T8587] EXT4-fs: 6 callbacks suppressed [ 801.649585][ T8587] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 76 with max blocks 4 with error 28 [ 801.678080][ T4629] Bluetooth: hci5: command tx timeout [ 801.683942][ T4629] Bluetooth: hci4: command tx timeout [ 801.759031][ T8587] EXT4-fs (loop3): This should not happen!! Data will be lost [ 801.759031][ T8587] [ 801.769882][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 801.839792][ T8587] EXT4-fs (loop3): Total free blocks count 0 [ 801.845874][ T8587] EXT4-fs (loop3): Free/Dirty block details [ 801.864458][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 801.931909][ T8587] EXT4-fs (loop3): free_blocks=68451041280 [ 801.937823][ T8587] EXT4-fs (loop3): dirty_blocks=70192 [ 802.019266][ T8587] EXT4-fs (loop3): Block reservation details [ 802.025347][ T8587] EXT4-fs (loop3): i_reserved_data_blocks=4387 [ 802.053554][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 802.109406][ T8587] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 264 with max blocks 8 with error 28 [ 802.131168][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 802.204742][ T8587] EXT4-fs (loop3): This should not happen!! Data will be lost [ 802.204742][ T8587] [ 802.238955][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 802.345031][T10643] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 803.302869][ T4629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 803.314313][ T4629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 803.323531][ T4629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 803.333199][ T4629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 803.353226][ T4629] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 803.360971][ T4629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.729082][ T4629] Bluetooth: hci4: command tx timeout [ 803.734544][ T4629] Bluetooth: hci5: command tx timeout [ 803.821243][ T7668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.851717][ T7668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.881541][ T7668] bond0 (unregistering): Released all slaves [ 803.920607][T11189] team0: Port device team_slave_1 added [ 803.941462][T11191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.964790][T10543] EXT4-fs: 14 callbacks suppressed [ 803.964809][T10543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.226825][T11191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.314158][T11189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.346419][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.413904][T11189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.443893][T11189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.469033][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.537690][T11189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.771873][T11191] team0: Port device team_slave_0 added [ 804.786170][ T8587] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 804.869110][ T8587] EXT4-fs (loop1): This should not happen!! Data will be lost [ 804.869110][ T8587] [ 804.907355][ T8587] EXT4-fs (loop1): Total free blocks count 0 [ 804.939246][ T8587] EXT4-fs (loop1): Free/Dirty block details [ 804.945286][ T8587] EXT4-fs (loop1): free_blocks=68451041280 [ 804.990450][ T8587] EXT4-fs (loop1): dirty_blocks=67152 [ 805.017099][T11189] hsr_slave_0: entered promiscuous mode [ 805.025705][ T8587] EXT4-fs (loop1): Block reservation details [ 805.051491][T11189] hsr_slave_1: entered promiscuous mode [ 805.057584][ T8587] EXT4-fs (loop1): i_reserved_data_blocks=4197 [ 805.087343][ T8587] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 8 with error 28 [ 805.104504][T11189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 805.139043][T11189] Cannot create hsr debugfs directory [ 805.147956][T11191] team0: Port device team_slave_1 added [ 805.169493][ T8587] EXT4-fs (loop1): This should not happen!! Data will be lost [ 805.169493][ T8587] [ 805.242664][ T7668] hsr_slave_0: left promiscuous mode [ 805.278720][ T7668] hsr_slave_1: left promiscuous mode [ 805.284798][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.319002][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.364331][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.389493][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.409046][ T4629] Bluetooth: hci1: command tx timeout [ 805.467360][ T7668] veth1_macvtap: left promiscuous mode [ 805.513476][ T7668] veth0_macvtap: left promiscuous mode [ 805.544120][ T7668] veth1_vlan: left promiscuous mode [ 805.559937][ T7668] veth0_vlan: left promiscuous mode [ 807.169963][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 807.306492][T10320] EXT4-fs: 22 callbacks suppressed [ 807.306511][T10320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.330973][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 807.493849][ T4629] Bluetooth: hci1: command tx timeout [ 808.458539][T10645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 808.470116][T10645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 808.482429][T10645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 808.490323][T10645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 808.497905][T10645] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 808.505339][T10645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 808.605933][T11191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.659739][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.728190][T11191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.757713][T11191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.778375][T11191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.811436][T11191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.019519][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.025856][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.086214][T11191] hsr_slave_0: entered promiscuous mode [ 809.126545][T11191] hsr_slave_1: entered promiscuous mode [ 809.144290][T11191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.170173][T11191] Cannot create hsr debugfs directory [ 809.193237][T11248] chnl_net:caif_netlink_parms(): no params data found [ 809.569167][T10645] Bluetooth: hci1: command tx timeout [ 809.786826][T11248] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.819129][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.826386][T11248] bridge_slave_0: entered allmulticast mode [ 809.855772][T11248] bridge_slave_0: entered promiscuous mode [ 809.884709][T11267] chnl_net:caif_netlink_parms(): no params data found [ 810.021880][T11248] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.034441][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.043738][T11248] bridge_slave_1: entered allmulticast mode [ 810.056919][T11248] bridge_slave_1: entered promiscuous mode [ 810.194140][T11248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.290042][ T1306] EXT4-fs: 6 callbacks suppressed [ 810.290058][ T1306] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 36 with error 28 [ 810.312610][T11267] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.328613][T11267] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.336606][ T1306] EXT4-fs (loop1): This should not happen!! Data will be lost [ 810.336606][ T1306] [ 810.349223][T11267] bridge_slave_0: entered allmulticast mode [ 810.356063][T11267] bridge_slave_0: entered promiscuous mode [ 810.369935][ T1306] EXT4-fs (loop1): Total free blocks count 0 [ 810.375960][ T1306] EXT4-fs (loop1): Free/Dirty block details [ 810.396559][T11248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.415339][ T1306] EXT4-fs (loop1): free_blocks=68451041280 [ 810.433811][ T1306] EXT4-fs (loop1): dirty_blocks=67152 [ 810.445557][T11267] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.457423][ T1306] EXT4-fs (loop1): Block reservation details [ 810.466262][T11267] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.501558][ T1306] EXT4-fs (loop1): i_reserved_data_blocks=4197 [ 810.508553][ T1306] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 76 with max blocks 4 with error 28 [ 810.547231][T11267] bridge_slave_1: entered allmulticast mode [ 810.566575][T11267] bridge_slave_1: entered promiscuous mode [ 810.585787][ T1306] EXT4-fs (loop1): This should not happen!! Data will be lost [ 810.585787][ T1306] [ 810.615372][T10645] Bluetooth: hci6: command tx timeout [ 810.725024][T11248] team0: Port device team_slave_0 added [ 810.832195][T11248] team0: Port device team_slave_1 added [ 810.859639][T11267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.911202][T11267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.983550][T11189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 811.000582][T11189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 811.101845][ T4629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 811.113479][ T4629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 811.122627][ T4629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 811.132141][ T4629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 811.141839][ T4629] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 811.149307][ T4629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 811.191382][T11191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.250406][T11248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.257396][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.299596][T11248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.318301][T11189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 811.328216][T11189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 811.352830][T11267] team0: Port device team_slave_0 added [ 811.362360][T11267] team0: Port device team_slave_1 added [ 811.427045][T11191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.449212][T11248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.456329][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.492713][T11248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.557759][T11267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.577399][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.609586][T11267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.655399][ T4629] Bluetooth: hci1: command tx timeout [ 811.664976][T11191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.742547][T11267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.762927][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.849164][T11267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.020279][T11191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.120640][T11248] hsr_slave_0: entered promiscuous mode [ 812.157400][T11248] hsr_slave_1: entered promiscuous mode [ 