last executing test programs: 15.256101365s ago: executing program 2 (id=554): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0xffffff91}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) dup(0xffffffffffffffff) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 15.00572894s ago: executing program 3 (id=555): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x2200110, &(0x7f00000022c0)=ANY=[@ANYBLOB='iocharset=macromanian,dmask=00000000000000000000000,errors=remount-ro,errors=continue,fmask=00000000000000000122753,uid=', @ANYRESOCT=0x0, @ANYBLOB="2c696f636861727365743d6d6163726f6d616e69616e2c646973636172642c757466382c6572726f72733d636f6e74696e75652c00b24a414a138ea1f090829675858b09596dae40b2fee0"], 0x4, 0x152f, &(0x7f00000079c0)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) 13.344677742s ago: executing program 2 (id=558): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) 12.979661259s ago: executing program 2 (id=561): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000740)={r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYRES16=r6, @ANYBLOB="00082dbd7000fcdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0xc0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESOCT=r7, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 10.576410585s ago: executing program 3 (id=566): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) fcntl$notify(r0, 0x402, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f00000001c0)=""/57, 0x19) 9.503275866s ago: executing program 3 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_io_uring_setup(0x2502, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x200, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x800006}) io_uring_enter(r9, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="2be100", @ANYRES16=r7, @ANYBLOB="010000000000000000003a0000000800", @ANYRES32, @ANYBLOB="05005b0052000000"], 0x24}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r13, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x80000000}, @l2tp={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x4e1d, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 8.200197621s ago: executing program 3 (id=574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000a80)="d5", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x6, @empty}], 0x1c) 7.478780725s ago: executing program 1 (id=579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.402668076s ago: executing program 0 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000002eb407a800000000000a58000000060a0b040000000000000000010000012c0004802800018007000100637400001c0002800800024000000014080001400000001305000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 7.163072012s ago: executing program 4 (id=582): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd9, 0x103, 0x0, 0x20b, 0x4, "03f07f0900", 0x563, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) 7.085362053s ago: executing program 0 (id=583): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(0x0, 0x0, 0xc8) fcntl$notify(r2, 0x402, 0x8000001c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r3 = syz_open_dev$media(0x0, 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setpriority(0x0, 0x0, 0x1ff) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.805123989s ago: executing program 1 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_io_uring_setup(0x2502, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x200, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x800006}) io_uring_enter(r9, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="2be100", @ANYRES16=r7, @ANYBLOB="010000000000000000003a0000000800", @ANYRES32, @ANYBLOB="05005b0052000000"], 0x24}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r13, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x80000000}, @l2tp={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x4e1d, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 6.064311273s ago: executing program 4 (id=585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mkdir(0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 5.896168566s ago: executing program 3 (id=586): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 5.838311647s ago: executing program 0 (id=587): r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, "001863718e9bf703"}}}}}, 0x0) 5.621955371s ago: executing program 1 (id=588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) getpeername$qrtr(r4, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) listen(r3, 0x0) 5.579865782s ago: executing program 0 (id=589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000140)={'syz1\x00', {0x6e3, 0xfff, 0x8, 0x2}, 0x32, [0x5, 0x4, 0x9, 0x4, 0x9, 0x6, 0x8, 0x4, 0x34f7, 0xffffff17, 0xff, 0x3, 0x0, 0x0, 0x26361e9e, 0xb, 0x200, 0x9, 0x4, 0x100, 0x9, 0x9, 0x7, 0x1ff, 0x1, 0x5, 0xbf6a, 0x9, 0xa, 0x6, 0x4, 0x400, 0x9, 0x2, 0x10, 0x5, 0x7, 0xffffffff, 0x5, 0x10001, 0x80000001, 0x9, 0x8, 0x6, 0x401, 0xbf, 0x7, 0x8, 0x7d, 0x5, 0x4cc, 0x1, 0x32e2, 0x5, 0x6, 0x8, 0x9, 0xff, 0x8, 0x0, 0x5, 0x0, 0xffff, 0x100], [0x6, 0x0, 0x9, 0x6, 0xb0, 0xfffffffa, 0x5b, 0x0, 0x8000, 0x7, 0x7fffffff, 0x4, 0x47, 0x5, 0x3ff, 0x101, 0x3, 0x9, 0xff, 0x5b, 0x1, 0xfffff740, 0x945, 0x7aa947e2, 0xfff, 0x1, 0xc7, 0x9, 0xc, 0x5d6, 0x8, 0xffffffff, 0x10000, 0x10000, 0x5, 0x1, 0x101, 0x7fff, 0x6, 0xfffffffd, 0x7, 0x100, 0xe, 0x7, 0x101, 0x3, 0x7, 0x7, 0xffffffc0, 0x0, 0x2fc4, 0xff, 0x80000001, 0x907, 0x1000000, 0x9, 0x8, 0x2866, 0x80, 0xffff, 0x291, 0x0, 0x4, 0xa0], [0x1000, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, 0x6, 0x0, 0xfff, 0x8, 0x40, 0x6, 0x644, 0x30000000, 0x8, 0x0, 0xe, 0x6, 0x9, 0x6, 0xffffffff, 0xd1, 0x8, 0x9, 0x2, 0x2, 0x6, 0x5, 0x9, 0xffffff15, 0x9, 0x1, 0x1, 0x5, 0x7, 0x81, 0xfff, 0x81, 0x10000, 0x9b67, 0x0, 0x10001, 0x7, 0x100, 0xfffffff8, 0x45ab, 0xc3, 0xb91, 0x9, 0x7, 0x80000000, 0x9, 0x0, 0x1, 0x10000, 0x8000, 0x8, 0x1000, 0xfffffeff, 0x6, 0x0, 0x9, 0x7], [0x1, 0x4, 0x200, 0x4, 0xb, 0xffffff71, 0x10001, 0x0, 0x9, 0xe, 0x2, 0xf, 0xf9, 0x10, 0x3, 0x3, 0x8, 0x2, 0x9, 0x7ff, 0x400, 0x6, 0xffffff1b, 0x6, 0x8, 0x1f9, 0x2, 0x8, 0x7, 0xecff, 0xdcf, 0xf, 0x8, 0x1a, 0x68, 0x4, 0x0, 0x7, 0x6, 0xa, 0x8, 0x3, 0x4, 0x8, 0x0, 0x31a1, 0xc74e, 0x5, 0x26d1, 0x5, 0xfffffff7, 0xd32, 0x5, 0x7fff, 0x10000, 0xde2, 0x0, 0xe1, 0x3, 0x7fff, 0x0, 0x1, 0x80, 0xa]}, 0x45c) 4.531266193s ago: executing program 0 (id=590): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086e8b, &(0x7f0000000080)={@desc={0x100007, 0x0, @desc2}}) 4.118197131s ago: executing program 1 (id=591): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0xffffff91}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0) dup(0xffffffffffffffff) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.881329374s ago: executing program 4 (id=592): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.836891125s ago: executing program 2 (id=593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0xe6, 0x7e, 0x80000000, 0xa, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, 0x700, 0x80, 0x4, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006b02"]) 2.788186626s ago: executing program 1 (id=594): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000080000000000000100000000000000f2"]) 2.738204417s ago: executing program 0 (id=595): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x5) ftruncate(r0, 0xc56a) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r2, 0x409, 0x9) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file5\x00', 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) 2.241260257s ago: executing program 4 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010401"], 0x1c}}, 0x0) 2.235045387s ago: executing program 2 (id=597): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source', &(0x7f0000000380)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) sendfile(r4, r4, 0x0, 0xffffffff) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x28c, 0x0, 0xffffffff, 0x134, 0x3c8, 0x508, 0x508, 0xffffffff, 0x508, 0x508, 0x5, &(0x7f0000000000), {[{{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xff, 0xffffff00], 'veth0_vlan\x00', 'geneve1\x00', {}, {}, 0xff, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv6=@mcast2, @ipv4=@broadcast, @gre_key=0xc, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x4}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x5, @port=0x4e20}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @private0, [0xff000000, 0xff000000, 0xff, 0xffffffff], [0xffffff00, 0x4e71ed1f0a81f2f7, 0xff000000, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x3a, 0x91, 0x2, 0x41}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x6, @ipv4=@private=0xa010101, @ipv4=@multicast2, @gre_key=0x9, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0x6, 0x7}}, @common=@icmp6={{0x28}, {0x3, '~m', 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@remote, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed0200000000000080000000"], 0x2c}}, 0x4000) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) 1.755276376s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 502.53987ms ago: executing program 4 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_io_uring_setup(0x2502, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x200, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x800006}) io_uring_enter(r9, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="2be100", @ANYRES16=r7, @ANYBLOB="010000000000000000003a0000000800", @ANYRES32, @ANYBLOB="05005b0052000000"], 0x24}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r13, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x80000000}, @l2tp={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x4e1d, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 427.472542ms ago: executing program 3 (id=600): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x0, 0xfd}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 333.650534ms ago: executing program 2 (id=601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) getpeername$qrtr(r5, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) listen(r4, 0x0) 0s ago: executing program 4 (id=602): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20041000) recvmsg(0xffffffffffffffff, 0x0, 0x40002043) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1c}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) futex(&(0x7f00000004c0), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x9bfffffe) kernel console output (not intermixed with test programs): ve_1 [ 61.998568][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.024905][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.037749][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.096501][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.103346][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.110504][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.118412][ T4184] Cannot create hsr debugfs directory [ 62.127950][ T4192] team0: Port device team_slave_0 added [ 62.135959][ T4192] team0: Port device team_slave_1 added [ 62.155817][ T4191] team0: Port device team_slave_0 added [ 62.197321][ T4191] team0: Port device team_slave_1 added [ 62.222177][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.229454][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.236157][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.243733][ T4188] Cannot create hsr debugfs directory [ 62.250434][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.257698][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.283665][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.322430][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.329474][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.355681][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.401306][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.409129][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.436207][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.449095][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.456484][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.482479][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.497190][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 62.510709][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 62.517545][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 62.523646][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 62.530133][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 62.619110][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.626448][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.633072][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.641325][ T4192] Cannot create hsr debugfs directory [ 62.660019][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.667086][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.673600][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.681447][ T4191] Cannot create hsr debugfs directory [ 