last executing test programs: 36.249072866s ago: executing program 4 (id=553): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 35.452731854s ago: executing program 4 (id=557): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'wg0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x8, 0x0, 0x1, 0x2, "2ac6d1", 0x3, [0x2, 0x9, 0x9, 0x3, 0x2]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x8000) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27", 0x65, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080047780048006800000d0690780a010100ac1414bb0044045d030000000000000000000000000000000000000300004e2100004e21000000010000000112000001000000060000"], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000036f8a48698ed35dccf06f1e2bfda133872ead2c646a0b771b3261aedff60a8feb489a57370cbcbe3d0416699a75ca109b4eb1cd52b082f4ac3fca815ef7df461504693d9b63899e36e8c2f4e6cb431744fdb3c63f5c85722e59442895133cf174698abbfa19324875a3196ba130726520fefe154b2719ed298f7a1a9", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32, @ANYBLOB="30003300c0100e00080211000001080211000000505050505050930000008c10040b8101c39cce7e3961"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\n', 0x1, 0x10008095, 0x0, 0x0) 34.25551416s ago: executing program 4 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="f8c24a82dd0e8be8e1103ec77748b75e3ec90e3e056f6797732b3020569b6e0010aa9b4f4ef645fa45023b7fae547dce1937469f21972429482a2a1487058cacd38c40a27ca01926a89cd5203c5d5859889eff5cf720dde5", @ANYRESOCT=r2, @ANYRES16=r1, @ANYBLOB="fdff9a48b5"], 0x48) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 32.40280471s ago: executing program 4 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socket$nl_generic(0x11, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x110, 0x6, 0x0, 0xfffffffffffffdcb) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c72c493770bbeb294bb591b0b00180008ac0f00000000001400010000000000000000000000ffffe000000250bb2d6f67d29d6fabadb107d0def49c88ea04ab00080000000000005046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086c"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 31.449241793s ago: executing program 4 (id=562): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4a, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f545479b86389af1677ed7812f19b0014cc7170783fd6b27e63e13ff49dacb9187a8c6ac0423"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r3, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045dd750e47e4acf8e33696473ec0690766ec8c6bd63758c22c1ad988a2b9eaf393e5bb0940e70740617b2435879d7c7263c81bcfee090f32f1", 0xf6}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 31.125905234s ago: executing program 4 (id=566): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@errors_continue}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 16.493922957s ago: executing program 3 (id=594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x8, r1, 0x1}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000003c0)=0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = dup2(r5, r3) socket$kcm(0x10, 0x2, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, 0x0, 0x0) 15.297461613s ago: executing program 32 (id=566): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@errors_continue}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 15.191072104s ago: executing program 3 (id=597): gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='dots,check=s,tz=UTC,nodots,nodots,nodots,quiet,nodots,nodots,nodots,nodots,dots,nodots,nodots,dots,nodots,errors=continue,dots,dots,dots,debug,\x00'/154], 0xfd, 0x1bf, &(0x7f0000000840)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 13.565391202s ago: executing program 0 (id=600): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'erspan0\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, 0x8, 0x0, 0x14}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x40) dup(0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x8b4b7b3ac1bafa07, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xbab4, 0x80, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x40000000, 0x10100, 0x0, 0x4}, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 13.06780959s ago: executing program 1 (id=601): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="042c1102c900ffff0400060001"], 0x14) 12.643209661s ago: executing program 3 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000100)={0x200000000008}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r2 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r2, 0x0, 0x0, 0x10001) finit_module(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x7, 0x8, &(0x7f00000002c0)="0000ffffffffa0", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x30314, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x20040014}, 0x40080) 11.582633334s ago: executing program 1 (id=604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11.564685116s ago: executing program 0 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats\x00') socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a5401, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707a, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 8.689747156s ago: executing program 1 (id=607): socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) pipe(0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dde5bf3eba23db"}, 0x28) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="2c6d73697a653d3078303030003030303030303030303030332c64656275673d3078306d653d252840252b97492c756e616d653d382fec2c056f657874656e642c6673636f6e746569665bbb5946121e752c6f626a5f747970653d7b277b2c666f776e65723c00"/114, @ANYRES8]) 8.630161432s ago: executing program 2 (id=608): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x1, 0x84, 0x4}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x9d}], 0x2c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x3, r2, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 7.671043535s ago: executing program 2 (id=609): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 7.547599327s ago: executing program 2 (id=610): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000100), 0x4003) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = eventfd2(0x180, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r1, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000040)='cgroup\x00') read$FUSE(r7, &(0x7f0000001580)={0x2020}, 0x2020) 6.390664969s ago: executing program 0 (id=611): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 6.390240529s ago: executing program 3 (id=612): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'wg0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x8, 0x0, 0x1, 0x2, "2ac6d1", 0x3, [0x2, 0x9, 0x9, 0x3, 0x2]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x8000) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27", 0x65, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080047780048006800000d0690780a010100ac1414bb0044045d030000000000000000000000000000000000000300004e2100004e21000000010000000112000001000000060000"], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000036f8a48698ed35dccf06f1e2bfda133872ead2c646a0b771b3261aedff60a8feb489a57370cbcbe3d0416699a75ca109b4eb1cd52b082f4ac3fca815ef7df461504693d9b63899e36e8c2f4e6cb431744fdb3c63f5c85722e59442895133cf174698abbfa19324875a3196ba130726520fefe154b2719ed298f7a1a9fe38079343111eeb89fbb03a57b0c008d6217b9604fae73a48275a4b48d8eb01a63c7fd639f37f6bd7628a73479a1afc20cf1463e6aa2a6a164779e01b9705086867a2bba92d472b2d8a1244424b23f38c8df0f68d2086c4c2c773abea154236", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32, @ANYBLOB="30003300c0100e00080211000001080211000000505050505050930000008c10040b8101c39cce7e3961"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\n', 0x1, 0x10008095, 0x0, 0x0) 6.374964551s ago: executing program 2 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x68) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.435382212s ago: executing program 0 (id=614): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x30004d0, &(0x7f0000000300)=ANY=[], 0x1, 0x1519, &(0x7f00000023c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8001, 0x4, 0xd92, 0x0, 0x2401}) 5.258587809s ago: executing program 2 (id=615): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) splice(r4, 0x0, r5, 0x0, 0x33fe0, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.704092603s ago: executing program 0 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) setrlimit(0x8, &(0x7f00000000c0)={0x8, 0x19a}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='romfs\x00', 0x2a88494, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x40, 0xffffffff}, 0x10) write(r4, &(0x7f0000000a40)="240000001e005f0214f9f407000904001f000000fe000000008000000000040001000000", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x2dd8806920477201, 0x0) 3.447437885s ago: executing program 1 (id=617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x8, r1, 0x1}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000003c0)=0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = dup2(r5, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004550", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, 0x0, 0x0) 3.070601562s ago: executing program 0 (id=618): fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140), 0x0, 0x80000}) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file2\x00', 0x0, &(0x7f0000000540)={[{@clear_cache}, {@user_subvol_rm}, {@nossd_spread}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x39, 0x32, 0x39, 0x37, 0x32, 0x33, 0x32, 0x2d, 0x2d, 0x25]}}, {@notreelog}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") 2.537738374s ago: executing program 1 (id=619): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x1, 0x84, 0x4}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x9d}], 0x2c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x3, r2, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x1, 0x442f, &(0x7f000000e480)="$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") 2.532367754s ago: executing program 3 (id=620): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x33fe0, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.722532123s ago: executing program 2 (id=621): syz_open_procfs(0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl(r0, 0x8b27, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x2}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8800) clock_gettime(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.634110662s ago: executing program 1 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000100)={0x200000000008}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r2 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r2, 0x0, 0x0, 0x10001) finit_module(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x7, 0x8, &(0x7f00000002c0)="0000ffffffffa0", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x30314, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x20040014}, 0x40080) 0s ago: executing program 3 (id=623): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) fadvise64(r0, 0xfcff, 0x20000, 0x3) kernel console output (not intermixed with test programs): ch could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.205292][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.230660][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.237255][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.244097][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.251912][ T4191] Cannot create hsr debugfs directory [ 52.341138][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 52.347766][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 52.350453][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 52.377456][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.384022][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.390801][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.398355][ T4195] Cannot create hsr debugfs directory [ 52.420157][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 52.426301][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 52.599149][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.612516][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.632638][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.642087][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.656421][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.685073][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.710979][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.721263][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.741097][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.751876][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.773224][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.793443][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.804998][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.819861][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.832216][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.851139][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.870867][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.890664][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.912355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.925442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.957400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.966198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.975233][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.982459][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.991249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.003124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.012477][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.019495][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.027457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.038021][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.052470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.071191][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.084813][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.094589][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.129804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.159410][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.170322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.183333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.192146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.214867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.224431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.246786][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.261543][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.272406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.281021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.288755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.297513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.309587