812.175991][T11248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.197305][T11248] Cannot create hsr debugfs directory [ 812.273660][T11267] hsr_slave_0: entered promiscuous mode [ 812.293543][T11267] hsr_slave_1: entered promiscuous mode [ 812.319918][T11267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.327552][T11267] Cannot create hsr debugfs directory [ 812.696490][ T4629] Bluetooth: hci6: command tx timeout [ 812.948687][T11189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.040563][T11191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 813.077752][T11189] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.155185][T11191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 813.240208][T11302] chnl_net:caif_netlink_parms(): no params data found [ 813.249572][ T4629] Bluetooth: hci7: command tx timeout [ 813.278981][T11191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 813.316371][T11191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 813.352997][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.360189][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.385788][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.392973][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.585127][T11248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.833711][T11248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.973202][T11248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.179896][T11248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.230212][T11302] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.237454][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.279912][T11302] bridge_slave_0: entered allmulticast mode [ 814.302873][T11302] bridge_slave_0: entered promiscuous mode [ 814.331106][T11302] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.338226][T11302] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.379113][T11302] bridge_slave_1: entered allmulticast mode [ 814.408369][T11302] bridge_slave_1: entered promiscuous mode [ 814.522273][T11302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.610091][T11302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.726703][T11191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.770845][ T4629] Bluetooth: hci6: command tx timeout [ 814.845437][T11302] team0: Port device team_slave_0 added [ 814.950520][T11302] team0: Port device team_slave_1 added [ 814.989706][T11191] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.149690][T11302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.156678][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.218452][T11302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.258292][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.265559][ T8587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.295821][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.302998][ T8587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.332164][T10645] Bluetooth: hci7: command tx timeout [ 815.344700][T11189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.364981][T11248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.376842][T11248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.453873][T11267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.485157][T11302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.498138][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.543209][T11302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.593269][T11248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.655568][T11267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.698687][T11248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.735520][ T8587] EXT4-fs: 6 callbacks suppressed [ 815.735536][ T8587] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 264 with max blocks 8 with error 28 [ 815.827232][ T8587] EXT4-fs (loop1): This should not happen!! Data will be lost [ 815.827232][ T8587] [ 815.880231][ T8587] EXT4-fs (loop1): Total free blocks count 0 [ 815.886275][ T8587] EXT4-fs (loop1): Free/Dirty block details [ 815.908547][T11267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.929712][ T8587] EXT4-fs (loop1): free_blocks=68451041280 [ 815.935583][ T8587] EXT4-fs (loop1): dirty_blocks=67120 [ 815.980896][ T8587] EXT4-fs (loop1): Block reservation details [ 815.986971][ T8587] EXT4-fs (loop1): i_reserved_data_blocks=4195 [ 816.024077][T11302] hsr_slave_0: entered promiscuous mode [ 816.038649][T11302] hsr_slave_1: entered promiscuous mode [ 816.047388][T11302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 816.067192][T11302] Cannot create hsr debugfs directory [ 816.128181][T11267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.214933][T11189] veth0_vlan: entered promiscuous mode [ 816.273701][T11189] veth1_vlan: entered promiscuous mode [ 816.412762][T11191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.508300][T11248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.625739][T11189] veth0_macvtap: entered promiscuous mode [ 816.679548][T11267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 816.711845][T11267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 816.755596][T11248] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.791273][T11189] veth1_macvtap: entered promiscuous mode [ 816.818926][T11267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 816.825918][T11154] sched: DL replenish lagged too much [ 816.850462][T10645] Bluetooth: hci6: command tx timeout [ 816.876415][T11267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 816.988671][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.039163][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.069054][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.107988][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.134509][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.168380][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.191274][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.211132][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.248648][T11189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.296304][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.303479][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.404998][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.416348][T10645] Bluetooth: hci7: command tx timeout [ 817.432433][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.446846][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.464704][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.475941][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.487576][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.498250][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.509642][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.520979][T11189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.577628][T11302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.647563][T11248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 817.670710][T11248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.688120][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.695365][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.778293][T11191] veth0_vlan: entered promiscuous mode [ 817.798143][T11191] veth1_vlan: entered promiscuous mode [ 817.845720][T11189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.862393][T11189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.875563][T11189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.897771][T11189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.936793][T11191] veth0_macvtap: entered promiscuous mode [ 818.006801][T11191] veth1_macvtap: entered promiscuous mode [ 818.123022][T11267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.152454][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.171565][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.186481][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.205401][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.228733][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.247023][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.269949][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.287491][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.310825][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.333749][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.352430][T11191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.424887][T11302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.475834][T11230] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 392 with max blocks 8 with error 28 [ 818.488817][T11230] EXT4-fs (loop1): This should not happen!! Data will be lost [ 818.488817][T11230] [ 818.548377][T11267] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.584943][ T7668] bridge_slave_1: left allmulticast mode [ 818.601138][ T7668] bridge_slave_1: left promiscuous mode [ 818.607744][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.681276][ T7668] bridge_slave_0: left allmulticast mode [ 818.687012][ T7668] bridge_slave_0: left promiscuous mode [ 818.719542][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.512168][T10645] Bluetooth: hci7: command tx timeout [ 819.977223][ T7668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.033822][ T7668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.064619][ T7668] bond0 (unregistering): Released all slaves [ 820.267978][T11302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.297244][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.309048][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.319690][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.340757][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.363720][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.379032][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.398922][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.421585][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.439200][T11191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.483487][T11191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.495689][T11191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.567886][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.575108][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.628006][T11302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.653011][T11191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.674656][T11191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.685048][T11191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.698872][T11191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.752419][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.759604][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.794581][ T7672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.826096][ T7672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.903731][T11248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.060250][ T7668] hsr_slave_0: left promiscuous mode [ 821.086369][ T7668] hsr_slave_1: left promiscuous mode [ 821.104286][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.126267][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.137904][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.146994][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.176340][ T7668] veth1_macvtap: left promiscuous mode [ 821.186300][ T7668] veth0_macvtap: left promiscuous mode [ 821.193816][ T7668] veth1_vlan: left promiscuous mode [ 821.205710][ T7668] veth0_vlan: left promiscuous mode [ 822.639916][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 822.743819][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 823.507719][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.554059][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.689981][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.697882][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.821133][T11383] loop0: detected capacity change from 0 to 512 [ 823.858189][T11383] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 823.867260][T11383] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 823.893755][ T7672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.944283][T11248] veth0_vlan: entered promiscuous mode [ 823.952340][ T7672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.083346][T11248] veth1_vlan: entered promiscuous mode [ 824.120664][T11302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 824.161560][T11302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 824.189692][T11302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 824.251031][T11267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.269718][T11302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 824.511200][T11387] dns_resolver: Unsupported server list version (255) [ 824.702884][T11390] loop4: detected capacity change from 0 to 128 [ 824.735935][T11390] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 824.802170][ T7668] bridge_slave_1: left allmulticast mode [ 824.807902][ T7668] bridge_slave_1: left promiscuous mode [ 824.853389][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.917485][T11391] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 825.069213][ T7668] bridge_slave_0: left allmulticast mode [ 825.075102][ T7668] bridge_slave_0: left promiscuous mode [ 825.091757][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.225188][ T7668] bridge_slave_1: left allmulticast mode [ 825.254497][ T7668] bridge_slave_1: left promiscuous mode [ 825.321130][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.449637][ T7668] bridge_slave_0: left allmulticast mode [ 825.469006][ T7668] bridge_slave_0: left promiscuous mode [ 825.474866][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.538510][T11383] loop0: detected capacity change from 0 to 40427 [ 825.551841][ T7668] bridge_slave_1: left allmulticast mode [ 825.557614][ T7668] bridge_slave_1: left promiscuous mode [ 825.594295][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.599499][T11383] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 825.627450][T11383] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 825.636909][T11393] loop4: detected capacity change from 0 to 128 [ 825.662196][T11383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 825.665223][ T7668] bridge_slave_0: left allmulticast mode [ 825.677803][T11393] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 825.697620][ T7668] bridge_slave_0: left promiscuous mode [ 825.719865][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.779269][T11383] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 825.795726][T11383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 825.845119][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 825.845179][ T29] audit: type=1326 audit(1729156023.155:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3217dff9 code=0x7ffc0000 [ 825.939506][ T29] audit: type=1326 audit(1729156023.155:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3217dff9 code=0x7ffc0000 [ 826.185688][ T29] audit: type=1326 audit(1729156023.155:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f3217dff9 code=0x7ffc0000 [ 826.756009][ T29] audit: type=1326 audit(1729156023.155:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3217dff9 code=0x7ffc0000 [ 826.778600][ T29] audit: type=1326 audit(1729156023.155:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2f3217dff9 code=0x7ffc0000 [ 826.801279][ T29] audit: type=1326 audit(1729156023.155:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3217dff9 code=0x7ffc0000 [ 826.824010][ T29] audit: type=1326 audit(1729156023.165:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3217dff9 code=0x7ffc0000 [ 828.322325][ T7668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.335513][ T7668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.348404][ T7668] bond0 (unregistering): Released all slaves [ 828.569311][ T7668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.587747][ T7668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.601312][ T7668] bond0 (unregistering): Released all slaves [ 828.823344][ T7668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.834849][ T7668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.850670][ T7668] bond0 (unregistering): Released all slaves [ 828.972932][T11248] veth0_macvtap: entered promiscuous mode [ 829.055701][T11248] veth1_macvtap: entered promiscuous mode [ 829.171343][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.192203][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.212727][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.236580][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.249569][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.295625][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.322926][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.354618][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.396716][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.452136][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.581030][T11248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.729737][T11302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.786289][T11267] veth0_vlan: entered promiscuous mode [ 829.804912][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.831171][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.070965][T11416] dns_resolver: Unsupported server list version (255) [ 830.187993][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.198826][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.208683][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.219475][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.229471][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.239983][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.249881][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.260442][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.271877][T11248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.309055][T11302] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.345983][T11302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 830.356494][T11302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.506673][T11420] loop4: detected capacity change from 0 to 128 [ 830.548146][T11267] veth1_vlan: entered promiscuous mode [ 830.576139][T11267] veth0_macvtap: entered promiscuous mode [ 830.585857][T11267] veth1_macvtap: entered promiscuous mode [ 830.604762][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.615403][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.625332][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.635900][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.645895][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.656476][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.666458][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.677043][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.686973][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.697870][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.708089][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.718765][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.730498][T11267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.740898][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.751501][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.761446][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.772131][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.782055][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.793193][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.803719][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.814248][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.824262][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.836477][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.846674][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.857437][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.873593][T11267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.969765][T11420] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 830.982557][T11248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.045693][T11248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.091934][T11248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.119792][T11248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.133541][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.140772][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.165963][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.173186][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.208367][T11420] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 831.284742][T11267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.294396][T11267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.303570][T11267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.315551][T11267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.546729][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.735978][ T8587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.767227][ T8587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.887526][T11426] loop0: detected capacity change from 0 to 2048 [ 831.959225][ T7672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.967449][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.987785][ T7672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.996643][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.250305][T11427] loop0: detected capacity change from 0 to 16 [ 832.289000][T11427] erofs: (device loop0): mounted with root inode @ nid 36. [ 833.002109][ T8587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.036243][ T8587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.043256][T11431] loop0: detected capacity change from 0 to 1024 [ 833.106084][T11436] random: crng reseeded on system resumption [ 834.015896][T11431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.827034][T11441] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 836.843164][T11441] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 836.855926][T11441] EXT4-fs (loop0): This should not happen!! Data will be lost [ 836.855926][T11441] [ 836.865668][T11441] EXT4-fs (loop0): Total free blocks count 0 [ 836.871831][T11441] EXT4-fs (loop0): Free/Dirty block details [ 836.877815][T11441] EXT4-fs (loop0): free_blocks=68451041280 [ 836.883751][T11441] EXT4-fs (loop0): dirty_blocks=70224 [ 836.889281][T11441] EXT4-fs (loop0): Block reservation details [ 836.895289][T11441] EXT4-fs (loop0): i_reserved_data_blocks=4389 [ 837.154476][T11302] veth0_vlan: entered promiscuous mode [ 837.186666][ T35] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 8 with error 28 [ 837.468679][T11302] veth1_vlan: entered promiscuous mode [ 837.552922][T11447] loop3: detected capacity change from 0 to 512 [ 838.093157][ T7668] hsr_slave_0: left promiscuous mode [ 838.107277][T11449] loop3: detected capacity change from 0 to 256 [ 838.114603][T11449] exfat: Deprecated parameter 'namecase' [ 838.120397][T11449] exfat: Deprecated parameter 'namecase' [ 838.143536][T11449] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 838.230353][ T7668] hsr_slave_1: left promiscuous mode [ 838.263637][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.295363][ T29] audit: type=1326 audit(1729156035.605:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 838.338993][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.346542][ T29] audit: type=1326 audit(1729156035.645:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 838.422538][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.440876][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.470545][ T29] audit: type=1326 audit(1729156035.645:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 838.561150][ T29] audit: type=1326 audit(1729156035.645:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 838.584395][ T7668] hsr_slave_0: left promiscuous mode [ 838.616723][ T29] audit: type=1326 audit(1729156035.645:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 838.647966][ T7668] hsr_slave_1: left promiscuous mode [ 838.689329][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.719310][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.737736][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.758936][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.774789][ T29] audit: type=1326 audit(1729156035.645:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 838.903382][ T7668] hsr_slave_0: left promiscuous mode [ 838.939492][ T29] audit: type=1326 audit(1729156035.645:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 839.382148][T11453] loop2: detected capacity change from 0 to 2048 [ 839.393783][T11453] EXT4-fs: Ignoring removed nobh option [ 839.949112][ T7668] hsr_slave_1: left promiscuous mode [ 839.957907][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.972890][T11453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.986124][T11453] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 839.989081][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.032105][ T29] audit: type=1326 audit(1729156035.645:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 840.073546][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.136663][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.258924][ T29] audit: type=1326 audit(1729156035.645:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 840.342678][ T29] audit: type=1326 audit(1729156035.645:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a157dff9 code=0x7fc00000 [ 840.482603][ T7668] veth1_macvtap: left promiscuous mode [ 840.498535][ T7668] veth0_macvtap: left promiscuous mode [ 840.508794][ T7668] veth1_vlan: left promiscuous mode [ 840.519040][ T7668] veth0_vlan: left promiscuous mode [ 840.530042][ T7668] veth1_macvtap: left promiscuous mode [ 840.535644][ T7668] veth0_macvtap: left promiscuous mode [ 840.559118][ T7668] veth1_vlan: left promiscuous mode [ 840.564612][ T7668] veth0_vlan: left promiscuous mode [ 840.580306][ T7668] veth1_macvtap: left promiscuous mode [ 840.586097][ T7668] veth0_macvtap: left promiscuous mode [ 840.596311][ T7668] veth1_vlan: left promiscuous mode [ 840.609271][ T7668] veth0_vlan: left promiscuous mode [ 843.774925][T11189] EXT4-fs: 15 callbacks suppressed [ 843.774951][T11189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.094669][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 844.196263][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 845.827521][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 845.903388][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 847.534204][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 847.621172][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 848.500799][T11302] veth0_macvtap: entered promiscuous mode [ 848.555550][T11302] veth1_macvtap: entered promiscuous mode [ 848.572578][T11267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.636018][T11480] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.643963][T11480] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.875606][T11481] bridge_slave_1: left allmulticast mode [ 848.919147][T11481] bridge_slave_1: left promiscuous mode [ 848.928221][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.155758][T11481] bridge_slave_0: left allmulticast mode [ 849.162784][T11481] bridge_slave_0: left promiscuous mode [ 849.168690][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.185638][T11485] input: syz1 as /devices/virtual/input/input27 [ 849.240072][T11485] loop4: detected capacity change from 0 to 160 [ 850.262766][ T4629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 850.274369][ T4629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 850.284225][ T4629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 850.302047][ T4629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 850.320605][ T4629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 850.332677][ T4629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 851.050381][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.069228][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.100564][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.112150][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.122896][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.134133][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.144802][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.156115][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.194575][T11302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.306788][T11497] loop0: detected capacity change from 0 to 40427 [ 851.307412][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.346903][T11497] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 851.361594][T11497] F2FS-fs (loop0): Image doesn't support compression [ 851.369363][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.381827][T11497] F2FS-fs (loop0): Image doesn't support compression [ 851.390496][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.402242][T11497] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 851.411092][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.453202][T11497] F2FS-fs (loop0): invalid crc value [ 851.458850][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.470936][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.482135][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.493324][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.509877][T11302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.573210][T11505] loop4: detected capacity change from 0 to 256 [ 851.614944][T11302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.629638][T11497] F2FS-fs (loop0): Found nat_bits in checkpoint [ 851.646355][T11505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 851.652904][T11302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.667750][T11302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.677106][T11302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.960359][T11497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 851.998642][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.348599][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.369286][T10645] Bluetooth: hci0: command tx timeout [ 852.494414][T11494] chnl_net:caif_netlink_parms(): no params data found [ 852.985047][T11514] overlayfs: missing 'lowerdir' [ 853.833640][T11516] loop4: detected capacity change from 0 to 256 [ 853.855008][T11516] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 853.915963][T11189] syz-executor: attempt to access beyond end of device [ 853.915963][T11189] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 853.952031][T11189] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 854.148491][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.198152][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.526569][T10645] Bluetooth: hci0: command tx timeout [ 855.035155][T11494] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.071994][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.079999][T11494] bridge_slave_0: entered allmulticast mode [ 855.087258][T11494] bridge_slave_0: entered promiscuous mode [ 855.101730][T11494] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.109044][T11494] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.116294][T11494] bridge_slave_1: entered allmulticast mode [ 855.123574][T11494] bridge_slave_1: entered promiscuous mode [ 855.180376][T11519] loop3: detected capacity change from 0 to 512 [ 855.455873][T11494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.503396][T11494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.555945][ T5297] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 855.563471][T11519] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 855.709002][T11494] team0: Port device team_slave_0 added [ 855.719403][ T5297] usb 5-1: Using ep0 maxpacket: 32 [ 855.739234][ T5297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 855.764198][ T5297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 855.826372][T11494] team0: Port device team_slave_1 added [ 855.859042][ T5297] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 855.887519][ T5297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.923109][ T5297] usb 5-1: config 0 descriptor?? [ 855.956033][T11533] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 855.973266][ T5297] hub 5-1:0.0: USB hub found [ 856.017215][T11494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.029641][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.084067][T11544] loop1: detected capacity change from 0 to 128 [ 856.117639][T11544] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 856.162243][T11494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.524209][T11494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.619424][T10645] Bluetooth: hci0: command tx timeout [ 856.634910][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.994963][T11494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.418283][T11494] hsr_slave_0: entered promiscuous mode [ 857.471753][T11494] hsr_slave_1: entered promiscuous mode [ 857.875585][T11551] input: syz1 as /devices/virtual/input/input28 [ 857.905864][ T7668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.961699][T11551] loop1: detected capacity change from 0 to 160 [ 858.227239][ T7668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.355128][ T7668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.401349][T11553] lo speed is unknown, defaulting to 1000 [ 858.477630][T11553] lo speed is unknown, defaulting to 1000 [ 858.595548][ T7668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.695114][T11553] lo speed is unknown, defaulting to 1000 [ 858.702111][T10645] Bluetooth: hci0: command tx timeout [ 858.725482][T11553] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 858.823097][T11553] lo speed is unknown, defaulting to 1000 [ 858.870776][T11553] lo speed is unknown, defaulting to 1000 [ 859.025271][T11553] lo speed is unknown, defaulting to 1000 [ 859.053815][ T5297] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 859.100281][ T5297] usbhid 5-1:0.0: can't add hid device: -71 [ 859.123682][ T5297] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 859.134371][T11553] lo speed is unknown, defaulting to 1000 [ 859.141092][ T7668] bridge_slave_1: left allmulticast mode [ 859.153457][ T7668] bridge_slave_1: left promiscuous mode [ 859.165484][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.182637][ T5297] usb 5-1: USB disconnect, device number 23 [ 859.195879][ T7668] bridge_slave_0: left allmulticast mode [ 859.202375][ T7668] bridge_slave_0: left promiscuous mode [ 859.208670][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.892841][T11559] loop4: detected capacity change from 0 to 8192 [ 859.951407][T11559] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 860.519434][ T7668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.538203][ T7668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.569247][ T7668] bond0 (unregistering): Released all slaves [ 860.599014][T11553] lo speed is unknown, defaulting to 1000 [ 860.606103][T11553] lo speed is unknown, defaulting to 1000 [ 861.291536][T11583] loop3: detected capacity change from 0 to 2048 [ 861.408929][ T937] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 861.433495][T11583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.574802][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 862.029943][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 862.530121][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 862.540682][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.551269][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 862.592504][ T937] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=24.d0 [ 862.601869][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.616300][ T937] usb 5-1: Product: syz [ 862.620655][ T937] usb 5-1: Manufacturer: syz [ 862.625424][ T937] usb 5-1: SerialNumber: syz [ 862.632454][ T937] usb 5-1: config 0 descriptor?? [ 862.641501][ T937] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 862.725019][ T7668] hsr_slave_0: left promiscuous mode [ 862.758498][ T7668] hsr_slave_1: left promiscuous mode [ 862.774919][ T937] ftdi_sio ttyUSB0: unknown device type: 0x24d0 [ 862.846699][ T5297] usb 5-1: USB disconnect, device number 24 [ 862.854803][ T5297] ftdi_sio 5-1:0.0: device disconnected [ 862.920756][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.929953][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.953789][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.984712][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.083948][ T7668] veth1_macvtap: left promiscuous mode [ 863.307661][ T7668] veth0_macvtap: left promiscuous mode [ 863.650284][ T7668] veth1_vlan: left promiscuous mode [ 863.673405][ T7668] veth0_vlan: left promiscuous mode [ 864.918402][T11618] loop0: detected capacity change from 0 to 512 [ 865.894909][T11622] loop0: detected capacity change from 0 to 256 [ 865.902098][T11622] exfat: Deprecated parameter 'namecase' [ 865.907930][T11622] exfat: Deprecated parameter 'namecase' [ 866.062643][T11624] loop1: detected capacity change from 0 to 256 [ 866.182952][T11622] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 866.231797][T11621] syz.0.1183: attempt to access beyond end of device [ 866.231797][T11621] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 866.237025][T11624] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 866.249150][T11621] syz.0.1183: attempt to access beyond end of device [ 866.249150][T11621] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 866.267138][T11624] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 866.289751][T11621] syz.0.1183: attempt to access beyond end of device [ 866.289751][T11621] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 866.303762][T11621] Buffer I/O error on dev loop0, logical block 34225520824, async page read [ 866.333796][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 866.333821][ T29] audit: type=1800 audit(1729156063.635:443): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1183" name="file1" dev="loop0" ino=1048797 res=0 errno=0 [ 866.421375][ T29] audit: type=1326 audit(1729156063.735:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11614 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2af57dff9 code=0x7fc00000 [ 866.903595][T11627] loop0: detected capacity change from 0 to 2048 [ 866.944631][T11627] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 867.038714][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 867.155149][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 867.628872][ T5332] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 867.817342][ T5332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.835409][ T5332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.846458][ T5332] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 867.868285][ T5332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.907932][ T5332] usb 1-1: config 0 descriptor?? [ 868.135192][ T5332] usbhid 1-1:0.0: can't add hid device: -71 [ 868.150856][ T5332] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 868.161357][ T5332] usb 1-1: USB disconnect, device number 14 [ 868.533228][T11494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 868.535324][T11631] loop4: detected capacity change from 0 to 128 [ 868.565604][T11494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 868.601471][T11494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 868.637618][T11494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 868.811077][T11494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.829343][T11494] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.843845][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.851029][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.897111][T11642] loop3: detected capacity change from 0 to 2048 [ 869.028501][T11642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.094067][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.101225][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.450978][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.475373][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.507468][T11248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.865629][T11494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.636736][T11494] veth0_vlan: entered promiscuous mode [ 871.651452][T11494] veth1_vlan: entered promiscuous mode [ 871.676855][T11494] veth0_macvtap: entered promiscuous mode [ 871.686399][T11494] veth1_macvtap: entered promiscuous mode [ 871.702162][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.712750][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.729025][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.759763][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.778831][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.806150][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.823740][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.834491][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.845917][T11494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.856453][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.867182][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.877128][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.887638][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.897639][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.908180][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.918109][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.928882][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.940079][T11494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.950952][T11494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.960517][T11494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.970648][T11494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.979760][T11494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.210298][T11679] loop1: detected capacity change from 0 to 512 [ 873.074464][ T8587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.102786][ T8587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.166336][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.180477][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.214010][T11682] loop1: detected capacity change from 0 to 256 [ 873.231492][T11682] exfat: Deprecated parameter 'namecase' [ 873.237218][T11682] exfat: Deprecated parameter 'namecase' [ 874.688953][T11696] random: crng reseeded on system resumption [ 875.639593][ T29] audit: type=1326 audit(1729156072.925:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.1.