last executing test programs: 15.564699272s ago: executing program 1 (id=364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r0], 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x6) 14.725366304s ago: executing program 1 (id=368): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="003104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x20, 0x12, 0x4, "b4f49dbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000a80)={0x0, 0x6, 0x4, "958f885d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.593876448s ago: executing program 2 (id=379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r0 = syz_io_uring_setup(0x1dfe, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x1, 0x2}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000'], 0x2a, 0xfffffffffffffffc) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x5c, 0x6}, @enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0xd}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0x10, 0x3}, {0x2, 0x3}, {0xe, 0x1}, {0x4, 0x200}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x5}]}, {0x0, [0x61, 0x30, 0x61, 0x2e]}}, &(0x7f00000002c0)=""/213, 0x8a, 0xd5, 0x1}, 0x28) 10.559805068s ago: executing program 1 (id=382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x7b7, &(0x7f00000002c0)="$eJzs3U1sHGf5APBnXbvJ35Wiqv8qjaI0naRFSqXUXa9bF6uHsl2PnWnXu6vdNXKEUBs1TmXFaauWCuoDJZcWEAhx4li49sYNhAQSB+CERA9cuFXqCRUEEgIhJKOZ3XUce/3R1Pmg/f2s+B3PPPO+z7vezLNje2YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhSbbZcnixFPWssLiXbjEREcn8/dmH79g2D/n51XbPLuBGl/F8cPhzHequO3X9t89H80+k40fvqRBzOm8Oxds/Re5/+/9GRwf67JHSjTu0zrhTxrTypyxdWV5dfvwmJ3ELf/cVuW0eHrfzXev55Pm1knWa2UJ1Pk6zTTGamp8uPn5vrJHNZPe2c73TThaTWTqvdZjs5U3s0mZyZmUrSifPNxcb8bLWeDlY+9VilXJ5OnptopdV2p9l4/LmJTu1cVq9njfkiplL+euQxTyW12fbzWTfpptWFJLm0sro8tdfs8qDJXbafeOTej9788O8ry/kTcqegUv+JWZmcrFQmp5+cefKpcnm0Uq5cv6K8RWxExEhEHnFTnrTcOYpD5m4O5sANB2CkX/+jHlk0YjGWIhnyMRa1mI12NGMh//qPY9si+gb1/wuP/+X3u427uf4Pqvyxa5uPR1H/T/a+OrlT/R+a60F+jPTz2Wn7G/FWrMXluBCrsRrL8fpNz+hTfowcbH/zkUYjsuhEM7JYiGqxJumvSWImpmM6yvFCnIu56EQSc5FFPdLoxPnoRDfS4hlVi3akUY1uNKMdSZyJWjwaSUzGTMzEVCSRxkScj2YsRiPmYzaqRS+XYqV43Ke25HX0my/+/OU/fPRevrwRNLnLREr5i7k86G+7BG0r9/uv/+vRj1D/P+8O+AgON259UP8BAACAz6xS8dP3/Px/LB4sluayevqV250WAAAAcICK3/yfyJuxfOnBKOXn/+UhkR/c8twAAACAg1EqrrErRcR4PNRbGlwuNeyHAAAAAMD/oOL3/yfzZjzi7WKF838AAAD4jPn2TvfY/3Bwj91O61Dpl3+NdnusdLW19EjpSjWPq165q7dfv/nyRo/dueOlw9HrpOhrenTtnlJEjNbSE6XB3S//c6jXflx8Pj66sftO9/ovbUlgY4+7tk4pT+DI2pYEjhYDfy9O9WJOXey1F/tx/TsSj89l9XSi1qw/XdwSMf/XffOVlW9EMf3vNBaOlOLSyuryxEuvrl4scrma93L1Sv8Gitvuozg8l2LE9f4jEA8On/FYcSFGf9zx3rjlzd+A/r2JR3Yfs7R5zHfidC/m9HivHb9+/ofzMScnnp6MavXISDdd6r65vmn2/SwmP+XM34mHezEPn3m41wzJonJdFq9sz6KyOYv9PRZ7ZjHWf2K9d+rtpX/8pllKp/bKYmpLFoc/YRYAt8ul4q4/16rQ/xVV6N/rPXn9v1Z3k15AX/8o98BGV/lRblAGthzlLsXGlsH+m2rdaGyr7ltfXsSWUXY4op/pxZzpvZ4YPT6krpSHHNFfW3ntt/0j+hPv/+jHXz35u5/eeHV7Px7txfSbuO/XO9TYfM7fbyyMDzpdeqa/8JMdx+3UK6UYi7jra1dei6NvvLX22MqVCy8vv7z8SqUyNV1+olx+shJjxUuFfqP2ADDE3u+xs2dE6Yk9zqrv2/iTgol4KV6N1bgYZ4urDSLioeG9jm/6M4SzcTqKk+UdzlrHN73Dy9k9zi2vxVa2xw5eV2yLndr0iD3ww6L55038pgDATXZ6jzq8n/p/do/z7utr+Zaz49i5lg/zxZv6aADA50Pa/rg03n231G5nrRcmZ2Ymq91zadJu1p5P2tnsfJpkjW7arp2rNubTpNVudpu1wQ+OZ9NO0llstZrtbjLXbCetZidbKt75Pem/9XsnXag2ulmt06qn1U6a1JqNbrXWTWazTi1p3f1sPeucS9vFzp1WWsvmslq1mzUbSae52K6lE0nSSdOktTgIzGbTRjeby/LFRtJqZwvV9tWIqC8upMls2qm1s1a32etwMFbWmGu2F4puJ7ZP/8+3+vEGgDvBG2+tXb6wurr8+idcGI1i4U/7Cb7dcwQArqdKAwAAAAAAAAAAAADAnW/75Xr52hu5InDtUHzyvQ7FDV19aGEfC/k38g5I4/YuvPjMM5d3inn27WPn9tfP8P8pwy51ffdIxN0/+0FvzZdu1Uw/iIgb2H29tEvM7T4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2/w0AAP//naJXlA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000019c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 8.702040867s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x10400, &(0x7f0000000000), 0x1, 0xb96d, &(0x7f000000e100)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000180)) 7.358272318s ago: executing program 1 (id=397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_STAT(0x0, 0xd, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 6.800486366s ago: executing program 3 (id=399): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f00000000c0), 0x3, 0x57f, &(0x7f0000000f80)="$eJzs3d9rW1UcAPDvTZOt+6HtYAz1QQp7cDKXrq0/Jvgwn0R0OND3GdqsjKbLaNKx1oHuwb34IkMQcSD67ruPw3/Av2KggyGj6IMvlZvedFmbdP2Rruny+cDdzrnnpud8c+45OTc3IQH0rZH0n1zEyxHxbRIx1FKWj6xwZOW4pUc3J9MtieXlT/9OIsn2NY9Psv+PZJmXIuL3ryNO59bXW1tYnClVKuW5LD9an702WltYPHNltjRdni5fHZ+YOPfWxPi777zdtVhfv/jvD5/c+/DcNyeXvv/1wbE7SZyPo1lZaxw7kG/NjMRI9pwU4vyaA8e6UFkvSfa6AWzLQHbSFiKdA4Zi4MlT+EnLQ8+yacAu+zId1kCfSox/6FPNdUDz2r5L18H7xsP3Vy6A1sefX3lvJAYb10aHl5InrozS693hLtSf1vHbX3fvpFt0eh/iYBcqAljjq1sRcTafXz//Jdn8t31nN3HM2jr67fUH9tK9dP3zRrv1T251/RNt1j9H2ozd7Xj6+M896EI1HaXrv/farn9Xb1oND2S5FxprvkJy+UqlnM5tL0bEqSgcTPNjEfFB+5sgn+eW7i93qr91/Zduaf3NtWDWjgf5Neu/qVK9tPPIVzy8FfFK2/Vvstr/SZv+T5+Pi5us40T57qudyp4e/+5a/jnitbb9/7gzk43vT442zofR5lmx3j+3T/zRqf69jj/t/8Mbxz+ctN6vrW29jp8G/yt3Ktvu+X8g+ayRPpDtu1Gq1+fGIg4kH6/fP/74sc188/g0/lMnN57/2p3/h9KBvcn4bx+/3Xro4Nbi311p/FNb6v+tJ+5/9MWPnerfXP+/2UidyvZsZv7bbAN38twBAAAAAABAr8lFxNFIcsXVdC5XLMaJtOx4HM5VqrX66cvV+atT0fiu7HAUcs073UMtn4cYyz4P28yPr8lPRMSxiPhu4FAjX5ysVqb2OngAAAAAAAAAAAAAAAAAAADoEUciBtt8/7/hz4H2j+mwG9iPNvjJb+A513n8ZyXd+KUnoCd5/Yf+ZfxD/zL+oX8Z/9C/jH/oX8Y/9K8O49/nfKAPbOX1/5cLu9gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAeD5cvHAh3ZaXHt2cTPNT1xfmZ6rXz0yVazPF2fnJ4mR17lpxulqdrpSLk9XZp/29SrV6bWw85m+M1su1+mhtYfHSbHX+av3SldnSdPlSufBMogIAAAAAAAAAAAAAAAAAAID9pbawOFOqVMpzEs88UYiIHmjGDhP53mhGDyZyvdGMbSb2emYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMf+DwAA//+HXDi/") 6.247078264s ago: executing program 2 (id=400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x7b7, &(0x7f00000002c0)="$eJzs3U1sHGf5APBnXbvJ35Wiqv8qjaI0naRFSqXUXa9bF6uHsl2PnWnXu6vdNXKEUBs1TmXFaauWCuoDJZcWEAhx4li49sYNhAQSB+CERA9cuFXqCRUEEgIhJKOZ3XUce/3R1Pmg/f2s+B3PPPO+z7vezLNje2YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhSbbZcnixFPWssLiXbjEREcn8/dmH79g2D/n51XbPLuBGl/F8cPhzHequO3X9t89H80+k40fvqRBzOm8Oxds/Re5/+/9GRwf67JHSjTu0zrhTxrTypyxdWV5dfvwmJ3ELf/cVuW0eHrfzXev55Pm1knWa2UJ1Pk6zTTGamp8uPn5vrJHNZPe2c73TThaTWTqvdZjs5U3s0mZyZmUrSifPNxcb8bLWeDlY+9VilXJ5OnptopdV2p9l4/LmJTu1cVq9njfkiplL+euQxTyW12fbzWTfpptWFJLm0sro8tdfs8qDJXbafeOTej9788O8ry/kTcqegUv+JWZmcrFQmp5+cefKpcnm0Uq5cv6K8RWxExEhEHnFTnrTcOYpD5m4O5sANB2CkX/+jHlk0YjGWIhnyMRa1mI12NGMh//qPY9si+gb1/wuP/+X3u427uf4Pqvyxa5uPR1H/T/a+OrlT/R+a60F+jPTz2Wn7G/FWrMXluBCrsRrL8fpNz+hTfowcbH/zkUYjsuhEM7JYiGqxJumvSWImpmM6yvFCnIu56EQSc5FFPdLoxPnoRDfS4hlVi3akUY1uNKMdSZyJWjwaSUzGTMzEVCSRxkScj2YsRiPmYzaqRS+XYqV43Ke25HX0my/+/OU/fPRevrwRNLnLREr5i7k86G+7BG0r9/uv/+vRj1D/P+8O+AgON259UP8BAACAz6xS8dP3/Px/LB4sluayevqV250WAAAAcICK3/yfyJuxfOnBKOXn/+UhkR/c8twAAACAg1EqrrErRcR4PNRbGlwuNeyHAAAAAMD/oOL3/yfzZjzi7WKF838AAAD4jPn2TvfY/3Bwj91O61Dpl3+NdnusdLW19EjpSjWPq165q7dfv/nyRo/dueOlw9HrpOhrenTtnlJEjNbSE6XB3S//c6jXflx8Pj66sftO9/ovbUlgY4+7tk4pT+DI2pYEjhYDfy9O9WJOXey1F/tx/TsSj89l9XSi1qw/XdwSMf/XffOVlW9EMf3vNBaOlOLSyuryxEuvrl4scrma93L1Sv8Gitvuozg8l2LE9f4jEA8On/FYcSFGf9zx3rjlzd+A/r2JR3Yfs7R5zHfidC/m9HivHb9+/ofzMScnnp6MavXISDdd6r65vmn2/SwmP+XM34mHezEPn3m41wzJonJdFq9sz6KyOYv9PRZ7ZjHWf2K9d+rtpX/8pllKp/bKYmpLFoc/YRYAt8ul4q4/16rQ/xVV6N/rPXn9v1Z3k15AX/8o98BGV/lRblAGthzlLsXGlsH+m2rdaGyr7ltfXsSWUXY4op/pxZzpvZ4YPT6krpSHHNFfW3ntt/0j+hPv/+jHXz35u5/eeHV7Px7txfSbuO/XO9TYfM7fbyyMDzpdeqa/8JMdx+3UK6UYi7jra1dei6NvvLX22MqVCy8vv7z8SqUyNV1+olx+shJjxUuFfqP2ADDE3u+xs2dE6Yk9zqrv2/iTgol4KV6N1bgYZ4urDSLioeG9jm/6M4SzcTqKk+UdzlrHN73Dy9k9zi2vxVa2xw5eV2yLndr0iD3ww6L55038pgDATXZ6jzq8n/p/do/z7utr+Zaz49i5lg/zxZv6aADA50Pa/rg03n231G5nrRcmZ2Ymq91zadJu1p5P2tnsfJpkjW7arp2rNubTpNVudpu1wQ+OZ9NO0llstZrtbjLXbCetZidbKt75Pem/9XsnXag2ulmt06qn1U6a1JqNbrXWTWazTi1p3f1sPeucS9vFzp1WWsvmslq1mzUbSae52K6lE0nSSdOktTgIzGbTRjeby/LFRtJqZwvV9tWIqC8upMls2qm1s1a32etwMFbWmGu2F4puJ7ZP/8+3+vEGgDvBG2+tXb6wurr8+idcGI1i4U/7Cb7dcwQArqdKAwAAAAAAAAAAAADAnW/75Xr52hu5InDtUHzyvQ7FDV19aGEfC/k38g5I4/YuvPjMM5d3inn27WPn9tfP8P8pwy51ffdIxN0/+0FvzZdu1Uw/iIgb2H29tEvM7T4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2/w0AAP//naJXlA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000019c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 5.740479852s ago: executing program 4 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000400)={0x4, 0x4, 0x4, 0x0, 0x0, [{{}, 0x2}, {{r0}, 0x30}, {{r1}, 0x35}, {{}, 0x9}]}) 5.540205046s ago: executing program 4 (id=403): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x47, 0x3, 0x7, 0x0, 0x6, 0x3, 0x9, 'syz0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000040)="05000000010001", 0x7) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) 5.25432879s ago: executing program 3 (id=404): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.129156862s ago: executing program 2 (id=405): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000002b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x894, r1}, 0x38) 4.993111224s ago: executing program 4 (id=406): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000048c0)=[{{&(0x7f0000001140)={0xa, 0x4e21, 0x0, @loopback={0x97}, 0x2009}, 0x1c, 0x0}}], 0x1, 0x0) 3.90649359s ago: executing program 2 (id=407): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100007882b740422c09170fe7970203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.90226035s ago: executing program 4 (id=408): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file2\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x4, 0xd9c, &(0x7f0000001dc0)="$eJzs3ctvXNX9APBzx544L35xiPnFTdPYJaW4j9gkWKW7GildoEqoEn8BSgMNNfQRugAFKWHRbSMh/oAiuu6izyyQIlap2LTqP4BYdZMiJNpGlcCV7XPG429memcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux9ri4OF2l9Patty7emxn/9+qUmVaO2bXH8Ty2lFJqtuZLaTIsb2liPf3sk2uX2tPPc1qlC6lKVWt6evZua94jKaXraTbdTpPpuY9P3nzpg2eW3ztx48TFN+bu7EzrAQBgtNz73rs//fPj3712/D+/ObOUJlrTy/b5Uh4/mrf7l6r18Zy0/gdUbWnVNl4cCPnG89AI+cY65GsvpxnyjXcp/0BYbrNLvoma8sfapnVqNwyzjf/xVWN+03ijMT+//p981YdjB6r5V64sv3B1QBUFtt2nM3kXn8FgGLlh5dig10AA6+Jxw/tcj3sWHkxraeO9lX/36Ubn+WEb7PbnX/nDVf67N6xx2D779dNU2lW+R0fzeDyOMB7m6/f7X5YXj0c0e6xnt+MIw3J8oVs9x3a5HlvVrf7xc7FffSmn5XU4E+Lt35/4ng7Lewx0ds/+f4NhZIeVQa+AgD0rnje3kpV4PK8vxidq4gdr4odq4odr4kdq4jDKfvvqL9PNauN/fvxP3+/+sLKf7aGc/l+f9Yn7I/stP573268HLT+eTwx72ty/Tn/689t/ief/fx7O/z+bf0sn8wqi7C+M+9Vb5/6HC4MbXfI9HKrzUIf8a8+nNuerpjaWk9rWM/fVY3rzfMe65Tu9Od9kyHc4b4scDPWN2yeHw3xl+6OsV8vrNR7a2wztOBDqUd6Z4zk9GNpzvFu7wo7sAyFfMw8nQrumQrseCfP9f2hXNb25XXH/eanPyTA9Hicp+cLbdt/vUnwv4nUZj+b0zZy+k9P3c/pRh3JHUfk8djv/v3w+p1OzeuHK8uUn8nj5nN4Za06sTj+/y/UGHlyv1/9Mp83X/xxtTW822tcLxzamV+3rhckw/UKX6U/m8fJ79sOxQ2vT5y/9ePkH2914GHFXX3v9R88vL1/+mSeeeOJJ68mg10zATlt49eWfLFx97fVzV15+/sXLL15+5fwT3/7Wk089tbiwtlW/0L5tD+wvGz/6g64JAAAAAAAAAAAA0LPqUOfJOa27v225nrxcnx6vj2c4lPetfBrKfQzK9Z/d7utSrt88vgt1ZPvtxuVEg24j0Nk/3P/XYBjZYWXFXfyBvWHQ/f+V+x6W9Oi5vx1fHUq2u09vXl/G+xfCg9jr/c8pf3/1/9fq/6rn9V/oMWtya+X+7t6hv7YVm071Wn5sf7kP7FR/5f8+l19a81jqrfyVX4Xy441Ke/SHUP7hHsu/r/2nt1b+H3P55WWbO9tr+es1rhqb6xH3G5f7AMb9xsWfQvvLvf36bv8WO2q7lcuHUTYs/Uz2a1j6/+ymLLesB/PquXWcrtx/O/Z30G/9y32/y+/AI2H5Vc3vm/4/h1td/5/l87eg/0/Ydz50/M9gGNlhZWVloF2fjGq/K3vFoF//QW9DDrr8Qb/+dWL/n/H/Uuz/M8Zj/58xHvv/jPHYv1aMx/4/4+sZ+/+M8ZNhubF/0Oma+Bdq4qdq4l+siZ+uiV/59f+Oz9bMf6YmPlMTf7gm/mhN/GxN/Cs18cdq4o/XxOdq4vvdl3M6qu2HURb7jfT9h9FRjv90+/5P1cSB4RX7dY7f76/WxIHhVc7z8P2GEVR1vmNH3N9e9uO+mdN3cvp+Tj/asQqyG76W06/n9Bs5/WZOz+V0PqcLOdU35HD7xd9PnblZbZzndyzEez2fNF4PEO8Tc77H+sTjc/2ez3qyx3J2qvwtXg4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQaa4+Li9NVSm/feuviP6e+8/3VKTOtHLNrj+N5bCml1EwpVXl8PCzv+sR6+tkn1y51Sqt0Ye2xjKdn77bmPbI6f5pNt9Nkeu7jkzdf+uCZ5fdO3Dhx8Y25OzvTegAAABgN/w0AAP//Wabmsg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)) 3.806002652s ago: executing program 3 (id=409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48000000120001002abd7000ffdbdf25ac1414bb00"/31], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) 3.483328507s ago: executing program 3 (id=410): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r3 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) dup2(r3, 0xffffffffffffffff) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c2754713e36569b2fae8649eb50c4d0000000000", @ANYRES32=0x1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 2.598479061s ago: executing program 3 (id=411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r1 = syz_io_uring_setup(0x1dfe, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x1, 0x2}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000'], 0x2a, 0xfffffffffffffffc) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x5c, 0x6}, @enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0xd}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0x10, 0x3}, {0x2, 0x3}, {0xe, 0x1}, {0x4, 0x200}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x5}]}, {0x0, [0x61, 0x30, 0x61, 0x2e]}}, &(0x7f00000002c0)=""/213, 0x8a, 0xd5, 0x1}, 0x28) 2.306355155s ago: executing program 4 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@gqnoenforce}, {@pquota}, {@discard}, {@inode64}, {@ikeep}]}, 0x1, 0xb91b, &(0x7f0000001440)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) 2.019535389s ago: executing program 0 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)='{R', 0x2}], 0x1, 0x9, 0x5f) lseek(r0, 0x2, 0x4) 1.790524943s ago: executing program 1 (id=414): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x9e, "0e350445eee490f14e40647b5dd5a4944ceab2ad7ed1944b9857cfb9b924c5ec666f653016b24090bdce071f5c2e47b46771c3d436818dc6a7c02477c7c63ed2c52b7ba21c7a85bf8e8a0921b6513abc0bb0aa4a780d16273c1950a66c9d79052e1f014d5e33cdb3f5d5a0662f226dd21178aa88875acf7138bf77a1448753e4460c6b5c40fadbd20fa91d330705dbcd56903ae300"/158}, &(0x7f0000000040)=0xa6) 1.686184374s ago: executing program 0 (id=415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r1, r1, 0x0) 1.657847665s ago: executing program 0 (id=416): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x47, 0x3, 0x7, 0x0, 0x6, 0x3, 0x9, 'syz0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000040)="05000000010001", 0x7) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) 1.154538513s ago: executing program 0 (id=417): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000002b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x894, r1}, 0x38) 980.089456ms ago: executing program 2 (id=418): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x1}, 'port0\x00', 0x511e36599023629, 0x42, 0x480000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 629.70083ms ago: executing program 4 (id=419): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 422.623164ms ago: executing program 0 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48000000120001002abd7000ffdbdf25ac1414bb00"/31], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) 372.222495ms ago: executing program 3 (id=421): syz_open_procfs(0x0, 0x0) r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 34.41896ms ago: executing program 2 (id=422): socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=423): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x9c0}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. syzkaller login: [ 56.620669][ T4172] cgroup: Unknown subsys name 'net' [ 56.736096][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.140889][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.515976][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 59.616570][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.628412][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 59.654371][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.697309][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.704640][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.712881][ T4184] device bridge_slave_0 entered promiscuous mode [ 59.725537][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.732653][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.740654][ T4184] device bridge_slave_1 entered promiscuous mode [ 59.750690][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.813988][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.846671][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.855995][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.863124][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.871211][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.902010][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.909071][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.917301][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.924952][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.932160][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.940160][ T4183] device bridge_slave_0 entered promiscuous mode [ 59.972592][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.979672][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.988040][ T4183] device bridge_slave_1 entered promiscuous mode [ 59.998970][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.006343][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.014431][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.024041][ T4184] team0: Port device team_slave_0 added [ 60.051816][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.058878][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.067114][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.075174][ T4184] team0: Port device team_slave_1 added [ 60.090339][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.101095][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.133482][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.143971][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.153322][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.160456][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.168084][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.176879][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.184119][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.192111][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.240268][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.250476][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.257437][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.283545][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.311443][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.322160][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.331750][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.338695][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.364789][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.377993][ T4183] team0: Port device team_slave_0 added [ 60.386252][ T4185] team0: Port device team_slave_0 added [ 60.393862][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.421415][ T4183] team0: Port device team_slave_1 added [ 60.428576][ T4185] team0: Port device team_slave_1 added [ 60.451073][ T4186] team0: Port device team_slave_0 added [ 60.459521][ T4186] team0: Port device team_slave_1 added [ 60.488141][ T4187] team0: Port device team_slave_0 added [ 60.496000][ T4187] team0: Port device team_slave_1 added [ 60.522788][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.529735][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.555704][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.592949][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.600044][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.626012][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.637864][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.645827][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.671991][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.683578][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.690573][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.716699][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.737059][ T4184] device hsr_slave_0 entered promiscuous mode [ 60.744181][ T4184] device hsr_slave_1 entered promiscuous mode [ 60.751543][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.758487][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.785132][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.800421][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.807363][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.833393][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.845062][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.852483][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.878604][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.890671][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.897612][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.923613][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.002147][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.008791][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.015596][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.023577][ T4183] Cannot create hsr debugfs directory [ 61.046129][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.052907][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.059462][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.067268][ T4186] Cannot create hsr debugfs directory [ 61.085759][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.092606][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.099055][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.106685][ T4185] Cannot create hsr debugfs directory [ 61.128957][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.135857][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.142590][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.150359][ T4187] Cannot create hsr debugfs directory [ 61.195623][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 61.200145][ T1336] Bluetooth: hci2: command 0x0409 tx timeout [ 61.208110][ T1336] Bluetooth: hci3: command 0x0409 tx timeout [ 61.275421][ T4189] Bluetooth: hci4: command 0x0409 tx timeout [ 61.288406][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 61.438461][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.450427][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.459230][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.471833][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.516407][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.534546][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.543996][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.565535][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.579750][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.591002][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.618348][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.640183][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.698992][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.717632][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.728015][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.750708][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.757564][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.767680][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.778074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.788549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.800517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.809485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.818938][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.826160][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.837754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.847028][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.856664][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.865425][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.880139][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.888657][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.897581][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.904674][ T4213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.915847][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.950391][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.991212][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.001704][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.010518][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.019179][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.028128][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.037834][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.046202][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.057141][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.070543][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.083563][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.093506][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.116879][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.133297][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.142108][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.178242][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.194223][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.225908][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.244845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.253126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.286984][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.296975][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.309270][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.318779][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.325925][ T4213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.339211][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.348313][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.356886][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.364055][ T4213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.371818][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.381892][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.390669][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.404368][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.414336][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.429680][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.447811][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.456142][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.466076][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.474702][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.481792][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.490867][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.498464][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.506551][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.515726][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.524313][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.531382][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.539338][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.548305][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.557523][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.564624][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.572895][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.581701][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.590699][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.599252][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.608035][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.615116][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.625842][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.634265][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.642309][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.668684][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.679413][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.701740][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.709183][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.719329][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.727795][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.737421][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.745941][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.754525][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.764640][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.773446][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.782916][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.791796][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.799413][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.828404][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.840535][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.859732][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.872625][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.885773][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.897283][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.909281][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.920841][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.929278][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.939125][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.947687][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.956997][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.966051][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.975095][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.984578][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.992606][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.007685][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.025648][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.057915][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.077085][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.086606][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.097119][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.107400][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.117402][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.153672][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.170284][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.179288][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.188928][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.196110][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.205106][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.219274][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.230538][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.237618][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.246459][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.255446][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.263311][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.270375][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 63.271052][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 63.278941][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.287659][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 63.295310][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.326535][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.350499][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 63.350617][ T4248] Bluetooth: hci1: command 0x041b tx timeout [ 63.361064][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.378288][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.387797][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.402695][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.415812][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.425135][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.444030][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.453471][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.462689][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.475852][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.484202][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.492105][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.500969][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.516926][ T4184] device veth0_vlan entered promiscuous mode [ 63.527753][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.541260][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.554570][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.563336][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.576155][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.587241][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.606043][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.623167][ T4184] device veth1_vlan entered promiscuous mode [ 63.643348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.652073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.689454][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.709481][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.725872][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.736459][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.761594][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.792387][ T4185] device veth0_vlan entered promiscuous mode [ 63.799358][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.813746][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.825337][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.834276][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.849581][ T4184] device veth0_macvtap entered promiscuous mode [ 63.872037][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.881318][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.889034][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.908601][ T4185] device veth1_vlan entered promiscuous mode [ 63.918468][ T4184] device veth1_macvtap entered promiscuous mode [ 63.928484][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.936785][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.946117][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.953898][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.963954][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.973142][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.012893][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.021524][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.031897][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.041128][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.049216][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.058980][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.067461][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.076533][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.084771][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.103906][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.115771][ T4187] device veth0_vlan entered promiscuous mode [ 64.125552][ T4185] device veth0_macvtap entered promiscuous mode [ 64.137410][ T4183] device veth0_vlan entered promiscuous mode [ 64.148795][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.161812][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.171203][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.179400][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.187924][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.196559][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.206534][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.214789][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.229357][ T4183] device veth1_vlan entered promiscuous mode [ 64.237974][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.248623][ T4185] device veth1_macvtap entered promiscuous mode [ 64.259374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.267579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.276127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.285273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.305398][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.316010][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.325077][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.336365][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.362479][ T4187] device veth1_vlan entered promiscuous mode [ 64.369223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.378455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.387014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.396184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.408749][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.419980][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.432166][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.464311][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.473950][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.482986][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.493542][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.505360][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.516231][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.527305][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.544272][ T4183] device veth0_macvtap entered promiscuous mode [ 64.557947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.568094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.576489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.585130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.593954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.602785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.613762][ T4186] device veth0_vlan entered promiscuous mode [ 64.635170][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.644063][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.653095][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.662174][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.690885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.698574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.723316][ T4183] device veth1_macvtap entered promiscuous mode [ 64.739076][ T4186] device veth1_vlan entered promiscuous mode [ 64.779629][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.788425][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.807415][ T4187] device veth0_macvtap entered promiscuous mode [ 64.824816][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.842080][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.852912][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.864383][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.881427][ T4187] device veth1_macvtap entered promiscuous mode [ 64.892561][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.904865][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.915039][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.925753][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.937285][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.949736][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.958214][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.967165][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.976146][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.986234][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.996714][ T4186] device veth0_macvtap entered promiscuous mode [ 65.017474][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.035212][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.045322][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.056350][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.067465][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.091855][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.100864][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.109421][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.121589][ T4186] device veth1_macvtap entered promiscuous mode [ 65.129183][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.138645][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.151254][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.161071][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.187983][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.198458][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.201409][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.215831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.227653][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.228860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.244753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.253142][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.263849][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.275076][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.285833][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.295748][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.306380][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.317869][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.329308][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.341303][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.351477][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.351842][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 65.362821][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 65.368491][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.380261][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 65.384938][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.400713][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.412425][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.423718][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.433123][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.441295][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 65.447890][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 65.448859][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.463530][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.478674][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.492521][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.502774][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.515886][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.531962][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.545649][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.555987][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.566661][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578278][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.586351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.596476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.605743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.614951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.624032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.633438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.665698][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.674572][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.707367][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.746008][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.763871][ T4292] loop1: detected capacity change from 0 to 1024 [ 65.768843][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.782014][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.792901][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.803636][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.813934][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.825112][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.846822][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.847693][ T4292] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.863032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.898772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.908270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.955096][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.975028][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.984016][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.993561][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.086227][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.171984][ T4300] binder: 4296:4300 unknown command 0 [ 66.177405][ T4300] binder: 4296:4300 ioctl c0306201 200000000080 returned -22 [ 66.199723][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.251306][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.285997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.353489][ T4299] loop0: detected capacity change from 0 to 32768 [ 66.372357][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.409302][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.417877][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.426730][ T4299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4299) [ 66.444214][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.457920][ T4299] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 66.466918][ T4299] BTRFS info (device loop0): turning on sync discard [ 66.474029][ T4299] BTRFS info (device loop0): use no compression [ 66.480384][ T4299] BTRFS info (device loop0): turning off barriers [ 66.486963][ T4299] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 66.497635][ T4299] BTRFS info (device loop0): trying to use backup root at mount time [ 66.505811][ T4299] BTRFS info (device loop0): enabling auto defrag [ 66.512728][ T4299] BTRFS info (device loop0): max_inline at 0 [ 66.518731][ T4299] BTRFS info (device loop0): using free space tree [ 66.525323][ T4299] BTRFS info (device loop0): has skinny extents [ 66.539973][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.548900][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.578493][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.588997][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.597184][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.605140][ T4308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 66.621351][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.630110][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.632246][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.651870][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.678250][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.726456][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.821386][ T4305] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 66.888775][ T4299] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 66.897489][ T4281] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 66.965750][ T4299] BTRFS warning (device loop0): couldn't read tree root [ 66.974406][ T4299] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 66.984692][ T4299] BTRFS warning (device loop0): couldn't read tree root [ 67.018201][ T4299] BTRFS info (device loop0): enabling ssd optimizations [ 67.027455][ T4337] loop2: detected capacity change from 0 to 1024 [ 67.034494][ T4299] BTRFS info (device loop0): clearing free space tree [ 67.041965][ T4299] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.051927][ T4299] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.058102][ T4337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.097937][ T4299] BTRFS info (device loop0): creating free space tree [ 67.106535][ T4299] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.116375][ T4299] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.144895][ T4335] device syzkaller0 entered promiscuous mode [ 67.189736][ T4337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.211413][ T4337] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.275635][ T4337] overlayfs: invalid origin (0000) [ 67.300170][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.442140][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 67.443401][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 67.448337][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 67.461892][ T4295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.518830][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 67.525919][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 67.874322][ T4295] usb 5-1: Using ep0 maxpacket: 32 [ 67.890194][ T4234] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.959553][ T4234] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.021587][ T4295] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 68.081713][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 68.108213][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.184448][ T4234] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 68.355497][ T4295] usb 5-1: config 0 descriptor?? [ 68.425487][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.650024][ T4234] usb 4-1: config 0 descriptor?? [ 68.696800][ T4295] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 68.702987][ T4374] netlink: 'syz.0.13': attribute type 8 has an invalid length. [ 68.713880][ T4376] loop1: detected capacity change from 0 to 2048 [ 68.799932][ T4378] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.169239][ T4234] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0001/input/input5 [ 69.297031][ T4234] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 69.339190][ T4234] usb 4-1: USB disconnect, device number 2 [ 69.562263][ T4295] gspca_vc032x: reg_w err -71 [ 69.567068][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.595956][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.612580][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.620106][ T1109] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.636806][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.645521][ T4388] fido_id[4388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 69.667297][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.699336][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.728050][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.782260][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.820823][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.826158][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.854291][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.859633][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.865574][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.871119][ T1109] usb 2-1: Using ep0 maxpacket: 16 [ 69.876517][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.882804][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.888673][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.894503][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.900168][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.905470][ T4295] gspca_vc032x: Unknown sensor... [ 69.913305][ T4295] vc032x: probe of 5-1:0.0 failed with error -22 [ 69.938151][ T4295] usb 5-1: USB disconnect, device number 2 [ 70.031068][ T1109] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.110217][ T1109] usb 2-1: config 10 has an invalid interface number: 93 but max is 0 [ 70.129362][ T1109] usb 2-1: config 10 has no interface number 0 [ 70.152222][ T1109] usb 2-1: config 10 interface 93 has no altsetting 0 [ 70.560385][ T4404] loop3: detected capacity change from 0 to 40427 [ 70.572406][ T1109] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=e4.13 [ 70.582789][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.591306][ T1109] usb 2-1: Product: syz [ 70.592116][ T4408] loop2: detected capacity change from 0 to 512 [ 70.595491][ T1109] usb 2-1: Manufacturer: syz [ 70.595529][ T1109] usb 2-1: SerialNumber: syz [ 70.654485][ T4408] EXT4-fs (loop2): Ignoring removed nobh option [ 70.666071][ T4404] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 70.673452][ T4404] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 70.686721][ T4404] F2FS-fs (loop3): invalid crc value [ 70.713468][ T4408] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.26: iget: bad i_size value: 38620345925642 [ 70.729912][ T4295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.738320][ T4408] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.26: couldn't read orphan inode 15 (err -117) [ 70.752459][ T4404] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.765750][ T4408] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,nombcache,data_err=ignore,,errors=continue. Quota mode: writeback. [ 70.817717][ T4404] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 70.825128][ T4404] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.877243][ T4404] attempt to access beyond end of device [ 70.877243][ T4404] loop3: rw=10241, want=45104, limit=40427 [ 70.891581][ T4404] attempt to access beyond end of device [ 70.891581][ T4404] loop3: rw=2049, want=45104, limit=40427 [ 70.932262][ T4187] attempt to access beyond end of device [ 70.932262][ T4187] loop3: rw=2049, want=45112, limit=40427 [ 70.946552][ T1109] upd78f0730 2-1:10.93: upd78f0730 converter detected [ 70.960292][ T1109] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 70.979566][ T1109] usb 2-1: USB disconnect, device number 2 [ 70.993945][ T1109] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 71.007343][ T1109] upd78f0730 2-1:10.93: device disconnected [ 71.194667][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.201712][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.310138][ T4295] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 71.318369][ T4295] usb 5-1: config 0 has no interface number 0 [ 71.325016][ T4295] usb 5-1: config 0 interface 144 has no altsetting 0 [ 71.430551][ T1336] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.490398][ T4295] usb 5-1: New USB device found, idVendor=04da, idProduct=0d05, bcdDevice= 0.00 [ 71.604124][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.800006][ T1336] usb 1-1: Using ep0 maxpacket: 32 [ 71.824375][ T4295] usb 5-1: Product: syz [ 71.920944][ T1336] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 72.069683][ T4295] usb 5-1: Manufacturer: syz [ 72.077611][ T4295] usb 5-1: SerialNumber: syz [ 72.089921][ T1336] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 72.143458][ T4295] usb 5-1: config 0 descriptor?? [ 72.181649][ T4295] usb-storage 5-1:0.144: USB Mass Storage device detected [ 72.324383][ T1336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.324416][ T1336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.324438][ T1336] usb 1-1: Product: syz [ 72.324454][ T1336] usb 1-1: Manufacturer: syz [ 72.324470][ T1336] usb 1-1: SerialNumber: syz [ 72.542462][ T4418] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.542693][ T4418] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 72.590473][ T4431] loop1: detected capacity change from 0 to 32768 [ 72.599767][ T4362] usb 5-1: USB disconnect, device number 3 [ 72.615600][ T4434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27'. [ 72.644122][ T4431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.32 (4431) [ 73.248337][ T4431] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 73.248401][ T4431] BTRFS info (device loop1): turning on sync discard [ 73.248421][ T4431] BTRFS info (device loop1): use zlib compression, level 3 [ 73.248444][ T4431] BTRFS info (device loop1): turning off barriers [ 73.248464][ T4431] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 73.248483][ T4431] BTRFS info (device loop1): trying to use backup root at mount time [ 73.248504][ T4431] BTRFS info (device loop1): enabling auto defrag [ 73.248547][ T4431] BTRFS info (device loop1): max_inline at 0 [ 73.248564][ T4431] BTRFS info (device loop1): using free space tree [ 73.248579][ T4431] BTRFS info (device loop1): has skinny extents [ 73.334868][ C1] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.344849][ T1336] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 73.350776][ T1336] usb 1-1: USB disconnect, device number 2 [ 73.686932][ T4447] loop4: detected capacity change from 0 to 32768 [ 73.730393][ T4447] ======================================================= [ 73.730393][ T4447] WARNING: The mand mount option has been deprecated and [ 73.730393][ T4447] and is ignored by this kernel. Remove the mand [ 73.730393][ T4447] option from the mount to silence this warning. [ 73.730393][ T4447] ======================================================= [ 73.806540][ T4462] capability: warning: `syz.0.36' uses deprecated v2 capabilities in a way that may be insecure [ 73.860966][ T4447] JBD2: Ignoring recovery information on journal [ 73.943511][ T4369] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 73.986503][ T4431] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 73.995663][ T154] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 74.044591][ T4431] BTRFS warning (device loop1): couldn't read tree root [ 74.052733][ T4431] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 74.057778][ T4465] loop2: detected capacity change from 0 to 32768 [ 74.062622][ T4431] BTRFS warning (device loop1): couldn't read tree root [ 74.091517][ T4447] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 74.161671][ T4472] loop0: detected capacity change from 0 to 256 [ 74.162473][ T4431] BTRFS info (device loop1): enabling ssd optimizations [ 74.176650][ T4431] BTRFS info (device loop1): clearing free space tree [ 74.183979][ T4431] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.194205][ T4431] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.216510][ T4431] BTRFS info (device loop1): creating free space tree [ 74.224418][ T4431] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.234090][ T4431] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.418751][ T4472] FAT-fs (loop0): Directory bread(block 64) failed [ 74.467823][ T4465] XFS (loop2): Mounting V5 Filesystem [ 74.473897][ T4472] FAT-fs (loop0): Directory bread(block 65) failed [ 74.513314][ T4472] FAT-fs (loop0): Directory bread(block 66) failed [ 74.520616][ T4472] FAT-fs (loop0): Directory bread(block 67) failed [ 74.527230][ T4472] FAT-fs (loop0): Directory bread(block 68) failed [ 74.535044][ T4472] FAT-fs (loop0): Directory bread(block 69) failed [ 74.545275][ T4472] FAT-fs (loop0): Directory bread(block 70) failed [ 74.548355][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 74.559612][ T4472] FAT-fs (loop0): Directory bread(block 71) failed [ 74.599114][ T4472] FAT-fs (loop0): Directory bread(block 72) failed [ 74.632150][ T4472] FAT-fs (loop0): Directory bread(block 73) failed [ 74.684349][ T4465] XFS (loop2): Ending clean mount [ 74.697675][ T4465] XFS (loop2): Quotacheck needed: Please wait. [ 74.907477][ T4465] XFS (loop2): Quotacheck: Done. [ 75.161568][ T26] audit: type=1804 audit(1752689616.736:2): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.38" name="/newroot/8/file0/bus" dev="loop2" ino=9290 res=1 errno=0 [ 75.282764][ T4489] loop4: detected capacity change from 0 to 764 [ 75.629114][ T4489] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.180170][ T26] audit: type=1804 audit(1752689617.736:3): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.38" name="/newroot/8/file0/bus" dev="loop2" ino=9290 res=1 errno=0 [ 76.449896][ T4497] loop1: detected capacity change from 0 to 4096 [ 76.507287][ T4186] XFS (loop2): Unmounting Filesystem [ 76.532515][ T4497] EXT4-fs (loop1): Ignoring removed orlov option [ 76.641896][ T4502] (syz.0.46,4502,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 76.680960][ T4502] (syz.0.46,4502,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 76.731100][ T4503] loop0: detected capacity change from 0 to 1024 [ 76.871994][ T4497] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.879231][ T4497] EXT4-fs (loop1): Ignoring removed nobh option [ 77.047764][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,noquota,usrjquota=,orlov,test_dummy_encryption,minixdf,nobh,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 77.981935][ T4517] comedi comedi1: pcm3724: I/O port conflict (0x20109,16) [ 78.302363][ T4519] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 78.424343][ T4519] fuse: Bad value for 'fd' [ 78.466079][ T4519] xt_hashlimit: max too large, truncated to 1048576 [ 78.834199][ T4533] loop2: detected capacity change from 0 to 1024 [ 79.694454][ T4369] hfsplus: b-tree write err: -5, ino 4 [ 79.752857][ T26] audit: type=1326 audit(1752689621.326:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.56" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5400b42929 code=0x0 [ 80.008062][ T4545] loop4: detected capacity change from 0 to 32768 [ 80.184103][ T4548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.59'. [ 80.999866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 81.008983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 81.018100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 81.027178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 81.036167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 81.045248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 81.054240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.063306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.072285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.081358][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.211944][ T4545] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 81.452535][ T1107] cfg80211: failed to load regulatory.db [ 81.951747][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 82.254744][ T4564] loop2: detected capacity change from 0 to 764 [ 82.282667][ T4562] loop4: detected capacity change from 0 to 32768 [ 82.404390][ T4564] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.505632][ T4562] XFS (loop4): Mounting V5 Filesystem [ 82.917457][ T4562] XFS (loop4): Ending clean mount [ 82.924616][ T4562] XFS (loop4): Quotacheck needed: Please wait. [ 83.057882][ T4562] XFS (loop4): Quotacheck: Done. [ 83.275206][ T4183] XFS (loop4): Unmounting Filesystem [ 83.627532][ T4582] input: syz0 as /devices/virtual/input/input6 [ 83.912795][ T4585] loop2: detected capacity change from 0 to 4096 [ 84.320447][ T4585] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 84.477551][ T4592] process 'syz.4.64' launched './file0' with NULL argv: empty string added [ 84.990808][ T4585] ntfs3: loop2: failed to convert "c46c" to iso8859-13 [ 85.259820][ T4594] loop1: detected capacity change from 0 to 32768 [ 85.404633][ T4594] XFS (loop1): Mounting V5 Filesystem [ 85.843457][ T1107] XFS (loop1): Metadata corruption detected at xfs_buf_ioend+0x25c/0x6e0, xfs_inode block 0x4880 xfs_inode_buf_verify [ 85.873583][ T1107] XFS (loop1): Unmount and run xfs_repair [ 85.879444][ T1107] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 86.879955][ T1107] 00000000: 49 4e 00 f7 ff ff ff ff ff ff ff 00 00 00 00 00 IN.............. [ 86.889651][ T1107] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.070089][ T4619] loop4: detected capacity change from 0 to 32768 [ 87.135536][ T1107] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.140132][ T4619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.76 (4619) [ 87.162816][ T4619] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 87.171603][ T4619] BTRFS info (device loop4): turning on sync discard [ 87.175642][ T1107] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.178327][ T4619] BTRFS info (device loop4): turning off barriers [ 87.194309][ T4619] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 87.204986][ T4619] BTRFS info (device loop4): trying to use backup root at mount time [ 87.213378][ T4619] BTRFS info (device loop4): turning on barriers [ 87.219734][ T4619] BTRFS info (device loop4): disabling free space tree [ 87.226724][ T4619] BTRFS error (device loop4): cannot disable free space tree [ 87.250672][ T4627] loop2: detected capacity change from 0 to 8 [ 87.271949][ T1107] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.391592][ T1107] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.455964][ T1107] 00000060: ff ff ff ff e6 8a f7 29 00 00 00 00 00 00 00 00 .......)........ [ 87.474965][ T4627] SQUASHFS error: zlib decompression failed, data probably corrupt [ 87.484848][ T1107] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.510012][ T4627] SQUASHFS error: Failed to read block 0x4e8: -5 [ 87.517744][ T4594] XFS (loop1): metadata I/O error in "xfs_imap_to_bp+0x110/0x180" at daddr 0x4880 len 64 error 117 [ 87.528785][ T4594] XFS (loop1): Failed to read root inode 0x2440, error 117 [ 87.584957][ T4619] BTRFS error (device loop4): open_ctree failed: -22 [ 87.592544][ T4175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4175) [ 87.607384][ T4627] SQUASHFS error: zlib decompression failed, data probably corrupt [ 87.627668][ T4627] SQUASHFS error: Failed to read block 0x4ee: -5 [ 87.715201][ T4632] loop3: detected capacity change from 0 to 1024 [ 87.723533][ T26] audit: type=1800 audit(1752689629.296:5): pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.78" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 88.017800][ T4632] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.663061][ T4650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.83'. [ 89.259831][ C0] sched: RT throttling activated [ 89.282533][ T26] audit: type=1800 audit(1752689630.856:6): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.81" name="file0" dev="overlay" ino=13 res=0 errno=0 [ 89.488294][ T4655] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.369676][ T4662] loop2: detected capacity change from 0 to 128 [ 90.551204][ T4662] attempt to access beyond end of device [ 90.551204][ T4662] loop2: rw=2049, want=241, limit=128 [ 90.628239][ T4666] loop4: detected capacity change from 0 to 4096 [ 90.676771][ T4670] loop3: detected capacity change from 0 to 4096 [ 90.701922][ T4672] block device autoloading is deprecated and will be removed. [ 90.728071][ T4666] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 90.756566][ T4670] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 90.843893][ T4666] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 90.895200][ T4666] ntfs3: loop4: Failed to load $Extend. [ 92.062183][ T4686] netlink: 36 bytes leftover after parsing attributes in process `syz.1.90'. [ 92.690935][ T4694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.99'. [ 94.370256][ T4712] loop4: detected capacity change from 0 to 8 [ 94.381061][ T4712] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 94.393020][ T4386] udevd[4386]: incorrect cramfs checksum on /dev/loop4 [ 95.364918][ T4256] Bluetooth: hci2: command 0x0405 tx timeout [ 97.498640][ T4736] loop1: detected capacity change from 0 to 764 [ 97.611051][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 97.646845][ T4736] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 99.047098][ T4749] loop3: detected capacity change from 0 to 2048 [ 99.188894][ T4753] loop2: detected capacity change from 0 to 32768 [ 99.218138][ T4749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.305785][ T4753] XFS (loop2): Mounting V5 Filesystem [ 99.506261][ T4753] XFS (loop2): Ending clean mount [ 99.515342][ T4753] XFS (loop2): Quotacheck needed: Please wait. [ 99.984312][ T4753] XFS (loop2): Quotacheck: Done. [ 100.651278][ T4186] XFS (loop2): Unmounting Filesystem [ 100.775598][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.781085][ T4784] loop1: detected capacity change from 0 to 1024 [ 100.818363][ T4784] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.835654][ T4784] EXT4-fs (loop1): inline encryption not supported [ 100.852851][ T4784] EXT4-fs (loop1): can't mount with commit=4, fs mounted w/o journal [ 101.020354][ T4786] netlink: 36 bytes leftover after parsing attributes in process `syz.4.125'. [ 101.390173][ T1109] usb 4-1: Using ep0 maxpacket: 16 [ 102.450479][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.488988][ T1109] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 102.528918][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.570364][ T4799] loop1: detected capacity change from 0 to 4096 [ 102.589519][ T1109] usb 4-1: config 0 descriptor?? [ 102.615831][ T4799] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 102.864000][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.015688][ T4810] loop1: detected capacity change from 0 to 8 [ 103.060485][ T4810] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 103.073266][ T1109] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 103.089899][ T1109] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 103.107477][ T1109] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 103.120833][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 103.127574][ T1109] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 103.141468][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop1 [ 103.158646][ T1109] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 103.184420][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop1 [ 103.192126][ T1109] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 103.330289][ T21] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 103.350955][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.517340][ T4777] i2c i2c-1: unsupported multi-msg i2c transaction [ 103.530529][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.557661][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.613758][ T21] usb 5-1: Product: syz [ 103.640966][ T21] usb 5-1: Manufacturer: syz [ 103.670993][ T21] usb 5-1: SerialNumber: syz [ 104.253634][ T1109] usb 4-1: USB disconnect, device number 3 [ 104.370289][ T21] usb 5-1: 0:2 : does not exist [ 104.386445][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 104.405592][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 104.420384][ T4200] Bluetooth: hci1: hardware error 0x00 [ 104.743401][ T21] usb 5-1: USB disconnect, device number 4 [ 105.631355][ T4386] udevd[4386]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.731011][ T4844] loop4: detected capacity change from 0 to 32768 [ 106.740382][ T4846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.143'. [ 106.831876][ T4844] (syz.4.144,4844,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.845844][ T4844] (syz.4.144,4844,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.873162][ T4844] (syz.4.144,4844,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x5ee71fbf. Applying ECC. [ 106.887153][ T4844] (syz.4.144,4844,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x5ee71fbf [ 106.899722][ T4844] (syz.4.144,4844,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 25 [ 106.909733][ T4844] (syz.4.144,4844,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 106.918435][ T4844] (syz.4.144,4844,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 106.927535][ T4844] (syz.4.144,4844,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 106.936527][ T4844] (syz.4.144,4844,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 106.936564][ T4844] (syz.4.144,4844,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 106.958174][ T4844] (syz.4.144,4844,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 106.966347][ T4844] (syz.4.144,4844,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 107.345694][ T4850] Zero length message leads to an empty skb [ 108.137335][ T4852] loop0: detected capacity change from 0 to 40427 [ 108.512643][ T4859] loop1: detected capacity change from 0 to 32768 [ 108.537996][ T4852] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 108.546533][ T4852] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.561048][ T4860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.147'. [ 108.571636][ T4852] F2FS-fs (loop0): invalid crc value [ 109.246565][ T21] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 109.317352][ T4852] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.430762][ T4852] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.437886][ T4852] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.460091][ T21] Bluetooth: hci2: Injecting HCI hardware error event [ 109.491951][ T4188] Bluetooth: hci2: hardware error 0x00 [ 109.525030][ T4185] attempt to access beyond end of device [ 109.525030][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 109.873351][ T4871] loop3: detected capacity change from 0 to 764 [ 109.935508][ T4871] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 111.317421][ T4885] loop3: detected capacity change from 0 to 1024 [ 111.379995][ T26] audit: type=1326 audit(1752689652.926:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 111.479354][ T26] audit: type=1326 audit(1752689652.936:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 111.556082][ T26] audit: type=1326 audit(1752689652.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.262101][ T4897] sctp: failed to load transform for md5: -2 [ 112.300701][ T26] audit: type=1326 audit(1752689652.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.322926][ T26] audit: type=1326 audit(1752689652.936:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.345489][ T26] audit: type=1326 audit(1752689652.936:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.372058][ T26] audit: type=1326 audit(1752689652.936:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.455471][ T26] audit: type=1326 audit(1752689652.936:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.509447][ T4369] hfsplus: b-tree write err: -5, ino 4 [ 112.517004][ T26] audit: type=1326 audit(1752689652.936:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.575696][ T26] audit: type=1326 audit(1752689652.936:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5400b42929 code=0x7ffc0000 [ 112.778521][ T4909] loop4: detected capacity change from 0 to 32768 [ 112.934273][ T4909] XFS (loop4): Mounting V5 Filesystem [ 113.099488][ T4909] XFS (loop4): Ending clean mount [ 113.114306][ T4909] XFS (loop4): Quotacheck needed: Please wait. [ 113.248411][ T4909] XFS (loop4): Quotacheck: Done. [ 113.286296][ T4927] loop0: detected capacity change from 0 to 8 [ 113.370922][ T4927] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 113.387595][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop0 [ 113.396436][ T4183] XFS (loop4): Unmounting Filesystem [ 115.196001][ T4256] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 115.204673][ T4256] Bluetooth: hci4: Injecting HCI hardware error event [ 115.213215][ T4200] Bluetooth: hci4: hardware error 0x00 [ 116.041621][ T4957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.171'. [ 116.497180][ T4964] netlink: 96 bytes leftover after parsing attributes in process `syz.1.178'. [ 117.139130][ T4971] loop1: detected capacity change from 0 to 32768 [ 117.146618][ T4976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.181'. [ 117.671666][ T4971] XFS (loop1): Mounting V5 Filesystem [ 117.824873][ T4971] XFS (loop1): Ending clean mount [ 117.835345][ T4971] XFS (loop1): Quotacheck needed: Please wait. [ 117.928074][ T4971] XFS (loop1): Quotacheck: Done. [ 118.015304][ T4184] XFS (loop1): Unmounting Filesystem [ 118.238404][ T4991] loop0: detected capacity change from 0 to 32768 [ 118.290595][ T4991] XFS: ikeep mount option is deprecated. [ 118.817196][ T5004] loop3: detected capacity change from 0 to 764 [ 118.877125][ T4991] XFS (loop0): Mounting V5 Filesystem [ 118.894705][ T5004] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 119.431404][ T4991] XFS (loop0): Ending clean mount [ 119.483125][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 119.483140][ T26] audit: type=1800 audit(1752689661.056:22): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.186" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 119.682889][ T4185] XFS (loop0): Unmounting Filesystem [ 119.983487][ T5023] loop3: detected capacity change from 0 to 32768 [ 120.133494][ T5023] [ 120.133494][ T5023] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.133494][ T5023] [ 120.151812][ T4234] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 120.166583][ T4234] Bluetooth: hci0: Injecting HCI hardware error event [ 120.230512][ T5028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.196'. [ 120.253439][ T4199] Bluetooth: hci0: hardware error 0x00 [ 120.967625][ T4187] [ 120.967625][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.967625][ T4187] [ 121.009530][ T4187] [ 121.009530][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.009530][ T4187] [ 122.289720][ T5053] loop2: detected capacity change from 0 to 764 [ 122.522575][ T5053] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 123.627518][ T5068] netlink: 104 bytes leftover after parsing attributes in process `syz.0.209'. [ 123.691244][ T5068] netlink: 104 bytes leftover after parsing attributes in process `syz.0.209'. [ 124.128175][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 124.174362][ T5083] syz.4.215 uses obsolete (PF_INET,SOCK_PACKET) [ 124.207407][ T5084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'. [ 125.488793][ T5098] loop1: detected capacity change from 0 to 32768 [ 126.277336][ T5103] loop0: detected capacity change from 0 to 40427 [ 126.307860][ T5098] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 126.319005][ T5098] BTRFS info (device loop1): setting nodatacow, compression disabled [ 126.327193][ T5098] BTRFS info (device loop1): max_inline at 0 [ 126.333245][ T5098] BTRFS info (device loop1): enabling disk space caching [ 126.340321][ T5098] BTRFS info (device loop1): setting datasum, datacow enabled [ 126.347836][ T5098] BTRFS info (device loop1): turning off barriers [ 126.354312][ T5098] BTRFS info (device loop1): turning on flush-on-commit [ 126.361306][ T5098] BTRFS info (device loop1): disabling tree log [ 126.367574][ T5098] BTRFS info (device loop1): force clearing of disk cache [ 126.374782][ T5098] BTRFS info (device loop1): use zlib compression, level 3 [ 126.382062][ T5098] BTRFS info (device loop1): max_inline at 86 [ 126.388152][ T5098] BTRFS info (device loop1): disk space caching is enabled [ 126.395410][ T5098] BTRFS info (device loop1): has skinny extents [ 126.416118][ T5103] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 126.429054][ T5107] loop2: detected capacity change from 0 to 7 [ 126.464646][ T5107] Dev