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.318240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.328224][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.343533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.352307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.361411][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.368445][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.378572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.399030][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.418575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.428263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.443134][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.450239][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.459424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.467514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.497046][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.506646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.517596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.527163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.543850][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.551086][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.560233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.569243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.578718][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.585812][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.594346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.618419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.627809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.662313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.671975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.682788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.692359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.702072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.710481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.718667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.728347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.736066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.744003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.752914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.762041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.771874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.780323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.788527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.796904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.805250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.814402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.822293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.835637][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.854166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.863167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.872741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.882309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.897506][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.910565][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.925099][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.935521][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.944156][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.957696][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.967024][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.975561][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.982624][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.002628][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.015875][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.026288][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.039338][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.050789][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.057852][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.083686][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.103023][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.122887][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.132236][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.141001][ T245] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.148044][ T245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.155854][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.164498][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.173196][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.182201][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.192244][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.200554][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.209635][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.218270][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.226808][ T245] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.233901][ T245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.267710][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.282839][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.298560][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.307994][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.322670][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.331958][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.341312][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.351893][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.367951][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.375669][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.386387][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.396936][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.407070][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.414850][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.420461][ T24] Bluetooth: hci0: command 0x041b tx timeout [ 54.422234][ T4222] Bluetooth: hci1: command 0x041b tx timeout [ 54.434455][ T4222] Bluetooth: hci2: command 0x041b tx timeout [ 54.447393][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.458135][ T4184] device veth0_vlan entered promiscuous mode [ 54.485961][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.511164][ T4222] Bluetooth: hci3: command 0x041b tx timeout [ 54.517284][ T4222] Bluetooth: hci4: command 0x041b tx timeout [ 54.527019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.542703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.554381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.562941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.572306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.579700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.589142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.597918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.620482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.629445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.645177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.654739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.669542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.678235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.687043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.697272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.708009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.715854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.726432][ T4184] device veth1_vlan entered promiscuous mode [ 54.736963][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.755131][ T4183] device veth0_vlan entered promiscuous mode [ 54.798718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.815175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.825188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.834258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.843417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.852819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.861930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.869320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.880506][ T4183] device veth1_vlan entered promiscuous mode [ 54.890966][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.899202][ T4184] device veth0_macvtap entered promiscuous mode [ 54.909965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.918281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.951164][ T4184] device veth1_macvtap entered promiscuous mode [ 54.961305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.969476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.016410][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.029082][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.037017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.044736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.053118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.062566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.071893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.081662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.090576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.099055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.108157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.116833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.127860][ T4182] device veth0_vlan entered promiscuous mode [ 55.142358][ T4183] device veth0_macvtap entered promiscuous mode [ 55.153859][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.163681][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.172489][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.181306][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.197628][ T4182] device veth1_vlan entered promiscuous mode [ 55.208036][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.216457][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.226314][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.234686][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.246537][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.254461][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.265978][ T4183] device veth1_macvtap entered promiscuous mode [ 55.281577][ T4191] device veth0_vlan entered promiscuous mode [ 55.295992][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.326185][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.338395][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.356666][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.365325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.373994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.382242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.389624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.397147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.405818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.431295][ T4191] device veth1_vlan entered promiscuous mode [ 55.437971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.448061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.458796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.473261][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.484412][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.502081][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.511277][ T4182] device veth0_macvtap entered promiscuous mode [ 55.534530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.551351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.567891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.579272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.591641][ T4182] device veth1_macvtap entered promiscuous mode [ 55.607686][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.617505][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.627122][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.636735][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.658681][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.676628][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.687489][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.697984][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.716054][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.746190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.754328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.763125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.772697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.782969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.791666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.800115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.809561][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.820530][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.830440][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.840890][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.852123][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.872599][ T4191] device veth0_macvtap entered promiscuous mode [ 55.894416][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.902659][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.912320][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.923088][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.931199][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.939347][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.956149][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.966666][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.975899][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.984663][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.993741][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.012724][ T4191] device veth1_macvtap entered promiscuous mode [ 56.021437][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.029366][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.038589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.084264][ T4195] device veth0_vlan entered promiscuous mode [ 56.101959][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.113117][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.123221][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.133872][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.143823][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.154342][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.165751][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.187043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.196119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.208289][ T4195] device veth1_vlan entered promiscuous mode [ 