last executing test programs: 2m50.912677949s ago: executing program 2 (id=51): r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa4000061) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setstatus(r6, 0x4, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) splice(r5, 0x0, r6, 0x0, 0x7, 0x9) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m48.13613805s ago: executing program 2 (id=55): bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf4", 0x8a}], 0x5}], 0x1, 0x4814) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 2m46.503720264s ago: executing program 2 (id=57): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m43.126347454s ago: executing program 2 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") creat(0x0, 0x0) 2m42.05971s ago: executing program 2 (id=67): bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf4", 0x8a}], 0x5}], 0x1, 0x4814) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 2m40.892798917s ago: executing program 2 (id=69): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_clone(0x12002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc8d4cb3927ebe405e97559a6a544452a6b87a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000001f0e1e64122d378ac92e69c80e9b46371dd7c97ae827914012c8c1a83723f48dc5abeb42148c6261e17cee82f3f163f49bf56193cc0f2fdc86a2ec04a6204542910e33203d96c2bbb7a0c692fd46a985d3308d3eed87fa3f73beaf2bef65cccdefe69eaa978e14bd87779b3da9638a03946dcfee77a96517"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) wait4(0x0, 0x0, 0x1000000, &(0x7f0000000380)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2m23.771063531s ago: executing program 32 (id=69): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_clone(0x12002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc8d4cb3927ebe405e97559a6a544452a6b87a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000001f0e1e64122d378ac92e69c80e9b46371dd7c97ae827914012c8c1a83723f48dc5abeb42148c6261e17cee82f3f163f49bf56193cc0f2fdc86a2ec04a6204542910e33203d96c2bbb7a0c692fd46a985d3308d3eed87fa3f73beaf2bef65cccdefe69eaa978e14bd87779b3da9638a03946dcfee77a96517"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) wait4(0x0, 0x0, 0x1000000, &(0x7f0000000380)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1m1.828697255s ago: executing program 5 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) syz_pidfd_open(r0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prlimit64(r4, 0xa, &(0x7f00000001c0)={0x7fffffff, 0x1}, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$AUDIT_USER(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xd4, 0x3ed, 0x20, 0x70bd26, 0x25dfdbfb, "7f38ea14473e094d8f1dcc8145c88489aebcc30bc1235010f1cbb711ab54d83b2a518fe885b12fd3d6c7f211bfb521ec76edf896e74399e0dd5cdaa1db0a4705c6e7d00e86f198227851540cef9b259ce9f449a3e7fdd4ec1322d699d44c7bfb9f16e8e35806fa699711deffd7d193c9b2666b4b6275458a196ba9707546c7d6df47bdf4017ca21464d6412b7d1b505c3d6378b26a86086e36589f4684a8f465c6da1eb73203ee89dc91916c781072a703918a6264316251578553364997f879444f", ["", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 54.932358527s ago: executing program 5 (id=282): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4) close(r5) r6 = openat(0xffffffffffffff9c, 0x0, 0x641, 0x0) flock(r6, 0x2) flock(0xffffffffffffffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x10000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x2, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}, {0x1, 0x6, 0x4}]}) 50.62960376s ago: executing program 5 (id=295): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) 48.727552059s ago: executing program 5 (id=301): mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, 0x0, r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c646973636172642c636865636b3d7374726963742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e39352c757365667265652c757466383d312c00f919a0fcc7601e2839a4cdeb811f202b12b52250986b6c58733273d7bcd7421b35fcf85c4503caace91f7a52eacc7502"], 0x0, 0x274, &(0x7f0000000780)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x1000) 47.848316762s ago: executing program 5 (id=306): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 44.313631174s ago: executing program 5 (id=311): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.440241717s ago: executing program 33 (id=311): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.139678737s ago: executing program 0 (id=365): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) 19.817334737s ago: executing program 0 (id=366): pipe(&(0x7f00000001c0)) r0 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)=' ', 0x5dc, 0x20000840, &(0x7f00000002c0)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 19.57300501s ago: executing program 0 (id=368): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ftruncate(0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltclass={0x48, 0x29, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0x6, 0xa}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x96}}, @TCA_RATE={0x6, 0x5, {0x57, 0x7a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x41) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fanotify_init(0x202, 0x0) fanotify_mark(r0, 0x2, 0x48000014, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a0000000000000000000000ff9774261525b9f33c3371e21c2119ce09ffe0000002ff02000000000000000000000000000102009078000005006050835900000000fc01000000000000"], 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000203010100000000000000000000001008000100010000150800034000000008"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00') 18.461590887s ago: executing program 4 (id=373): r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0xa4000061) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setstatus(r6, 0x4, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) splice(r5, 0x0, r6, 0x0, 0x7, 0x9) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="611568000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.988783059s ago: executing program 4 (id=376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) epoll_create(0x401) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="000000000007fe0000007b4d91da391d26c68af8ff0000000006a200000000000007020000f8ffbfaf2f0efc249bf00000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000d06000)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES8=r2], 0xfc}, 0x1, 0x0, 0x0, 0x34000815}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) r8 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x20) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 13.375746882s ago: executing program 4 (id=379): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) 12.85362344s ago: executing program 4 (id=380): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x0, 0xffffffffffffffff]}}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 12.707260932s ago: executing program 0 (id=382): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") creat(&(0x7f0000000400)='./bus\x00', 0x2c) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x3ff, 0x0, 0x0, 0x3, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000001800004faa2ad9c084ba001000", "036c47c6780820040000549ba197fc09000000000000000100002a00ffffffffffffffff0000ecffe8f2000000100000000000000000000000000000006e00", "b7fdbd7b0c3e208220000100b9000000000000000000f0ffa1c8fff2ff00", [0x7, 0x1000000000000000]}) 12.223450449s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) creat(&(0x7f0000000000)='./file0\x00', 0x71) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x2, 0x104, 0x2}) 11.099280086s ago: executing program 0 (id=386): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xff7f}}, 0x20}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) 10.751503681s ago: executing program 4 (id=387): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000480), &(0x7f0000000540), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}]}, 0x2c}], 0x1}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a152412"], 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r1, 0x4, r0}, 0x10) 9.821833435s ago: executing program 34 (id=387): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000480), &(0x7f0000000540), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}]}, 0x2c}], 0x1}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a152412"], 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r1, 0x4, r0}, 0x10) 9.319082462s ago: executing program 0 (id=393): mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r3, &(0x7f0000000140)=""/194, 0xc2) socket$nl_netfilter(0x10, 0x3, 0xc) 8.214934979s ago: executing program 35 (id=393): mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r3, &(0x7f0000000140)=""/194, 0xc2) socket$nl_netfilter(0x10, 0x3, 0xc) 5.259557582s ago: executing program 1 (id=406): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, &(0x7f0000000440)) 5.108737955s ago: executing program 1 (id=408): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x2, @in=@empty, 0x10000000, 0x4}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}, 0x72d}], 0x1, 0x2000000022, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 4.783309219s ago: executing program 1 (id=409): r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0xa4000061) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setstatus(r7, 0x4, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) splice(r6, 0x0, r7, 0x0, 0x7, 0x9) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.778827869s ago: executing program 3 (id=410): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) 4.448006414s ago: executing program 3 (id=411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000003c0)={0x80004011}) sendmmsg$inet(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x1) 4.295658626s ago: executing program 3 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x88) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x2, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100d}, 0x43) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000003f, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.085817435s ago: executing program 1 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000008, 0x7, 0x80000001, 0x8001, 0x4}]}) 3.034334995s ago: executing program 3 (id=414): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x50085) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r4, 0x1000000) 1.907729202s ago: executing program 3 (id=415): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x176, &(0x7f00000005c0)="$eJzskj9O80AQxd/azp/vKxBIVGmIRAShgDgOIEQDZeipqIgcEyIcIHEkSJTCCKEUFIiSE+QaSFyABnGA1CkiamS09thacwXmV+TtvJ3ZHU/23Ot6OQDf85GNQwAIoGNBA7EiIp2R80z6QfpEee+Ud0T+PWnBGwwvGq7r9Ir7RSylDABfoZdY3sGdhll41Od8ZMvFqWwpCALpNQGZDjVHB9BVcgoGsAxAR5DkGABksA6g0u9cV7zBcLPdabSclnNpWbVdc9s0d6zKWdt1zOhXKFfEw5C6AUDO65+ynwHwQEn/kUYordG+UGuzygzLq+laTamNVeD1hLbtHC3kCI6xhjyAG18obik8xUD4SXUI6BRUDaW/6K58uLFlX7nNMQREXDaBkZxRnSKTBJYa1Pb8uO0xaYm0Tjohnf56WvGTMcL/7ZGisg9kcdvo93tVOaRolXhW4lmLvjoweeuLlv64Nw0MwzAMwzAMwzB/nZ8AAAD//4Q2eIA=") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e20, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x2, 0x800000000001}, {0xfd29, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x200000, 0x33}, 0x0, @in=@loopback, 0x3502, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1.814540513s ago: executing program 1 (id=416): syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRES32], 0x1, 0x1ef, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r3, 0x0, 0x0, 0x6c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket(0x10, 0x80002, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r5, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 822.393888ms ago: executing program 3 (id=417): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) fallocate(r0, 0x1, 0x400, 0x60) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400f4ff00800009040002010300010009210000000122f804090581034000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 0s ago: executing program 1 (id=418): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x6400, 0x4000000}, 0x28) kernel console output (not intermixed with test programs): 54] device bridge_slave_1 entered promiscuous mode [ 90.581639][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.599398][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.630863][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.710541][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.720709][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.730172][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.739681][ T4252] device bridge_slave_0 entered promiscuous mode [ 90.757632][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.765480][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.775933][ T4251] device bridge_slave_0 entered promiscuous mode [ 90.785146][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.794428][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.803060][ T4251] device bridge_slave_1 entered promiscuous mode [ 90.816694][ T4253] team0: Port device team_slave_0 added [ 90.827964][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.846544][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.854348][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.866215][ T4252] device bridge_slave_1 entered promiscuous mode [ 90.876428][ T4265] team0: Port device team_slave_0 added [ 90.902908][ T4253] team0: Port device team_slave_1 added [ 90.928631][ T4265] team0: Port device team_slave_1 added [ 90.962901][ T4254] team0: Port device team_slave_0 added [ 90.981054][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.993644][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.007133][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.026624][ T4254] team0: Port device team_slave_1 added [ 91.043112][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.063032][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.071515][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.100829][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.124568][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.131897][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.161162][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.197247][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.204952][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.234641][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.256010][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.263467][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.293298][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.317501][ T4251] team0: Port device team_slave_0 added [ 91.330898][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.338865][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.369812][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.390076][ T4252] team0: Port device team_slave_0 added [ 91.399900][ T4252] team0: Port device team_slave_1 added [ 91.408360][ T4251] team0: Port device team_slave_1 added [ 91.425063][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.432437][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.461896][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.504794][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 91.504810][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 91.557921][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.566494][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.584472][ T4256] Bluetooth: hci3: command 0x0409 tx timeout [ 91.595059][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 91.601602][ T4256] Bluetooth: hci2: command 0x0409 tx timeout [ 91.609983][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.632359][ T4265] device hsr_slave_0 entered promiscuous mode [ 91.641158][ T4265] device hsr_slave_1 entered promiscuous mode [ 91.649355][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.658118][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.688068][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.704445][ T4253] device hsr_slave_0 entered promiscuous mode [ 91.711955][ T4253] device hsr_slave_1 entered promiscuous mode [ 91.719705][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.728334][ T4253] Cannot create hsr debugfs directory [ 91.742160][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.750134][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.779492][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.797126][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.808330][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.837431][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.910606][ T4254] device hsr_slave_0 entered promiscuous mode [ 91.918168][ T4254] device hsr_slave_1 entered promiscuous mode [ 91.926250][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.935479][ T4254] Cannot create hsr debugfs directory [ 92.030770][ T4251] device hsr_slave_0 entered promiscuous mode [ 92.038768][ T4251] device hsr_slave_1 entered promiscuous mode [ 92.046343][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.054544][ T4251] Cannot create hsr debugfs directory [ 92.076682][ T4252] device hsr_slave_0 entered promiscuous mode [ 92.084682][ T4252] device hsr_slave_1 entered promiscuous mode [ 92.092858][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.101615][ T4252] Cannot create hsr debugfs directory [ 92.449357][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.462538][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.486262][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.497846][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.554857][ T4253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.572170][ T4253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.623746][ T4253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.675669][ T4253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.703183][ T4254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.742641][ T4254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.773159][ T4254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.818302][ T4254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.856065][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.871173][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.928748][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.945432][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.991020][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.077197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.088556][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.104452][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.158266][ T4252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.177827][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.190330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.201112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.212885][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.221378][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.239076][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.267036][ T4252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.282147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.292902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.303551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.312915][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.320967][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.331823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.343401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.376242][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.392180][ T4252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.403055][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.413272][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.422674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.436647][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.449362][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.473337][ T4252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.490035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.501597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.512344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.527222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.539119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.549960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.561377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.571593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.581786][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.589739][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.594517][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 93.600790][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.604006][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 93.618324][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.631787][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.651137][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.662624][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.671247][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 93.671295][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 93.671325][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 93.696015][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.763675][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.779791][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.790318][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.798560][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.808769][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.819817][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.831823][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.842828][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.855873][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.864652][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.875641][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.887668][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.897523][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.905410][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.916149][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.928846][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.959152][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.977314][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.996521][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.011038][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.022549][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.067969][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.078723][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.088914][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.101698][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.119480][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.137309][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.148077][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.158128][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.186570][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.199842][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.212341][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.241697][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.253230][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.262975][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.272875][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.282826][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.292254][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.302272][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.310817][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.326497][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.347260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.366532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.386623][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.405077][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.477232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.496225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.529181][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.537948][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.563288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.627935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.646260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.659652][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.667589][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.677797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.689389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.699454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.740908][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.764115][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.786497][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.806973][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.835611][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.857009][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.869749][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.885721][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.895162][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.911105][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.964541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.976491][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.984980][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.995948][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.006043][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.017082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.031920][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.041583][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.051055][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.061423][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.092481][ T4265] device veth0_vlan entered promiscuous mode [ 95.112502][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.148393][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.169077][ T4265] device veth1_vlan entered promiscuous mode [ 95.197424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.230274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.283486][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.291386][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.307337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.320491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.339485][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.347909][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.370285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.408530][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.420068][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.439804][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.448611][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.494554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.507418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.517917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.528139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.581129][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.611135][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.626049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.641988][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.665095][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 95.672278][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 95.711021][ T4265] device veth0_macvtap entered promiscuous mode [ 95.741433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.757416][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 95.757481][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 95.757513][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 95.805758][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.817515][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.829311][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.851881][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.860890][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.871910][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.892780][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.903559][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.921645][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.938698][ T4253] device veth0_vlan entered promiscuous mode [ 95.962841][ T4265] device veth1_macvtap entered promiscuous mode [ 