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe798d7dff9 code=0x7fc00000 [ 875.775935][T11682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 875.998987][ T29] audit: type=1107 audit(1729156073.295:446): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¬ßŸaÂGa®ãù;6{x½KñŽÆMcªv¢I`¯wôUu)Ññ¬°3' [ 876.082559][T11702] loop2: detected capacity change from 0 to 256 [ 876.135733][T11702] FAT-fs (loop2): bogus number of FAT sectors [ 876.165649][T11702] FAT-fs (loop2): Can't find a valid FAT filesystem [ 879.694882][T11713] loop3: detected capacity change from 0 to 40427 [ 879.734725][T11713] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 879.809042][T11713] F2FS-fs (loop3): Image doesn't support compression [ 879.845712][T11713] F2FS-fs (loop3): Image doesn't support compression [ 879.853499][T11713] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2 [ 879.864863][T11713] F2FS-fs (loop3): invalid crc value [ 880.367409][T11713] F2FS-fs (loop3): Found nat_bits in checkpoint [ 880.831207][ T4629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 880.868546][T11713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 880.882790][ T4629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 880.906083][ T4629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 880.965802][ T4629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 881.080612][ T4629] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 881.089173][ T4629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 881.314027][T11732] fuse: Bad value for 'fd' [ 881.846095][T11248] syz-executor: attempt to access beyond end of device [ 881.846095][T11248] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 881.865747][T11248] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 881.887099][T11248] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 882.253556][T11734] loop3: detected capacity change from 0 to 128 [ 882.275587][T11734] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 883.250376][ T4629] Bluetooth: hci2: command tx timeout [ 885.334570][ T4629] Bluetooth: hci2: command tx timeout [ 885.403364][T11728] lo speed is unknown, defaulting to 1000 [ 885.428198][T11748] loop4: detected capacity change from 0 to 512 [ 885.794228][T11755] loop1: detected capacity change from 0 to 512 [ 885.885665][ T9397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.503492][T11758] loop4: detected capacity change from 0 to 256 [ 886.546810][T11755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.588588][T11758] exfat: Deprecated parameter 'namecase' [ 886.632435][T11755] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 886.669665][T11758] exfat: Deprecated parameter 'namecase' [ 886.735460][T11758] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 886.776980][ T9397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.829539][T11758] syz.4.1213: attempt to access beyond end of device [ 886.829539][T11758] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 886.844539][T11758] syz.4.1213: attempt to access beyond end of device [ 886.844539][T11758] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 886.859559][T11758] syz.4.1213: attempt to access beyond end of device [ 886.859559][T11758] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 886.874684][T11758] Buffer I/O error on dev loop4, logical block 34225520824, async page read [ 886.993174][ T29] audit: type=1800 audit(1729156084.205:447): pid=11758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1213" name="file1" dev="loop4" ino=1048803 res=0 errno=0 [ 887.122494][ T29] audit: type=1326 audit(1729156084.395:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.4.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3217dff9 code=0x7fc00000 [ 887.166858][ T9397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.185557][T11302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.309623][ T8457] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 887.419940][ T4629] Bluetooth: hci2: command tx timeout [ 887.467880][ T9397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.518939][ T8457] usb 3-1: Using ep0 maxpacket: 32 [ 887.541171][ T8457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.563027][ T8457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.597488][ T8457] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 887.620405][ T8457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.705720][ T8457] usb 3-1: config 0 descriptor?? [ 887.720466][T11728] chnl_net:caif_netlink_parms(): no params data found [ 887.760304][ T8457] hub 3-1:0.0: USB hub found [ 887.794363][T11773] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 888.035382][ T8457] hub 3-1:0.0: 1 port detected [ 889.287956][T11790] veth0_vlan: entered allmulticast mode [ 889.302762][ T8457] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 889.310254][ T8457] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 889.378070][ T8457] usbhid 3-1:0.0: can't add hid device: -71 [ 889.390550][ T8457] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 889.451434][ T8457] usb 3-1: USB disconnect, device number 14 [ 889.489478][ T4629] Bluetooth: hci2: command tx timeout [ 889.520357][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.527549][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.616311][T11728] bridge_slave_0: entered allmulticast mode [ 889.624416][T11728] bridge_slave_0: entered promiscuous mode [ 889.644841][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.662668][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.676692][T11728] bridge_slave_1: entered allmulticast mode [ 889.691297][T11728] bridge_slave_1: entered promiscuous mode [ 889.700404][ T9397] bridge_slave_1: left allmulticast mode [ 889.706244][ T9397] bridge_slave_1: left promiscuous mode [ 889.713892][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.318415][ T9397] bridge_slave_0: left allmulticast mode [ 890.326365][ T9397] bridge_slave_0: left promiscuous mode [ 890.335402][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.804194][ T9397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.822562][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.837127][ T9397] bond0 (unregistering): Released all slaves [ 894.086043][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.123167][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.633603][T11728] team0: Port device team_slave_0 added [ 894.703440][T11852] netlink: 'syz.1.1233': attribute type 11 has an invalid length. [ 894.708516][T11728] team0: Port device team_slave_1 added [ 894.795957][T11855] loop4: detected capacity change from 0 to 512 [ 895.465707][ T9397] hsr_slave_0: left promiscuous mode [ 895.504607][T11866] loop4: detected capacity change from 0 to 256 [ 895.511800][ T9397] hsr_slave_1: left promiscuous mode [ 895.534511][T11866] exfat: Deprecated parameter 'namecase' [ 895.542429][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.594345][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.603888][T11866] exfat: Deprecated parameter 'namecase' [ 895.706614][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.731985][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.751306][T11866] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 895.821624][ T9397] veth1_macvtap: left promiscuous mode [ 895.841154][ T9397] veth0_macvtap: left promiscuous mode [ 895.859132][ T9397] veth1_vlan: left promiscuous mode [ 895.868923][ T9397] veth0_vlan: left promiscuous mode [ 895.992011][T11866] syz.4.1232: attempt to access beyond end of device [ 895.992011][T11866] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 896.089390][T11866] syz.4.1232: attempt to access beyond end of device [ 896.089390][T11866] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 896.151422][T11866] syz.4.1232: attempt to access beyond end of device [ 896.151422][T11866] loop4: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 896.228701][T11866] Buffer I/O error on dev loop4, logical block 34225520824, async page read [ 896.238884][ T29] audit: type=1326 audit(1729156093.535:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11849 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3217dff9 code=0x7fc00000 [ 896.303446][ T29] audit: type=1800 audit(1729156093.605:450): pid=11866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1232" name="file1" dev="loop4" ino=1048804 res=0 errno=0 [ 896.855736][T11880] loop2: detected capacity change from 0 to 2048 [ 896.869348][T11880] EXT4-fs: Ignoring removed nobh option [ 897.555182][T11880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.567955][T11880] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 898.001120][T10645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 898.014306][T10645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 898.023808][T10645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 898.033728][T10645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 898.043241][T10645] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 898.050853][T10645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.603999][ T9397] team0 (unregistering): Port device team_slave_1 removed [ 898.671258][ T9397] team0 (unregistering): Port device team_slave_0 removed [ 900.138133][T10645] Bluetooth: hci3: command tx timeout [ 900.203893][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.211446][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.239206][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.284794][T11885] lo speed is unknown, defaulting to 1000 [ 900.399725][T11494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.467585][T11895] loop4: detected capacity change from 0 to 512 [ 900.507190][T11895] EXT4-fs (loop4): Test dummy encryption mode enabled [ 900.559016][T11895] EXT4-fs error (device loop4): __ext4_iget:4952: inode #11: block 1: comm syz.4.1241: invalid block [ 900.578013][T11895] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1241: couldn't read orphan inode 11 (err -117) [ 900.617828][T11895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.809872][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.816902][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.664246][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.687119][T11895] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 901.773734][T11895] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.1241: Directory hole found for htree leaf block 0 [ 901.869008][T11905] netlink: 'syz.2.1240': attribute type 4 has an invalid length. [ 902.339304][T10645] Bluetooth: hci3: command tx timeout [ 903.024737][T11895] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.1241: Directory hole found