56.216751][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.228113][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.237995][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.248435][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.258499][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.270859][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.281773][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.298335][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.307185][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.316805][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.326036][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.338351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.345923][ T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.348089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.356388][ T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.380379][ T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.390872][ T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.403357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.412268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.472230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.492857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.511698][ T4222] Bluetooth: hci2: command 0x040f tx timeout [ 56.517713][ T4222] Bluetooth: hci1: command 0x040f tx timeout [ 56.524042][ T4195] device veth0_macvtap entered promiscuous mode [ 56.540349][ T4222] Bluetooth: hci0: command 0x040f tx timeout [ 56.551135][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.559065][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.572751][ T4195] device veth1_macvtap entered promiscuous mode [ 56.590939][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 56.597197][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 56.620931][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.628859][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.641982][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.649911][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.651176][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.682078][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.690417][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.698317][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.713371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.844316][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.861545][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.876808][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.891712][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.937220][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.011390][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.253223][ T4295] loop1: detected capacity change from 0 to 8 [ 57.388404][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.545347][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.715447][ T4295] SQUASHFS error: zlib decompression failed, data probably corrupt [ 57.723799][ T4295] SQUASHFS error: Failed to read block 0x9b: -5 [ 57.730155][ T4295] SQUASHFS error: Unable to read metadata cache entry [99] [ 57.737431][ T4295] SQUASHFS error: Unable to read inode 0x127 [ 57.830288][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.311936][ T4291] loop0: detected capacity change from 0 to 32768 [ 58.347024][ T4291] ======================================================= [ 58.347024][ T4291] WARNING: The mand mount option has been deprecated and [ 58.347024][ T4291] and is ignored by this kernel. Remove the mand [ 58.347024][ T4291] option from the mount to silence this warning. [ 58.347024][ T4291] ======================================================= [ 58.486757][ T4291] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 58.585541][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 58.649985][ C0] sched: RT throttling activated [ 58.655693][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.658744][ T4222] Bluetooth: hci0: command 0x0419 tx timeout [ 58.671075][ T4222] Bluetooth: hci1: command 0x0419 tx timeout [ 58.677707][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 58.684063][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 58.684756][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.713565][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.738487][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.755244][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.780310][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.816535][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.838915][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.849140][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.866210][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.894307][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.941664][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.952723][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.961910][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.971945][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 58.988125][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.002901][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.018437][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.046643][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.061818][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.070690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.079556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.088941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 59.097962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 59.106981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 59.124257][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.140307][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.149960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.159747][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.168714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.177766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 59.856488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.944318][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.975735][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.046420][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.093265][ T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.168152][ T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.195786][ T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.196332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.232854][ T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.587540][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.378314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.536085][ T4332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 61.566671][ T4332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 61.791253][ T4336] loop3: detected capacity change from 0 to 512 [ 62.023551][ T4336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.036692][ T4336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.362874][ T4344] loop4: detected capacity change from 0 to 4096 [ 63.378404][ T4336] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.411189][ T4336] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.428388][ T4344] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 63.459409][ T4336] EXT4-fs (loop3): 1 truncate cleaned up [ 63.477720][ T4336] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 64.358028][ T4354] loop0: detected capacity change from 0 to 16 [ 64.696580][ T4354] erofs: (device loop0): mounted with root inode @ nid 36. [ 65.279579][ T4344] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.453972][ T4344] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 65.610557][ T4370] loop3: detected capacity change from 0 to 8 [ 65.700913][ T4370] SQUASHFS error: zlib decompression failed, data probably corrupt [ 65.709034][ T4370] SQUASHFS error: Failed to read block 0x9b: -5 [ 65.715389][ T4370] SQUASHFS error: Unable to read metadata cache entry [99] [ 65.722678][ T4370] SQUASHFS error: Unable to read inode 0x127 [ 67.010076][ T4374] tmpfs: Bad value for 'mpol' [ 67.660352][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.868683][ T4381] Zero length message leads to an empty skb [ 68.757272][ T4387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.572098][ T4404] loop1: detected capacity change from 0 to 1024 [ 70.712738][ T4406] overlayfs: failed to resolve './bus': -2 [ 70.956674][ T4410] netlink: 108 bytes leftover after parsing attributes in process `syz.4.25'. [ 72.640625][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.650418][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.412887][ T4422] tmpfs: Bad value for 'mpol' [ 74.858957][ T4428] loop3: detected capacity change from 0 to 4096 [ 76.068665][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.098828][ T4428] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 76.122112][ T4428] EXT4-fs (loop3): Test dummy encryption mode enabled [ 76.653517][ T1108] cfg80211: failed to load regulatory.db [ 77.311442][ T4428] EXT4-fs: failed to create workqueue [ 77.316934][ T4428] EXT4-fs (loop3): mount failed [ 78.050046][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 78.222296][ T7] usb 1-1: unable to read config index 0 descriptor/all [ 78.330831][ T7] usb 1-1: can't read configurations, error -71 [ 79.400051][ T4467] tmpfs: Bad value for 'mpol' [ 80.305380][ T4470] loop1: detected capacity change from 0 to 8 [ 80.881476][ T4470] unable to read xattr id index table [ 82.087602][ T4482] loop3: detected capacity change from 0 to 4096 [ 82.111797][ T4485] overlayfs: failed to resolve './bus': -2 [ 82.148232][ T4482] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 82.215040][ T4489] binder: 4486:4489 ioctl 4018620d 0 returned -22 [ 82.227354][ T4489] binder: 4486:4489 ioctl c0306201 0 returned -14 [ 82.270435][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.353480][ T4482] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.540276][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 82.661588][ T1111] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 82.681042][ T1111] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 82.726438][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.760541][ T1111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 82.769772][ T4485] netlink: 108 bytes leftover after parsing attributes in process `syz.2.48'. [ 82.770552][ T1111] usb 5-1: config 0 has no interface number 0 [ 82.804140][ T4482] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 82.832818][ T1111] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 82.843961][ T1111] usb 5-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.857041][ T1111] usb 5-1: config 0 interface 125 has no altsetting 0 [ 82.957665][ T4497] loop1: detected capacity change from 0 to 512 [ 83.190407][ T1111] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 83.763352][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.771688][ T1111] usb 5-1: Product: syz [ 83.775922][ T1111] usb 5-1: Manufacturer: syz [ 83.780791][ T1111] usb 5-1: SerialNumber: syz [ 83.793245][ T1111] usb 5-1: config 0 descriptor?? [ 83.798084][ T4497] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.53: bad orphan inode 13 [ 83.901428][ T4497] ext4_test_bit(bit=12, block=4) = 1 [ 83.906747][ T4497] is_bad_inode(inode)=0 [ 83.945552][ T4497] NEXT_ORPHAN(inode)=0 [ 84.000111][ T4497] max_ino=32 [ 84.016449][ T4497] i_nlink=1 [ 84.019638][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.238583][ T4513] loop0: detected capacity change from 0 to 2048 [ 84.931393][ T1108] kernel write not supported for file /sequencer (pid: 1108 comm: kworker/1:2) [ 85.017346][ T4513] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.120207][ T4513] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.148089][ T4513] fs-verity: sha512 using implementation "sha512-avx2" [ 85.740245][ T4510] loop3: detected capacity change from 0 to 32768 [ 85.798524][ T4510] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.55 (4510) [ 85.901219][ T4514] syz.4.50 (4514) used greatest stack depth: 16656 bytes left [ 85.984356][ T1111] usb 5-1: USB disconnect, device number 2 [ 86.140502][ T4510] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 86.240323][ T4510] BTRFS info (device loop3): enabling disk space caching [ 86.247382][ T4510] BTRFS info (device loop3): force clearing of disk cache [ 86.278291][ T4510] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 86.295685][ T4510] BTRFS info (device loop3): use zstd compression, level 3 [ 86.303143][ T4510] BTRFS info (device loop3): disk space caching is enabled [ 86.310829][ T4510] BTRFS info (device loop3): has skinny extents [ 86.870216][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.233968][ T146] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 87.265451][ T4510] BTRFS error (device loop3): open_ctree failed: -12 [ 88.050963][ T1111] usb 1-1: config 1 has an invalid interface number: 195 but max is 0 [ 88.065726][ T1111] usb 1-1: config 1 has an invalid descriptor of length 88, skipping remainder of the config [ 88.175910][ T1111] usb 1-1: config 1 has no interface number 0 [ 88.175971][ T4577] loop4: detected capacity change from 0 to 512 [ 88.192586][ T1111] usb 1-1: too many endpoints for config 1 interface 195 altsetting 5: 200, using maximum allowed: 30 [ 88.212505][ T4573] loop1: detected capacity change from 0 to 4096 [ 88.224049][ T1111] usb 1-1: config 1 interface 195 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 200 [ 88.239641][ T4578] overlayfs: failed to resolve './bus': -2 [ 88.248956][ T1111] usb 1-1: config 1 interface 195 has no altsetting 0 [ 88.269761][ T4578] netlink: 108 bytes leftover after parsing attributes in process `syz.2.68'. [ 88.360207][ T4573] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 88.367925][ T4573] EXT4-fs (loop1): Test dummy encryption mode enabled [ 88.429929][ T4573] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 89.120361][ T4577] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 89.190344][ T1111] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=e0.0a [ 89.213050][ T4588] loop3: detected capacity change from 0 to 256 [ 89.230173][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.239764][ T1111] usb 1-1: Product: syz [ 89.250491][ T1111] usb 1-1: Manufacturer: syz [ 89.255732][ T4577] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 89.270192][ T1111] usb 1-1: SerialNumber: syz [ 89.295372][ T4590] loop2: detected capacity change from 0 to 256 [ 89.312482][ T4577] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.69: attempt to clear invalid blocks 2 len 1 [ 89.334912][ T1111] usb 1-1: can't set config #1, error -71 [ 89.379130][ T1111] usb 1-1: USB disconnect, device number 5 [ 89.396146][ T4590] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 89.410649][ T4577] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 89.428541][ T4577] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.69: invalid indirect mapped block 1819239214 (level 0) [ 89.538330][ T26] audit: type=1800 audit(1761182218.115:2): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.71" name="file2" dev="loop2" ino=1048590 res=0 errno=0 [ 89.543943][ T4592] loop0: detected capacity change from 0 to 1024 [ 90.256292][ T4577] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.69: invalid indirect mapped block 1819239214 (level 1) [ 90.331367][ T4577] EXT4-fs (loop4): 1 truncate cleaned up [ 90.387796][ T4577] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 90.530086][ T21] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.626150][ T4577] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.69: corrupted in-inode xattr [ 90.870131][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.930248][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 90.949816][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.950632][ T4611] loop4: detected capacity change from 0 to 512 [ 90.981931][ T21] usb 4-1: config 0 descriptor?? [ 91.067461][ T21] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 91.082956][ T4611] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.76: bad orphan inode 13 [ 91.104730][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 91.118299][ T4611] ext4_test_bit(bit=12, block=4) = 1 [ 91.120099][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 91.139202][ T4611] is_bad_inode(inode)=0 [ 91.158761][ T4611] NEXT_ORPHAN(inode)=0 [ 91.163812][ T21] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 91.181471][ T4611] max_ino=32 [ 91.193033][ T4611] i_nlink=1 [ 91.205503][ T4606] loop1: detected capacity change from 0 to 32768 [ 91.206665][ T4611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.322755][ T1111] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 91.332148][ T1111] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 91.340425][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.350918][ T1111] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.360101][ T1111] usb 3-1: config 0 has no interface number 0 [ 91.366359][ T1111] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 91.417208][ T1111] usb 3-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.430235][ T1111] usb 3-1: config 0 interface 125 has no altsetting 0 [ 91.458526][ T21] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 91.489159][ T21] usb 4-1: media controller created [ 91.500538][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 91.505277][ T4606] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.516867][ T21] dvb-usb: MAC address reading failed. [ 91.528859][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.561169][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 91.569729][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 91.576303][ T21] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 91.590368][ T1111] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 91.621613][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 91.640450][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 91.647705][ T21] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 91.660968][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.751995][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 91.757947][ T21] dvb-usb: error while querying for an remote control event. [ 91.782828][ T1111] usb 3-1: Product: syz [ 91.811313][ T1111] usb 3-1: Manufacturer: syz [ 91.824445][ T1111] usb 3-1: SerialNumber: syz [ 91.870128][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 91.876006][ T21] dvb-usb: error while querying for an remote control event. [ 92.414968][ T1111] usb 3-1: config 0 descriptor?? [ 92.719450][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 92.871824][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 92.877587][ T21] dvb-usb: error while querying for an remote control event. [ 95.000956][ T4631] Process accounting resumed [ 95.006926][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 95.060601][ T21] dvb-usb: error while querying for an remote control event. [ 95.215767][ T4641] overlayfs: failed to resolve './bus': -2 [ 95.240109][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 95.241042][ T4643] loop0: detected capacity change from 0 to 256 [ 95.256163][ T21] dvb-usb: error while querying for an remote control event. [ 95.380672][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 95.413994][ T4643] FAT-fs (loop0): Directory bread(block 64) failed [ 95.427334][ T21] dvb-usb: error while querying for an remote control event. [ 95.493369][ T4643] FAT-fs (loop0): Directory bread(block 65) failed [ 95.499952][ T4643] FAT-fs (loop0): Directory bread(block 66) failed [ 95.558642][ T24] usb 3-1: USB disconnect, device number 2 [ 95.664516][ T4243] dvb-usb: bulk message failed: -22 (2/0) [ 95.690589][ T4643] FAT-fs (loop0): Directory bread(block 67) failed [ 96.051412][ T4643] FAT-fs (loop0): Directory bread(block 68) failed [ 96.429944][ T4243] dvb-usb: error while querying for an remote control event. [ 96.431781][ T4643] FAT-fs (loop0): Directory bread(block 69) failed [ 96.544665][ T4643] FAT-fs (loop0): Directory bread(block 70) failed [ 96.550691][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 96.556904][ T21] dvb-usb: error while querying for an remote control event. [ 96.620138][ T4643] FAT-fs (loop0): Directory bread(block 71) failed [ 96.656305][ T4643] FAT-fs (loop0): Directory bread(block 72) failed [ 96.669352][ T4652] loop2: detected capacity change from 0 to 512 [ 96.676297][ T4643] FAT-fs (loop0): Directory bread(block 73) failed [ 96.689029][ T24] usb 4-1: USB disconnect, device number 2 [ 96.770808][ T24] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 96.890339][ T4642] loop1: detected capacity change from 0 to 32768 [ 96.914269][ T4652] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.87: bad orphan inode 13 [ 97.545006][ T4652] ext4_test_bit(bit=12, block=4) = 1 [ 97.552471][ T4652] is_bad_inode(inode)=0 [ 97.557163][ T4652] NEXT_ORPHAN(inode)=0 [ 97.561602][ T4652] max_ino=32 [ 97.564874][ T4652] i_nlink=1 [ 97.713902][ T4652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.727953][ T4642] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 98.701764][ T4642] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.089363][ T4665] loop2: detected capacity change from 0 to 128 [ 99.351355][ T4665] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 99.400361][ T4665] hpfs: filesystem error: improperly stopped [ 99.401103][ T4642] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 99.444552][ T1111] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.451711][ T1111] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.470699][ T4665] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 99.518660][ T4665] hpfs: You really don't want any checks? You are crazy... [ 99.558491][ T4665] hpfs: hpfs_map_sector(): read error [ 99.583966][ T4665] hpfs: code page support is disabled [ 99.593494][ T4665] hpfs: hpfs_map_4sectors(): unaligned read [ 99.599906][ T1111] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 148ms [ 99.600438][ T4665] hpfs: hpfs_map_4sectors(): unaligned read [ 99.614312][ T4665] hpfs: filesystem error: unable to find root dir [ 99.640730][ T1111] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.673920][ T4642] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 99.708292][ T4642] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 103.294089][ T4699] loop0: detected capacity change from 0 to 8 [ 104.920597][ T4699] SQUASHFS error: zlib decompression failed, data probably corrupt [ 104.968731][ T4699] SQUASHFS error: Failed to read block 0x9b: -5 [ 104.999049][ T4699] SQUASHFS error: Unable to read metadata cache entry [99] [ 105.060091][ T4699] SQUASHFS error: Unable to read inode 0x127 [ 105.087423][ T4706] loop2: detected capacity change from 0 to 512 [ 105.331123][ T4706] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.101: bad orphan inode 13 [ 105.376143][ T4706] ext4_test_bit(bit=12, block=4) = 1 [ 105.381909][ T4706] is_bad_inode(inode)=0 [ 105.386140][ T4706] NEXT_ORPHAN(inode)=0 [ 105.390550][ T4706] max_ino=32 [ 105.393854][ T4706] i_nlink=1 [ 105.397094][ T4706] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.487414][ T4714] overlayfs: missing 'lowerdir' [ 106.290054][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 106.346689][ T4710] loop3: detected capacity change from 0 to 32768 [ 106.349568][ T4721] overlayfs: failed to resolve './bus': -2 [ 106.435063][ T4710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.103 (4710) [ 106.463629][ T4721] netlink: 108 bytes leftover after parsing attributes in process `syz.2.104'. [ 106.544708][ T4710] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 106.560301][ T4710] BTRFS info (device loop3): using free space tree [ 106.628519][ T4710] BTRFS info (device loop3): has skinny extents [ 106.710217][ T24] usb 1-1: config 7 has an invalid interface number: 3 but max is 0 [ 106.718917][ T24] usb 1-1: config 7 has no interface number 0 [ 106.725933][ T24] usb 1-1: config 7 interface 3 has no altsetting 0 [ 106.910211][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cd.d4 [ 106.924484][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.944482][ T24] usb 1-1: Product: syz [ 106.957597][ T24] usb 1-1: Manufacturer: syz [ 106.969506][ T24] usb 1-1: SerialNumber: syz [ 107.087957][ T4710] BTRFS info (device loop3): enabling ssd optimizations [ 107.311909][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 108.090199][ T24] usbtest 1-1:7.3: couldn't get endpoints, -71 [ 108.107106][ T24] usbtest: probe of 1-1:7.3 failed with error -71 [ 108.187762][ T24] usb 1-1: USB disconnect, device number 6 [ 110.225278][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 112.738464][ T4772] loop0: detected capacity change from 0 to 512 [ 114.512594][ T4772] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.114: bad orphan inode 13 [ 115.042124][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.083778][ T4772] ext4_test_bit(bit=12, block=4) = 1 [ 115.186908][ T4772] is_bad_inode(inode)=0 [ 115.224800][ T4772] NEXT_ORPHAN(inode)=0 [ 115.267381][ T4772] max_ino=32 [ 115.272776][ T4772] i_nlink=1 [ 115.275949][ T4772] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.300393][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 115.422746][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 115.810364][ T1108] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.949763][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.957947][ T1108] usb 5-1: Product: syz [ 115.985839][ T1108] usb 5-1: Manufacturer: syz [ 116.580274][ T1108] usb 5-1: SerialNumber: syz [ 116.595305][ T1108] usb 5-1: config 0 descriptor?? [ 116.702564][ T1108] usb 5-1: USB disconnect, device number 3 [ 116.768193][ T4827] overlayfs: failed to resolve './bus': -2 [ 116.797661][ T4827] netlink: 108 bytes leftover after parsing attributes in process `syz.3.123'. [ 117.125596][ T4824] kvm [4822]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 117.161732][ T4824] kvm [4822]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 117.181282][ T4824] kvm [4822]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000 [ 117.195753][ T4824] kvm [4822]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xb200000000 [ 120.526057][ T4865] loop2: detected capacity change from 0 to 512 [ 120.745709][ T4865] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.134: bad orphan inode 13 [ 120.770952][ T4865] ext4_test_bit(bit=12, block=4) = 1 [ 120.776274][ T4865] is_bad_inode(inode)=0 [ 120.790157][ T4865] NEXT_ORPHAN(inode)=0 [ 120.800321][ T4865] max_ino=32 [ 120.803537][ T4865] i_nlink=1 [ 120.898550][ T4865] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.506811][ T4876] Invalid ELF header magic: != ELF [ 122.660600][ T4895] loop1: detected capacity change from 0 to 32768 [ 123.247285][ T4895] XFS (loop1): Mounting V5 Filesystem [ 123.449349][ T4895] XFS (loop1): Ending clean mount [ 123.813796][ T4895] XFS (loop1): Quotacheck needed: Please wait. [ 124.004417][ T4915] loop2: detected capacity change from 0 to 256 [ 124.378210][ T4895] XFS (loop1): Quotacheck: Done. [ 126.225524][ T26] audit: type=1804 audit(1761182254.805:3): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.141" name="/newroot/27/file0/file1" dev="loop1" ino=9286 res=1 errno=0 [ 126.502842][ T4184] XFS (loop1): Unmounting Filesystem [ 130.409475][ T4955] fuse: Bad value for 'fd' [ 131.542998][ T4971] loop1: detected capacity change from 0 to 40427 [ 131.853868][ T4971] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 131.872589][ T4971] F2FS-fs (loop1): invalid crc value [ 131.872716][ T4971] F2FS-fs (loop1): Wrong cp_pack_start_sum: 1 [ 131.872917][ T4971] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 132.672440][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.672510][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.664297][ T4979] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 134.673028][ T4979] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.445641][ T4999] loop1: detected capacity change from 0 to 4096 [ 135.481260][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.804622][ T5006] fs-verity: sha256 using implementation "sha256-avx2" [ 136.065387][ T5006] fs-verity (loop1, inode 16): Error -4 building Merkle tree [ 137.003775][ T5019] fuse: Bad value for 'fd' [ 138.769812][ T5039] loop0: detected capacity change from 0 to 64 [ 140.199680][ T5053] loop0: detected capacity change from 0 to 128 [ 140.431061][ T5024] loop1: detected capacity change from 0 to 32768 [ 140.476182][ T5053] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 141.204767][ T5053] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.629858][ T5064] fuse: Bad value for 'fd' [ 143.753299][ T5091] loop0: detected capacity change from 0 to 4096 [ 143.779360][ T5093] loop3: detected capacity change from 0 to 4096 [ 144.563400][ T5091] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 144.590786][ T5093] ntfs3: Unknown parameter 'windows_names' [ 144.620639][ T5106] fuse: Bad value for 'fd' [ 144.720452][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 144.883341][ T5109] loop4: detected capacity change from 0 to 4096 [ 145.974087][ T5115] loop2: detected capacity change from 0 to 32768 [ 146.004306][ T5109] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 146.010976][ T5115] (syz.2.195,5115,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ÿ" or missing value [ 146.026887][ T5115] (syz.2.195,5115,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 146.071957][ T5117] loop1: detected capacity change from 0 to 256 [ 146.139362][ T5093] loop3: detected capacity change from 0 to 32768 [ 146.449021][ T5093] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 147.427821][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 147.809436][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 149.053985][ T5134] loop3: detected capacity change from 0 to 32768 [ 149.263454][ T5134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.199 (5134) [ 150.098103][ T5134] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 150.110182][ T5134] BTRFS info (device loop3): metadata ratio 2 [ 150.116317][ T5134] BTRFS info (device loop3): allowing degraded mounts [ 150.140637][ T5134] BTRFS info (device loop3): force zlib compression, level 3 [ 150.231169][ T5134] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 150.270089][ T5134] BTRFS info (device loop3): use zstd compression, level 3 [ 150.277902][ T5134] BTRFS info (device loop3): force clearing of disk cache [ 150.431303][ T5160] loop0: detected capacity change from 0 to 256 [ 151.673610][ T5134] BTRFS info (device loop3): turning on flush-on-commit [ 152.653692][ T5134] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 152.668090][ T5134] BTRFS info (device loop3): trying to use backup root at mount time [ 153.279612][ T5134] BTRFS info (device loop3): using free space tree [ 153.288505][ T5134] BTRFS info (device loop3): has skinny extents [ 153.913089][ T5134] BTRFS error (device loop3): open_ctree failed: -12 [ 153.992729][ T5191] loop2: detected capacity change from 0 to 4096 [ 155.023458][ T5191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 155.881919][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 158.191863][ T4183] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 158.201612][ T4223] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 158.372550][ T5218] loop4: detected capacity change from 0 to 32768 [ 158.398684][ T5239] loop2: detected capacity change from 0 to 1024 [ 159.060331][ T4223] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 159.070111][ T4223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.163355][ T4223] usb 4-1: config 0 has no interface number 0 [ 159.169524][ T4223] usb 4-1: config 0 interface 117 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.466021][ T4223] usb 4-1: config 0 interface 117 has no altsetting 0 [ 160.514694][ T4223] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=eb.8d [ 160.524325][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.534605][ T4223] usb 4-1: Product: syz [ 160.538871][ T4223] usb 4-1: Manufacturer: syz [ 160.545380][ T4223] usb 4-1: SerialNumber: syz [ 161.070698][ T4223] usb 4-1: config 0 descriptor?? [ 161.134873][ T5261] loop1: detected capacity change from 0 to 512 [ 161.468211][ T4557] usb 4-1: USB disconnect, device number 3 [ 161.779308][ T5261] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.231: bad orphan inode 13 [ 161.791629][ T5261] ext4_test_bit(bit=12, block=4) = 1 [ 161.797189][ T5261] is_bad_inode(inode)=0 [ 161.801655][ T5261] NEXT_ORPHAN(inode)=0 [ 161.806171][ T5261] max_ino=32 [ 161.809510][ T5261] i_nlink=1 [ 161.813231][ T5261] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.909923][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 166.001673][ T5306] loop2: detected capacity change from 0 to 4096 [ 166.120605][ T5306] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 166.128016][ T5306] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.465246][ T5316] tmpfs: Bad value for 'mpol' [ 166.912807][ T5306] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 167.268874][ T5329] loop1: detected capacity change from 0 to 512 [ 167.382641][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 167.513347][ T5329] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.250: bad orphan inode 13 [ 167.659265][ T5329] ext4_test_bit(bit=12, block=4) = 1 [ 167.759373][ T5329] is_bad_inode(inode)=0 [ 167.830963][ T5329] NEXT_ORPHAN(inode)=0 [ 167.902445][ T5329] max_ino=32 [ 167.957604][ T5329] i_nlink=1 [ 168.017909][ T5329] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.369526][ T5342] loop2: detected capacity change from 0 to 256 [ 169.453181][ T5342] exfat: Unknown parameter 'sys_tz' [ 171.968068][ T5369] tmpfs: Bad value for 'mpol' [ 172.725792][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 173.380589][ T5381] loop2: detected capacity change from 0 to 512 [ 173.437925][ T5374] loop3: detected capacity change from 0 to 4096 [ 173.537746][ T5374] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 173.715522][ T5381] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.264: bad orphan inode 13 [ 173.727099][ T5374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 173.802110][ T5374] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 173.866143][ T5381] ext4_test_bit(bit=12, block=4) = 1 [ 173.910494][ T5381] is_bad_inode(inode)=0 [ 174.894068][ T5381] NEXT_ORPHAN(inode)=0 [ 174.898168][ T5381] max_ino=32 [ 174.909352][ T5381] i_nlink=1 [ 174.912674][ T5381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.052164][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 175.700229][ T4316] Bluetooth: hci3: command 0x0406 tx timeout [ 175.700334][ T4754] Bluetooth: hci1: command 0x0406 tx timeout [ 175.726586][ T4316] Bluetooth: hci2: command 0x0406 tx timeout [ 175.990117][ T4316] Bluetooth: hci4: command 0x0406 tx timeout [ 178.755721][ T5431] tmpfs: Bad value for 'mpol' [ 180.453284][ T5441] loop0: detected capacity change from 0 to 512 [ 182.819817][ T5456] loop4: detected capacity change from 0 to 4096 [ 182.848480][ T5454] loop1: detected capacity change from 0 to 256 [ 182.866105][ T5441] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.281: bad orphan inode 13 [ 182.894133][ T5441] ext4_test_bit(bit=12, block=4) = 1 [ 182.899560][ T5456] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 182.918081][ T5441] is_bad_inode(inode)=0 [ 183.106566][ T5441] NEXT_ORPHAN(inode)=0 [ 183.108130][ T5456] EXT4-fs (loop4): Test dummy encryption mode enabled [ 183.141667][ T5441] max_ino=32 [ 183.145829][ T5441] i_nlink=1 [ 183.299343][ T5441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.368778][ T5456] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 185.062031][ T5473] loop0: detected capacity change from 0 to 4096 [ 185.112560][ T5484] overlayfs: failed to resolve './bus': -2 [ 185.182283][ T5473] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 185.600063][ T4557] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.880233][ T4557] usb 5-1: Using ep0 maxpacket: 16 [ 186.010284][ T4557] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 186.022343][ T4557] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 186.057324][ T4557] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 186.097874][ T4557] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.158710][ T4557] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 186.207374][ T4557] usb 5-1: config 0 has no interface number 0 [ 186.248498][ T4557] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 186.290548][ T4557] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 186.340586][ T4557] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.384993][ T4557] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.457426][ T4557] usb 5-1: config 0 interface 125 has no altsetting 0 [ 186.650283][ T4557] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 186.670112][ T4557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.739557][ T4557] usb 5-1: Product: syz [ 186.750083][ T4557] usb 5-1: Manufacturer: syz [ 186.754711][ T4557] usb 5-1: SerialNumber: syz [ 186.782089][ T4557] usb 5-1: config 0 descriptor?? [ 186.808621][ T5491] loop2: detected capacity change from 0 to 4096 [ 186.975324][ T5491] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 187.046080][ T5497] tmpfs: Bad value for 'mpol' [ 187.629310][ T5491] EXT4-fs (loop2): Test dummy encryption mode enabled [ 188.322751][ T5491] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 188.670833][ T5506] loop3: detected capacity change from 0 to 512 [ 189.011934][ T4182] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 189.349668][ T5506] EXT4-fs (loop3): Ignoring removed nobh option [ 189.401406][ T5506] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.297: iget: bad i_size value: 38620345925642 [ 189.433066][ T5506] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.297: couldn't read orphan inode 15 (err -117) [ 189.449748][ T5506] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 189.630815][ T4754] usb 5-1: USB disconnect, device number 4 [ 190.898548][ T5522] loop2: detected capacity change from 0 to 512 [ 191.562482][ T5522] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.300: bad orphan inode 13 [ 191.733102][ T5522] ext4_test_bit(bit=12, block=4) = 1 [ 191.740897][ T5522] is_bad_inode(inode)=0 [ 191.746610][ T5522] NEXT_ORPHAN(inode)=0 [ 191.751273][ T5522] max_ino=32 [ 191.754472][ T5522] i_nlink=1 [ 191.757633][ T5522] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.878494][ T5538] overlayfs: missing 'lowerdir' [ 193.840419][ T5543] loop0: detected capacity change from 0 to 256 [ 194.103730][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.110131][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.831499][ T5560] loop3: detected capacity change from 0 to 4096 [ 195.887538][ T5564] loop2: detected capacity change from 0 to 512 [ 195.959584][ T5560] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 196.030326][ T5560] EXT4-fs (loop3): Test dummy encryption mode enabled [ 196.057141][ T5564] EXT4-fs (loop2): Ignoring removed nobh option [ 196.105610][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 196.147430][ T5562] loop0: detected capacity change from 0 to 4096 [ 196.175349][ T5564] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.312: iget: bad i_size value: 38620345925642 [ 196.296382][ T5564] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.312: couldn't read orphan inode 15 (err -117) [ 196.318929][ T5564] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 196.415300][ T5562] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 197.834711][ T5566] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 198.970106][ T5596] loop2: detected capacity change from 0 to 4096 [ 199.031929][ T5596] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 199.093872][ T5596] EXT4-fs (loop2): Test dummy encryption mode enabled [ 199.282953][ T5596] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 200.527344][ T5607] loop4: detected capacity change from 0 to 256 [ 200.713256][ T5616] loop2: detected capacity change from 0 to 4096 [ 200.797099][ T5616] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 200.818056][ T5616] EXT4-fs (loop2): Test dummy encryption mode enabled [ 200.901242][ T5616] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 201.864729][ T5623] overlayfs: missing 'workdir' [ 202.143100][ T4182] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 203.312734][ T5638] loop1: detected capacity change from 0 to 512 [ 203.386743][ T5638] EXT4-fs (loop1): Ignoring removed nobh option [ 203.662641][ T5638] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.329: iget: bad i_size value: 38620345925642 [ 203.696779][ T5638] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.329: couldn't read orphan inode 15 (err -117) [ 204.134470][ T5638] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 207.103208][ T5661] loop2: detected capacity change from 0 to 4096 [ 207.173902][ T5661] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 207.207337][ T5661] EXT4-fs (loop2): Test dummy encryption mode enabled [ 207.273780][ T5661] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 207.337165][ T5666] loop1: detected capacity change from 0 to 4096 [ 207.544558][ T5666] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 210.117982][ T5695] overlayfs: missing 'workdir' [ 210.137818][ T5696] loop2: detected capacity change from 0 to 512 [ 210.415231][ T5696] EXT4-fs (loop2): Ignoring removed nobh option [ 210.505759][ T5696] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.344: iget: bad i_size value: 38620345925642 [ 210.679551][ T5696] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.344: couldn't read orphan inode 15 (err -117) [ 210.731094][ T5696] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 213.475208][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 213.500178][ T4251] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 213.517637][ T5724] loop2: detected capacity change from 0 to 256 [ 213.750214][ T4251] usb 4-1: Using ep0 maxpacket: 16 [ 214.590166][ T4251] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 214.604395][ T4251] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.612843][ T4251] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 214.621252][ T4251] usb 4-1: config 0 has no interface number 1 [ 214.631613][ T4251] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 214.645134][ T4251] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 214.655239][ T4251] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.665487][ T4251] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.678814][ T4251] usb 4-1: config 0 interface 125 has no altsetting 0 [ 214.735317][ T5732] loop4: detected capacity change from 0 to 512 [ 214.746298][ T5731] loop1: detected capacity change from 0 to 4096 [ 214.796794][ T5732] EXT4-fs (loop4): Ignoring removed nobh option [ 214.800308][ T5731] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 214.843839][ T4251] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 214.864494][ T5732] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.355: iget: bad i_size value: 38620345925642 [ 214.875298][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.877712][ T5732] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.355: couldn't read orphan inode 15 (err -117) [ 214.979677][ T5732] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 215.030562][ T4251] usb 4-1: Product: syz [ 215.045011][ T4251] usb 4-1: Manufacturer: syz [ 215.065255][ T4251] usb 4-1: SerialNumber: syz [ 215.126706][ T5731] EXT4-fs (loop1): Test dummy encryption mode enabled [ 215.165279][ T5731] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 215.716622][ T4251] usb 4-1: config 0 descriptor?? [ 215.793976][ T5741] overlayfs: missing 'workdir' [ 218.246386][ T4562] usb 4-1: USB disconnect, device number 4 [ 221.427821][ T5791] loop4: detected capacity change from 0 to 512 [ 221.440874][ T5791] EXT4-fs (loop4): Ignoring removed nobh option [ 221.588555][ T5794] fuse: Bad value for 'group_id' [ 222.193852][ T5791] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.367: iget: bad i_size value: 38620345925642 [ 222.359756][ T5791] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.367: couldn't read orphan inode 15 (err -117) [ 222.376368][ T5791] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 222.588779][ T5798] loop0: detected capacity change from 0 to 4096 [ 222.710245][ T5795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 223.012061][ T5798] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 223.060398][ T5798] EXT4-fs (loop0): Test dummy encryption mode enabled [ 