95.985448][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.998610][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.009121][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.030998][ T4253] device veth1_vlan entered promiscuous mode [ 96.044664][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.066416][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.081060][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.090962][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.111003][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.156374][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.173618][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.190416][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.200771][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.218235][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.243526][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.283599][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.301111][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.311719][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.322242][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.349581][ T4253] device veth0_macvtap entered promiscuous mode [ 96.372689][ T4251] device veth0_vlan entered promiscuous mode [ 96.385210][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.409460][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.425636][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.438842][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.460231][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.478566][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.491000][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.516258][ T4253] device veth1_macvtap entered promiscuous mode [ 96.542415][ T4251] device veth1_vlan entered promiscuous mode [ 96.583417][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.593279][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.602166][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.616990][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.627647][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.638473][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.702143][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.713306][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.723585][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.756072][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.772135][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.796284][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.812384][ T4254] device veth0_vlan entered promiscuous mode [ 96.826000][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.836445][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.851772][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.863582][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.878497][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.890647][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.901122][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.912307][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.933141][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.961048][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.975599][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.989702][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.008342][ T4251] device veth0_macvtap entered promiscuous mode [ 97.032082][ T4251] device veth1_macvtap entered promiscuous mode [ 97.044685][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.053528][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.065020][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.076487][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.091642][ T4253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.102178][ T4253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.115338][ T4253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.128821][ T4253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.158606][ T4254] device veth1_vlan entered promiscuous mode [ 97.166296][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.186785][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.187587][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.211312][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.259845][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.260565][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.274758][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.291439][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.304499][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.317010][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.334801][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.365736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.376131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.394974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.405345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.416284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.436661][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.448237][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.461466][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.474649][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.488177][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.524931][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.537134][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.566102][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.577515][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.588798][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.599422][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.632786][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.645876][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.661290][ T4254] device veth0_macvtap entered promiscuous mode [ 97.671646][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.678757][ T952] cfg80211: failed to load regulatory.db [ 97.690028][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.702299][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.728946][ T4254] device veth1_macvtap entered promiscuous mode [ 97.745340][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 97.745552][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 97.783516][ T4252] device veth0_vlan entered promiscuous mode [ 97.824521][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.833441][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.841875][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 97.841916][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 97.848837][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 97.865638][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.872638][ T4339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.885287][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.916125][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.928628][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.983615][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.001406][ T4252] device veth1_vlan entered promiscuous mode [ 98.016790][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.046165][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.066617][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.078455][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.090432][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.106795][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.118848][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.131330][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.153274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.168766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.178434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.188819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.225592][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.266326][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.277698][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.290300][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.301102][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.316669][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.319069][ T4343] loop2: detected capacity change from 0 to 512 [ 98.340507][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.367980][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.379253][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.389672][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.401409][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.423360][ T4343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.439813][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.454144][ T4343] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.491274][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.567765][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.578968][ T4348] loop3: detected capacity change from 0 to 128 [ 98.653454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.680787][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.683723][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.728827][ T4252] device veth0_macvtap entered promiscuous mode [ 98.764898][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.789233][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.855878][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 98.869702][ T4252] device veth1_macvtap entered promiscuous mode [ 98.920395][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.975238][ T4353] loop3: detected capacity change from 0 to 1024 [ 98.983607][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.996691][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.002751][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.012981][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.034372][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.047130][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.060403][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.093173][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.134864][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.166930][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.190142][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.195305][ T4337] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.199797][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.246230][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.281330][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.299147][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.311771][ T4353] loop3: detected capacity change from 0 to 2048 [ 99.320415][ T4337] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.322942][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.342256][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.386000][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.406885][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.411810][ T4357] loop2: detected capacity change from 0 to 164 [ 99.420022][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.438901][ T4353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.475864][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.511882][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.525318][ T4357] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.693811][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.749145][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.761604][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.776658][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.796338][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.821570][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.124750][ T4252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.138747][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.167501][ T4252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.178671][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.201249][ T4252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.208394][ T4363] loop2: detected capacity change from 0 to 512 [ 100.214035][ T4252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.400594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.437929][ T4363] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 100.471503][ T4363] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 100.510683][ T4363] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 100.589809][ T4363] EXT4-fs (loop2): 1 truncate cleaned up [ 100.638480][ T4363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.648888][ T4368] loop0: detected capacity change from 0 to 2048 [ 100.715773][ T4368] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 100.759681][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.802328][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.886313][ T4368] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.937881][ T4373] loop4: detected capacity change from 0 to 16 [ 101.016712][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.115447][ T4375] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 101.135038][ T4375] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 101.246053][ T4373] erofs: (device loop4): mounted with root inode @ nid 36. [ 101.652097][ T4373] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.738624][ T4373] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 101.837186][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 101.943849][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.963279][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.994598][ T26] audit: type=1800 audit(1749322385.601:2): pid=4368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 102.040854][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.106118][ T26] audit: type=1800 audit(1749322385.601:3): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 102.172217][ T4380] loop2: detected capacity change from 0 to 1024 [ 102.676115][ T4388] hub 8-0:1.0: USB hub found [ 102.685062][ T4388] hub 8-0:1.0: 1 port detected [ 104.968174][ T4394] Zero length message leads to an empty skb [ 105.121804][ T4370] loop3: detected capacity change from 0 to 2048 [ 105.157848][ T4401] loop0: detected capacity change from 0 to 128 [ 105.228131][ T4402] loop4: detected capacity change