loop2: unable to read RDB block 7 [ 126.499982][ T5107] loop2: unable to read partition table [ 126.505808][ T5107] loop2: partition table beyond EOD, truncated [ 126.540066][ T5107] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.769141][ T5098] BTRFS info (device loop1): enabling ssd optimizations [ 126.782522][ T5098] BTRFS info (device loop1): clearing free space tree [ 126.789712][ T5098] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.800341][ T5098] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.829121][ T5138] loop2: detected capacity change from 0 to 8 [ 126.840035][ T4256] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.880459][ T5138] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 127.115959][ T5132] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.126041][ T5132] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.136966][ T5139] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.146425][ T5139] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.456196][ T4387] udevd[4387]: incorrect cramfs checksum on /dev/loop2 [ 127.523327][ T4387] udevd[4387]: incorrect cramfs checksum on /dev/loop2 [ 127.589300][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop2 [ 127.642889][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop2 [ 127.790461][ T4256] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.819918][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop2 [ 127.855922][ T4256] usb 1-1: not running at top speed; connect to a high speed hub [ 127.956383][ T5157] loop2: detected capacity change from 0 to 764 [ 128.010822][ T4256] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 128.019071][ T4256] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 128.115430][ T5157] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 128.877696][ T5157] overlayfs: failed to resolve './file0': -2 [ 128.883996][ T4256] usb 1-1: config 17 has no interface number 0 [ 128.899874][ T4256] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 128.919840][ T4256] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 128.932084][ T4256] usb 1-1: config 17 interface 8 has no altsetting 0 [ 129.028282][ T5163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.120390][ T4256] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 129.150055][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.158142][ T4256] usb 1-1: Product: syz [ 129.193115][ T4256] usb 1-1: Manufacturer: syz [ 129.197759][ T4256] usb 1-1: SerialNumber: syz [ 129.300325][ T5122] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.204713][ T4256] usb 1-1: selecting invalid altsetting 0 [ 130.350929][ T4256] usb 1-1: USB disconnect, device number 3 [ 130.817903][ T5174] loop2: detected capacity change from 0 to 4096 [ 130.853822][ T5178] loop0: detected capacity change from 0 to 32768 [ 130.961984][ T5178] (syz.0.238,5178,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 130.971559][ T5178] (syz.0.238,5178,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 130.996741][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 131.060017][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 131.097551][ T5180] loop1: detected capacity change from 0 to 32768 [ 131.141399][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 131.177154][ T4386] udevd[4386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.203915][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 131.228126][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 131.280845][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 131.411080][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 131.418974][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 131.441661][ T5180] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 131.572836][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 131.580892][ T5174] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 131.626942][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 131.804209][ T5182] loop0: detected capacity change from 0 to 512 [ 131.810491][ T5192] loop1: detected capacity change from 0 to 8 [ 131.870583][ T5192] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 131.910315][ T5182] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 131.917709][ T5182] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.956048][ T5196] loop4: detected capacity change from 0 to 764 [ 132.062644][ T5196] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.444714][ T5182] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,dioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 132.466051][ T5182] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.634213][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.641317][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.643526][ T5224] loop4: detected capacity change from 0 to 256 [ 133.924793][ T5224] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 135.397036][ T5238] loop4: detected capacity change from 0 to 32768 [ 135.551124][ T5238] JBD2: Ignoring recovery information on journal [ 135.761932][ T5238] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 135.856279][ T5260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.261'. [ 136.179560][ T5262] loop2: detected capacity change from 0 to 40427 [ 136.262127][ T5262] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 136.269987][ T5262] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.282897][ T5262] F2FS-fs (loop2): invalid crc value [ 136.304982][ T5262] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.363000][ T5262] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 136.370389][ T5262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.437624][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 136.666874][ T5268] loop4: detected capacity change from 0 to 2048 [ 136.880015][ T5272] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.531436][ T5280] loop3: detected capacity change from 0 to 32768 [ 138.722529][ T5280] XFS (loop3): Mounting V5 Filesystem [ 139.021473][ T5280] XFS (loop3): Ending clean mount [ 139.299952][ T5283] loop4: detected capacity change from 0 to 32768 [ 139.378391][ T5280] XFS (loop3): Quotacheck needed: Please wait. [ 139.427215][ T5283] JBD2: Ignoring recovery information on journal [ 139.530746][ T5280] XFS (loop3): Quotacheck: Done. [ 139.611935][ T5283] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 139.808771][ T4187] XFS (loop3): Unmounting Filesystem [ 139.864862][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 139.894875][ T5305] loop1: detected capacity change from 0 to 40427 [ 139.926231][ T5305] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.944547][ T5305] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.030090][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.035754][ T5305] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.090573][ T5305] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 140.097798][ T5305] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.279338][ T5321] loop4: detected capacity change from 0 to 128 [ 140.296226][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 140.410730][ T5321] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.421953][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.434193][ T5321] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.445673][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.455874][ T13] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 140.465109][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.475250][ T13] usb 1-1: config 0 descriptor?? [ 140.796496][ T5329] loop4: detected capacity change from 0 to 764 [ 140.857609][ T5329] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 140.963358][ T13] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 141.031026][ T13] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 141.182478][ T13] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 141.610041][ T13] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 142.288236][ T4174] usb 1-1: USB disconnect, device number 4 [ 142.524441][ T5351] fido_id[5351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.700260][ T5361] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 143.071959][ T5374] loop4: detected capacity change from 0 to 1024 [ 143.178980][ T5380] loop2: detected capacity change from 0 to 128 [ 143.372616][ T5374] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,i_version,nolazytime,user_xattr,dax=never,mb_optimize_scan=0x0000000000000001,noauto_da_alloc,nombcache,norecovery,min_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 143.379939][ T5380] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 143.649412][ T5380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.832528][ T5383] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 313: padding at end of block bitmap is not set [ 144.288085][ T5387] loop3: detected capacity change from 0 to 64 [ 144.292325][ T5389] loop0: detected capacity change from 0 to 764 [ 144.318788][ T5389] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 144.855402][ T4234] Bluetooth: hci5: command 0x1003 tx timeout [ 144.963136][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 146.200865][ T5418] loop4: detected capacity change from 0 to 8 [ 146.233935][ T5418] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 146.244601][ T4386] udevd[4386]: incorrect cramfs checksum on /dev/loop4 [ 147.030035][ T4249] Bluetooth: hci5: command 0x1001 tx timeout [ 147.048314][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 147.524958][ T5436] loop2: detected capacity change from 0 to 764 [ 147.596772][ T5438] comedi comedi1: driver 'ni_daq_700' does not support attach using comedi_config [ 147.713330][ T5440] loop0: detected capacity change from 0 to 128 [ 147.749870][ T5436] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 147.977678][ T5440] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.182179][ T5440] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.101606][ T5456] loop2: detected capacity change from 0 to 8 [ 149.109927][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 149.150957][ T5456] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 149.176224][ T4386] udevd[4386]: incorrect cramfs checksum on /dev/loop2 [ 149.205040][ T4386] udevd[4386]: incorrect cramfs checksum on /dev/loop2 [ 149.871144][ T5465] loop4: detected capacity change from 0 to 32768 [ 149.891810][ T5449] loop0: detected capacity change from 0 to 32768 [ 150.031518][ T5449] XFS (loop0): Mounting V5 Filesystem [ 150.104340][ T5449] XFS (loop0): Ending clean mount [ 150.121309][ T5449] XFS (loop0): Quotacheck needed: Please wait. [ 150.295789][ T5449] XFS (loop0): Quotacheck: Done. [ 150.538101][ T4185] XFS (loop0): Unmounting Filesystem [ 153.219706][ T5500] loop2: detected capacity change from 0 to 40427 [ 153.264732][ T5500] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 154.462757][ T5506] loop0: detected capacity change from 0 to 512 [ 154.696908][ T5510] loop1: detected capacity change from 0 to 32768 [ 154.871115][ T5510] JBD2: Ignoring recovery information on journal [ 154.932495][ T5510] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 154.972397][ T5506] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.058242][ T5506] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.108352][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 155.343959][ T5516] loop4: detected capacity change from 0 to 4096 [ 155.469362][ T5516] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 156.211898][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.476687][ T4183] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 156.513610][ T4183] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 156.525881][ T4183] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 156.710279][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.796035][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.151419][ T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.267722][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.470559][ T13] usb 1-1: SerialNumber: syz [ 157.610444][ T13] usb 1-1: can't set config #1, error -71 [ 157.620954][ T13] usb 1-1: USB disconnect, device number 5 [ 157.748825][ T5550] loop3: detected capacity change from 0 to 128 [ 160.094471][ T5572] loop3: detected capacity change from 0 to 4096 [ 160.784633][ T5581] tmpfs: Unknown parameter 'grpquota' [ 161.039236][ T5586] loop0: detected capacity change from 0 to 512 [ 161.707189][ T5586] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.363: invalid indirect mapped block 4294967295 (level 1) [ 162.002470][ T5586] EXT4-fs (loop0): Remounting filesystem read-only [ 162.009045][ T5586] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.363: invalid indirect mapped block 4294967295 (level 1) [ 162.026822][ T5586] EXT4-fs (loop0): Remounting filesystem read-only [ 162.034029][ T5586] EXT4-fs (loop0): 2 truncates cleaned up [ 