223.460823][ T4192] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 224.090517][ T5798] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 224.378472][ T4192] usb 4-1: Using ep0 maxpacket: 16 [ 225.141485][ T4192] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 225.174134][ T4192] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 226.067337][ T4192] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 226.095126][ T4192] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 226.134558][ T4192] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 226.173053][ T5821] overlayfs: failed to resolve './bus': -2 [ 226.190112][ T4192] usb 4-1: config 0 has no interface number 0 [ 226.202860][ T4192] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 226.410708][ T4192] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 226.436336][ T4192] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.457987][ T4192] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.491872][ T4192] usb 4-1: config 0 interface 125 has no altsetting 2 [ 226.550155][ T4192] usb 4-1: string descriptor 0 read error: -71 [ 226.556390][ T4192] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 226.571624][ T4192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.584079][ T4192] usb 4-1: config 0 descriptor?? [ 226.627994][ T4192] usb 4-1: can't set config #0, error -71 [ 226.647606][ T4192] usb 4-1: USB disconnect, device number 5 [ 228.737567][ T5848] loop2: detected capacity change from 0 to 512 [ 228.839217][ T5848] EXT4-fs (loop2): Ignoring removed nobh option [ 228.892443][ T5848] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.382: iget: bad i_size value: 38620345925642 [ 228.983715][ T5848] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.382: couldn't read orphan inode 15 (err -117) [ 229.010624][ T5848] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 231.288784][ T5868] loop2: detected capacity change from 0 to 4096 [ 231.351026][ T5868] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 231.399066][ T5868] EXT4-fs (loop2): Test dummy encryption mode enabled [ 231.460084][ T4316] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 231.473787][ T5868] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 232.340201][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 232.480448][ T4316] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 232.520175][ T4316] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 233.214319][ T4316] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 233.225834][ T4316] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 233.250119][ T4316] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 233.300072][ T4316] usb 4-1: config 0 has no interface number 0 [ 233.310555][ T4316] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 233.442983][ T5888] loop4: detected capacity change from 0 to 256 [ 233.543488][ T4316] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 233.598728][ T4316] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.910359][ T4316] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.974898][ T4316] usb 4-1: config 0 interface 125 has no altsetting 2 [ 234.225510][ T5897] overlayfs: failed to resolve './bus': -2 [ 234.231953][ T4316] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 234.915048][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.267605][ T4316] usb 4-1: Product: syz [ 235.320369][ T4316] usb 4-1: Manufacturer: syz [ 235.346170][ T4316] usb 4-1: config 0 descriptor?? [ 235.362734][ T5905] loop3: detected capacity change from 0 to 512 [ 235.381497][ T4316] usb 4-1: can't set config #0, error -71 [ 235.396041][ T4316] usb 4-1: USB disconnect, device number 6 [ 236.316747][ T5905] EXT4-fs (loop3): Ignoring removed nobh option [ 237.671892][ T5905] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.394: iget: bad i_size value: 38620345925642 [ 237.780710][ T5905] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.394: couldn't read orphan inode 15 (err -117) [ 237.828442][ T5905] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 238.767100][ T5925] loop4: detected capacity change from 0 to 4096 [ 239.569652][ T5925] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 239.610305][ T5925] EXT4-fs (loop4): Test dummy encryption mode enabled [ 239.652435][ T5925] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 241.800125][ T4223] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 242.060226][ T4223] usb 5-1: Using ep0 maxpacket: 16 [ 242.200908][ T4223] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 242.232495][ T4223] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 242.302747][ T4223] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 242.428111][ T4223] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 242.534440][ T4223] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 242.648344][ T4223] usb 5-1: config 0 has no interface number 0 [ 242.690174][ T4223] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 242.741235][ T4223] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 242.820147][ T4223] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.830551][ T4223] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.848131][ T4223] usb 5-1: config 0 interface 125 has no altsetting 2 [ 243.010223][ T4223] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 243.025983][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.065638][ T4223] usb 5-1: Product: syz [ 243.638215][ T4223] usb 5-1: Manufacturer: syz [ 243.650030][ T4223] usb 5-1: SerialNumber: syz [ 243.683119][ T4223] usb 5-1: config 0 descriptor?? [ 243.791056][ T4223] usb 5-1: selecting invalid altsetting 2 [ 246.159804][ T4223] usb 5-1: USB disconnect, device number 5 [ 247.075004][ T5982] loop0: detected capacity change from 0 to 4096 [ 248.158096][ T6006] overlayfs: failed to resolve './bus': -2 [ 248.203597][ T5982] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 248.283831][ T5982] EXT4-fs (loop0): Test dummy encryption mode enabled [ 249.116321][ T5982] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 251.520078][ T4316] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 252.430077][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 252.557137][ T4316] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 252.570269][ T4316] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.584568][ T4316] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.593498][ T4316] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.602071][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.611698][ T4316] usb 1-1: config 0 has no interface number 0 [ 252.617955][ T4316] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 252.629541][ T4316] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 252.657853][ T4316] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.688814][ T4316] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.719738][ T4316] usb 1-1: config 0 interface 125 has no altsetting 0 [ 252.777384][ T4316] usb 1-1: config 0 interface 125 has no altsetting 2 [ 252.841556][ T6040] netlink: 256 bytes leftover after parsing attributes in process `syz.1.431'. [ 253.770621][ T4316] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 253.795184][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.821559][ T4316] usb 1-1: Product: syz [ 253.835485][ T4316] usb 1-1: Manufacturer: syz [ 253.855332][ T4316] usb 1-1: SerialNumber: syz [ 253.879799][ T4316] usb 1-1: config 0 descriptor?? [ 253.935826][ T4316] usb 1-1: selecting invalid altsetting 2 [ 254.360039][ C0] usb 1-1: async_complete: urb error -71 [ 254.366350][ C0] usb 1-1: async_complete: urb error -71 [ 254.372054][ C0] usb 1-1: async_complete: urb error -71 [ 254.377740][ C0] usb 1-1: async_complete: urb error -71 [ 254.385142][ T4316] get_1284_register: usb error -71 [ 254.390737][ T4316] uss720: probe of 1-1:0.125 failed with error -71 [ 254.439622][ T4316] usb 1-1: USB disconnect, device number 7 [ 255.635744][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.642096][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.897154][ T6058] loop1: detected capacity change from 0 to 4096 [ 256.730201][ T6058] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 256.781236][ T6058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 256.961127][ T6058] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 259.069286][ T6086] netlink: 256 bytes leftover after parsing attributes in process `syz.2.443'. [ 260.010167][ T4251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 260.370122][ T4251] usb 3-1: Using ep0 maxpacket: 16 [ 261.330122][ T4251] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 261.358965][ T4251] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 261.367527][ T4251] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 261.380108][ T4251] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 261.436078][ T4251] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.566714][ T6108] tmpfs: Bad value for 'mpol' [ 262.051680][ T4251] usb 3-1: config 0 has no interface number 0 [ 262.058022][ T4251] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 262.069155][ T4251] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 262.100051][ T4251] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.109899][ T4251] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.160056][ T4251] usb 3-1: config 0 interface 125 has no altsetting 0 [ 262.166855][ T4251] usb 3-1: config 0 interface 125 has no altsetting 2 [ 262.380182][ T4251] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 262.389249][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.458572][ T4251] usb 3-1: Product: syz [ 262.470059][ T4251] usb 3-1: Manufacturer: syz [ 262.474675][ T4251] usb 3-1: SerialNumber: syz [ 262.779408][ T4251] usb 3-1: config 0 descriptor?? [ 263.230202][ T4251] usb 3-1: can't set config #0, error -71 [ 263.262353][ T4251] usb 3-1: USB disconnect, device number 3 [ 263.764804][ T6123] netlink: 256 bytes leftover after parsing attributes in process `syz.1.454'. [ 267.169676][ T6147] tmpfs: Bad value for 'mpol' [ 268.898467][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 269.240182][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 269.262639][ T6163] netlink: 256 bytes leftover after parsing attributes in process `syz.4.465'. [ 269.390344][ T4316] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 269.428033][ T4316] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 269.528282][ T4316] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 269.633331][ T4316] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 269.735491][ T4316] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.854327][ T4316] usb 2-1: config 0 has no interface number 0 [ 269.877110][ T4316] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 269.918897][ T4316] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 269.950114][ T4316] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 269.971628][ T4316] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.074526][ T4316] usb 2-1: config 0 interface 125 has no altsetting 0 [ 270.110091][ T4316] usb 2-1: config 0 interface 125 has no altsetting 2 [ 271.070194][ T6170] fuse: Unknown parameter 'grou00000000000000000000' [ 271.390170][ T4316] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 271.399765][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.408335][ T4316] usb 2-1: Product: syz [ 271.433787][ T4316] usb 2-1: config 0 descriptor?? [ 271.450194][ T4316] usb 2-1: can't set config #0, error -71 [ 271.470240][ T4316] usb 2-1: USB disconnect, device number 2 [ 272.853972][ T6195] tmpfs: Bad value for 'mpol' [ 273.488441][ T6197] loop4: detected capacity change from 0 to 256 [ 275.062330][ T6210] netlink: 256 bytes leftover after parsing attributes in process `syz.3.477'. [ 275.884104][ T6211] loop2: detected capacity change from 0 to 4096 [ 276.040129][ T4563] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 276.057228][ T6211] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 276.107650][ T6211] EXT4-fs (loop2): Test dummy encryption mode enabled [ 276.169286][ T6211] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 276.330080][ T4563] usb 4-1: Using ep0 maxpacket: 16 [ 276.490395][ T4563] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 276.880122][ T4563] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 276.917367][ T4563] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 277.023503][ T6225] fuse: Unknown parameter 'grou00000000000000000000' [ 277.907198][ T4563] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 277.925306][ T4563] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 277.935904][ T4563] usb 4-1: config 0 has no interface number 0 [ 278.040118][ T4563] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 278.067344][ T4563] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 278.199863][ T4563] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 278.212439][ T4563] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.227702][ T4563] usb 4-1: config 0 interface 125 has no altsetting 0 [ 278.756823][ T4563] usb 4-1: config 0 interface 125 has no altsetting 2 [ 278.870131][ T4563] usb 4-1: string descriptor 0 read error: -71 [ 278.876411][ T4563] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 279.720129][ T4563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.731611][ T4563] usb 4-1: config 0 descriptor?? [ 279.750175][ T4563] usb 4-1: can't set config #0, error -71 [ 279.772383][ T4563] usb 4-1: USB disconnect, device number 7 [ 281.757984][ T6266] loop2: detected capacity change from 0 to 4096 [ 281.815728][ T6266] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 281.859309][ T6266] EXT4-fs (loop2): Test dummy encryption mode enabled [ 281.942974][ T6266] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 282.747536][ T6281] fuse: Unknown parameter 'grou00000000000000000000' [ 283.980133][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 284.780532][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 284.995108][ T6298] netlink: 256 bytes leftover after parsing attributes in process `syz.0.500'. [ 285.580206][ T13] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 285.593243][ T13] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 285.608089][ T13] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 285.619782][ T13] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 285.647800][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 285.652632][ T6299] loop2: detected capacity change from 0 to 256 [ 286.088229][ T13] usb 4-1: config 0 has no interface number 0 [ 286.094639][ T13] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 286.314003][ T13] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 286.324481][ T13] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 286.334643][ T13] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.019811][ T13] usb 