from 0 to 164 [ 105.318770][ T4370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.355542][ T4408] loop2: detected capacity change from 0 to 128 [ 105.588249][ T26] audit: type=1800 audit(1749322389.201:4): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 106.392146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.402183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.423825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.433337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.443520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.455355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.466340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.475984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.489332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.499025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 106.907990][ T4422] loop0: detected capacity change from 0 to 512 [ 106.936515][ T4422] EXT4-fs (loop0): Test dummy encryption mode enabled [ 106.991145][ T4422] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.069337][ T4369] EXT4-fs (loop3): unmounting filesystem. [ 107.111236][ T4422] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.145575][ T4428] 9pnet_fd: p9_fd_create_unix (4428): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.240036][ T4422] EXT4-fs (loop0): 1 truncate cleaned up [ 107.295896][ T3688] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 107.519823][ T4422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.640550][ T3688] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.664521][ T3688] usb 5-1: config 1 interface 0 has no altsetting 0 [ 107.698957][ T3688] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.40 [ 107.728832][ T3688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.738949][ T3688] usb 5-1: Product: syz [ 107.743438][ T3688] usb 5-1: Manufacturer: syz [ 107.752352][ T3688] usb 5-1: SerialNumber: syz [ 108.041082][ T3688] usbhid 5-1:1.0: can't add hid device: -22 [ 108.053534][ T3688] usbhid: probe of 5-1:1.0 failed with error -22 [ 108.088913][ T3688] usb 5-1: USB disconnect, device number 2 [ 108.142121][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 109.104327][ T4456] loop2: detected capacity change from 0 to 512 [ 112.704113][ T4491] loop3: detected capacity change from 0 to 512 [ 112.746233][ T4491] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.503800][ C0] sched: RT throttling activated [ 114.507888][ T4491] EXT4-fs: failed to create workqueue [ 114.519736][ T4491] EXT4-fs (loop3): mount failed [ 116.537855][ T4508] loop2: detected capacity change from 0 to 1024 [ 116.694983][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.860948][ T4508] EXT4-fs (loop2): shut down requested (1) [ 118.775168][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 120.270955][ T4536] loop1: detected capacity change from 0 to 512 [ 121.520705][ T4536] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.940088][ T4536] EXT4-fs: error -4 creating inode table initialization thread [ 122.948481][ T4536] EXT4-fs (loop1): mount failed [ 123.365014][ T4542] loop2: detected capacity change from 0 to 512 [ 123.472788][ T4542] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 123.525088][ T4542] EXT4-fs (loop2): invalid journal inode [ 123.566612][ T4542] EXT4-fs (loop2): can't get journal size [ 124.092066][ T4542] EXT4-fs (loop2): 1 truncate cleaned up [ 124.137839][ T4542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.812880][ T4555] loop1: detected capacity change from 0 to 512 [ 124.879261][ T4555] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.931722][ T4555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.951670][ T4555] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.964242][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 125.112560][ T4555] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 125.161343][ T4555] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.236238][ T4567] loop2: detected capacity change from 0 to 256 [ 125.280149][ T4567] ======================================================= [ 125.280149][ T4567] WARNING: The mand mount option has been deprecated and [ 125.280149][ T4567] and is ignored by this kernel. Remove the mand [ 125.280149][ T4567] option from the mount to silence this warning. [ 125.280149][ T4567] ======================================================= [ 125.281393][ T4555] EXT4-fs (loop1): mount failed [ 127.752266][ T4597] loop2: detected capacity change from 0 to 512 [ 127.813063][ T4597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.941090][ T4597] EXT4-fs (loop2): 1 truncate cleaned up [ 128.011431][ T4597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 129.838902][ T4611] loop0: detected capacity change from 0 to 512 [ 129.885289][ T4611] EXT4-fs: Ignoring removed nobh option [ 129.933282][ T4611] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.72: invalid indirect mapped block 256 (level 2) [ 129.994651][ T4611] EXT4-fs (loop0): 2 truncates cleaned up [ 130.030230][ T4611] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.933906][ T4599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 132.403649][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 137.077093][ T4656] loop4: detected capacity change from 0 to 512 [ 137.106548][ T4656] EXT4-fs: Ignoring removed nobh option [ 137.181706][ T4656] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.85: invalid indirect mapped block 256 (level 2) [ 137.198072][ T4656] EXT4-fs (loop4): 2 truncates cleaned up [ 137.204390][ T4656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.626250][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.632967][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.264158][ T4659] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 139.366269][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 140.859845][ T4677] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 141.898406][ T4687] loop0: detected capacity change from 0 to 512 [ 141.999058][ T4687] ext4: Unknown parameter 'hash' [ 145.039403][ T4704] loop3: detected capacity change from 0 to 512 [ 145.086366][ T4704] EXT4-fs: Ignoring removed nobh option [ 145.232942][ T4704] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.99: invalid indirect mapped block 256 (level 2) [ 145.265275][ T4704] EXT4-fs (loop3): 2 truncates cleaned up [ 145.271071][ T4704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.046482][ T4715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.514433][ T4708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 148.055983][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 148.455437][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.120291][ T4256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.252716][ T4256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.270606][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.278302][ T4256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.286105][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.695013][ T4595] EXT4-fs (loop2): unmounting filesystem. [ 149.702351][ T4732] loop3: detected capacity change from 0 to 512 [ 149.811297][ T4732] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 149.813435][ T4736] loop0: detected capacity change from 0 to 512 [ 150.002961][ T4732] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 150.020033][ T4732] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 150.815269][ T4732] EXT4-fs (loop3): 1 truncate cleaned up [ 150.835551][ T4736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 150.854003][ T4736] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.877058][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.262367][ T4750] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 151.271011][ T4750] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 151.443915][ T4269] Bluetooth: hci5: command 0x0409 tx timeout [ 152.206266][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 152.249101][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 152.507598][ T4376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.647090][ T4724] chnl_net:caif_netlink_parms(): no params data found [ 152.737241][ T4762] loop3: detected capacity change from 0 to 512 [ 152.763227][ T4762] EXT4-fs: Ignoring removed nobh option [ 152.793715][ T4376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.852081][ T4764] loop0: detected capacity change from 0 to 512 [ 152.863646][ T4762] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.114: invalid indirect mapped block 256 (level 2) [ 153.034318][ T4762] EXT4-fs (loop3): 2 truncates cleaned up [ 153.044014][ T4764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.087002][ T4376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.122512][ T4764] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.136468][ T4762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 153.341604][ T4764] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0000] [ 153.506196][ T4269] Bluetooth: hci5: command 0x041b tx timeout [ 154.668470][ T4764] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 154.689312][ T4764] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.706113][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 154.741143][ T4764] EXT4-fs (loop0): mount failed [ 154.772304][ T4376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.857240][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.874072][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.913362][ T4724] device bridge_slave_0 entered promiscuous mode [ 155.038155][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.055603][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.104075][ T4724] device bridge_slave_1 entered promiscuous mode [ 155.801889][ T4269] Bluetooth: hci5: command 0x040f tx timeout [ 156.520429][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.665588][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.688614][ T4784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.119'. [ 156.837826][ T4789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.119'. [ 156.979592][ T4724] team0: Port device team_slave_0 added [ 157.023159][ T4724] team0: Port device team_slave_1 added [ 157.216281][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.223374][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.823010][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.976106][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.990614][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.123547][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.143899][ T4269] Bluetooth: hci5: command 0x0419 tx timeout [ 158.213996][ T4311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 158.324069][ T4821] loop1: detected capacity change from 0 to 256 [ 158.414046][ T4311] usb 5-1: Using ep0 maxpacket: 16 [ 158.426754][ T4311] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 158.477863][ T4821] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 158.520359][ T4311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.561442][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.617996][ T4311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.676370][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.677303][ T4724] device hsr_slave_0 entered promiscuous mode [ 158.734044][ T4311] usb 5-1: Product: syz [ 158.738271][ T4311] usb 5-1: Manufacturer: syz [ 158.738299][ T4724] device hsr_slave_1 entered promiscuous mode [ 158.742868][ T4311] usb 5-1: SerialNumber: syz [ 158.761967][ T4724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.796782][ T4724] Cannot create hsr debugfs directory [ 158.857372][ T4827] tipc: Started in network mode [ 158.862496][ T4827] tipc: Node identity 9e5f10a6f59c, cluster identity 4711 [ 158.884194][ T4827] tipc: Enabled bearer , priority 0 [ 159.231673][ T4311] usb 5-1: 0:2 : does not exist [ 159.955158][ T4297] tipc: Node number set to 1807945894 [ 160.062847][ T4824] tipc: Disabling bearer [ 160.380847][ T26] audit: type=1326 audit(1749322443.991:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.4.125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faeeab8e929 code=0x0 [ 160.563169][ T4724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.658089][ T4724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.683179][ T4724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.844652][ T4724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.648131][ T4311] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 161.652509][ T4865] loop1: detected capacity change from 0 to 512 [ 161.829406][ T4865] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 161.831983][ T4311] usb 5-1: USB disconnect, device number 3 [ 161.864642][ T4376] device hsr_slave_0 left promiscuous mode [ 161.992566][ T4873] loop4: detected capacity change from 0 to 512 [ 162.008302][ T4865] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 162.010655][ T4873] EXT4-fs: Ignoring removed orlov option [ 162.028806][ T4376] device hsr_slave_1 left promiscuous mode [ 162.065100][ T4876] loop3: detected capacity change from 0 to 128 [ 162.084110][ T4865] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 162.094752][ T4873] EXT4-fs: Ignoring removed bh option [ 162.094934][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.117044][ T4376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.132364][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.174448][ T4865] EXT4-fs (loop1): 1 truncate cleaned up [ 162.180227][ T4865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.199766][ T4873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.205393][ T4376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.270368][ T4873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.298255][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.355427][ T4873] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.139: casefold flag without casefold feature [ 162.399221][ T4873] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.139: couldn't read orphan inode 15 (err -117) [ 162.602157][ T4873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 162.630663][ T4376] device bridge_slave_1 left promiscuous mode [ 162.672847][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.706203][ T4884] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 162.715748][ T4884] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 163.247476][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 163.482336][ T4376] device bridge_slave_0 left promiscuous mode [ 163.499566][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.970502][ T4376] device veth1_macvtap left promiscuous mode [ 163.978623][ T4376] device veth0_macvtap left promiscuous mode [ 163.990230][ T4376] device veth1_vlan left promiscuous mode [ 163.998077][ T4376] device veth0_vlan left promiscuous mode [ 164.067147][ T4887] overlayfs: missing 'lowerdir' [ 164.240371][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 165.001191][ T4913] loop0: detected capacity change from 0 to 512 [ 165.023215][ T4913] ext4: Unknown parameter 'measure' [ 165.401461][ T4916] loop0: detected capacity change from 0 to 8 [ 166.694596][ T4376] team0 (unregistering): Port device team_slave_1 removed [ 166.769765][ T4376] team0 (unregistering): Port device team_slave_0 removed [ 166.885939][ T4376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.987686][ T4376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.131032][ T4376] bond0 (unregistering): Released all slaves [ 168.225099][ T4897] tipc: Started in network mode [ 168.230037][ T4897] tipc: Node identity 1a44ff8a822c, cluster identity 4711 [ 168.237483][ T4897] tipc: Enabled bearer , priority 0 [ 168.276333][ T4899] device syzkaller0 entered promiscuous mode [ 168.284142][ T4899] tipc: Resetting bearer [ 168.415885][ T4929] loop3: detected capacity change from 0 to 512 [ 168.459841][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.491349][ T4929] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 168.506409][ T4893] tipc: Resetting bearer [ 168.608379][ T4929] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 168.665578][ T4929] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 168.701704][ T4929] EXT4-fs (loop3): 1 truncate cleaned up [ 168.716162][ T4929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.856968][ T4937] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 169.964064][ T4937] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 170.584029][ T14] tipc: Node number set to 2557017994 [ 170.764268][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 170.901886][ T4942] process 'syz.4.154' launched './file0' with NULL argv: empty string added [ 171.118474][ T4947] loop3: detected capacity change from 0 to 1024 [ 172.243037][ T4961] loop3: detected capacity change from 0 to 2048 [ 172.354938][ T4961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 172.451077][ T4965] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.158: bg 0: block 329: padding at end of block bitmap is not set [ 172.707159][ T26] audit: type=1800 audit(1749322456.321:6): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 174.025742][ T4978] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 174.779158][ T4980] loop0: detected capacity change from 0 to 512 [ 174.779585][ T4893] tipc: Disabling bearer [ 174.821604][ T4980] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 174.836466][ T4980] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 174.847128][ T4980] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 174.869520][ T4980] EXT4-fs (loop0): 1 truncate cleaned up [ 174.875961][ T4980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.901837][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.965013][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.995453][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.090788][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.154371][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.484030][ T4988] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 175.584110][ T4988] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 176.186891][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.194082][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.205712][ T4989] 9pnet_fd: p9_fd_create_unix (4989): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 176.236983][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.400774][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.416930][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 176.424107][ T952] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 176.435459][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.442632][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.534272][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.594068][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.620534][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.635498][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.652842][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.673882][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 176.692951][ T952] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 176.711198][ T952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.738564][ T952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.761345][ T952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.791106][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.818957][ T952] usb 2-1: Product: syz [ 176.833442][ T952] usb 2-1: Manufacturer: syz [ 176.840772][ T952] usb 2-1: SerialNumber: syz [ 177.036398][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.050351][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.080692][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.092089][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.123079][ T5002] 9pnet_fd: Insufficient options for proto=fd [ 177.143000][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.219348][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.329303][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.514574][ T952] usb 2-1: 0:2 : does not exist [ 177.715412][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.189119][ T26] audit: type=1326 audit(1749322461.801:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.1.164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08f9b8e929 code=0x0 [ 178.965056][ T5031] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 179.858102][ T952] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 179.874470][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.881912][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.954313][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.037809][ T952] usb 2-1: USB disconnect, device number 2 [ 180.243577][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 180.602004][ T5046] loop3: detected capacity change from 0 to 512 [ 180.609765][ T5045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.779417][ T5046] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 180.855761][ T5046] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 180.928364][ T5046] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 180.947719][ T5046] EXT4-fs (loop3): 1 truncate cleaned up [ 180.967118][ T5046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 181.285862][ T5061] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 181.294833][ T5061] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 181.816484][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 182.196312][ T5071] 9pnet_fd: Insufficient options for proto=fd [ 183.505610][ T5080] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 184.490472][ T5087] loop3: detected capacity change from 0 to 2048 [ 184.520398][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.533913][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.562675][ T5087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.605610][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.624256][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.634505][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.667246][ T4724] device veth0_vlan entered promiscuous mode [ 184.684590][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.696527][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.731379][ T4724] device veth1_vlan entered promiscuous mode [ 184.823656][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.833932][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 184.840864][ T22] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 184.865252][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.873369][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.900772][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.965095][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.039066][ T4724] device veth0_macvtap entered promiscuous mode [ 185.052546][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.065394][ T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.075253][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.083272][ T22] usb 2-1: Product: syz [ 185.087505][ T22] usb 2-1: Manufacturer: syz [ 185.092149][ T22] usb 2-1: SerialNumber: syz [ 185.110702][ T4724] device veth1_macvtap entered promiscuous mode [ 185.778664][ T22] usb 2-1: 0:2 : does not exist [ 185.794221][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.919018][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.996514][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.020698][ T5107] loop3: detected capacity change from 0 to 512 [ 186.028938][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.072592][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.104360][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.115131][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.125884][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.134975][ T5107] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 186.136173][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.154796][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.167418][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.177236][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.196107][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.216348][ T5107] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 186.266076][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.273495][ T5107] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 186.287497][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.297596][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.312636][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.313112][ T5107] EXT4-fs (loop3): 1 truncate cleaned up [ 186.333472][ T5107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.343242][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.508894][ T26] audit: type=1326 audit(1749322470.121:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08f9b8e929 code=0x0 [ 186.569490][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.580215][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.594321][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.606770][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.626037][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.687907][ T5113] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 186.696727][ T5113] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 187.156686][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.175095][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 187.189075][ T4724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.201780][ T4724] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.219609][ T4724] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.232120][ T4724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.699886][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.710453][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.763357][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.791523][ T5119] netlink: 'syz.3.190': attribute type 4 has an invalid length. [ 187.903542][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.931921][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.440647][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.491188][ T22] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 188.572964][ T22] usb 2-1: USB disconnect, device number 3 [ 188.657210][ T5124] loop1: detected capacity change from 0 to 128 [ 188.888521][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.146410][ T5135] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 190.243828][ T5141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'. [ 193.291736][ T5161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 193.300779][ T5161] netlink: 64 bytes leftover after parsing attributes in process `syz.1.199'. [ 193.863432][ T5166] loop1: detected capacity change from 0 to 512 [ 193.916371][ T5166] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.020885][ T5166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.064206][ T5166] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.231807][ T5166] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 194.279785][ T5166] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.373138][ T5166] EXT4-fs (loop1): mount failed [ 194.386890][ T5181] loop5: detected capacity change from 0 to 512 [ 194.405574][ T5181] EXT4-fs: Ignoring removed orlov option [ 194.631038][ T5181] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 194.654033][ T5181] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.722019][ T5201] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 196.477123][ T4724] EXT4-fs (loop5): unmounting filesystem. [ 196.786736][ T26] audit: type=1326 audit(1749322480.401:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa198e929 code=0x7ffc0000 [ 196.881163][ T26] audit: type=1326 audit(1749322480.401:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0fa198e929 code=0x7ffc0000 [ 198.836372][ T26] audit: type=1326 audit(1749322480.401:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa198e929 code=0x7ffc0000 [ 198.934374][ T5226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 198.943299][ T5226] netlink: 64 bytes leftover after parsing attributes in process `syz.0.213'. [ 199.531787][ T26] audit: type=1326 audit(1749322480.421:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa198e929 code=0x7ffc0000 [ 199.561617][ T5235] loop3: detected capacity change from 0 to 512 [ 199.706035][ T5235] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.719754][ T5236] loop1: detected capacity change from 0 to 2048 [ 199.727869][ T26] audit: type=1326 audit(1749322480.421:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa198e929 