162.045260][ T5586] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,user_xattr,auto_da_alloc=0x000000007fffffff,. Quota mode: writeback. [ 162.152046][ T5597] loop3: detected capacity change from 0 to 764 [ 162.224645][ T5597] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 163.259995][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.292106][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 164.430172][ T13] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.439543][ T13] usb 2-1: config 0 has no interface number 0 [ 164.634319][ T5629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.375'. [ 164.654568][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 164.667047][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.681112][ T13] usb 2-1: Product: syz [ 164.695907][ T13] usb 2-1: Manufacturer: syz [ 164.701060][ T13] usb 2-1: SerialNumber: syz [ 164.777009][ T13] usb 2-1: config 0 descriptor?? [ 164.851624][ T13] smsc95xx v2.0.0 [ 165.290173][ T13] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 166.085610][ T13] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 166.330042][ T13] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 166.374553][ T13] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 166.415293][ T13] usb 2-1: USB disconnect, device number 3 [ 166.513246][ T5647] loop1: detected capacity change from 0 to 764 [ 166.567943][ T5654] loop4: detected capacity change from 0 to 1024 [ 166.586399][ T5647] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 166.873772][ T5654] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,nodioread_nolock,block_validity,max_batch_time=0x0000000000000002,,errors=continue. Quota mode: none. [ 167.960505][ T5654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.383: bg 0: block 73: padding at end of block bitmap is not set [ 168.194604][ T5674] loop0: detected capacity change from 0 to 32768 [ 168.244243][ T5674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.387 (5674) [ 168.317652][ T5674] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 168.326752][ T5674] BTRFS info (device loop0): setting nodatacow, compression disabled [ 168.334938][ T5674] BTRFS info (device loop0): max_inline at 0 [ 168.341009][ T5674] BTRFS info (device loop0): force zlib compression, level 3 [ 168.348471][ T5674] BTRFS info (device loop0): doing ref verification [ 168.355211][ T5674] BTRFS info (device loop0): force clearing of disk cache [ 168.362408][ T5674] BTRFS info (device loop0): enabling ssd optimizations [ 168.369428][ T5674] BTRFS info (device loop0): turning off barriers [ 168.376014][ T5674] BTRFS info (device loop0): max_inline at 4096 [ 168.382368][ T5674] BTRFS info (device loop0): using free space tree [ 168.388913][ T5674] BTRFS info (device loop0): has skinny extents [ 168.850345][ T5681] loop1: detected capacity change from 0 to 65536 [ 169.158084][ T5681] XFS (loop1): Mounting V5 Filesystem [ 169.300846][ T5674] BTRFS info (device loop0): clearing free space tree [ 169.302977][ T5681] XFS (loop1): Ending clean mount [ 169.307792][ T5674] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.323783][ T5674] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.342105][ T5674] BTRFS info (device loop0): creating free space tree [ 169.351444][ T5674] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.361317][ T5674] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.577673][ T4184] XFS (loop1): Unmounting Filesystem [ 169.649493][ T5724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 169.845302][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 170.171447][ T5732] loop3: detected capacity change from 0 to 1024 [ 170.259986][ T4175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (4175) [ 170.309270][ T5732] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 170.359962][ T5732] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.545495][ T5732] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 13) [ 170.756771][ T5732] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 170.838519][ T5732] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.838519][ T5732] [ 170.868551][ T5747] loop2: detected capacity change from 0 to 764 [ 170.879686][ T5745] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.904681][ T5731] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.944653][ T5745] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.990620][ T5747] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 171.026251][ T5731] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.104664][ T5745] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.162078][ T5731] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.246918][ T5731] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.272235][ T5731] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.318276][ T5745] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 173.237019][ T5774] loop4: detected capacity change from 0 to 4096 [ 173.289066][ T5776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.409'. [ 173.407217][ T5774] NILFS (loop4): invalid segment: Checksum error in segment payload [ 173.443653][ T5774] NILFS (loop4): trying rollback from an earlier position [ 173.453914][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 174.005633][ T5774] NILFS (loop4): recovery complete [ 174.013122][ T21] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=e7.0f [ 174.066131][ T21] usb 3-1: New USB device strings: Mfr=151, Product=2, SerialNumber=3 [ 174.143227][ T5782] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.194860][ T21] usb 3-1: Product: syz [ 174.290042][ T21] usb 3-1: Manufacturer: syz [ 174.309896][ T21] usb 3-1: SerialNumber: syz [ 174.370677][ T21] usb 3-1: config 0 descriptor?? [ 175.170987][ T5789] loop4: detected capacity change from 0 to 65536 [ 175.210457][ T5789] XFS: ikeep mount option is deprecated. [ 175.690466][ T5789] XFS (loop4): Mounting V5 Filesystem [ 175.813152][ T5789] XFS (loop4): Ending clean mount [ 175.820883][ T5789] XFS (loop4): Quotacheck needed: Please wait. [ 175.821144][ T5742] usb 3-1: USB disconnect, device number 2 [ 176.190469][ T5789] XFS (loop4): Quotacheck: Done. [ 176.291495][ T4183] XFS (loop4): Unmounting Filesystem [ 176.727998][ T5822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.420'. [ 176.894370][ T5821] [ 176.896776][ T5821] ====================================================== [ 176.903857][ T5821] WARNING: possible circular locking dependency detected [ 176.911268][ T5821] 5.15.188-syzkaller #0 Not tainted [ 176.916486][ T5821] ------------------------------------------------------ [ 176.923705][ T5821] syz.3.421/5821 is trying to acquire lock: [ 176.929609][ T5821] ffff888059b31450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 176.941205][ T5821] [ 176.941205][ T5821] but task is already holding lock: [ 176.948678][ T5821] ffff888059b30120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 176.957671][ T5821] [ 176.957671][ T5821] which lock already depends on the new lock. [ 176.957671][ T5821] [ 176.968080][ T5821] [ 176.968080][ T5821] the existing dependency chain (in reverse order) is: [ 176.977097][ T5821] [ 176.977097][ T5821] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 176.984866][ T5821] lock_sock_nested+0x44/0x100 [ 176.990163][ T5821] smc_listen_out+0x109/0x3d0 [ 176.995455][ T5821] process_one_work+0x863/0x1000 [ 177.000952][ T5821] worker_thread+0xaa8/0x12a0 [ 177.006164][ T5821] kthread+0x436/0x520 [ 177.010760][ T5821] ret_from_fork+0x1f/0x30 [ 177.015799][ T5821] [ 177.015799][ T5821] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 177.025976][ T5821] __lock_acquire+0x2c33/0x7c60 [ 177.031367][ T5821] lock_acquire+0x197/0x3f0 [ 177.036404][ T5821] __flush_work+0xdd/0x1b0 [ 177.041347][ T5821] __cancel_work_timer+0x3ac/0x520 [ 177.046986][ T5821] smc_clcsock_release+0x5c/0xe0 [ 177.052463][ T5821] __smc_release+0x398/0x500 [ 177.057588][ T5821] smc_close_non_accepted+0xd1/0x1f0 [ 177.063625][ T5821] smc_close_active+0x9d3/0xd90 [ 177.069113][ T5821] __smc_release+0x9a/0x500 [ 177.074442][ T5821] smc_release+0x2ca/0x530 [ 177.079929][ T5821] sock_close+0xd5/0x240 [ 177.084728][ T5821] __fput+0x234/0x930 [ 177.089459][ T5821] task_work_run+0x125/0x1a0 [ 177.096344][ T5821] exit_to_user_mode_loop+0x10f/0x130 [ 177.104929][ T5821] exit_to_user_mode_prepare+0xb1/0x140 [ 177.111386][ T5821] syscall_exit_to_user_mode+0x16/0x40 [ 177.117413][ T5821] do_syscall_64+0x58/0xa0 [ 177.122386][ T5821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.128816][ T5821] [ 177.128816][ T5821] other info that might help us debug this: [ 177.128816][ T5821] [ 177.139068][ T5821] Possible unsafe locking scenario: [ 177.139068][ T5821] [ 177.146527][ T5821] CPU0 CPU1 [ 177.152075][ T5821] ---- ---- [ 177.157466][ T5821] lock(sk_lock-AF_SMC/1); [ 177.161990][ T5821] lock((work_completion)(&new_smc->smc_listen_work)); [ 177.171451][ T5821] lock(sk_lock-AF_SMC/1); [ 177.178513][ T5821] lock((work_completion)(&new_smc->smc_listen_work)); [ 177.185470][ T5821] [ 177.185470][ T5821] *** DEADLOCK *** [ 177.185470][ T5821] [ 177.193655][ T5821] 2 locks held by syz.3.421/5821: [ 177.198823][ T5821] #0: ffff888060a84410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 177.209253][ T5821] #1: ffff888059b30120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 177.219096][ T5821] [ 177.219096][ T5821] stack backtrace: [ 177.225735][ T5821] CPU: 0 PID: 5821 Comm: syz.3.421 Not tainted 5.15.188-syzkaller #0 [ 177.233810][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.243882][ T5821] Call Trace: [ 177.247169][ T5821] [ 177.250107][ T5821] dump_stack_lvl+0x168/0x230 [ 177.254825][ T5821] ? load_image+0x3b0/0x3b0 [ 177.259341][ T5821] ? show_regs_print_info+0x20/0x20 [ 177.264552][ T5821] ? print_circular_bug+0x12b/0x1a0 [ 177.269759][ T5821] check_noncircular+0x274/0x310 [ 177.274710][ T5821] ? add_chain_block+0x940/0x940 [ 177.279656][ T5821] ? lockdep_lock+0xdc/0x1e0 [ 177.284352][ T5821] ? mark_lock+0x94/0x320 [ 177.288869][ T5821] __lock_acquire+0x2c33/0x7c60 [ 177.293819][ T5821] ? hlock_conflict+0x59/0x1f0 [ 177.298642][ T5821] ? check_path+0x40/0x40 [ 177.302979][ T5821] ? verify_lock_unused+0x140/0x140 [ 177.308189][ T5821] ? mark_lock+0x94/0x320 [ 177.312529][ T5821] ? __lock_acquire+0x13ad/0x7c60 [ 177.317568][ T5821] ? add_chain_block+0x940/0x940 [ 177.322620][ T5821] lock_acquire+0x197/0x3f0 [ 177.327144][ T5821] ? __flush_work+0xc1/0x1b0 [ 177.331852][ T5821] ? read_lock_is_recursive+0x10/0x10 [ 177.337240][ T5821] __flush_work+0xdd/0x1b0 [ 177.341665][ T5821] ? __flush_work+0xc1/0x1b0 [ 177.346265][ T5821] ? flush_work+0x20/0x20 [ 177.350616][ T5821] ? try_to_grab_pending+0xf3/0x7e0 [ 177.355832][ T5821] ? lockdep_hardirqs_off+0x70/0x100 [ 177.361125][ T5821] ? mark_lock+0x94/0x320 [ 177.365464][ T5821] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 177.371607][ T5821] ? lock_chain_count+0x20/0x20 [ 177.376624][ T5821] ? print_unlock_imbalance_bug+0x160/0x160 [ 177.382588][ T5821] ? __cancel_work_timer+0x331/0x520 [ 177.387903][ T5821] __cancel_work_timer+0x3ac/0x520 [ 177.393032][ T5821] ? cancel_work_sync+0x20/0x20 [ 177.397991][ T5821] ? __local_bh_enable_ip+0x12a/0x1b0 [ 177.403380][ T5821] ? lockdep_hardirqs_on+0x94/0x140 [ 177.408903][ T5821] ? __local_bh_enable_ip+0x12a/0x1b0 [ 177.414487][ T5821] ? _local_bh_enable+0xa0/0xa0 [ 177.419368][ T5821] smc_clcsock_release+0x5c/0xe0 [ 177.424416][ T5821] __smc_release+0x398/0x500 [ 177.429405][ T5821] smc_close_non_accepted+0xd1/0x1f0 [ 177.434765][ T5821] smc_close_active+0x9d3/0xd90 [ 177.439833][ T5821] __smc_release+0x9a/0x500 [ 177.444407][ T5821] smc_release+0x2ca/0x530 [ 177.448861][ T5821] sock_close+0xd5/0x240 [ 177.453128][ T5821] ? sock_mmap+0x90/0x90 [ 177.457685][ T5821] __fput+0x234/0x930 [ 177.461787][ T5821] task_work_run+0x125/0x1a0 [ 177.466406][ T5821] exit_to_user_mode_loop+0x10f/0x130 [ 177.471990][ T5821] exit_to_user_mode_prepare+0xb1/0x140 [ 177.477599][ T5821] syscall_exit_to_user_mode+0x16/0x40 [ 177.483242][ T5821] do_syscall_64+0x58/0xa0 [ 177.487818][ T5821] ? clear_bhb_loop+0x30/0x80 [ 177.492520][ T5821] ? clear_bhb_loop+0x30/0x80 [ 177.497397][ T5821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.503348][ T5821] RIP: 0033:0x7fe244b6a929 [ 177.507775][ T5821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.527775][ T5821] RSP: 002b:00007ffde8a9a2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 177.536312][ T5821] RAX: 0000000000000000 RBX: 000000000002b169 RCX: 00007fe244b6a929 [ 177.544338][ T5821] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 177.552413][ T5821] RBP: 00007fe244d93ba0 R08: 0000000000000001 R09: 00000011e8a9a5ef [ 177.560399][ T5821] R10: 00007fe2449dc000 R11: 0000000000000246 R12: 00007fe244d9216c [ 177.568396][ T5821] R13: 00007fe244d92160 R14: ffffffffffffffff R15: 00007ffde8a9a410 [ 177.576512][ T5821] [ 185.910051][ T5742] Bluetooth: hci3: command 0x0406 tx timeout