4-1: config 0 interface 125 has no altsetting 0 [ 287.027419][ T13] usb 4-1: config 0 interface 125 has no altsetting 2 [ 287.120139][ T13] usb 4-1: string descriptor 0 read error: -71 [ 287.128685][ T13] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 287.212623][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.249068][ T13] usb 4-1: config 0 descriptor?? [ 287.330319][ T13] usb 4-1: can't set config #0, error -71 [ 287.370941][ T13] usb 4-1: USB disconnect, device number 8 [ 287.510362][ T6319] fuse: Unknown parameter 'group_i00000000000000000000' [ 288.378620][ T6316] loop3: detected capacity change from 0 to 4096 [ 288.469118][ T6316] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 288.490314][ T6316] EXT4-fs (loop3): Test dummy encryption mode enabled [ 288.585613][ T6316] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 290.341919][ T6325] loop0: detected capacity change from 0 to 4096 [ 290.487754][ T6336] netlink: 256 bytes leftover after parsing attributes in process `syz.1.511'. [ 292.112842][ T6325] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 292.214009][ T6344] netlink: 108 bytes leftover after parsing attributes in process `syz.3.510'. [ 293.500090][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 294.480310][ T6366] fuse: Unknown parameter 'group_i00000000000000000000' [ 294.490107][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 295.380205][ T13] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 295.392143][ T13] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 295.413106][ T13] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 295.436903][ T13] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 295.459556][ T13] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.468637][ T13] usb 1-1: config 0 has no interface number 0 [ 295.474838][ T13] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 295.486868][ T13] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 295.497870][ T13] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 295.508310][ T13] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.526066][ T13] usb 1-1: config 0 interface 125 has no altsetting 0 [ 295.533074][ T13] usb 1-1: config 0 interface 125 has no altsetting 2 [ 295.790355][ T13] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 295.829120][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.865060][ T13] usb 1-1: Product: syz [ 295.900612][ T13] usb 1-1: Manufacturer: syz [ 295.947803][ T13] usb 1-1: SerialNumber: syz [ 295.961750][ T13] usb 1-1: config 0 descriptor?? [ 296.034707][ T13] usb 1-1: selecting invalid altsetting 2 [ 296.210110][ C0] usb 1-1: async_complete: urb error -71 [ 296.215860][ C0] usb 1-1: async_complete: urb error -71 [ 296.221561][ C0] usb 1-1: async_complete: urb error -71 [ 296.227254][ C0] usb 1-1: async_complete: urb error -71 [ 296.233272][ T13] get_1284_register: usb error -71 [ 296.244022][ T13] uss720: probe of 1-1:0.125 failed with error -71 [ 296.255489][ T13] usb 1-1: USB disconnect, device number 8 [ 296.350241][ T6375] netlink: 256 bytes leftover after parsing attributes in process `syz.4.522'. [ 297.566639][ T6384] loop0: detected capacity change from 0 to 512 [ 297.691292][ T6383] loop4: detected capacity change from 0 to 4096 [ 297.984906][ T6383] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 298.182013][ T6384] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 298.198625][ T6384] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.928350][ T6393] loop2: detected capacity change from 0 to 256 [ 298.946508][ T4195] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 301.216981][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 301.636713][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 301.690478][ T6427] netlink: 256 bytes leftover after parsing attributes in process `syz.0.535'. [ 302.306291][ T6425] loop1: detected capacity change from 0 to 256 [ 302.450507][ T13] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 302.464970][ T13] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 302.609324][ T13] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 302.673003][ T13] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 302.724825][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 302.812881][ T13] usb 4-1: config 0 has no interface number 0 [ 302.879408][ T13] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 302.956099][ T13] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 303.137053][ T13] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.236839][ T13] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.490022][ T13] usb 4-1: config 0 interface 125 has no altsetting 0 [ 303.550417][ T13] usb 4-1: config 0 interface 125 has no altsetting 2 [ 304.640343][ T13] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 305.101387][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.192065][ T13] usb 4-1: config 0 descriptor?? [ 305.261017][ T13] usb 4-1: can't set config #0, error -71 [ 305.349634][ T13] usb 4-1: USB disconnect, device number 9 [ 305.514546][ T6458] process 'syz.3.545' launched './file2' with NULL argv: empty string added [ 306.806127][ T6476] netlink: 256 bytes leftover after parsing attributes in process `syz.1.549'. [ 306.962415][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 307.791527][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.736612][ T6493] loop1: detected capacity change from 0 to 256 [ 309.750217][ T4563] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 309.975099][ T6509] Invalid ELF header magic: != ELF [ 310.200073][ T4563] usb 4-1: Using ep0 maxpacket: 16 [ 310.340223][ T4563] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 310.348739][ T4563] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 310.379233][ T4563] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 310.441801][ T4563] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 310.450383][ T4563] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 310.459524][ T4563] usb 4-1: config 0 has no interface number 0 [ 310.466330][ T4563] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 310.477761][ T4563] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 310.488125][ T4563] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.498623][ T4563] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.512297][ T4563] usb 4-1: config 0 interface 125 has no altsetting 0 [ 310.519437][ T4563] usb 4-1: config 0 interface 125 has no altsetting 2 [ 310.700343][ T4563] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 310.719539][ T4563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.750164][ T4563] usb 4-1: Product: syz [ 310.756464][ T4563] usb 4-1: Manufacturer: syz [ 310.763037][ T4563] usb 4-1: SerialNumber: syz [ 310.780975][ T4563] usb 4-1: config 0 descriptor?? [ 310.832596][ T4563] usb 4-1: selecting invalid altsetting 2 [ 311.863522][ T4563] get_1284_register timeout [ 311.870641][ T4563] uss720: probe of 4-1:0.125 failed with error -5 [ 311.890047][ C1] usb 4-1: async_complete: urb error -104 [ 311.895861][ C1] usb 4-1: async_complete: urb error -104 [ 311.901641][ C1] usb 4-1: async_complete: urb error -104 [ 312.039562][ T6522] netlink: 256 bytes leftover after parsing attributes in process `syz.4.561'. [ 312.849732][ T4223] usb 4-1: USB disconnect, device number 10 [ 313.752373][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 313.944262][ T6545] loop4: detected capacity change from 0 to 512 [ 313.983818][ T6545] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 314.261105][ T6545] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 314.281285][ T6545] EXT4-fs (loop4): 1 truncate cleaned up [ 314.287021][ T6545] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000002e,lazytime,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 315.224241][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 315.330318][ T4223] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 315.600188][ T4223] usb 3-1: Using ep0 maxpacket: 16 [ 315.881065][ T4223] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 315.938241][ T4223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.052093][ T4223] usb 3-1: Product: syz [ 316.119257][ T4223] usb 3-1: Manufacturer: syz [ 316.171933][ T4223] usb 3-1: SerialNumber: syz [ 316.212315][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 316.292526][ T4223] usb 3-1: config 0 descriptor?? [ 316.341352][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 316.367872][ T4223] omninet 3-1:0.0: required endpoints missing [ 316.750259][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 317.031256][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.031324][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.322073][ T4563] usb 3-1: USB disconnect, device number 4 [ 317.500079][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 317.730267][ T21] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 317.738636][ T21] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 317.747790][ T21] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 318.497913][ T21] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 318.506412][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 318.510887][ T6577] Invalid ELF header magic: != ELF [ 318.515530][ T21] usb 1-1: config 0 has no interface number 0 [ 318.534163][ T21] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 318.546384][ T21] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 318.668675][ T21] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.679232][ T21] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.692896][ T21] usb 1-1: config 0 interface 125 has no altsetting 0 [ 319.891879][ T21] usb 1-1: config 0 interface 125 has no altsetting 2 [ 320.102582][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 321.900124][ T21] usb 1-1: string descriptor 0 read error: -71 [ 322.674606][ T21] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 322.685054][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.705557][ T21] usb 1-1: config 0 descriptor?? [ 322.889020][ T21] usb 1-1: can't set config #0, error -71 [ 322.904957][ T21] usb 1-1: USB disconnect, device number 9 [ 323.914603][ T6616] netlink: 256 bytes leftover after parsing attributes in process `syz.1.586'. [ 325.249034][ T6608] loop0: detected capacity change from 0 to 32768 [ 327.231993][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 327.510105][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 327.561333][ T6640] loop3: detected capacity change from 0 to 256 [ 327.660255][ T7] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 327.690211][ T7] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 327.719556][ T7] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 327.734801][ T7] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 327.778653][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 327.798360][ T7] usb 2-1: config 0 has no interface number 0 [ 327.821557][ T7] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 327.853307][ T7] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 327.880093][ T7] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 327.910433][ T7] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.974331][ T7] usb 2-1: config 0 interface 125 has no altsetting 0 [ 328.005164][ T7] usb 2-1: config 0 interface 125 has no altsetting 2 [ 328.060425][ T6638] loop0: detected capacity change from 0 to 32768 [ 328.217617][ T7] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 328.268662][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.287386][ T7] usb 2-1: Product: syz [ 328.339629][ T7] usb 2-1: Manufacturer: syz [ 328.360163][ T7] usb 2-1: SerialNumber: syz [ 328.439822][ T7] usb 2-1: config 0 descriptor?? [ 328.618011][ T7] usb 2-1: selecting invalid altsetting 2 [ 328.894725][ T6638] XFS (loop0): Mounting V5 Filesystem [ 329.217971][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 330.029037][ T7] get_1284_register timeout [ 330.046255][ T7] uss720: probe of 2-1:0.125 failed with error -5 [ 330.052819][ C0] usb 2-1: async_complete: urb error -104 [ 330.052927][ C0] usb 2-1: async_complete: urb error -104 [ 330.052996][ C0] usb 2-1: async_complete: urb error -104 [ 330.053064][ C0] usb 2-1: async_complete: urb error -104 [ 330.124117][ T6638] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 330.158547][ T6660] loop3: detected capacity change from 0 to 256 [ 330.184900][ T6638] XFS (loop0): Starting recovery (logdev: internal) [ 330.327437][ T6638] XFS (loop0): Ending recovery (logdev: internal) [ 330.375846][ T6638] XFS (loop0): Quotacheck needed: Please wait. [ 330.495053][ T6638] XFS (loop0): Quotacheck: Done. [ 330.589566][ T4182] XFS (loop0): Unmounting Filesystem [ 330.999658][ T245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.026889][ T4562] usb 2-1: USB disconnect, device number 3 [ 331.174352][ T245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.245055][ T6667] chnl_net:caif_netlink_parms(): no params data found [ 331.411885][ T245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.541736][ T4190] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 332.533129][ T245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.649514][ T6676] loop2: detected capacity change from 0 to 256 [ 332.750513][ T4223] Bluetooth: hci5: command 0x0409 tx timeout [ 332.782633][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.800143][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.818783][ T6691] Invalid ELF header magic: != ELF [ 332.828993][ T6667] device bridge_slave_0 entered promiscuous mode [ 332.880274][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 332.892483][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.988369][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.032135][ T6667] device bridge_slave_1 entered promiscuous mode [ 333.155833][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.165407][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 333.235787][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.316330][ T6667] team0: Port device team_slave_0 added [ 333.382230][ T6667] team0: Port device team_slave_1 added [ 333.439067][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.450349][ T7] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 333.477592][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.515508][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.589264][ T7] usb 2-1: Product: syz [ 333.709023][ T7] usb 2-1: Manufacturer: syz [ 333.737956][ T7] usb 2-1: SerialNumber: syz [ 333.751361][ T7] usb 2-1: config 0 descriptor?? [ 333.768276][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.793121][ T7] gspca_main: se401-2.14.0 probing 047d:5003 [ 333.890777][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.905885][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.034231][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.177205][ T6667] device