code=0x7ffc0000 [ 199.823099][ T5235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.866805][ T5236] loop1: p1 < > p3 [ 199.874664][ T26] audit: type=1326 audit(1749322480.421:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa198e929 code=0x7ffc0000 [ 199.909178][ T5235] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.980483][ T5236] loop1: p3 size 134217728 extends beyond EOD, truncated [ 199.989513][ T26] audit: type=1326 audit(1749322480.421:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa198e929 code=0x7ffc0000 [ 200.011394][ T5235] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 200.023097][ T5235] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.039031][ T5235] EXT4-fs (loop3): mount failed [ 200.066659][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.073075][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.087743][ T3624] loop1: p1 < > p3 [ 200.257611][ T3624] loop1: p3 size 134217728 extends beyond EOD, truncated [ 201.343110][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 201.499431][ T4366] udevd[4366]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 201.644428][ T5257] loop3: detected capacity change from 0 to 164 [ 201.750611][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 201.778840][ T5257] Unable to read rock-ridge attributes [ 202.145931][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 202.696908][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 202.722863][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 203.114866][ T5267] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 205.241813][ T5274] 9pnet_fd: Insufficient options for proto=fd [ 206.023815][ T4318] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 206.793859][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 206.801037][ T4318] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 206.833912][ T4318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.845336][ T5278] xt_CT: No such helper "pptp" [ 206.903793][ T4318] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.070476][ T4318] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.094043][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.224361][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 207.233285][ T5297] netlink: 64 bytes leftover after parsing attributes in process `syz.0.227'. [ 207.243801][ T4318] usb 5-1: Product: syz [ 207.248070][ T4318] usb 5-1: Manufacturer: syz [ 207.252759][ T4318] usb 5-1: SerialNumber: syz [ 208.121278][ T5303] loop3: detected capacity change from 0 to 512 [ 208.310202][ T5303] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 208.332186][ T4318] usb 5-1: 0:2 : does not exist [ 208.396837][ T5303] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 208.523927][ T5303] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 208.596852][ T5303] EXT4-fs (loop3): 1 truncate cleaned up [ 208.622812][ T5303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 208.962992][ T5316] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 208.971590][ T5316] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 208.980459][ T26] audit: type=1326 audit(2000000003.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5273 comm="syz.4.223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faeeab8e929 code=0x0 [ 209.247600][ T5315] loop5: detected capacity change from 0 to 128 [ 209.736183][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 209.785806][ T5315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 209.847997][ T5315] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.943400][ T26] audit: type=1800 audit(2000000004.340:17): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.231" name="file2" dev="loop5" ino=13 res=0 errno=0 [ 210.097138][ T4724] EXT4-fs (loop5): unmounting filesystem. [ 210.330340][ T5324] loop0: detected capacity change from 0 to 1024 [ 210.375804][ T4318] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 210.414413][ T4318] usb 5-1: USB disconnect, device number 4 [ 210.464243][ T5324] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.676898][ T5332] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 211.534428][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.815538][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 211.901667][ T5339] 9pnet_fd: Insufficient options for proto=fd [ 212.445101][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 212.451177][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 212.457457][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 212.463477][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 212.928051][ T5346] loop0: detected capacity change from 0 to 164 [ 213.190226][ T5346] Unable to read rock-ridge attributes [ 213.228481][ T5346] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 213.503911][ T5356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.239'. [ 213.512964][ T5356] netlink: 64 bytes leftover after parsing attributes in process `syz.4.239'. [ 214.772550][ T5368] loop5: detected capacity change from 0 to 512 [ 214.912149][ T5368] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 214.934883][ T5368] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 215.020854][ T5368] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 215.054353][ T5368] EXT4-fs (loop5): 1 truncate cleaned up [ 215.073608][ T5368] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 215.322190][ T4297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 215.391221][ T5382] loop1: detected capacity change from 0 to 2048 [ 215.440960][ T5385] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 215.610387][ T4297] usb 4-1: Using ep0 maxpacket: 16 [ 216.310192][ T4297] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.338688][ T5382] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 216.379163][ T4297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.384122][ T5382] UDF-fs: Scanning with blocksize 512 failed [ 216.482597][ T5382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.505494][ T4297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.547616][ T4297] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.593352][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.623972][ T4297] usb 4-1: Product: syz [ 216.628197][ T4297] usb 4-1: Manufacturer: syz [ 216.652888][ T4297] usb 4-1: SerialNumber: syz [ 216.797452][ T4724] EXT4-fs (loop5): unmounting filesystem. [ 217.133521][ T4297] usb 4-1: 0:2 : does not exist [ 217.134528][ T5382] syz.1.247: attempt to access beyond end of device [ 217.134528][ T5382] loop1: rw=0, sector=2052, nr_sectors = 2 limit=2048 [ 217.362736][ T5382] Buffer I/O error on dev loop1, logical block 1026, async page read [ 217.374049][ T5382] syz.1.247: attempt to access beyond end of device [ 217.374049][ T5382] loop1: rw=0, sector=2054, nr_sectors = 2 limit=2048 [ 217.603944][ T5382] Buffer I/O error on dev loop1, logical block 1027, async page read [ 217.681532][ T5402] netlink: 16 bytes leftover after parsing attributes in process `syz.5.252'. [ 217.690647][ T5402] netlink: 64 bytes leftover after parsing attributes in process `syz.5.252'. [ 218.373819][ T26] audit: type=1326 audit(2000000012.750:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.3.246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4109b8e929 code=0x0 [ 218.533604][ T42] kworker/u4:3: attempt to access beyond end of device [ 218.533604][ T42] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 218.579007][ T42] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 218.591951][ T42] kworker/u4:3: attempt to access beyond end of device [ 218.591951][ T42] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 218.655318][ T42] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 218.670153][ T42] kworker/u4:3: attempt to access beyond end of device [ 218.670153][ T42] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 218.690947][ T42] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 219.644198][ T42] kworker/u4:3: attempt to access beyond end of device [ 219.644198][ T42] loop1: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 219.845402][ T42] Buffer I/O error on dev loop1, logical block 1024, lost async page write [ 219.860287][ T4297] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 219.872642][ T42] kworker/u4:3: attempt to access beyond end of device [ 219.872642][ T42] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 219.889523][ T42] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 219.923109][ T4297] usb 4-1: USB disconnect, device number 2 [ 219.978192][ T42] kworker/u4:3: attempt to access beyond end of device [ 219.978192][ T42] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 220.020851][ T5411] loop5: detected capacity change from 0 to 512 [ 220.033083][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.083594][ T42] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 220.103613][ T5411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.142252][ T42] kworker/u4:3: attempt to access beyond end of device [ 220.142252][ T42] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 220.185737][ T42] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 220.206342][ T5411] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 220.227093][ T5411] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.255: invalid indirect mapped block 2683928664 (level 1) [ 220.241226][ T42] kworker/u4:3: attempt to access beyond end of device [ 220.241226][ T42] loop1: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 220.251672][ T5411] EXT4-fs (loop5): Remounting filesystem read-only [ 220.269941][ T5411] EXT4-fs (loop5): 1 truncate cleaned up [ 220.279041][ T5411] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 220.297925][ T42] Buffer I/O error on dev loop1, logical block 1025, lost async page write [ 220.579862][ T4724] EXT4-fs (loop5): unmounting filesystem. [ 221.000493][ T5432] loop5: detected capacity change from 0 to 2048 [ 221.181848][ T5432] loop5: p1 < > p3 [ 221.247095][ T5432] loop5: p3 size 134217728 extends beyond EOD, truncated [ 221.279368][ T3624] loop5: p1 < > p3 [ 221.292109][ T3624] loop5: p3 size 134217728 extends beyond EOD, truncated [ 221.707577][ T5443] xt_CT: No such helper "pptp" [ 221.834702][ T4366] udevd[4366]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 221.859103][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 221.912869][ T4366] udevd[4366]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 221.926620][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 222.008828][ T5453] loop5: detected capacity change from 0 to 512 [ 222.764696][ T5453] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 222.903213][ T5453] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 222.993985][ T5453] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 223.134345][ T5453] EXT4-fs (loop5): 1 truncate cleaned up [ 223.144110][ T5453] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 224.197973][ T5470] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 224.823936][ T5467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 224.832880][ T5467] netlink: 64 bytes leftover after parsing attributes in process `syz.1.264'. [ 226.273265][ T4724] EXT4-fs (loop5): unmounting filesystem. [ 231.109452][ T5522] loop0: detected capacity change from 0 to 512 [ 231.185465][ T5522] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.277690][ T5522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.314475][ T5522] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.426497][ T5522] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 231.476080][ T5522] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.553632][ T5522] EXT4-fs (loop0): mount failed [ 233.049601][ T5533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'. [ 233.058779][ T5533] netlink: 64 bytes leftover after parsing attributes in process `syz.4.277'. [ 233.300132][ T5540] loop3: detected capacity change from 0 to 512 [ 233.402626][ T5540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.997110][ T5540] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 234.451468][ T5540] EXT4-fs (loop3): 1 truncate cleaned up [ 234.521563][ T5540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 234.642051][ T5558] loop0: detected capacity change from 0 to 512 [ 234.733161][ T5540] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #15: comm syz.3.281: corrupted xattr block 33 [ 234.757499][ T5540] EXT4-fs (loop3): Remounting filesystem read-only [ 234.777683][ T5558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 234.788390][ T5540] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 234.860860][ T5558] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.997953][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 235.165893][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 235.671438][ T5585] loop0: detected capacity change from 0 to 1024 [ 235.701057][ T5585] EXT4-fs: Ignoring removed bh option [ 235.755415][ T5585] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.843257][ T5585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 236.002262][ T5585] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.290: Allocating blocks 497-513 which overlap fs metadata [ 236.160793][ T5585] EXT4-fs (loop0): pa ffff888054b43620: logic 256, phys. 385, len 8 [ 236.169346][ T5585] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 236.564849][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 237.682902][ T5616] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 238.714751][ T5627] loop1: detected capacity change from 0 to 512 [ 238.759416][ T5627] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.873895][ T4269] Bluetooth: hci5: command 0x0405 tx timeout [ 238.925489][ T5627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.960726][ T5627] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.080389][ T5627] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 239.124586][ T5627] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.141387][ T5627] EXT4-fs (loop1): mount failed [ 239.889176][ T5640] loop5: detected capacity change from 0 to 128 [ 241.236511][ T5659] loop1: detected capacity change from 0 to 512 [ 241.340809][ T5659] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 241.391191][ T5659] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 241.418381][ T5659] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 