62.785421][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.818479][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.850927][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.877522][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.965745][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.975517][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.995006][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.008661][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.022384][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.037839][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.049715][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.070665][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.152303][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.168420][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.184577][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.194536][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.220836][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.282194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.292330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.304806][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.329156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.339937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.350370][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.357798][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.366657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.375299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.386855][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.393955][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.401981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.413891][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.425864][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.449694][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.462161][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.479428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.497697][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.507283][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.529504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.538101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.546359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.555047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.564985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.574455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.583887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.592602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.604077][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.631204][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.640324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.648472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.662394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.672527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.682237][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.689463][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.703697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.727968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.737202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.747296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.757899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.767121][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.774186][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.787064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.795840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.804739][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.811914][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.820188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.829190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.837945][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.845042][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.859043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.869538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.879327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.919872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.930033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.943036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.959750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.973657][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.993447][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.002931][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.013290][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.024411][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.033150][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.041373][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.077005][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.085789][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.095878][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.107429][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.115754][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.125245][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.134180][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.143453][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.153938][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.163546][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.177659][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.198111][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.215663][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.227360][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.244434][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.253003][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.275671][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.295705][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.315397][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.324804][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.351197][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.360354][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.374466][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.385741][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.401960][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.409142][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.425043][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.434485][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.443705][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.450972][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.465384][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.477666][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.490966][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.516453][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.549195][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.559563][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.580148][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.589056][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 64.595420][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 64.602862][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.616617][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 64.621420][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.627098][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 64.632364][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.642968][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 64.668768][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.677390][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.686303][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.694764][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.701898][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.709798][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.719352][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.728062][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.735116][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.742949][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.752636][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.762066][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.770953][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.779787][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.804502][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.816647][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.825639][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.836987][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.845669][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.854794][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.873205][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.897242][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.904758][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.914023][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.924109][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.933277][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.943001][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.961536][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.977889][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.997286][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.021765][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.031026][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.045410][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.053572][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.067902][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.077290][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.092703][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.135308][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.163579][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.177835][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.212528][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.248275][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.267094][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.292724][ T4183] device veth0_vlan entered promiscuous mode [ 65.339741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.355561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.364538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.372873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.391427][ T4183] device veth1_vlan entered promiscuous mode [ 65.399436][ T4188] device veth0_vlan entered promiscuous mode [ 65.412721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.422275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.430050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.442174][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.460952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.471709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.479588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.489683][ T4188] device veth1_vlan entered promiscuous mode [ 65.511200][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.520435][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.530097][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.540620][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.570368][ T4183] device veth0_macvtap entered promiscuous mode [ 65.588308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.597496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.607145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.615802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.625208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.637811][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.665896][ T4184] device veth0_vlan entered promiscuous mode [ 65.674067][ T4183] device veth1_macvtap entered promiscuous mode [ 65.684854][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.698298][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.709205][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.718226][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.727282][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.735789][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.744596][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.753190][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.761459][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.769403][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.778543][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.791382][ T4188] device veth0_macvtap entered promiscuous mode [ 65.802136][ T4192] device veth0_vlan entered promiscuous mode [ 65.815235][ T4184] device veth1_vlan entered promiscuous mode [ 65.833027][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.843874][ T4188] device veth1_macvtap entered promiscuous mode [ 65.853200][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.863010][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.871504][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.880789][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.890995][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.916833][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.947356][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.956669][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.965523][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.978206][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.998752][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.007899][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.026072][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.034818][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.050727][ T4192] device veth1_vlan entered promiscuous mode [ 66.060269][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.071181][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.083706][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.094247][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.103023][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.112268][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.122659][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.131706][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.141166][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.153947][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.162256][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.188821][ T4184] device veth0_macvtap entered promiscuous mode [ 66.196469][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.207733][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.220299][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.229338][ T4191] device veth0_vlan entered promiscuous mode [ 66.244130][ T4192] device veth0_macvtap entered promiscuous mode [ 66.254786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.263547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.273969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.284286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.293588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.305502][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.314945][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.323933][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.332828][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.351963][ T4184] device veth1_macvtap entered promiscuous mode [ 