hsr_slave_0 entered promiscuous mode [ 334.214235][ T6667] device hsr_slave_1 entered promiscuous mode [ 334.220787][ T7] gspca_se401: ExtraFeatures: 255 [ 334.225924][ T7] gspca_se401: Too many frame sizes [ 334.271833][ T6667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.286675][ T6667] Cannot create hsr debugfs directory [ 334.424563][ T7] usb 2-1: USB disconnect, device number 4 [ 334.628205][ T6667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.755420][ T6667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.788525][ T6667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.439624][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 335.501819][ T6667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.678739][ T4251] Bluetooth: hci5: command 0x040f tx timeout [ 337.752557][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.803316][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.845175][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.005578][ T245] device hsr_slave_0 left promiscuous mode [ 338.930877][ T245] device hsr_slave_1 left promiscuous mode [ 338.948481][ T245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.973611][ T6759] loop0: detected capacity change from 0 to 256 [ 338.981144][ T245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.989750][ T245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.999046][ T245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.273493][ T245] device bridge_slave_1 left promiscuous mode [ 339.282005][ T245] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.347766][ T245] device bridge_slave_0 left promiscuous mode [ 339.359144][ T6759] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 339.372355][ T245] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.513614][ T245] device veth1_macvtap left promiscuous mode [ 339.520661][ T245] device veth0_macvtap left promiscuous mode [ 339.532179][ T245] device veth1_vlan left promiscuous mode [ 339.538430][ T245] device veth0_vlan left promiscuous mode [ 339.722449][ T4230] Bluetooth: hci5: command 0x0419 tx timeout [ 340.391146][ T245] team0 (unregistering): Port device team_slave_1 removed [ 340.417062][ T245] team0 (unregistering): Port device team_slave_0 removed [ 340.461987][ T245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.492360][ T245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.686012][ T245] bond0 (unregistering): Released all slaves [ 340.784510][ T6667] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.434480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.673562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.688945][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.696123][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.223669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.367118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.376250][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.383394][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.392186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.570462][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.584657][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.610577][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.743883][ T6794] loop2: detected capacity change from 0 to 512 [ 344.132173][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.170630][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.232312][ T6794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.244326][ T6779] loop0: detected capacity change from 0 to 32768 [ 344.252113][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.260808][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.278558][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.289831][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.308160][ T6779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.618 (6779) [ 344.308204][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.329363][ T6794] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 344.367192][ T6802] loop3: detected capacity change from 0 to 16 [ 344.372341][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.400914][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.401853][ T6794] EXT4-fs (loop2): 1 truncate cleaned up [ 344.430643][ T6779] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 344.447648][ T6794] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 344.486845][ T6802] erofs: (device loop3): mounted with root inode @ nid 36. [ 344.494121][ T6779] BTRFS info (device loop0): force clearing of disk cache [ 344.502902][ T6779] BTRFS info (device loop0): enabling auto defrag [ 344.547476][ T6802] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 344.591225][ T6802] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 344.603007][ T6802] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 344.614767][ T6802] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 344.624377][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 344.633428][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 344.642469][ T6802] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 344.651771][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 344.660813][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 344.669821][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 344.679473][ T6802] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 344.688790][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 344.698926][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 344.707979][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 344.718131][ T6802] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 344.728146][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 344.737323][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 344.746524][ T6802] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 344.755913][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 344.764938][ T6802] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 344.774844][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 344.784127][ T6802] attempt to access beyond end of device [ 344.784127][ T6802] loop3: rw=524288, want=848, limit=16 [ 344.795133][ T6802] attempt to access beyond end of device [ 344.795133][ T6802] loop3: rw=524288, want=13478624104, limit=16 [ 344.807082][ T6802] attempt to access beyond end of device [ 344.807082][ T6802] loop3: rw=524288, want=13478624080, limit=16 [ 344.818924][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 344.828488][ T6802] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 344.837795][ T6802] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 344.846984][ T6802] attempt to access beyond end of device [ 344.846984][ T6802] loop3: rw=524288, want=32, limit=16 [ 344.857958][ T6802] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[3537] [ 344.870119][ T6802] ================================================================== [ 344.878420][ T6802] BUG: KASAN: vmalloc-out-of-bounds in hex_dump_to_buffer+0x3c0/0xd50 [ 344.886571][ T6802] Read of size 1 at addr ffffc900011d7000 by task syz.3.623/6802 [ 344.894274][ T6802] [ 344.896594][ T6802] CPU: 0 PID: 6802 Comm: syz.3.623 Not tainted syzkaller #0 [ 344.903854][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.913906][ T6802] Call Trace: [ 344.917173][ T6802] [ 344.920096][ T6802] dump_stack_lvl+0x168/0x230 [ 344.924784][ T6802] ? show_regs_print_info+0x20/0x20 [ 344.929964][ T6802] ? _printk+0xcc/0x110 [ 344.934114][ T6802] ? hex_dump_to_buffer+0x3c0/0xd50 [ 344.939297][ T6802] ? load_image+0x3b0/0x3b0 [ 344.943784][ T6802] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 344.949141][ T6802] print_address_description+0x60/0x2d0 [ 344.954670][ T6802] ? hex_dump_to_buffer+0x3c0/0xd50 [ 344.959850][ T6802] kasan_report+0xdf/0x130 [ 344.964249][ T6802] ? hex_dump_to_buffer+0x3c0/0xd50 [ 344.969433][ T6802] hex_dump_to_buffer+0x3c0/0xd50 [ 344.974452][ T6802] print_hex_dump+0x136/0x260 [ 344.979127][ T6802] ? hex_dump_to_buffer+0xd50/0xd50 [ 344.984329][ T6802] z_erofs_lz4_decompress+0xc7f/0x1180 [ 344.989793][ T6802] z_erofs_decompress+0x767/0xde0 [ 344.994815][ T6802] ? lock_chain_count+0x20/0x20 [ 344.999663][ T6802] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 345.005538][ T6802] z_erofs_decompress_queue+0x11a6/0x1990 [ 345.011254][ T6802] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 345.017082][ T6802] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 345.022961][ T6802] ? submit_bio+0x2be/0x560 [ 345.027456][ T6802] ? submit_bio_noacct+0x6d0/0x6d0 [ 345.032548][ T6802] ? bio_add_page+0x2d6/0x460 [ 345.037209][ T6802] z_erofs_runqueue+0x164c/0x1890 [ 345.042236][ T6802] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 345.047775][ T6802] ? mutex_unlock+0x10/0x10 [ 345.052269][ T6802] z_erofs_readahead+0xb81/0x10c0 [ 345.057282][ T6802] ? z_erofs_readpage+0x6c0/0x6c0 [ 345.062287][ T6802] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 345.068285][ T6802] ? local_lock_release+0x97/0x170 [ 345.073382][ T6802] read_pages+0x165/0x920 [ 345.077700][ T6802] ? page_cache_ra_unbounded+0x930/0x930 [ 345.083322][ T6802] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 345.090161][ T6802] page_cache_ra_unbounded+0x830/0x930 [ 345.097230][ T6802] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 345.105722][ T6802] force_page_cache_ra+0x3e5/0x440 [ 345.112397][ T6802] generic_fadvise+0x520/0x7d0 [ 345.117266][ T6802] ? dump_task+0x600/0x600 [ 345.121671][ T6802] ? __fdget+0x18b/0x210 [ 345.125898][ T6802] __x64_sys_fadvise64+0x139/0x180 [ 345.130994][ T6802] do_syscall_64+0x4c/0xa0 [ 345.135394][ T6802] ? clear_bhb_loop+0x30/0x80 [ 345.140051][ T6802] ? clear_bhb_loop+0x30/0x80 [ 345.144735][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.150652][ T6802] RIP: 0033:0x7f3d6f342fc9 [ 345.155077][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.162336][ T6779] BTRFS info (device loop0): max_inline at 4096 [ 345.174693][ T6802] RSP: 002b:00007f3d6d5aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 345.174749][ T6802] RAX: ffffffffffffffda RBX: 00007f3d6f599fa0 RCX: 00007f3d6f342fc9 [ 345.174770][ T6802] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 345.174782][ T6802] RBP: 00007f3d6f3c5f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.174794][ T6802] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 345.174806][ T6802] R13: 00007f3d6f59a038 R14: 00007f3d6f599fa0 R15: 00007fffee678328 [ 345.229150][ T6802] [ 345.232152][ T6802] [ 345.234478][ T6802] [ 345.236775][ T6802] Memory state around the buggy address: [ 345.242380][ T6802] ffffc900011d6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.250421][ T6802] ffffc900011d6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.258461][ T6802] >ffffc900011d7000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 345.266496][ T6802] ^ [ 345.270676][ T6802] ffffc900011d7080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 345.278722][ T6802] ffffc900011d7100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 345.286851][ T6802] ================================================================== [ 345.294895][ T6802] Disabling lock debugging due to kernel taint [ 345.301097][ T6802] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 345.308390][ T6802] CPU: 0 PID: 6802 Comm: syz.3.623 Tainted: G B syzkaller #0 [ 345.317077][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.327131][ T6802] Call Trace: [ 345.330393][ T6802] [ 345.333304][ T6802] dump_stack_lvl+0x168/0x230 [ 345.337961][ T6802] ? show_regs_print_info+0x20/0x20 [ 345.343135][ T6802] ? load_image+0x3b0/0x3b0 [ 345.347621][ T6802] panic+0x2c9/0x7f0 [ 345.351494][ T6802] ? asm_common_interrupt+0x22/0x40 [ 345.357453][ T6802] ? bpf_jit_dump+0xd0/0xd0 [ 345.361933][ T6802] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 345.367810][ T6802] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 345.373787][ T6802] ? _raw_spin_unlock+0x40/0x40 [ 345.378615][ T6802] ? hex_dump_to_buffer+0x3c0/0xd50 [ 345.384227][ T6802] check_panic_on_warn+0x80/0xa0 [ 345.389149][ T6802] ? hex_dump_to_buffer+0x3c0/0xd50 [ 345.394756][ T6802] end_report+0x6d/0xf0 [ 345.398889][ T6802] kasan_report+0x102/0x130 [ 345.404161][ T6802] ? hex_dump_to_buffer+0x3c0/0xd50 [ 345.409388][ T6802] hex_dump_to_buffer+0x3c0/0xd50 [ 345.414403][ T6802] print_hex_dump+0x136/0x260 [ 345.419169][ T6802] ? hex_dump_to_buffer+0xd50/0xd50 [ 345.424349][ T6802] z_erofs_lz4_decompress+0xc7f/0x1180 [ 345.429880][ T6802] z_erofs_decompress+0x767/0xde0 [ 345.434978][ T6802] ? lock_chain_count+0x20/0x20 [ 345.439811][ T6802] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 345.446465][ T6802] z_erofs_decompress_queue+0x11a6/0x1990 [ 345.452168][ T6802] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 345.457968][ T6802] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 345.463953][ T6802] ? submit_bio+0x2be/0x560 [ 345.468436][ T6802] ? submit_bio_noacct+0x6d0/0x6d0 [ 345.473535][ T6802] ? bio_add_page+0x2d6/0x460 [ 345.478190][ T6802] z_erofs_runqueue+0x164c/0x1890 [ 345.483369][ T6802] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 345.488989][ T6802] ? mutex_unlock+0x10/0x10 [ 345.493476][ T6802] z_erofs_readahead+0xb81/0x10c0 [ 345.498482][ T6802] ? z_erofs_readpage+0x6c0/0x6c0 [ 345.503481][ T6802] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 345.509444][ T6802] ? local_lock_release+0x97/0x170 [ 345.515007][ T6802] read_pages+0x165/0x920 [ 345.519316][ T6802] ? page_cache_ra_unbounded+0x930/0x930 [ 345.524928][ T6802] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 345.530367][ T6802] page_cache_ra_unbounded+0x830/0x930 [ 345.535807][ T6802] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 345.542292][ T6802] force_page_cache_ra+0x3e5/0x440 [ 345.547398][ T6802] generic_fadvise+0x520/0x7d0 [ 345.552139][ T6802] ? dump_task+0x600/0x600 [ 345.556535][ T6802] ? __fdget+0x18b/0x210 [ 345.560751][ T6802] __x64_sys_fadvise64+0x139/0x180 [ 345.565844][ T6802] do_syscall_64+0x4c/0xa0 [ 345.570239][ T6802] ? clear_bhb_loop+0x30/0x80 [ 345.574889][ T6802] ? clear_bhb_loop+0x30/0x80 [ 345.579556][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.585437][ T6802] RIP: 0033:0x7f3d6f342fc9 [ 345.589833][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.609414][ T6802] RSP: 002b:00007f3d6d5aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 345.617888][ T6802] RAX: ffffffffffffffda RBX: 00007f3d6f599fa0 RCX: 00007f3d6f342fc9 [ 345.625957][ T6802] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 345.633918][ T6802] RBP: 00007f3d6f3c5f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.641880][ T6802] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 345.649834][ T6802] R13: 00007f3d6f59a038 R14: 00007f3d6f599fa0 R15: 00007fffee678328 [ 345.657794][ T6802] [ 345.661031][ T6802] Kernel Offset: disabled [ 345.665351][ T6802] Rebooting in 86400 seconds..