241.460088][ T5659] EXT4-fs (loop1): 1 truncate cleaned up [ 241.514810][ T5659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.836534][ T5671] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 242.704007][ T5672] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 242.803984][ T5672] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 244.039610][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 244.088080][ T5678] hub 8-0:1.0: USB hub found [ 244.093079][ T5678] hub 8-0:1.0: 1 port detected [ 244.569012][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.687625][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.737702][ T5687] loop0: detected capacity change from 0 to 512 [ 244.769347][ T5687] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.786274][ T5686] loop1: detected capacity change from 0 to 512 [ 244.825057][ T5687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.852365][ T5686] EXT4-fs: Ignoring removed nobh option [ 244.954553][ T5687] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.016163][ T5686] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.315: invalid indirect mapped block 256 (level 2) [ 245.747141][ T5687] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 245.770276][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.005125][ T5687] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 246.020826][ T5686] EXT4-fs (loop1): 2 truncates cleaned up [ 246.050015][ T5686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 246.067215][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'. [ 246.077361][ T5698] netlink: 64 bytes leftover after parsing attributes in process `syz.4.317'. [ 246.203028][ T5687] EXT4-fs (loop0): mount failed [ 246.323850][ T5694] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 247.726269][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.052602][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.074671][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.083244][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.965883][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.973504][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 248.981247][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.485492][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 250.704003][ T5711] chnl_net:caif_netlink_parms(): no params data found [ 251.180564][ T4262] Bluetooth: hci4: command 0x0409 tx timeout [ 251.247304][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.254660][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.878438][ T5711] device bridge_slave_0 entered promiscuous mode [ 252.007942][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.021933][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.050577][ T5711] device bridge_slave_1 entered promiscuous mode [ 253.147251][ T5775] loop4: detected capacity change from 0 to 164 [ 253.191381][ T5775] Unable to read rock-ridge attributes [ 253.264289][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 253.276737][ T5775] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 253.305855][ T5711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.366103][ T5711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.605673][ T5711] team0: Port device team_slave_0 added [ 253.673480][ T5780] loop4: detected capacity change from 0 to 512 [ 253.700496][ T5711] team0: Port device team_slave_1 added [ 253.727571][ T5780] EXT4-fs: Ignoring removed nobh option [ 253.790326][ T5780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.333: invalid indirect mapped block 256 (level 2) [ 253.918786][ T5780] EXT4-fs (loop4): 2 truncates cleaned up [ 253.925018][ T5780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 254.011384][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.215301][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.815194][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 255.823648][ T5711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.862256][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.925211][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.496023][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 256.583798][ T5711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.682890][ T5790] loop0: detected capacity change from 0 to 512 [ 256.752351][ T5790] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.800760][ T5790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.843809][ T5790] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.956694][ T5790] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 256.979709][ T5790] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.985773][ T5796] loop4: detected capacity change from 0 to 1024 [ 257.015615][ T5790] EXT4-fs (loop0): mount failed [ 257.097293][ T5796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 257.119681][ T9] device hsr_slave_0 left promiscuous mode [ 257.120176][ T5796] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.324584][ T9] device hsr_slave_1 left promiscuous mode [ 257.343084][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.390941][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.526313][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.792739][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.826235][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 257.833061][ T9] device bridge_slave_1 left promiscuous mode [ 257.894005][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 257.938009][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.998767][ T9] device bridge_slave_0 left promiscuous mode [ 258.070205][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.630613][ T9] device veth1_macvtap left promiscuous mode [ 259.704413][ T9] device veth0_macvtap left promiscuous mode [ 259.878677][ T9] device veth1_vlan left promiscuous mode [ 259.918054][ T9] device veth0_vlan left promiscuous mode [ 260.021442][ T5827] loop0: detected capacity change from 0 to 16 [ 260.051627][ T5827] erofs: (device loop0): mounted with root inode @ nid 36. [ 261.506671][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.513277][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.821583][ T5862] loop0: detected capacity change from 0 to 512 [ 262.836360][ T5862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.896391][ T5862] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.352: casefold flag without casefold feature [ 262.945840][ T5862] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.352: couldn't read orphan inode 15 (err -117) [ 263.033080][ T5862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 263.280943][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 263.595272][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 264.802150][ T5881] loop3: detected capacity change from 0 to 512 [ 264.889611][ T5881] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 264.919469][ T5881] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 264.936952][ T5881] EXT4-fs (loop3): mount failed [ 265.208699][ T9] team0 (unregistering): Port device team_slave_1 removed [ 265.218890][ T5894] loop4: detected capacity change from 0 to 512 [ 265.297933][ T5894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.310744][ T9] team0 (unregistering): Port device team_slave_0 removed [ 265.313892][ T5894] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.411264][ T5894] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 265.425648][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.430451][ T5894] EXT4-fs error (device loop4): ext4_ext_tree_init:879: inode #18: comm syz.4.361: mark_inode_dirty error [ 265.452279][ T5894] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 265.463349][ T5894] EXT4-fs error (device loop4): __ext4_new_inode:1350: inode #18: comm syz.4.361: mark_inode_dirty error [ 265.479936][ T5894] EXT4-fs error (device loop4) in __ext4_new_inode:1352: Corrupt filesystem [ 265.489228][ T5894] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 265.504015][ T5894] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #18: comm syz.4.361: mark_inode_dirty error [ 265.517045][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.521066][ T5894] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 265.601292][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 265.768309][ T5902] loop4: detected capacity change from 0 to 512 [ 265.798981][ T5902] EXT4-fs: Ignoring removed nobh option [ 265.855259][ T5902] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.362: invalid indirect mapped block 256 (level 2) [ 265.902252][ T5902] EXT4-fs (loop4): 2 truncates cleaned up [ 265.928487][ T5902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 266.509246][ T5910] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 268.393782][ T5864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 268.422263][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 268.547223][ T5924] loop4: detected capacity change from 0 to 512 [ 268.605017][ T5924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 268.629209][ T5924] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.722512][ T5924] ext4: Bad value for 'journal_ioprio' [ 268.825922][ T9] bond0 (unregistering): Released all slaves [ 268.881580][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 269.019324][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 269.051339][ T5711] device hsr_slave_0 entered promiscuous mode [ 269.054813][ T5711] device hsr_slave_1 entered promiscuous mode [ 269.709465][ T5711] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.797938][ T5711] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.854869][ T5711] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.886539][ T5711] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.198891][ T5961] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 272.017089][ T5966] loop4: detected capacity change from 0 to 512 [ 272.153964][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.161250][ T5966] EXT4-fs: Ignoring removed nobh option [ 272.202116][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.221275][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.276085][ T5711] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.296879][ T5966] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.376: invalid indirect mapped block 256 (level 2) [ 272.330212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.351294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.370984][ T5966] EXT4-fs (loop4): 2 truncates cleaned up [ 272.400337][ T5966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.401694][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.416392][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.546120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.564629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.002874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.696654][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.703862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.712975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.715428][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 274.723432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.825245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.866414][ T5981] loop3: detected capacity change from 0 to 512 [ 274.878781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.904478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.945360][ T5981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.952464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.035268][ T5981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 275.054214][ T5981] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.064030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.134577][ T5711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.174409][ T5711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.265845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.304713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.341557][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 275.348679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.382421][ T5987] loop4: detected capacity change from 0 to 128 [ 275.389951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.426796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.459868][ T5987] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 275.655976][ T6000] loop0: detected capacity change from 0 to 128 [ 276.626465][ T4254] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 276.658874][ T4254] FAT-fs (loop4): Filesystem has been set read-only [ 276.665923][ T6004] loop0: detected capacity change from 128 to 1 [ 277.065972][ T6016] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 277.145883][ T4251] FAT-fs (loop0): Directory bread(block 34) failed [ 277.241681][ T4251] FAT-fs (loop0): Directory bread(block 35) failed [ 277.477152][ T4251] FAT-fs (loop0): Directory bread(block 36) failed [ 277.691242][ T4251] FAT-fs (loop0): Directory bread(block 37) failed [ 277.753760][ T4251] FAT-fs (loop0): Directory bread(block 38) failed [ 277.794344][ T4251] FAT-fs (loop0): Directory bread(block 39) failed [ 277.800935][ T4251] FAT-fs (loop0): Directory bread(block 40) failed [ 277.853850][ T4251] FAT-fs (loop0): Directory bread(block 41) failed [ 278.190444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.222674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.317530][ T4306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.572699][ T6033] loop3: detected capacity change from 0 to 1024 [ 278.613160][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.646770][ T6033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 278.674010][ T6033] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.994094][ T4306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.142052][ T6043] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.391: Freeing blocks not in datazone - block = 0, count = 16 [ 279.523048][ T4306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.693493][ T4253] EXT4-fs (loop3): unmounting filesystem. [ 279.705578][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.714360][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.722420][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.732415][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.741656][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.764735][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.894931][ T4306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.967528][ T6053] loop3: detected capacity change from 0 to 512 [ 279.990594][ T6053] EXT4-fs: Ignoring removed nobh option [ 280.008846][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.397'. [ 280.497395][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.511136][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.525818][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.534326][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.551128][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.552614][ T4730] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 280.574224][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.586274][ T6053] EXT4-fs: journaled quota format not specified [ 280.857426][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 281.262653][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.271137][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.292616][ T6048] device bridge_slave_0 entered promiscuous mode [ 281.334912][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.364325][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.425081][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.432253][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.572570][ T6048] device bridge_slave_1 entered promiscuous mode [ 281.845507][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 282.271427][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.298366][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.331681][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.350177][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.390185][ T6103] ip6erspan0: tun_chr_ioctl cmd 1074812118 [ 282.408758][ T5711] device veth0_vlan entered promiscuous mode [ 282.436456][ T5711] device veth1_vlan entered promiscuous mode [ 282.624067][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 282.631970][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.655264][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.668782][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.692118][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.705819][ T5711] device veth0_macvtap entered promiscuous mode [ 282.739586][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.819713][ T5711] device veth1_macvtap entered promiscuous mode [ 282.842886][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.855000][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.869881][ T6070] chnl_net:caif_netlink_parms(): no params data found [ 283.019591][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.046636][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.066825][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.087663][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.113851][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.146229][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.162937][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.173864][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.191941][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.231016][ T6048] team0: Port device team_slave_0 added [ 283.252763][ T6048] team0: Port device team_slave_1 added [ 283.288053][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.337380][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.413470][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.436287][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.451355][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.468806][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.481752][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.501622][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.511892][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.530154][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.573838][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.616339][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.632860][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.753456][ T5711] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.771112][ T5711] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.780390][ T5711] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.796697][ T5711] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.836850][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.844326][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.885380][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.903930][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 284.002108][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.028445][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.052789][ T6070] device bridge_slave_0 entered promiscuous mode [ 284.075708][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.082844][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.091093][ T6070] device bridge_slave_1 entered promiscuous mode [ 284.911596][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 284.979343][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.996659][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.049090][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.097135][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.123073][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.481589][ T6070] team0: Port device team_slave_0 added [ 285.509227][ T6070] team0: Port device team_slave_1 added [ 285.794568][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.802720][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.831132][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.923046][ T4306] device hsr_slave_0 left promiscuous mode [ 285.961040][ T4306] device hsr_slave_1 left promiscuous mode [ 286.022580][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 286.066276][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.083830][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.091784][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.106999][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.120421][ T4306] device bridge_slave_1 left promiscuous mode [ 286.131538][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.153660][ T4306] device bridge_slave_0 left promiscuous mode [ 286.162099][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.182812][ T6161] loop3: detected capacity change from 0 to 8 [ 286.203474][ T6161] squashfs: Unknown parameter 'J^ˤ]5dH`8 $%gkX*[8ۂqܗ*' [ 286.216646][ T4306] device veth1_macvtap left promiscuous mode [ 286.222723][ T4306] device veth0_macvtap left promiscuous mode [ 286.265898][ T4306] device veth1_vlan left promiscuous mode [ 286.301163][ T4306] device veth0_vlan left promiscuous mode [ 286.440313][ T6163] loop1: detected capacity change from 0 to 8 [ 287.232975][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 287.599614][ T6169] SQUASHFS error: Failed to read block 0x4e8: -5 [ 287.607739][ T6169] SQUASHFS error: Failed to read block 0x4de: -5 [ 287.614645][ T6169] SQUASHFS error: Failed to read block 0x4de: -5 [ 287.621441][ T6169] SQUASHFS error: Failed to read block 0x4de: -5 [ 287.685740][ T26] audit: type=1800 audit(2000000067.192:19): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.416" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 288.073673][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 288.156752][ T6172] ------------[ cut here ]------------ [ 288.162366][ T6172] Please remove unsupported % in format string [ 288.170042][ T6172] WARNING: CPU: 1 PID: 6172 at lib/vsprintf.c:2661 format_decode+0xc65/0x1330 [ 288.179011][ T6172] Modules linked in: [ 288.182938][ T6172] CPU: 1 PID: 6172 Comm: syz.1.418 Not tainted 6.1.141-syzkaller #0 [ 288.190979][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.201198][ T6172] RIP: 0010:format_decode+0xc65/0x1330 [ 288.206731][ T6172] Code: e8 90 1d 80 f7 c6 05 f1 77 e9 03 01 41 0f b6 44 1d 00 84 c0 0f 85 be 06 00 00 41 0f be 36 48 c7 c7 00 dc 90 8b e8 1b 30 4c f7 <0f> 0b e9 fe fc ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c d9 f3 ff ff [ 288.226418][ T6172] RSP: 0018:ffffc9000355f888 EFLAGS: 00010246 [ 288.232516][ T6172] RAX: 7007be19e12a3500 RBX: dffffc0000000000 RCX: 0000000000080000 [ 288.240549][ T6172] RDX: ffffc9000df99000 RSI: 000000000000348f RDI: 0000000000003490 [ 288.248581][ T6172] RBP: ffff0000ffffff00 R08: dffffc0000000000 R09: fffff520006abea1 [ 288.256623][ T6172] R10: fffff520006abea1 R11: 1ffff920006abea0 R12: ffff0a00ffffff00 [ 288.264664][ T6172] R13: 1ffff920006abf55 R14: ffffc9000355faac R15: 00000000ffffffdb [ 288.272654][ T6172] FS: 00007f08fa9b06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 288.281645][ T6172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.288304][ T6172] CR2: 00007f08f9db7bac CR3: 000000001e64c000 CR4: 00000000003506e0 [ 288.296341][ T6172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.304371][ T6172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.312372][ T6172] Call Trace: [ 288.315718][ T6172] [ 288.318685][ T6172] bstr_printf+0xc4/0xef0 [ 288.323038][ T6172] bpf_trace_printk+0x10b/0x190 [ 288.327975][ T6172] ? ktime_get+0x7b/0x270 [ 288.332327][ T6172] ? bpf_probe_write_user+0xe0/0xe0 [ 288.337609][ T6172] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 288.343098][ T6172] bpf_test_run+0x533/0x870 [ 288.347714][ T6172] ? convert___skb_to_skb+0x580/0x580 [ 288.353131][ T6172] ? eth_get_headlen+0x1f0/0x1f0 [ 288.358146][ T6172] ? __build_skb+0x257/0x3c0 [ 288.362810][ T6172] ? convert___skb_to_skb+0x3d/0x580 [ 288.368180][ T6172] bpf_prog_test_run_skb+0xa40/0x11b0 [ 288.373591][ T6172] ? cpu_online+0xa0/0xa0 [ 288.377986][ T6172] bpf_prog_test_run+0x31e/0x390 [ 288.382955][ T6172] __sys_bpf+0x593/0x6d0 [ 288.387265][ T6172] ? bpf_link_show_fdinfo+0x310/0x310 [ 288.392673][ T6172] ? lock_chain_count+0x20/0x20 [ 288.397592][ T6172] __x64_sys_bpf+0x78/0x90 [ 288.402030][ T6172] do_syscall_64+0x4c/0xa0 [ 288.406521][ T6172] ? clear_bhb_loop+0x60/0xb0 [ 288.411229][ T6172] ? clear_bhb_loop+0x60/0xb0 [ 288.415963][ T6172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.421910][ T6172] RIP: 0033:0x7f08f9b8e929 [ 288.426395][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.446258][ T6172] RSP: 002b:00007f08fa9b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.454768][ T6172] RAX: ffffffffffffffda RBX: 00007f08f9db5fa0 RCX: 00007f08f9b8e929 [ 288.462779][ T6172] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 288.470813][ T6172] RBP: 00007f08f9c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 288.478854][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.486911][ T6172] R13: 0000000000000000 R14: 00007f08f9db5fa0 R15: 00007ffd1cb29f28 [ 288.494959][ T6172] [ 288.498028][ T6172] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 288.505321][ T6172] CPU: 1 PID: 6172 Comm: syz.1.418 Not tainted 6.1.141-syzkaller #0 [ 288.513335][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.523405][ T6172] Call Trace: [ 288.526711][ T6172] [ 288.529655][ T6172] dump_stack_lvl+0x168/0x22e [ 288.534349][ T6172] ? memcpy+0x3c/0x60 [ 288.538353][ T6172] ? show_regs_print_info+0x12/0x12 [ 288.543581][ T6172] ? load_image+0x3b0/0x3b0 [ 288.548106][ T6172] panic+0x2c9/0x710 [ 288.552003][ T6172] ? bpf_jit_dump+0xd0/0xd0 [ 288.556524][ T6172] __warn+0x2f8/0x4f0 [ 288.560515][ T6172] ? format_decode+0xc65/0x1330 [ 288.565374][ T6172] ? format_decode+0xc65/0x1330 [ 288.570234][ T6172] report_bug+0x2ba/0x4f0 [ 288.574574][ T6172] ? format_decode+0xc65/0x1330 [ 288.579450][ T6172] handle_bug+0x3a/0x70 [ 288.583613][ T6172] exc_invalid_op+0x16/0x40 [ 288.588127][ T6172] asm_exc_invalid_op+0x16/0x20 [ 288.592975][ T6172] RIP: 0010:format_decode+0xc65/0x1330 [ 288.598443][ T6172] Code: e8 90 1d 80 f7 c6 05 f1 77 e9 03 01 41 0f b6 44 1d 00 84 c0 0f 85 be 06 00 00 41 0f be 36 48 c7 c7 00 dc 90 8b e8 1b 30 4c f7 <0f> 0b e9 fe fc ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c d9 f3 ff ff [ 288.618073][ T6172] RSP: 0018:ffffc9000355f888 EFLAGS: 00010246 [ 288.624166][ T6172] RAX: 7007be19e12a3500 RBX: dffffc0000000000 RCX: 0000000000080000 [ 288.632153][ T6172] RDX: ffffc9000df99000 RSI: 000000000000348f RDI: 0000000000003490 [ 288.640134][ T6172] RBP: ffff0000ffffff00 R08: dffffc0000000000 R09: fffff520006abea1 [ 288.648109][ T6172] R10: fffff520006abea1 R11: 1ffff920006abea0 R12: ffff0a00ffffff00 [ 288.656084][ T6172] R13: 1ffff920006abf55 R14: ffffc9000355faac R15: 00000000ffffffdb [ 288.664082][ T6172] ? format_decode+0xc65/0x1330 [ 288.668958][ T6172] bstr_printf+0xc4/0xef0 [ 288.673304][ T6172] bpf_trace_printk+0x10b/0x190 [ 288.678176][ T6172] ? ktime_get+0x7b/0x270 [ 288.682515][ T6172] ? bpf_probe_write_user+0xe0/0xe0 [ 288.687737][ T6172] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 288.693200][ T6172] bpf_test_run+0x533/0x870 [ 288.697720][ T6172] ? convert___skb_to_skb+0x580/0x580 [ 288.703097][ T6172] ? eth_get_headlen+0x1f0/0x1f0 [ 288.708035][ T6172] ? __build_skb+0x257/0x3c0 [ 288.712640][ T6172] ? convert___skb_to_skb+0x3d/0x580 [ 288.717930][ T6172] bpf_prog_test_run_skb+0xa40/0x11b0 [ 288.723317][ T6172] ? cpu_online+0xa0/0xa0 [ 288.727657][ T6172] bpf_prog_test_run+0x31e/0x390 [ 288.732612][ T6172] __sys_bpf+0x593/0x6d0 [ 288.736863][ T6172] ? bpf_link_show_fdinfo+0x310/0x310 [ 288.742256][ T6172] ? lock_chain_count+0x20/0x20 [ 288.747135][ T6172] __x64_sys_bpf+0x78/0x90 [ 288.751552][ T6172] do_syscall_64+0x4c/0xa0 [ 288.755976][ T6172] ? clear_bhb_loop+0x60/0xb0 [ 288.760673][ T6172] ? clear_bhb_loop+0x60/0xb0 [ 288.765348][ T6172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.771252][ T6172] RIP: 0033:0x7f08f9b8e929 [ 288.775687][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.795314][ T6172] RSP: 002b:00007f08fa9b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.803734][ T6172] RAX: ffffffffffffffda RBX: 00007f08f9db5fa0 RCX: 00007f08f9b8e929 [ 288.811730][ T6172] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 288.819698][ T6172] RBP: 00007f08f9c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 288.827664][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.835630][ T6172] R13: 0000000000000000 R14: 00007f08f9db5fa0 R15: 00007ffd1cb29f28 [ 288.843622][ T6172] [ 288.846958][ T6172] Kernel Offset: disabled [ 288.851317][ T6172] Rebooting in 86400 seconds..