66.363509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.372019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.389740][ T4192] device veth1_macvtap entered promiscuous mode [ 66.407348][ T4191] device veth1_vlan entered promiscuous mode [ 66.435445][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.452314][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.462410][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.476145][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.488451][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.504875][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.516902][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.527677][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.538331][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.552485][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.563217][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.574467][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.600028][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.609557][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.618014][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.625993][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.635032][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.643959][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.653037][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.661384][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 66.667753][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 66.668029][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.673865][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 66.690856][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 66.691261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.697273][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 66.712936][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.723639][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.735329][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.747162][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.755891][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.765505][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.774425][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.798269][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.807636][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.821645][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.832608][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.842795][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.853653][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.863841][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.874602][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.885885][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.898206][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.908096][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917214][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.925923][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.948045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.961297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.005759][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.010566][ T4191] device veth0_macvtap entered promiscuous mode [ 67.020378][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.055239][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.076629][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.085187][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.100996][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.113339][ T4191] device veth1_macvtap entered promiscuous mode [ 67.150268][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.173831][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.183355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.193397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.215591][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.218756][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.234784][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.238196][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.252372][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.263245][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.273251][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.283780][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.294268][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.307427][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.319223][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.340953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.353836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.362969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.375021][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.386718][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.396753][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.408704][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.418922][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.429711][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.439839][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.450609][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.463641][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.474757][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.484342][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.494314][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.503318][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.538448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.551949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.608205][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.627305][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.629963][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.675409][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.692561][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.705820][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.718868][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.723419][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.765175][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.788734][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.807809][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.841509][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.862116][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.867129][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.906532][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.914672][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.934164][ T4297] xt_ecn: cannot match TCP bits for non-tcp packets [ 67.962897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.014715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.044410][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.065028][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.119332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.269528][ T4306] loop1: detected capacity change from 0 to 512 [ 68.291498][ T4308] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8'. [ 68.331768][ T4308] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8'. [ 68.341353][ T4306] EXT4-fs (loop1): inline encryption not supported [ 68.351060][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.426995][ T4306] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,grpquota,,errors=continue. Quota mode: writeback. [ 68.442666][ T4306] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.616223][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 68.737147][ T1111] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 68.745972][ T1111] usb 1-1: config 0 has no interface number 0 [ 68.747794][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 68.770590][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 68.786761][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 68.795649][ T4328] loop3: detected capacity change from 0 to 512 [ 68.802324][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 68.811925][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 68.851903][ T4328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 68.872555][ T4328] System zones: 1-12 [ 68.877249][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.889939][ T4328] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.14: corrupted in-inode xattr [ 68.905497][ T4328] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.14: couldn't read orphan inode 15 (err -117) [ 68.942269][ T1111] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 68.951609][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.966408][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.974861][ T4328] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nolazytime,debug,noload,init_itable=0x0000000000000007,grpquota,lazytime,noquota,nodelalloc,,errors=continue. Quota mode: none. [ 68.993215][ T1111] usb 1-1: Product: syz [ 69.031586][ T1111] usb 1-1: Manufacturer: syz [ 69.053591][ T1111] usb 1-1: SerialNumber: syz [ 69.092310][ T1111] usb 1-1: config 0 descriptor?? [ 69.147640][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 69.253969][ T4345] Zero length message leads to an empty skb [ 69.297279][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.309268][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.312854][ T4347] tipc: Failed to obtain node identity [ 69.319195][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.319335][ T7] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 69.319360][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.342135][ T7] usb 5-1: config 0 descriptor?? [ 69.355220][ T21] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 69.356903][ T4347] tipc: Enabling of bearer rejected, failed to enable media [ 69.366911][ T21] usb 3-1: config 0 has no interface number 1 [ 69.383989][ T21] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 69.387729][ T4292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.394273][ T1111] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 69.415038][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 69.436343][ T1111] usb 1-1: No valid video chain found. [ 69.447629][ T1111] usb 1-1: USB disconnect, device number 2 [ 69.526340][ T21] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 69.535469][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.571976][ T21] usb 3-1: SerialNumber: syz [ 69.594990][ T21] usb 3-1: config 0 descriptor?? [ 69.639232][ T21] usb 3-1: Found UVC 0.00 device (0002:0000) [ 69.658490][ T21] usb 3-1: No valid video chain found. [ 69.776855][ T4292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.787612][ T4292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.853570][ T13] usb 3-1: USB disconnect, device number 2 [ 69.866886][ T7] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 69.874679][ T7] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 69.887114][ T7] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 69.896369][ T7] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 69.904093][ T7] nzxt-kraken2 0003:1E71:170E.0001: unknown main item tag 0x0 [ 69.927114][ T7] nzxt-kraken2 0003:1E71:170E.0001: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 69.956222][ T4292] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 69.965668][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.976575][ T4292] usb 2-1: Product: syz [ 69.980793][ T4292] usb 2-1: Manufacturer: syz [ 69.985416][ T4292] usb 2-1: SerialNumber: syz [ 70.002929][ T4292] usb 2-1: config 0 descriptor?? [ 70.051177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 70.060669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.156035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.165134][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.174308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.183437][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.192508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.201618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.210690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.219775][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.812692][ T7] usb 5-1: USB disconnect, device number 2 [ 70.858346][ T4292] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 70.876745][ T4292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.906841][ T4292] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 70.915830][ T4292] usb 2-1: media controller created [ 70.936504][ T4292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.987847][ T4292] DVB: Unable to find symbol tda10046_attach() [ 70.995830][ T4292] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 71.010542][ T4292] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 71.122250][ T4387] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.272603][ T4382] fido_id[4382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 71.380859][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388040][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.496951][ T4405] loop3: detected capacity change from 0 to 512 [ 71.531553][ T4292] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 71.544386][ T4405] EXT4-fs (loop3): inline encryption not supported [ 71.553962][ T4292] usb 2-1: USB disconnect, device number 2 [ 71.566328][ T4405] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 71.700339][ T4407] afs: Unknown parameter '' [ 72.126588][ T4324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.487242][ T4405] EXT4-fs (loop3): Test dummy encryption mode enabled [ 72.494729][ T4324] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 72.529057][ T4324] usb 5-1: config 0 has no interface number 1 [ 72.542638][ T4405] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.554176][ T4324] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 72.568591][ T4405] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.42: inode #13: comm syz.3.42: iget: illegal inode # [ 72.594960][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 72.625525][ T4405] EXT4-fs (loop3): Remounting filesystem read-only [ 72.660543][ T4405] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.42: couldn't read orphan inode 13 (err -117) [ 72.721791][ T4324] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 72.746645][ T4405] EXT4-fs (loop3): Remounting filesystem read-only [ 72.753216][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000000222a,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 72.760579][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.776884][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.818203][ T4324] usb 5-1: SerialNumber: syz [ 72.843347][ T4324] usb 5-1: config 0 descriptor?? [ 72.888611][ T4430] mmap: syz.2.49 (4430) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 72.910727][ T4324] usb 5-1: Found UVC 0.00 device (0002:0000) [ 72.928088][ T4324] usb 5-1: No valid video chain found. [ 72.934903][ T4405] EXT4-fs error (device loop3): ext4_resize_begin:61: comm syz.3.42: resize_inode disabled but reserved GDT blocks non-zero [ 73.096225][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 73.210729][ T4324] usb 5-1: USB disconnect, device number 3 [ 73.303305][ T4440] loop3: detected capacity change from 0 to 2048 [ 73.402950][ T4440] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 73.438252][ T26] audit: type=1800 audit(1756973058.971:2): pid=4440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.52" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 73.480846][ T7] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 73.500559][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.530755][ T7] usb 1-1: Product: syz [ 73.545746][ T7] usb 1-1: Manufacturer: syz [ 73.565311][ T7] usb 1-1: SerialNumber: syz [ 73.585381][ T7] usb 1-1: config 0 descriptor?? [ 73.657774][ T7] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 73.676997][ T7] usb 1-1: Detected FT-X [ 73.852271][ T4456] netdevsim netdevsim4: Firmware load for '/../file0' refused, path contains '..' component [ 73.867074][ T4452] loop1: detected capacity change from 0 to 4096 [ 73.939364][ T4459] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.986131][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.096217][ T7] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 74.295867][ T26] audit: type=1800 audit(1756973059.821:3): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.56" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 74.921380][ T7] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 74.930553][ T7] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 74.942242][ T7] usb 1-1: USB disconnect, device number 3 [ 74.957231][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 74.973846][ T7] ftdi_sio 1-1:0.0: device disconnected [ 75.246355][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.257389][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.275239][ T4174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.306150][ T4174] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.315244][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.359325][ T4174] usb 3-1: config 0 descriptor?? [ 75.506320][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 75.586095][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.822639][ T4489] loop3: detected capacity change from 0 to 128 [ 75.834922][ T4174] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 75.854691][ T4174] plantronics 0003:047F:FFFF.0002: parse failed [ 75.870389][ T4174] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 75.917379][ T13] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 75.932162][ T13] usb 5-1: config 7 has no interface number 0 [ 75.946402][ T1111] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 75.948740][ T13] usb 5-1: config 7 interface 101 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 75.972606][ T1111] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.993369][ T1111] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.002818][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.051763][ T4324] usb 3-1: USB disconnect, device number 3 [ 76.118498][ T1111] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 76.156369][ T13] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 76.161903][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.169881][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.204402][ T13] usb 5-1: Product: syz [ 76.209089][ T13] usb 5-1: Manufacturer: syz [ 76.214057][ T13] usb 5-1: SerialNumber: syz [ 76.257007][ T4174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.301167][ T4477] netlink: 'syz.1.63': attribute type 15 has an invalid length. [ 76.309309][ T4477] netlink: 666 bytes leftover after parsing attributes in process `syz.1.63'. [ 76.320270][ T4324] usb 2-1: USB disconnect, device number 3 [ 76.525318][ T4501] loop0: detected capacity change from 0 to 2048 [ 76.549721][ T13] as10x_usb: device has been detected [ 76.565598][ T13] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 76.616077][ T4501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.652860][ T26] audit: type=1800 audit(1756973062.181:4): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.76" name="bus" dev="loop0" ino=1436 res=0 errno=0 [ 76.653601][ T13] usb 5-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 76.726613][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 76.742989][ T4174] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 76.774473][ T13] as10x_usb: error during firmware upload part1 [ 76.781037][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.790029][ T13] Registered device Elgato EyeTV DTT Deluxe [ 76.798379][ T13] usb 5-1: USB disconnect, device number 4 [ 76.822047][ T4174] usb 4-1: config 0 descriptor?? [ 76.909351][ T4506] loop2: detected capacity change from 0 to 512 [ 76.927347][ T13] Unregistered device Elgato EyeTV DTT Deluxe [ 76.929943][ T13] as10x_usb: device has been disconnected [ 76.985237][ T4506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.003432][ T4506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.145816][ T4506] EXT4-fs (loop2): 1 truncate cleaned up [ 77.170341][ T4506] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.354463][ T4508] loop0: detected capacity change from 0 to 32768 [ 78.388581][ T4508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.78 (4508) [ 78.439950][ T4174] logitech 0003:046D:C295.0003: unknown main item tag 0x0 [ 78.473240][ T4508] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 78.480866][ T4174] logitech 0003:046D:C295.0003: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 78.504707][ T4174] logitech 0003:046D:C295.0003: no inputs found [ 78.506429][ T4508] BTRFS info (device loop0): using free space tree [ 78.529722][ T4508] BTRFS info (device loop0): has skinny extents [ 78.686701][ T4174] usb 4-1: USB disconnect, device number 2 [ 78.798782][ T4508] BTRFS info (device loop0): enabling ssd optimizations [ 78.814400][ T4538] fido_id[4538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 78.847268][ T4508] BTRFS info (device loop0): Snapshot src from another FS [ 79.222201][ T4536] loop2: detected capacity change from 0 to 32768 [ 79.507695][ T4536] XFS (loop2): Mounting V5 Filesystem [ 79.718405][ T4536] XFS (loop2): Ending clean mount [ 80.932132][ T4536] XFS (loop2): Quotacheck needed: Please wait. [ 81.135616][ T4536] XFS (loop2): Quotacheck: Done. [ 81.256301][ T4324] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 81.273186][ T4192] XFS (loop2): Unmounting Filesystem [ 81.282418][ T4554] loop4: detected capacity change from 0 to 32768 [ 81.294881][ T4593] loop1: detected capacity change from 0 to 64 [ 81.331446][ T4554] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.89 (4554) [ 81.392231][ T4554] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.433257][ T4554] BTRFS info (device loop4): setting nodatacow, compression disabled [ 81.435648][ T26] audit: type=1800 audit(1756973066.961:5): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.98" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 81.471381][ T4554] BTRFS info (device loop4): setting datacow [ 81.499498][ T4554] BTRFS info (device loop4): doing ref verification [ 81.529000][ T4554] BTRFS info (device loop4): force clearing of disk cache [ 81.536494][ T4554] BTRFS info (device loop4): turning off barriers [ 81.543142][ T4554] BTRFS info (device loop4): turning on flush-on-commit [ 81.561796][ T4554] BTRFS info (device loop4): turning on sync discard [ 81.569894][ T4554] BTRFS info (device loop4): using free space tree [ 81.579871][ T4554] BTRFS info (device loop4): has skinny extents [ 81.633015][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.708786][ T4324] usb 1-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 81.722211][ T26] audit: type=1326 audit(1756973067.251:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.1.100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eb4c55be9 code=0x0 [ 81.791251][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.861304][ T4324] usb 1-1: config 0 descriptor?? [ 81.976187][ T4554] BTRFS info (device loop4): enabling ssd optimizations [ 81.985530][ T4554] BTRFS info (device loop4): clearing free space tree [ 82.017711][ T4554] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.078921][ T4554] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.259775][ T4554] BTRFS info (device loop4): creating free space tree [ 82.279354][ T4618] afs: Unknown parameter 'dy' [ 82.381065][ T4324] wacom 0003:056A:00B5.0004: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 82.383868][ T4554] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.567262][ T4554] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.047151][ T4324] wacom 0003:056A:00B5.0004: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.0-1/input0 [ 83.060909][ T4324] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B5.0004/input/input5 [ 83.138167][ T4589] loop3: detected capacity change from 0 to 65536 [ 83.156056][ T4324] usb 1-1: USB disconnect, device number 4 [ 83.241606][ T4589] XFS (loop3): Mounting V5 Filesystem [ 83.270629][ T4636] process 'syz.1.105' launched '/dev/fd/3' with NULL argv: empty string added [ 83.542081][ T4644] loop0: detected capacity change from 0 to 4096 [ 84.427716][ T4589] XFS (loop3): Ending clean mount [ 84.494922][ T4647] loop2: detected capacity change from 0 to 512 [ 84.521292][ T4633] fido_id[4633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 84.543473][ T4191] XFS (loop3): Unmounting Filesystem [ 84.560238][ T4647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.650437][ T4655] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.683696][ T26] audit: type=1800 audit(1756973070.211:7): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.107" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 84.721894][ T4647] EXT4-fs (loop2): 1 truncate cleaned up [ 84.736116][ T4647] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.720332][ T4668] afs: Unknown parameter 'dy' [ 86.748793][ T1108] cfg80211: failed to load regulatory.db [ 87.622849][ T4691] loop0: detected capacity change from 0 to 8 [ 87.801610][ T4691] SQUASHFS error: Failed to read block 0x2d7: -5 [ 87.826141][ T4691] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 87.836573][ T4693] loop4: detected capacity change from 0 to 4096 [ 87.862566][ T26] audit: type=1800 audit(1756973073.391:8): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.122" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 87.888114][ T4693] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 87.928642][ T4672] loop1: detected capacity change from 0 to 32768 [ 87.933961][ T4699] loop3: detected capacity change from 0 to 512 [ 87.946400][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.965029][ T4691] syz.0.122 (4691) used greatest stack depth: 21008 bytes left [ 87.991445][ T4693] ntfs: volume version 3.1. [ 88.005149][ T4693] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 88.037446][ T4699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.061488][ T4693] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 88.071593][ T4693] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 88.083590][ T4693] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 88.110180][ T4693] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 88.121829][ T4693] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 88.124860][ T4672] XFS (loop1): Mounting V5 Filesystem [ 88.161326][ T4699] EXT4-fs (loop3): 1 truncate cleaned up [ 88.196100][ T4699] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.206278][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 88.366488][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.428877][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.439973][ T4672] XFS (loop1): Ending clean mount [ 88.652819][ T4672] XFS (loop1): Quotacheck needed: Please wait. [ 88.716457][ T4324] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.928314][ T4672] XFS (loop1): Quotacheck: Done. [ 89.101383][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.101433][ T1108] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.101459][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.114380][ T1108] usb 3-1: config 0 descriptor?? [ 89.207183][ T4188] XFS (loop1): Unmounting Filesystem [ 89.251328][ T4324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.277085][ T4324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.556803][ T4324] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.566452][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.574481][ T4324] usb 5-1: SerialNumber: syz [ 89.913689][ T4324] usb 5-1: 0:2 : does not exist [ 90.185077][ T4324] usb 5-1: USB disconnect, device number 5 [ 90.469948][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input8 [ 90.490331][ T4730] loop3: detected capacity change from 0 to 512 [ 90.554624][ T1108] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 90.555377][ T4730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.606746][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.641325][ T1108] usb 3-1: USB disconnect, device number 4 [ 90.661932][ T4730] EXT4-fs (loop3): 1 truncate cleaned up [ 90.702150][ T4730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.715157][ T4739] fido_id[4739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 90.758540][ T4741] loop4: detected capacity change from 0 to 1024 [ 90.850149][ T4741] ======================================================= [ 90.850149][ T4741] WARNING: The mand mount option has