for htree leaf block 0 [ 903.062679][T11728] hsr_slave_0: entered promiscuous mode [ 903.122826][T11904] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.1241: Directory hole found for htree leaf block 0 [ 903.144462][T11728] hsr_slave_1: entered promiscuous mode [ 903.197664][T11728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.218118][T11728] Cannot create hsr debugfs directory [ 903.503944][T11191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.550776][T11922] kvm: kvm [11921]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5000008bbf [ 903.594034][T11922] kvm: kvm [11921]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x960000b4df [ 904.369138][T10645] Bluetooth: hci3: command tx timeout [ 904.513004][T11885] chnl_net:caif_netlink_parms(): no params data found [ 904.625661][T11944] loop2: detected capacity change from 0 to 512 [ 904.797328][T11947] loop1: detected capacity change from 0 to 128 [ 904.823825][T11947] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 905.116068][T11949] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 905.579752][T11950] loop2: detected capacity change from 0 to 256 [ 905.586889][T11950] exfat: Deprecated parameter 'namecase' [ 905.592729][T11950] exfat: Deprecated parameter 'namecase' [ 905.684440][T11950] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 905.778695][T11950] syz.2.1246: attempt to access beyond end of device [ 905.778695][T11950] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 905.813846][T11950] syz.2.1246: attempt to access beyond end of device [ 905.813846][T11950] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 905.834410][T11950] syz.2.1246: attempt to access beyond end of device [ 905.834410][T11950] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 905.962794][T11950] Buffer I/O error on dev loop2, logical block 34225520824, async page read [ 906.000746][ T29] audit: type=1800 audit(1729156103.315:451): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1246" name="file1" dev="loop2" ino=1048805 res=0 errno=0 [ 906.081697][T11885] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.128085][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.160024][ T29] audit: type=1326 audit(1729156103.405:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 906.198285][T11885] bridge_slave_0: entered allmulticast mode [ 906.228429][T11885] bridge_slave_0: entered promiscuous mode [ 906.237335][T11885] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.144881][T11885] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.154837][T11885] bridge_slave_1: entered allmulticast mode [ 907.162061][T11885] bridge_slave_1: entered promiscuous mode [ 907.176992][ T29] audit: type=1326 audit(1729156103.405:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 907.204030][T11961] loop1: detected capacity change from 0 to 2048 [ 907.211269][T11961] EXT4-fs: Ignoring removed nobh option [ 907.239402][ T29] audit: type=1326 audit(1729156103.405:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 907.249289][ T4629] Bluetooth: hci3: command tx timeout [ 907.588111][ T29] audit: type=1326 audit(1729156103.405:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 907.938201][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.951377][T11961] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 907.981486][ T29] audit: type=1326 audit(1729156103.405:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 908.011994][ T29] audit: type=1326 audit(1729156103.405:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 908.034596][ T29] audit: type=1326 audit(1729156103.405:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 908.057353][ T29] audit: type=1326 audit(1729156103.405:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 908.079961][ T29] audit: type=1326 audit(1729156103.405:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 908.224872][T11302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.232421][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.453999][T11963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 908.463901][T11963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 908.581495][T11885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.743308][T11973] loop4: detected capacity change from 0 to 128 [ 908.777773][T11973] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 908.817899][T11973] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 908.874607][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.895727][T11885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.920228][T11973] serio: Serial port ptm0 [ 908.982321][T11976] loop2: detected capacity change from 0 to 256 [ 909.178456][T11191] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 909.249123][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.270065][T11885] team0: Port device team_slave_0 added [ 909.302678][T11885] team0: Port device team_slave_1 added [ 909.411751][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.515790][T11728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 909.569874][T11885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.576893][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.695805][T11885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.732967][T11985] loop4: detected capacity change from 0 to 2048 [ 909.771031][T11728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 909.801833][T11885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.855683][T11985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 909.867500][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.927000][T11985] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 909.984495][T11885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.337074][T11728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 910.559871][T11728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 910.876467][T11885] hsr_slave_0: entered promiscuous mode [ 910.904931][T11885] hsr_slave_1: entered promiscuous mode [ 910.916447][T11885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.928889][T11885] Cannot create hsr debugfs directory [ 910.945820][T11991] loop1: detected capacity change from 0 to 2048 [ 911.288867][T11996] loop1: detected capacity change from 0 to 16 [ 911.609124][T11996] erofs: (device loop1): mounted with root inode @ nid 36. [ 912.092431][T11999] loop4: detected capacity change from 0 to 2048 [ 912.105818][T11999] EXT4-fs: Ignoring removed nobh option [ 912.697879][T11999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.710924][T11999] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 913.143633][T12011] loop2: detected capacity change from 0 to 512 [ 913.541345][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.546152][T12013] loop2: detected capacity change from 0 to 256 [ 913.573211][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.589966][T12013] exfat: Deprecated parameter 'namecase' [ 913.602502][ T11] bond0 (unregistering): Released all slaves [ 913.618987][T12013] exfat: Deprecated parameter 'namecase' [ 913.753341][T12013] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 913.763496][T12006] pim6reg1: entered promiscuous mode [ 913.777728][T11191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.856925][T12006] pim6reg1: entered allmulticast mode [ 913.974633][T12013] syz.2.1261: attempt to access beyond end of device [ 913.974633][T12013] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 914.097604][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.140195][T12013] syz.2.1261: attempt to access beyond end of device [ 914.140195][T12013] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 914.254788][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 914.254813][ T29] audit: type=1326 audit(1729156111.555:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12008 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9a37dff9 code=0x7fc00000 [ 914.268052][T12013] syz.2.1261: attempt to access beyond end of device [ 914.268052][T12013] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 914.598780][T12013] Buffer I/O error on dev loop2, logical block 34225520824, async page read [ 914.895686][ T29] audit: type=1800 audit(1729156112.185:519): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1261" name="file1" dev="loop2" ino=1048806 res=0 errno=0 [ 914.910559][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.238908][ T5332] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 915.269231][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.276426][ T1835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.381372][ T11] hsr_slave_0: left promiscuous mode [ 915.409093][ T11] hsr_slave_1: left promiscuous mode [ 915.445287][ T5332] usb 2-1: Using ep0 maxpacket: 16 [ 915.450859][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.461978][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.479424][ T5332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.507225][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.519046][ T5332] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 915.528352][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.536753][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.554638][ T5332] usb 2-1: Product: syz [ 915.569279][ T5332] usb 2-1: Manufacturer: syz [ 915.573956][ T5332] usb 2-1: SerialNumber: syz [ 915.626401][ T5332] usb 2-1: config 0 descriptor?? [ 915.636235][ T11] veth1_macvtap: left promiscuous mode [ 915.654545][ T5332] usb 2-1: Found Unit with invalid ID 0. [ 915.668892][ T5332] ------------[ cut here ]------------ [ 915.674464][ T5332] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 915.676082][T12044] loop4: detected capacity change from 0 to 128 [ 915.678852][ T11] veth0_macvtap: left promiscuous mode [ 915.698876][ T5332] WARNING: CPU: 1 PID: 5332 at kernel/locking/mutex.c:587 __mutex_lock+0xc41/0xd70 [ 915.708307][ T5332] Modules linked in: [ 915.712332][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: kworker/1:6 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 915.722676][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 915.732887][ T5332] Workqueue: usb_hub_wq hub_event [ 915.737982][ T5332] RIP: 0010:__mutex_lock+0xc41/0xd70 [ 915.743641][ T5332] Code: 0f b6 04 20 84 c0 0f 85 18 01 00 00 83 3d 36 20 49 04 00 75 19 90 48 c7 c7 20 b9 0a 8c 48 c7 c6 c0 b9 0a 8c e8 00 0f 81 f5 90 <0f> 0b 90 90 90 e9 bd f4 ff ff 90 0f 0b 90 e9 cf f8 ff ff 90 0f 0b [ 915.763350][ T5332] RSP: 0018:ffffc900042c6980 EFLAGS: 00010246 [ 915.769505][ T5332] RAX: d4f75175f47b7c00 RBX: 0000000000000000 RCX: 0000000000100000 [ 915.777536][ T5332] RDX: ffffc90014a36000 RSI: 0000000000021314 RDI: 0000000000021315 [ 915.786151][ T5332] RBP: ffffc900042c6ad0 R08: ffffffff8155d7b2 R09: 1ffff110170e519a [ 915.794862][ T5332] R10: dffffc0000000000 R11: ffffed10170e519b R12: dffffc0000000000 [ 915.803058][ T5332] R13: ffff88804a9b4518 R14: 0000000000000000 R15: ffff88804a9b44e8 [ 915.811203][ T5332] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 915.820253][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 915.826919][ T5332] CR2: 00005555642ed808 CR3: 000000002d00e000 CR4: 00000000003526f0 [ 915.829202][ T11] veth1_vlan: left promiscuous mode [ 915.835093][ T5332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 915.841106][ T11] veth0_vlan: left promiscuous mode [ 915.848224][ T5332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 915.861666][ T5332] Call Trace: [ 915.864988][ T5332] [ 915.867960][ T5332] ? __warn+0x168/0x4e0 [ 915.872254][ T5332] ? __mutex_lock+0xc41/0xd70 [ 915.876986][ T5332] ? report_bug+0x2b3/0x500 [ 915.881612][ T5332] ? __mutex_lock+0xc41/0xd70 [ 915.886813][ T5332] ? handle_bug+0x60/0x90 [ 915.891754][ T5332] ? exc_invalid_op+0x1a/0x50 [ 915.896498][ T5332] ? asm_exc_invalid_op+0x1a/0x20 [ 915.901631][ T5332] ? __warn_printk+0x292/0x360 [ 915.906501][ T5332] ? __mutex_lock+0xc41/0xd70 [ 915.911298][ T5332] ? _dev_err+0x122/0x170 [ 915.915692][ T5332] ? uvc_alloc_new_entity+0x2c/0x6f0 [ 915.921079][ T5332] ? uvc_probe+0xbb4/0x98c0 [ 915.925633][ T5332] ? uvc_status_unregister+0x2f/0xe0 [ 915.931088][ T5332] ? __pfx__dev_err+0x10/0x10 [ 915.935844][ T5332] ? lockdep_init_map_type+0xa1/0x910 [ 915.941308][ T5332] ? __pfx___mutex_lock+0x10/0x10 [ 915.946379][ T5332] uvc_status_unregister+0x2f/0xe0 [ 915.951585][ T5332] uvc_unregister_video+0xeb/0x1c0 [ 915.956735][ T5332] uvc_probe+0x9135/0x98c0 [ 915.961261][ T5332] ? mark_lock+0x9a/0x360 [ 915.966132][ T5332] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 915.972203][ T5332] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 915.978207][ T5332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 915.984757][ T5332] usb_probe_interface+0x645/0xbb0 [ 915.990496][ T5332] ? __pfx_usb_probe_interface+0x10/0x10 [ 915.996231][ T5332] really_probe+0x2b8/0xad0 [ 916.001391][ T5332] __driver_probe_device+0x1a2/0x390 [ 916.006814][ T5332] driver_probe_device+0x50/0x430 [ 916.012068][ T5332] __device_attach_driver+0x2d6/0x530 [ 916.017559][ T5332] bus_for_each_drv+0x24e/0x2e0 [ 916.022633][ T5332] ? __pfx___device_attach_driver+0x10/0x10 [ 916.028652][ T5332] ? __pfx_bus_for_each_drv+0x10/0x10 [ 916.034225][ T5332] __device_attach+0x333/0x520 [ 916.039152][ T5332] ? __pfx_lock_release+0x10/0x10 [ 916.044269][ T5332] ? __pfx___device_attach+0x10/0x10 [ 916.049767][ T5332] ? do_raw_spin_unlock+0x13c/0x8b0 [ 916.055101][ T5332] bus_probe_device+0x189/0x260 [ 916.060215][ T5332] device_add+0x856/0xbf0 [ 916.064658][ T5332] usb_set_configuration+0x1976/0x1fb0 [ 916.070274][ T5332] usb_generic_driver_probe+0x88/0x140 [ 916.075831][ T5332] usb_probe_device+0x1b8/0x380 [ 916.081048][ T5332] ? __pfx_usb_probe_device+0x10/0x10 [ 916.086511][ T5332] really_probe+0x2b8/0xad0 [ 916.091685][ T5332] __driver_probe_device+0x1a2/0x390 [ 916.097070][ T5332] driver_probe_device+0x50/0x430 [ 916.102796][ T5332] __device_attach_driver+0x2d6/0x530 [ 916.108295][ T5332] bus_for_each_drv+0x24e/0x2e0 [ 916.113337][ T5332] ? __pfx___device_attach_driver+0x10/0x10 [ 916.119377][ T5332] ? __pfx_bus_for_each_drv+0x10/0x10 [ 916.124879][ T5332] __device_attach+0x333/0x520 [ 916.130046][ T5332] ? __pfx___device_attach+0x10/0x10 [ 916.135455][ T5332] bus_probe_device+0x189/0x260 [ 916.140461][ T5332] device_add+0x856/0xbf0 [ 916.144949][ T5332] usb_new_device+0x104a/0x19a0 [ 916.150007][ T5332] ? __pfx_usb_new_device+0x10/0x10 [ 916.155314][ T5332] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.160672][ T5332] ? lockdep_hardirqs_on+0x99/0x150 [ 916.163430][T12044] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 916.165965][ T5332] hub_event+0x2d6d/0x5150 [ 916.178468][T12044] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 916.182585][ T5332] ? __pfx_hub_event+0x10/0x10 [ 916.182621][ T5332] ? __pfx_lock_acquire+0x10/0x10 [ 916.182645][ T5332] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 916.182683][ T5332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 916.237814][ T5332] ? process_scheduled_works+0x976/0x1850 [ 916.243672][ T5332] process_scheduled_works+0xa63/0x1850 [ 916.249318][ T5332] ? __pfx_process_scheduled_works+0x10/0x10 [ 916.255397][ T5332] ? assign_work+0x364/0x3d0 [ 916.260108][ T5332] worker_thread+0x870/0xd30 [ 916.264774][ T5332] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 916.270809][ T5332] ? __kthread_parkme+0x169/0x1d0 [ 916.276005][ T5332] ? __pfx_worker_thread+0x10/0x10 [ 916.281244][ T5332] kthread+0x2f0/0x390 [ 916.285361][ T5332] ? __pfx_worker_thread+0x10/0x10 [ 916.290636][ T5332] ? __pfx_kthread+0x10/0x10 [ 916.295288][ T5332] ret_from_fork+0x4b/0x80 [ 916.300319][ T5332] ? __pfx_kthread+0x10/0x10 [ 916.304958][ T5332] ret_from_fork_asm+0x1a/0x30 [ 916.310449][ T5332] [ 916.313515][ T5332] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 916.320820][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: kworker/1:6 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 916.331077][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 916.341150][ T5332] Workqueue: usb_hub_wq hub_event [ 916.346196][ T5332] Call Trace: [ 916.349510][ T5332] [ 916.352459][ T5332] dump_stack_lvl+0x241/0x360 [ 916.357186][ T5332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 916.362418][ T5332] ? __pfx__printk+0x10/0x10 [ 916.367030][ T5332] ? vscnprintf+0x5d/0x90 [ 916.371373][ T5332] panic+0x349/0x880 [ 916.375290][ T5332] ? __warn+0x177/0x4e0 [ 916.379470][ T5332] ? __pfx_panic+0x10/0x10 [ 916.383910][ T5332] ? ret_from_fork_asm+0x1a/0x30 [ 916.388868][ T5332] __warn+0x34b/0x4e0 [ 916.392861][ T5332] ? __mutex_lock+0xc41/0xd70 [ 916.397558][ T5332] report_bug+0x2b3/0x500 [ 916.401932][ T5332] ? __mutex_lock+0xc41/0xd70 [ 916.406627][ T5332] handle_bug+0x60/0x90 [ 916.410797][ T5332] exc_invalid_op+0x1a/0x50 [ 916.415310][ T5332] asm_exc_invalid_op+0x1a/0x20 [ 916.420172][ T5332] RIP: 0010:__mutex_lock+0xc41/0xd70 [ 916.425560][ T5332] Code: 0f b6 04 20 84 c0 0f 85 18 01 00 00 83 3d 36 20 49 04 00 75 19 90 48 c7 c7 20 b9 0a 8c 48 c7 c6 c0 b9 0a 8c e8 00 0f 81 f5 90 <0f> 0b 90 90 90 e9 bd f4 ff ff 90 0f 0b 90 e9 cf f8 ff ff 90 0f 0b [ 916.445287][ T5332] RSP: 0018:ffffc900042c6980 EFLAGS: 00010246 [ 916.451382][ T5332] RAX: d4f75175f47b7c00 RBX: 0000000000000000 RCX: 0000000000100000 [ 916.459363][ T5332] RDX: ffffc90014a36000 RSI: 0000000000021314 RDI: 0000000000021315 [ 916.467460][ T5332] RBP: ffffc900042c6ad0 R08: ffffffff8155d7b2 R09: 1ffff110170e519a [ 916.475439][ T5332] R10: dffffc0000000000 R11: ffffed10170e519b R12: dffffc0000000000 [ 916.483452][ T5332] R13: ffff88804a9b4518 R14: 0000000000000000 R15: ffff88804a9b44e8 [ 916.491458][ T5332] ? __warn_printk+0x292/0x360 [ 916.496254][ T5332] ? _dev_err+0x122/0x170 [ 916.500609][ T5332] ? uvc_alloc_new_entity+0x2c/0x6f0 [ 916.505911][ T5332] ? uvc_probe+0xbb4/0x98c0 [ 916.510434][ T5332] ? uvc_status_unregister+0x2f/0xe0 [ 916.515822][ T5332] ? __pfx__dev_err+0x10/0x10 [ 916.520519][ T5332] ? lockdep_init_map_type+0xa1/0x910 [ 916.525997][ T5332] ? __pfx___mutex_lock+0x10/0x10 [ 916.531049][ T5332] uvc_status_unregister+0x2f/0xe0 [ 916.536211][ T5332] uvc_unregister_video+0xeb/0x1c0 [ 916.541338][ T5332] uvc_probe+0x9135/0x98c0 [ 916.545776][ T5332] ? mark_lock+0x9a/0x360 [ 916.550125][ T5332] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 916.556125][ T5332] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 916.562035][ T5332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 916.568383][ T5332] usb_probe_interface+0x645/0xbb0 [ 916.573511][ T5332] ? __pfx_usb_probe_interface+0x10/0x10 [ 916.579154][ T5332] really_probe+0x2b8/0xad0 [ 916.583677][ T5332] __driver_probe_device+0x1a2/0x390 [ 916.589064][ T5332] driver_probe_device+0x50/0x430 [ 916.594103][ T5332] __device_attach_driver+0x2d6/0x530 [ 916.599507][ T5332] bus_for_each_drv+0x24e/0x2e0 [ 916.604387][ T5332] ? __pfx___device_attach_driver+0x10/0x10 [ 916.610308][ T5332] ? __pfx_bus_for_each_drv+0x10/0x10 [ 916.615711][ T5332] __device_attach+0x333/0x520 [ 916.620500][ T5332] ? __pfx_lock_release+0x10/0x10 [ 916.625533][ T5332] ? __pfx___device_attach+0x10/0x10 [ 916.630832][ T5332] ? do_raw_spin_unlock+0x13c/0x8b0 [ 916.636056][ T5332] bus_probe_device+0x189/0x260 [ 916.640939][ T5332] device_add+0x856/0xbf0 [ 916.645310][ T5332] usb_set_configuration+0x1976/0x1fb0 [ 916.650793][ T5332] usb_generic_driver_probe+0x88/0x140 [ 916.656299][ T5332] usb_probe_device+0x1b8/0x380 [ 916.661162][ T5332] ? __pfx_usb_probe_device+0x10/0x10 [ 916.666550][ T5332] really_probe+0x2b8/0xad0 [ 916.671093][ T5332] __driver_probe_device+0x1a2/0x390 [ 916.676413][ T5332] driver_probe_device+0x50/0x430 [ 916.681482][ T5332] __device_attach_driver+0x2d6/0x530 [ 916.686892][ T5332] bus_for_each_drv+0x24e/0x2e0 [ 916.691763][ T5332] ? __pfx___device_attach_driver+0x10/0x10 [ 916.697677][ T5332] ? __pfx_bus_for_each_drv+0x10/0x10 [ 916.703073][ T5332] __device_attach+0x333/0x520 [ 916.707991][ T5332] ? __pfx___device_attach+0x10/0x10 [ 916.713313][ T5332] bus_probe_device+0x189/0x260 [ 916.718193][ T5332] device_add+0x856/0xbf0 [ 916.722536][ T5332] usb_new_device+0x104a/0x19a0 [ 916.727417][ T5332] ? __pfx_usb_new_device+0x10/0x10 [ 916.732644][ T5332] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.737895][ T5332] ? lockdep_hardirqs_on+0x99/0x150 [ 916.743115][ T5332] hub_event+0x2d6d/0x5150 [ 916.747566][ T5332] ? __pfx_hub_event+0x10/0x10 [ 916.752343][ T5332] ? __pfx_lock_acquire+0x10/0x10 [ 916.757377][ T5332] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 916.763380][ T5332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 916.770004][ T5332] ? process_scheduled_works+0x976/0x1850 [ 916.775765][ T5332] process_scheduled_works+0xa63/0x1850 [ 916.781353][ T5332] ? __pfx_process_scheduled_works+0x10/0x10 [ 916.787357][ T5332] ? assign_work+0x364/0x3d0 [ 916.791966][ T5332] worker_thread+0x870/0xd30 [ 916.796579][ T5332] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 916.802492][ T5332] ? __kthread_parkme+0x169/0x1d0 [ 916.807630][ T5332] ? __pfx_worker_thread+0x10/0x10 [ 916.812780][ T5332] kthread+0x2f0/0x390 [ 916.816869][ T5332] ? __pfx_worker_thread+0x10/0x10 [ 916.821999][ T5332] ? __pfx_kthread+0x10/0x10 [ 916.826602][ T5332] ret_from_fork+0x4b/0x80 [ 916.831029][ T5332] ? __pfx_kthread+0x10/0x10 [ 916.835630][ T5332] ret_from_fork_asm+0x1a/0x30 [ 916.840416][ T5332] [ 916.843844][ T5332] Kernel Offset: disabled [ 916.848193][ T5332] Rebooting in 86400 seconds..