been deprecated and [ 90.850149][ T4741] and is ignored by this kernel. Remove the mand [ 90.850149][ T4741] option from the mount to silence this warning. [ 90.850149][ T4741] ======================================================= [ 90.966629][ T4556] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 90.990413][ T4726] loop0: detected capacity change from 0 to 32768 [ 91.251004][ T4741] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.696897][ T4726] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.133 (4726) [ 91.835901][ T4726] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 91.866371][ T4726] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 91.875944][ T4726] BTRFS info (device loop0): use lzo compression, level 0 [ 91.896236][ T4196] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.912665][ T4726] BTRFS info (device loop0): using free space tree [ 91.922987][ T26] audit: type=1800 audit(1756973077.451:9): pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.137" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 91.926210][ T4726] BTRFS info (device loop0): has skinny extents [ 91.996330][ T4556] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 92.005437][ T4556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.018181][ T4753] sch_fq: defrate 4294967295 ignored. [ 92.048605][ T4556] usb 2-1: config 0 descriptor?? [ 92.098077][ T4556] cp210x 2-1:0.0: cp210x converter detected [ 92.134820][ T4764] futex_wake_op: syz.3.144 tries to shift op by 32; fix this program [ 92.187954][ T4196] usb 3-1: Using ep0 maxpacket: 16 [ 92.234893][ T4772] capability: warning: `syz.3.145' uses 32-bit capabilities (legacy support in use) [ 92.331722][ T4196] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.382066][ T4196] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.395634][ T4726] BTRFS info (device loop0): enabling ssd optimizations [ 92.405542][ T4196] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.412605][ T4196] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 92.422146][ T4196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.435468][ T4196] usb 3-1: config 0 descriptor?? [ 92.550365][ T4556] usb 2-1: cp210x converter now attached to ttyUSB0 [ 92.786286][ T4556] usb 2-1: USB disconnect, device number 4 [ 92.809847][ T4556] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 92.864095][ T4556] cp210x 2-1:0.0: device disconnected [ 92.926277][ T4196] sunplus 0003:04FC:05D8.0006: global environment stack underflow [ 92.934775][ T4196] sunplus 0003:04FC:05D8.0006: item 0 4 1 11 parsing failed [ 92.948706][ T4196] sunplus: probe of 0003:04FC:05D8.0006 failed with error -22 [ 93.159639][ T4237] usb 3-1: USB disconnect, device number 5 [ 93.486695][ T4788] loop4: detected capacity change from 0 to 32768 [ 93.824520][ T4788] XFS (loop4): Mounting V5 Filesystem [ 94.090996][ T4788] XFS (loop4): Ending clean mount [ 94.131898][ T4788] XFS (loop4): Quotacheck needed: Please wait. [ 94.258269][ T4788] XFS (loop4): Quotacheck: Done. [ 94.304013][ T4825] futex_wake_op: syz.1.156 tries to shift op by 32; fix this program [ 94.410291][ T4790] loop3: detected capacity change from 0 to 32768 [ 94.586387][ T4184] XFS (loop4): Unmounting Filesystem [ 95.094312][ T4790] XFS (loop3): Mounting V5 Filesystem [ 95.634796][ T4790] XFS (loop3): Ending clean mount [ 95.882223][ T4790] XFS (loop3): Quotacheck needed: Please wait. [ 96.364226][ T4790] XFS (loop3): Quotacheck: Done. [ 96.406351][ T4851] netlink: 364 bytes leftover after parsing attributes in process `syz.2.164'. [ 96.508734][ T4851] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 96.558405][ T4191] XFS (loop3): Unmounting Filesystem [ 97.489227][ T4834] loop0: detected capacity change from 0 to 32768 [ 97.508855][ T4834] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.161 (4834) [ 97.543934][ T4834] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 97.604477][ T4834] BTRFS info (device loop0): enabling auto defrag [ 97.652772][ T4834] BTRFS info (device loop0): doing ref verification [ 97.683428][ T4865] loop2: detected capacity change from 0 to 512 [ 97.687449][ T4834] BTRFS info (device loop0): use no compression [ 97.745847][ T4865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.759325][ T4834] BTRFS info (device loop0): force clearing of disk cache [ 97.854653][ T4865] EXT4-fs (loop2): 1 truncate cleaned up [ 97.867949][ T4865] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.890200][ T4834] BTRFS info (device loop0): max_inline at 4096 [ 98.096661][ T4834] BTRFS info (device loop0): disabling free space tree [ 98.116949][ T4834] BTRFS info (device loop0): has skinny extents [ 98.956353][ T4834] BTRFS error (device loop0): open_ctree failed: -12 [ 99.431697][ T4910] device netdevsim0 entered promiscuous mode [ 99.483555][ T4177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4177) [ 100.297359][ T4935] netlink: 104 bytes leftover after parsing attributes in process `syz.3.188'. [ 101.206811][ T4946] netlink: 'syz.0.192': attribute type 3 has an invalid length. [ 101.237203][ T4948] kAFS: unable to lookup cell '' [ 102.395122][ T4237] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.484269][ T4964] netlink: 'syz.4.198': attribute type 5 has an invalid length. [ 102.517391][ T4964] device ip6erspan0 entered promiscuous mode [ 102.796347][ T4237] usb 2-1: Using ep0 maxpacket: 8 [ 102.931802][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.953534][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.004859][ T4237] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 103.033169][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.067296][ T4237] usb 2-1: config 0 descriptor?? [ 103.153730][ T4988] loop3: detected capacity change from 0 to 512 [ 103.233442][ T4988] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.299066][ T4988] EXT4-fs (loop3): 1 truncate cleaned up [ 103.304854][ T4988] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.514313][ T4971] loop0: detected capacity change from 0 to 32768 [ 103.577949][ T4237] logitech 0003:046D:C20E.0007: rdesc size test failed for formula gp [ 103.586958][ T4971] XFS: ikeep mount option is deprecated. [ 103.597209][ T4237] logitech 0003:046D:C20E.0007: unbalanced collection at end of report description [ 104.141261][ T4971] XFS (loop0): Mounting V5 Filesystem [ 104.165909][ T5001] kAFS: unable to lookup cell '' [ 104.296512][ T4237] logitech 0003:046D:C20E.0007: parse failed [ 104.303410][ T4237] logitech: probe of 0003:046D:C20E.0007 failed with error -22 [ 104.318645][ T4237] usb 2-1: USB disconnect, device number 5 [ 104.459506][ T4990] loop4: detected capacity change from 0 to 32768 [ 105.363691][ T4971] XFS (loop0): Ending clean mount [ 105.456563][ T4971] XFS (loop0): Quotacheck needed: Please wait. [ 105.566388][ T4971] XFS (loop0): Quotacheck: Done. [ 105.575331][ T4990] XFS (loop4): Mounting V5 Filesystem [ 105.759040][ T5032] loop2: detected capacity change from 0 to 1024 [ 105.765213][ T4990] XFS (loop4): Ending clean mount [ 105.774498][ T4183] XFS (loop0): Unmounting Filesystem [ 105.863772][ T5032] EXT4-fs (loop2): Ignoring removed bh option [ 105.995848][ T5032] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 106.040918][ T4184] XFS (loop4): Unmounting Filesystem [ 106.210708][ T5048] loop3: detected capacity change from 0 to 2048 [ 106.378526][ T5052] kAFS: unable to lookup cell '' [ 106.440025][ T5048] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.464189][ T5048] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.590078][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 106.890779][ T5068] loop3: detected capacity change from 0 to 256 [ 106.952913][ T5068] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 106.974043][ T5068] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 107.206977][ T5080] loop0: detected capacity change from 0 to 256 [ 107.317436][ T5080] exfat: Deprecated parameter 'utf8' [ 107.355046][ T5084] loop2: detected capacity change from 0 to 64 [ 107.388299][ T5080] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 107.935811][ T5104] kAFS: unable to lookup cell '' [ 108.205741][ T5077] loop1: detected capacity change from 0 to 32768 [ 109.366807][ T5113] sched: RT throttling activated [ 109.795137][ T5077] XFS (loop1): Mounting V5 Filesystem [ 110.717324][ T5077] XFS (loop1): log mount failed [ 110.770872][ T5118] loop2: detected capacity change from 0 to 32768 [ 110.909936][ T5118] XFS (loop2): Mounting V5 Filesystem [ 110.991767][ T5144] loop4: detected capacity change from 0 to 512 [ 111.040847][ T5144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.107547][ T5118] XFS (loop2): Ending clean mount [ 111.182872][ T5144] EXT4-fs (loop4): 1 truncate cleaned up [ 111.264411][ T5144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.478099][ T4192] XFS (loop2): Unmounting Filesystem [ 111.900534][ T5157] netlink: 240 bytes leftover after parsing attributes in process `syz.3.260'. [ 112.054952][ T5141] loop0: detected capacity change from 0 to 32768 [ 112.173386][ T5141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.254 (5141) [ 112.289798][ T5141] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 112.378682][ T5141] BTRFS info (device loop0): turning on sync discard [ 112.385473][ T5141] BTRFS info (device loop0): setting nodatacow, compression disabled [ 112.411408][ T5141] BTRFS info (device loop0): turning off barriers [ 112.419086][ T5141] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 112.430257][ T4803] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.438056][ T5141] BTRFS info (device loop0): trying to use backup root at mount time [ 112.447611][ T5141] BTRFS info (device loop0): metadata ratio 32769 [ 112.454240][ T5141] BTRFS info (device loop0): max_inline at 0 [ 112.461064][ T5141] BTRFS info (device loop0): using free space tree [ 112.518244][ T5141] BTRFS info (device loop0): has skinny extents [ 113.341824][ T4369] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 113.397864][ T5141] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 113.416511][ T4271] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 113.482304][ T5141] BTRFS warning (device loop0): couldn't read tree root [ 113.502182][ T5141] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 113.527716][ T5184] loop2: detected capacity change from 0 to 2048 [ 113.535480][ T5158] loop1: detected capacity change from 0 to 32768 [ 113.540424][ T5141] BTRFS warning (device loop0): couldn't read tree root [ 113.576426][ T5141] BTRFS info (device loop0): enabling ssd optimizations [ 113.588298][ T5141] BTRFS info (device loop0): clearing free space tree [ 113.607891][ T5184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.608856][ T5141] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.627302][ T4803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.638649][ T5158] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.257 (5158) [ 113.656676][ T5141] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.667535][ T4803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.684505][ T4803] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.710146][ T4803] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.734247][ T4803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.743703][ T5141] BTRFS info (device loop0): creating free space tree [ 113.754894][ T5141] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.779543][ T5141] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.792531][ T4803] usb 4-1: config 0 descriptor?? [ 113.833405][ T5158] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 113.886273][ T5158] BTRFS info (device loop1): using free space tree [ 113.893402][ T5158] BTRFS info (device loop1): has skinny extents [ 113.973914][ T5190] loop2: detected capacity change from 0 to 2048 [ 114.130914][ T5190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.157631][ T4383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4383) [ 114.235204][ T5186] loop4: detected capacity change from 0 to 32768 [ 114.312619][ T4803] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description [ 114.334605][ T4803] plantronics 0003:047F:FFFF.0008: parse failed [ 114.365777][ T4803] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 114.375434][ T5158] BTRFS info (device loop1): enabling ssd optimizations [ 114.436426][ T5186] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.263 (5186) [ 114.520920][ T5186] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 114.565316][ T5186] BTRFS info (device loop4): using free space tree [ 114.617229][ T4799] usb 4-1: USB disconnect, device number 3 [ 114.623870][ T5186] BTRFS info (device loop4): has skinny extents [ 114.882523][ T5186] BTRFS info (device loop4): enabling ssd optimizations [ 115.540882][ T5240] loop3: detected capacity change from 0 to 512 [ 115.643857][ T5240] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.696639][ T5240] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.827066][ T5240] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 115.932569][ T5242] loop0: detected capacity change from 0 to 4096 [ 116.044853][ T5240] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 116.054137][ T5240] System zones: 0-2, 18-18, 34-34 [ 116.065199][ T5240] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.269: couldn't read orphan inode 15 (err -116) [ 116.106173][ T5240] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.252255][ T5264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.286380][ T5240] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.269: bg 0: block 80: padding at end of block bitmap is not set [ 116.381560][ T5262] loop4: detected capacity change from 0 to 4096 [ 116.558712][ T5271] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.595739][ T5273] loop1: detected capacity change from 0 to 128 [ 116.765872][ T5262] syz.4.268 (5262) used greatest stack depth: 20552 bytes left [ 116.787891][ T5273] EXT4-fs (loop1): Ignoring removed nobh option [ 117.672997][ T5273] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 117.694670][ T5281] loop2: detected capacity change from 0 to 64 [ 117.702272][ T5273] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.994126][ T5289] loop3: detected capacity change from 0 to 512 [ 118.026538][ T4799] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.061955][ T5289] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.122194][ T5293] loop1: detected capacity change from 0 to 128 [ 118.145797][ T5293] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 118.195641][ T5289] EXT4-fs (loop3): 1 truncate cleaned up [ 118.225196][ T5289] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.233727][ T5296] loop4: detected capacity change from 0 to 2048 [ 118.257355][ T5293] sysv_free_block: trying to free block not in datazone [ 118.263835][ T5296] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 118.286112][ T4799] usb 1-1: Using ep0 maxpacket: 16 [ 118.408597][ T5296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.502062][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 118.556209][ T4799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.571731][ T4799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.583308][ T4799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.598771][ T4799] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.610142][ T4799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.923560][ T4799] usb 1-1: config 0 descriptor?? [ 119.841299][ T4799] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input9 [ 120.145112][ T4799] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 120.225298][ T5308] loop4: detected capacity change from 0 to 2048 [ 120.336435][ T4799] usb 1-1: USB disconnect, device number 5 [ 120.345594][ T5308] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.369025][ T5308] NILFS (loop4): mounting unchecked fs [ 120.433719][ T5308] NILFS (loop4): recovery complete [ 120.455128][ T5313] loop3: detected capacity change from 0 to 512 [ 120.472938][ T5315] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.487152][ T5302] loop1: detected capacity change from 0 to 40427 [ 120.502357][ T26] audit: type=1800 audit(1756973106.031:10): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.285" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 120.523069][ T5312] fido_id[5312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 120.583954][ T5302] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 120.631743][ T5302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.766271][ T5302] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 120.792326][ T5313] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.287: invalid block [ 120.907081][ T5313] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.287: invalid indirect mapped block 10 (level 1) [ 120.944909][ T5302] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.957027][ T5313] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.287: invalid indirect mapped block 8 (level 1) [ 120.978332][ T5313] EXT4-fs (loop3): 1 truncate cleaned up [ 120.985291][ T5313] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 121.091162][ T5302] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 121.114798][ T5302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.152821][ T5325] loop4: detected capacity change from 0 to 256 [ 121.446850][ T5332] loop3: detected capacity change from 0 to 128 [ 121.467706][ T5330] loop0: detected capacity change from 0 to 1024 [ 121.510309][ T5332] EXT4-fs (loop3): Ignoring removed nobh option [ 121.544245][ T5332] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 121.581434][ T5332] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.172449][ T5342] loop2: detected capacity change from 0 to 512 [ 122.191707][ T5345] loop0: detected capacity change from 0 to 1024 [ 122.268949][ T5342] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 122.306554][ T5342] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 122.530473][ T5342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 122.552578][ T5342] System zones: 1-12 [ 122.584716][ T5342] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.297: bad orphan inode 65551 [ 122.631698][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: none. [ 122.792353][ T5352] loop4: detected capacity change from 0 to 512 [ 122.815402][ T144] hfsplus: b-tree write err: -5, ino 4 [ 122.905517][ T5356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 122.963437][ T5352] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.008323][ T5352] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 123.020548][ T5352] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 123.035388][ T5352] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 123.158084][ T5352] System zones: 0-2, 18-18, 34-34 [ 123.173856][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 123.202499][ T5352] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.299: couldn't read orphan inode 15 (err -116) [ 123.304322][ T5352] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.341440][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 123.397771][ T5352] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.299: bg 0: block 80: padding at end of block bitmap is not set [ 123.591209][ T5358] loop1: detected capacity change from 0 to 32768 [ 123.817992][ T5358] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 124.001217][ T5371] infiniband syz0: set active [ 124.065158][ T5382] loop3: detected capacity change from 0 to 1024 [ 124.076076][ T5371] infiniband syz0: added bond_slave_1 [ 124.089710][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 124.302369][ T144] hfsplus: b-tree write err: -5, ino 4 [ 124.328935][ T5371] infiniband syz0: Couldn't open port 1 [ 124.588160][ T5371] RDS/IB: syz0: added [ 124.593087][ T5371] smc: adding ib device syz0 with port count 1 [ 124.643472][ T5371] smc: ib device syz0 port 1 has pnetid [ 126.036513][ T4651] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.296104][ T4651] usb 4-1: Using ep0 maxpacket: 16 [ 126.318773][ T5397] loop4: detected capacity change from 0 to 32768 [ 126.417677][ T4651] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 126.456107][ T4651] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.482635][ T4651] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 126.493904][ T4651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.509005][ T5397] XFS (loop4): Mounting V5 Filesystem [ 126.516432][ T4651] usb 4-1: config 0 descriptor?? [ 126.732918][ T5397] XFS (loop4): Ending clean mount [ 126.762107][ T5397] XFS (loop4): Quotacheck needed: Please wait. [ 126.874073][ T5397] XFS (loop4): Quotacheck: Done. [ 126.877428][ T5414] loop0: detected capacity change from 0 to 164 [ 127.004492][ T4184] XFS (loop4): Unmounting Filesystem [ 127.020297][ T4651] wacom 0003:056A:0090.000A: hidraw0: USB HID v1f.ff Device [HID 056a:0090] on usb-dummy_hcd.3-1/input0 [ 127.231066][ T4651] usb 4-1: USB disconnect, device number 4 [ 127.340948][ T5421] loop0: detected capacity change from 0 to 512 [ 127.345380][ T5420] fido_id[5420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 127.459330][ T5421] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.662385][ T5421] EXT4-fs (loop0): 1 truncate cleaned up [ 127.697934][ T5421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.942689][ T5435] loop3: detected capacity change from 0 to 64 [ 128.734085][ T5418] loop1: detected capacity change from 0 to 32768 [ 128.920864][ T5418] [ 128.920864][ T5418] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 128.920864][ T5418] [ 128.996441][ T5429] loop4: detected capacity change from 0 to 40427 [ 129.016254][ T5418] jfs_rename did not expect dtDelete to return rc = -5 [ 129.024663][ T5418] ERROR: (device loop1): jfs_rename: [ 129.024663][ T5418] [ 129.052787][ T5418] jfs: add_missing_indices: Invalid stbl[1] = -128 for inode 2, block = 0 [ 129.142441][ T5429] F2FS-fs (loop4): invalid crc value [ 129.216700][ T4371] [ 129.216700][ T4371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.216700][ T4371] [ 129.302379][ T4651] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.454897][ T4371] [ 129.454897][ T4371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.454897][ T4371] [ 129.473059][ T5429] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.474892][ T4188] [ 129.474892][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.474892][ T4188] [ 129.562433][ T277] [ 129.562433][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.562433][ T277] [ 129.593235][ T4188] [ 129.593235][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.593235][ T4188] [ 129.682412][ T5429] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 129.725056][ T5429] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 129.756375][ T4651] usb 3-1: Using ep0 maxpacket: 8 [ 129.868451][ T4184] attempt to access beyond end of device [ 129.868451][ T4184] loop4: rw=2049, want=45104, limit=40427 [ 129.886451][ T4651] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.026600][ T4651] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 130.047424][ T4651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 130.062294][ T4651] usb 3-1: SerialNumber: syz [ 130.087173][ T4651] usb 3-1: config 0 descriptor?? [ 130.130416][ T4651] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 130.196996][ T4651] usb 3-1: Failed to create links for entity 255 [ 130.230127][ T4651] usb 3-1: Failed to register entities (-22). [ 130.241718][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 130.349678][ T4653] usb 3-1: USB disconnect, device number 6 [ 130.500144][ T5471] loop1: detected capacity change from 0 to 512 [ 130.611922][ T5471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.704043][ T5471] EXT4-fs (loop1): 1 truncate cleaned up [ 130.717220][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.965543][ T5486] loop0: detected capacity change from 0 to 4096 [ 132.323901][ T5486] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 132.651035][ T5497] loop2: detected capacity change from 0 to 512 [ 132.723267][ T5497] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.818472][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828659][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.836348][ T5497] EXT4-fs (loop2): 1 truncate cleaned up [ 132.876225][ T5497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.076086][ T5482] loop4: detected capacity change from 0 to 40427 [ 133.312425][ T5482] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 133.377331][ T5482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.426664][ T5482] F2FS-fs (loop4): invalid crc value [ 133.509762][ T5482] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.728434][ T5482] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.756275][ T5482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.883274][ T5520] loop3: detected capacity change from 0 to 512 [ 133.985424][ T5520] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.029164][ T5520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.354: bg 0: block 384: padding at end of block bitmap is not set [ 134.099695][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.109520][ T5520] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 134.127796][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.140550][ T5520] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.354: attempt to clear invalid blocks 983260 len 1 [ 134.168192][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.185750][ T5520] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.354: Invalid inode table block 0 in block_group 0 [ 134.229478][ T4184] attempt to access beyond end of device [ 134.229478][ T4184] loop4: rw=2049, want=45104, limit=40427 [ 134.232856][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.270963][ T5520] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 134.290335][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.315091][ T5520] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 134.350620][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.370522][ T5520] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.354: Invalid inode table block 0 in block_group 0 [ 134.406637][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.435151][ T5520] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 134.489724][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.527919][ T5520] EXT4-fs error (device loop3): ext4_truncate:4273: inode #11: comm syz.3.354: mark_inode_dirty error [ 134.573596][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.608589][ T5520] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 134.656493][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 134.734981][ T5520] EXT4-fs (loop3): 1 truncate cleaned up [ 134.764628][ T5520] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 134.791317][ T5525] loop1: detected capacity change from 0 to 8 [ 134.911115][ T5520] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.354: Invalid inode bitmap blk 0 in block_group 0 [ 135.025431][ T5520] EXT4-fs (loop3): Remounting filesystem read-only [ 135.027598][ T5525] SQUASHFS error: Failed to read block 0x260685: -5 [ 135.048248][ T5526] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.354: Invalid inode table block 0 in block_group 0 [ 135.102696][ T5525] SQUASHFS error: Unable to read metadata cache entry [260685] [ 135.119153][ T5526] EXT4-fs (loop3): Remounting filesystem read-only [ 135.156106][ T5526] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 135.165134][ T5525] SQUASHFS error: Unable to read directory block [260685:0] [ 135.180690][ T5526] EXT4-fs (loop3): Remounting filesystem read-only [ 135.495088][ T5532] loop4: detected capacity change from 0 to 512 [ 135.634610][ T5532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.694831][ T5532] EXT4-fs (loop4): 1 truncate cleaned up [ 135.716265][ T5532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.844808][ T5545] loop3: detected capacity change from 0 to 512 [ 137.029475][ T5545] EXT4-fs (loop3): Ignoring removed oldalloc option [ 137.066353][ T5545] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.125656][ T5545] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 137.206561][ T5545] EXT4-fs (loop3): 1 truncate cleaned up [ 137.212785][ T5545] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 137.339611][ T5554] loop4: detected capacity change from 0 to 1024 [ 137.402700][ T5554] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 137.463236][ T5545] syz.3.361 (5545) used greatest stack depth: 19968 bytes left [ 137.476848][ T5554] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.364: iget: special inode unallocated [ 137.531282][ T5554] EXT4-fs (loop4): no journal found [ 137.555648][ T5554] EXT4-fs (loop4): can't get journal size [ 137.604377][ T5554] EXT4-fs (loop4): filesystem is read-only [ 137.616348][ T5554] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 137.781344][ T5559] loop3: detected capacity change from 0 to 512 [ 137.872262][ T5559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.019396][ T5559] EXT4-fs (loop3): 1 truncate cleaned up [ 138.025832][ T5559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.049693][ T5567] loop1: detected capacity change from 0 to 256 [ 138.191589][ T5567] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 138.258014][ T5567] FAT-fs (loop1): Filesystem has been set read-only [ 138.317827][ T5569] loop2: detected capacity change from 0 to 4096 [ 138.367771][ T5567] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 138.384610][ T5567] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 138.400153][ T26] audit: type=1800 audit(1756973123.931:11): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.369" name="file1" dev="loop1" ino=1048597 res=0 errno=0 [ 138.403595][ T5567] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 138.437736][ T5572] loop4: detected capacity change from 0 to 64 [ 139.383300][ T5579] loop3: detected capacity change from 0 to 512 [ 139.719868][ T5579] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 139.947659][ T5579] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.002394][ T5591] loop1: detected capacity change from 0 to 512 [ 140.229654][ T5591] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 140.414878][ T5591] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.948507][ T5608] loop4: detected capacity change from 0 to 512 [ 141.154526][ T5608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.744330][ T5611] loop2: detected capacity change from 0 to 2048 [ 141.839327][ T5608] EXT4-fs (loop4): 1 truncate cleaned up [ 141.887426][ T5608] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.021830][ T5616] loop1: detected capacity change from 0 to 2048 [ 142.037218][ T5611] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.069342][ T5623] loop3: detected capacity change from 0 to 512 [ 142.111901][ T5611] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.134627][ T5616] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.239554][ T5616] NILFS (loop1): mounting unchecked fs [ 142.360273][ T5616] NILFS (loop1): recovery complete [ 142.431256][ T5611] fs-verity: sha512 using implementation "sha512-avx2" [ 142.460692][ T5611] fs-verity (loop2, inode 13): fs-verity keyring is empty, rejecting signed file! [ 142.542348][ T5627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.715856][ T5623] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.440797][ T5644] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.521739][ T5637] loop4: detected capacity change from 0 to 4096 [ 143.646873][ T5646] loop1: detected capacity change from 0 to 24 [ 143.807803][ T5646] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 144.005040][ T5646] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 146.291291][ T5666] loop3: detected capacity change from 0 to 512 [ 146.446293][ T4650] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.519388][ T5666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.027594][ T4650] usb 3-1: Using ep0 maxpacket: 32 [ 147.196403][ T4650] usb 3-1: config 15 has 0 interfaces, different from the descriptor's value: 10 [ 147.234792][ T5666] EXT4-fs (loop3): 1 truncate cleaned up [ 147.242121][ T5666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.293271][ T5672] loop1: detected capacity change from 0 to 1024 [ 147.393264][ T4650] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=f9.23 [ 147.413041][ T4650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.429949][ T5672] EXT4-fs (loop1): Ignoring removed orlov option [ 147.453462][ T4650] usb 3-1: Product: syz [ 147.475676][ T5672] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 147.483972][ T4650] usb 3-1: Manufacturer: syz [ 147.484001][ T4650] usb 3-1: SerialNumber: syz [ 147.588026][ T5672] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 147.630741][ T5659] loop0: detected capacity change from 0 to 32768 [ 147.753582][ T4802] usb 3-1: USB disconnect, device number 7 [ 147.804652][ T5659] XFS (loop0): Mounting V5 Filesystem [ 147.982554][ T5659] XFS (loop0): Ending clean mount [ 148.008665][ T5659] XFS (loop0): Quotacheck needed: Please wait. [ 148.178919][ T5659] XFS (loop0): Quotacheck: Done. [ 148.495343][ T5693] loop1: detected capacity change from 0 to 64 [ 148.754333][ T4183] XFS (loop0): Unmounting Filesystem [ 149.177815][ T5706] loop4: detected capacity change from 0 to 128 [ 149.279223][ T5706] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 149.415129][ T5706] attempt to access beyond end of device [ 149.415129][ T5706] loop4: rw=0, want=8767745, limit=128 [ 149.416488][ T4560] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.461181][ T5706] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 149.501381][ T5706] attempt to access beyond end of device [ 149.501381][ T5706] loop4: rw=0, want=13269810, limit=128 [ 149.574975][ T5706] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 149.599737][ T5706] attempt to access beyond end of device [ 149.599737][ T5706] loop4: rw=0, want=1158, limit=128 [ 149.687431][ T5706] Buffer I/O error on dev loop4, logical block 1157, async page read [ 149.691958][ T5711] loop0: detected capacity change from 0 to 256 [ 149.716824][ T5706] attempt to access beyond end of device [ 149.716824][ T5706] loop4: rw=0, want=3211265, limit=128 [ 149.756081][ T5706] Buffer I/O error on dev loop4, logical block 3211264, async page read [ 149.796176][ T5706] attempt to access beyond end of device [ 149.796176][ T5706] loop4: rw=0, want=8768636, limit=128 [ 149.896461][ T5706] Buffer I/O error on dev loop4, logical block 8768635, async page read [ 149.914634][ T4560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.916996][ T5713] loop3: detected capacity change from 0 to 64 [ 149.936261][ T4560] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 149.956447][ T5706] attempt to access beyond end of device [ 149.956447][ T5706] loop4: rw=0, want=13466418, limit=128 [ 149.991101][ T5706] Buffer I/O error on dev loop4, logical block 13466417, async page read [ 150.006561][ T4560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.013280][ T5695] loop2: detected capacity change from 0 to 32768 [ 150.070459][ T4560] usb 2-1: config 0 descriptor?? [ 150.087277][ T5706] attempt to access beyond end of device [ 150.087277][ T5706] loop4: rw=0, want=209286, limit=128 [ 150.148557][ T5706] Buffer I/O error on dev loop4, logical block 209285, async page read [ 150.188447][ T5706] attempt to access beyond end of device [ 150.188447][ T5706] loop4: rw=0, want=8767745, limit=128 [ 150.211785][ T5695] XFS (loop2): Mounting V5 Filesystem [ 150.216465][ T5706] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 150.261178][ T5706] attempt to access beyond end of device [ 150.261178][ T5706] loop4: rw=0, want=13269810, limit=128 [ 150.274590][ T5706] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 150.290310][ T5706] attempt to access beyond end of device [ 150.290310][ T5706] loop4: rw=0, want=1158, limit=128 [ 150.309374][ T5706] Buffer I/O error on dev loop4, logical block 1157, async page read [ 150.322536][ T26] audit: type=1800 audit(1756973135.851:12): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.409" name="/" dev="loop4" ino=2 res=0 errno=0 [ 150.449177][ T4184] sysv_free_block: trying to free block not in datazone [ 150.538975][ T4184] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 150.628065][ T5730] loop3: detected capacity change from 0 to 512 [ 150.682970][ T5695] XFS (loop2): Ending clean mount [ 150.768100][ T5695] XFS (loop2): Quotacheck needed: Please wait. [ 150.796780][ T5730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.822112][ T5730] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.033563][ T5695] XFS (loop2): Quotacheck: Done. [ 151.068962][ T5737] loop4: detected capacity change from 0 to 1024 [ 151.117440][ T4560] video4linux radio48: keene_cmd_main failed (-71) [ 151.129293][ T4560] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 151.211394][ T4560] usb 2-1: USB disconnect, device number 6 [ 151.248471][ T5737] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.324533][ T5737] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.378042][ T4192] XFS (loop2): Unmounting Filesystem [ 151.419691][ T5743] loop3: detected capacity change from 0 to 512 [ 151.552516][ T5743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.577292][ T5737] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.417: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.682834][ T5743] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #17: comm syz.3.418: inline data xattr refers to an external xattr inode [ 151.692927][ T5737] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 151.768996][ T5743] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.418: couldn't read orphan inode 17 (err -117) [ 151.826515][ T5737] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.826515][ T5737] [ 151.837317][ T5748] bridge0: port 2(bridge_slave_1) entered learning state [ 151.859104][ T5743] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 151.920179][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.079463][ T5743] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 152.270851][ T5756] loop4: detected capacity change from 0 to 512 [ 152.410211][ T5756] EXT4-fs (loop4): Ignoring removed orlov option [ 152.454393][ T5756] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.482070][ T5756] EXT4-fs error (device loop4): ext4_find_extent:893: inode #4: comm syz.4.423: inode has invalid extent depth: 7 [ 152.517373][ T5756] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 152.576151][ T5756] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 152.619424][ T5756] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 152.650245][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 153.733083][ T26] audit: type=1326 audit(1756973139.261:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb4c55be9 code=0x7fc00000 [ 153.885822][ T5781] loop3: detected capacity change from 0 to 256 [ 154.015041][ T5781] exfat: Deprecated parameter 'utf8' [ 154.117024][ T5787] loop4: detected capacity change from 0 to 4096 [ 154.192624][ T5787] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 154.311455][ T5798] loop3: detected capacity change from 0 to 1024 [ 154.630913][ T5798] hfsplus: request for non-existent node 62977 in B*Tree [ 154.677930][ T5804] loop0: detected capacity change from 0 to 256 [ 154.682377][ T5798] hfsplus: request for non-existent node 62977 in B*Tree [ 154.738061][ T5804] exfat: Deprecated parameter 'namecase' [ 154.809730][ T5804] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 154.850193][ T378] hfsplus: b-tree write err: -5, ino 3 [ 155.129603][ T5792] loop1: detected capacity change from 0 to 32768 [ 155.130366][ T4324] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.180938][ T5816] loop3: detected capacity change from 0 to 512 [ 155.262905][ T5816] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 155.320822][ T5816] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.397037][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 155.409024][ T5816] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.449: Block bitmap for bg 0 marked uninitialized [ 155.496286][ T5816] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 155.519721][ T5816] EXT4-fs (loop3): 1 orphan inode deleted [ 155.529822][ T4324] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.564903][ T4324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.576358][ T5792] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 155.586305][ T5816] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.652216][ T5816] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 155.777880][ T5792] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.885047][ T4324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.896701][ T5816] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 155.906162][ T4324] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.945819][ T4324] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.970352][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.755585][ T5813] loop4: detected capacity change from 0 to 32768 [ 156.908149][ T4324] usb 3-1: GET_CAPABILITIES returned 0 [ 156.965896][ T4324] usbtmc 3-1:16.0: can't read capabilities [ 157.175624][ T4560] usb 3-1: USB disconnect, device number 8 [ 157.207712][ T5841] loop3: detected capacity change from 0 to 1024 [ 157.306794][ T5836] sp0: Synchronizing with TNC [ 157.353709][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 157.454892][ T5841] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.554084][ T5841] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.598710][ T5841] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.452: lblock 3 mapped to illegal pblock 3 (length 3) [ 157.654816][ T5844] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.452: lblock 3 mapped to illegal pblock 3 (length 3) [ 157.776232][ T5841] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 157.942839][ T5841] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.942839][ T5841] [ 158.377182][ T9] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 158.602743][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 159.183051][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.183051][ T9] [ 159.237842][ T5865] netlink: 100 bytes leftover after parsing attributes in process `syz.1.460'. [ 159.681566][ T5868] loop3: detected capacity change from 0 to 512 [ 159.769746][ T5868] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.706399][ T4174] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.207734][ T4174] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 162.448611][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.607950][ T4174] usb 4-1: config 0 descriptor?? [ 162.740106][ T4174] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 163.007887][ T5935] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 163.027906][ T5936] IPVS: stopping backup sync thread 5935 ... [ 164.141420][ T4174] usb 4-1: USB disconnect, device number 5 [ 165.287073][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 165.396189][ T5959] netlink: 'syz.0.489': attribute type 21 has an invalid length. [ 167.348904][ T5975] loop1: detected capacity change from 0 to 512 [ 167.398892][ T5977] netlink: 88 bytes leftover after parsing attributes in process `syz.2.494'. [ 168.068625][ T5975] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.300379][ T5975] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.572020][ T5992] loop0: detected capacity change from 0 to 512 [ 168.688860][ T26] audit: type=1800 audit(1756973154.221:14): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 168.850253][ T5992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.951595][ T26] audit: type=1800 audit(1756973154.281:15): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 169.009396][ T5992] EXT4-fs (loop0): 1 truncate cleaned up [ 169.098509][ T5992] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.531931][ T6011] loop4: detected capacity change from 0 to 1024 [ 170.706433][ T6015] loop1: detected capacity change from 0 to 736 [ 170.862201][ T4650] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.196557][ T4650] usb 4-1: Using ep0 maxpacket: 32 [ 171.367335][ T4650] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 171.456896][ T4650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.507691][ T6018] loop1: detected capacity change from 0 to 4096 [ 171.541521][ T4650] usb 4-1: config 0 descriptor?? [ 171.784345][ T6025] loop0: detected capacity change from 0 to 512 [ 171.851344][ T4650] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 171.880071][ T6028] loop2: detected capacity change from 0 to 1024 [ 171.900495][ T6025] EXT4-fs (loop0): Ignoring removed orlov option [ 171.921357][ T6029] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.992024][ T4650] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.071318][ T6028] EXT4-fs (loop2): Ignoring removed orlov option [ 172.146352][ T6028] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 172.272723][ T6025] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,nogrpid,auto_da_alloc=0x0000000000000001,orlov,,errors=continue. Quota mode: writeback. [ 172.416504][ T4650] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 172.433891][ T4650] usb 4-1: media controller created [ 172.468105][ T6028] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 172.481128][ T4650] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.006240][ T6025] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.714653][ T4650] az6027: usb out operation failed. (-71) [ 174.353800][ T4650] az6027: usb out operation failed. (-71) [ 174.619791][ T4650] stb0899_attach: Driver disabled by Kconfig [ 174.663533][ T6050] loop4: detected capacity change from 0 to 128 [ 174.712556][ T4650] az6027: no front-end attached [ 174.712556][ T4650] [ 174.999255][ T6050] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.040269][ T6054] loop3: detected capacity change from 0 to 512 [ 175.066092][ T4650] az6027: usb out operation failed. (-71) [ 175.107349][ T6050] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.210706][ T4650] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 175.255945][ T4650] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 175.290148][ T6054] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.405335][ T6050] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 175.410092][ T6054] EXT4-fs (loop3): 1 truncate cleaned up [ 175.466186][ T6054] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.469769][ T4650] dvb-usb: schedule remote query interval to 400 msecs. [ 175.653565][ T4650] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 175.717266][ T4650] usb 4-1: USB disconnect, device number 6 [ 177.071343][ T4650] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 178.275321][ T6084] kAFS: unable to lookup cell '' [ 182.353709][ T6117] loop2: detected capacity change from 0 to 256 [ 183.861391][ T6117] FAT-fs (loop2): Directory bread(block 64) failed [ 183.924223][ T6117] FAT-fs (loop2): Directory bread(block 65) failed [ 183.997787][ T6117] FAT-fs (loop2): Directory bread(block 66) failed [ 184.083678][ T6134] loop1: detected capacity change from 0 to 4096 [ 184.111241][ T6117] FAT-fs (loop2): Directory bread(block 67) failed [ 184.204835][ T6117] FAT-fs (loop2): Directory bread(block 68) failed [ 184.381361][ T6117] FAT-fs (loop2): Directory bread(block 69) failed [ 184.444122][ T6117] FAT-fs (loop2): Directory bread(block 70) failed [ 184.444825][ T6134] NILFS (loop1): invalid segment: Checksum error in segment payload [ 184.490489][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.555179][ T6117] FAT-fs (loop2): Directory bread(block 71) failed [ 184.684733][ T6117] FAT-fs (loop2): Directory bread(block 72) failed [ 184.711877][ T6144] kAFS: unable to lookup cell '' [ 184.751506][ T6117] FAT-fs (loop2): Directory bread(block 73) failed [ 184.756285][ T6134] NILFS (loop1): trying rollback from an earlier position [ 185.515532][ T6134] NILFS (loop1): recovery complete [ 186.226642][ T5247] Bluetooth: hci2: command 0x0406 tx timeout [ 186.272158][ T6152] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.298094][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.364128][ T5247] Bluetooth: hci0: command 0x0406 tx timeout [ 186.431653][ T5247] Bluetooth: hci1: command 0x0406 tx timeout [ 186.546279][ T5247] Bluetooth: hci4: command 0x0406 tx timeout [ 186.676605][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.186614][ T6164] loop4: detected capacity change from 0 to 512 [ 187.206612][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.419877][ T6168] loop3: detected capacity change from 0 to 2048 [ 187.953609][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 188.406500][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.733295][ T6164] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 189.066074][ T6164] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 189.066196][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.116504][ T6168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.138555][ T6164] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 189.552954][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 189.927759][ T23] usb 1-1: SerialNumber: syz [ 189.971469][ T6164] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.007529][ T23] usb 1-1: can't set config #1, error -71 [ 190.288554][ T23] usb 1-1: USB disconnect, device number 6 [ 190.689449][ T6164] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 190.789073][ T6184] sctp: failed to load transform for md5: -4 [ 191.132510][ T6196] loop1: detected capacity change from 0 to 128 [ 191.390682][ T6196] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 191.472657][ T6196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.691944][ T6203] loop3: detected capacity change from 0 to 256 [ 192.142882][ T6203] exfat: Deprecated parameter 'utf8' [ 192.711025][ T6203] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d) [ 194.282769][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.309152][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.474214][ T6231] loop0: detected capacity change from 0 to 4096 [ 194.964180][ T6242] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.329616][ T6249] loop4: detected capacity change from 0 to 256 [ 196.386466][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 196.562745][ T6249] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.973802][ T6260] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 199.589570][ T6283] loop3: detected capacity change from 0 to 8192 [ 200.092384][ T6283] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 200.339727][ T6283] REISERFS (device loop3): using ordered data mode [ 200.466394][ T6283] reiserfs: using flush barriers [ 200.726139][ T6283] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.947401][ T6283] REISERFS (device loop3): checking transaction log (loop3) [ 200.974497][ T6296] loop0: detected capacity change from 0 to 4096 [ 201.041004][ T6283] REISERFS (device loop3): Using r5 hash to sort names [ 201.279817][ T6301] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.411016][ T26] audit: type=1800 audit(1756973186.941:16): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.590" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 201.759859][ T6283] reiserfs: enabling write barrier flush mode [ 202.090767][ T6307] loop1: detected capacity change from 0 to 4096 [ 202.125141][ T6283] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 202.208695][ T6283] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 202.270212][ T6283] REISERFS (device loop3): Remounting filesystem read-only [ 202.293554][ T6283] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 202.515848][ T6283] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 202.632282][ T6316] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.694468][ T6317] kAFS: unable to lookup cell '' [ 202.718344][ T6283] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 202.786316][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 202.832906][ T6283] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 202.976202][ T6283] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 203.049070][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 203.993472][ T6283] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 203.993556][ T6283] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 203.996254][ T6283] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 204.726637][ T4191] ------------[ cut here ]------------ [ 204.812946][ T4191] kernel BUG at fs/reiserfs/journal.c:1913! [ 205.046248][ T4191] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 205.065913][ T4191] CPU: 1 PID: 4191 Comm: syz-executor Not tainted syzkaller #0 [ 205.083330][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.112124][ T4191] RIP: 0010:do_journal_release+0x536/0x540 [ 205.128882][ T4191] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 24 4b be ff e9 ac fc ff ff e8 fa e4 79 ff <0f> 0b e8 f3 e4 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 205.191079][ T4191] RSP: 0018:ffffc900022f7b80 EFLAGS: 00010293 [ 205.213548][ T4191] RAX: ffffffff81fde5b6 RBX: ffff88807957c000 RCX: ffff8880756d3b80 [ 205.233427][ T4191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.250705][ T4191] RBP: ffffc900022f7c78 R08: dffffc0000000000 R09: ffffc900022f7bc0 [ 205.272146][ T4191] R10: fffff5200045ef7f R11: 1ffff9200045ef78 R12: ffffc90004571000 [ 205.299372][ T4191] R13: 1ffff9200045ef74 R14: ffff88807957c678 R15: 0000000000000000 [ 205.314273][ T4191] FS: 000055557542a500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 205.344135][ T4191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.364479][ T4191] CR2: 00007fa3af2abf98 CR3: 0000000062d60000 CR4: 00000000003506e0 [ 205.386561][ T4191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.411595][ T4191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.428871][ T4191] Call Trace: [ 205.433428][ T4191] [ 205.445320][ T4191] ? journal_release+0x30/0x30 [ 205.457663][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 205.470325][ T4191] journal_release+0x1b/0x30 [ 205.485135][ T4191] reiserfs_put_super+0x21e/0x480 [ 205.500722][ T4191] ? hook_inode_free_security+0xa0/0xa0 [ 205.511380][ T4191] ? reiserfs_dirty_inode+0x240/0x240 [ 205.526481][ T4191] ? reiserfs_dirty_inode+0x240/0x240 [ 205.543063][ T4191] generic_shutdown_super+0x130/0x300 [ 205.555296][ T4191] kill_block_super+0x7c/0xe0 [ 205.572875][ T4191] deactivate_locked_super+0x93/0xf0 [ 205.586925][ T4191] cleanup_mnt+0x418/0x4d0 [ 205.600127][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 205.609759][ T4191] task_work_run+0x125/0x1a0 [ 205.625565][ T4191] exit_to_user_mode_loop+0x10f/0x130 [ 205.637581][ T4191] exit_to_user_mode_prepare+0xb1/0x140 [ 205.650462][ T4191] syscall_exit_to_user_mode+0x16/0x40 [ 205.667528][ T4191] do_syscall_64+0x58/0xa0 [ 205.685988][ T4191] ? clear_bhb_loop+0x30/0x80 [ 205.693341][ T4191] ? clear_bhb_loop+0x30/0x80 [ 205.707609][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.726344][ T4191] RIP: 0033:0x7f123a60df17 [ 205.736407][ T4191] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 205.793348][ T4191] RSP: 002b:00007ffdd20e6e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 205.813017][ T4191] RAX: 0000000000000000 RBX: 00007f123a68fc05 RCX: 00007f123a60df17 [ 205.834360][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd20e6f00 [ 205.856399][ T4191] RBP: 00007ffdd20e6f00 R08: 0000000000000000 R09: 0000000000000000 [ 205.883809][ T4191] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd20e7f90 [ 205.902217][ T4191] R13: 00007f123a68fc05 R14: 0000000000031470 R15: 00007ffdd20e7fd0 [ 205.924211][ T4191] [ 205.928477][ T4191] Modules linked in: [ 206.142514][ T4191] ---[ end trace 61a99bddcc86dc8f ]--- [ 206.263176][ T4191] RIP: 0010:do_journal_release+0x536/0x540 [ 206.295676][ T4191] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 24 4b be ff e9 ac fc ff ff e8 fa e4 79 ff <0f> 0b e8 f3 e4 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 206.376896][ T6334] futex_wake_op: syz.4.602 tries to shift op by -1; fix this program [ 206.410145][ T4191] RSP: 0018:ffffc900022f7b80 EFLAGS: 00010293 [ 206.465929][ T4191] RAX: ffffffff81fde5b6 RBX: ffff88807957c000 RCX: ffff8880756d3b80 [ 206.523967][ T4191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.602584][ T4191] RBP: ffffc900022f7c78 R08: dffffc0000000000 R09: ffffc900022f7bc0 [ 206.642397][ T4191] R10: fffff5200045ef7f R11: 1ffff9200045ef78 R12: ffffc90004571000 [ 206.728234][ T4191] R13: 1ffff9200045ef74 R14: ffff88807957c678 R15: 0000000000000000 [ 206.847903][ T4191] FS: 000055557542a500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 206.944293][ T4191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.021920][ T4191] CR2: 000000110c28543c CR3: 0000000062d60000 CR4: 00000000003506f0 [ 207.047300][ T4191] Kernel panic - not syncing: Fatal exception [ 207.065739][ T4191] Kernel Offset: disabled [ 207.087910][ T4191] Rebooting in 86400 seconds..